This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/6anxR7oWcscDd04QL41XaD9H2mI.roa File: 6anxR7oWcscDd04QL41XaD9H2mI.roa (raw, json) Hash identifier: HOaKAJ+9l8ZBJN2kLFM0Go13VYLLmXxM5vLOU8G4dHg= Subject key identifier: E9:A9:F1:47:BA:16:72:C7:03:77:4E:10:2F:8D:57:68:3F:47:DA:62 Certificate issuer: /CN=0f22a0ee3bc6e32d892edde257cbb799179f2cd6 Certificate serial: 019B79EC98140BF3C3C40BC813B9AA988283 Authority key identifier: 0F:22:A0:EE:3B:C6:E3:2D:89:2E:DD:E2:57:CB:B7:99:17:9F:2C:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyKg7jvG4y2JLt3iV8u3mRefLNY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/6anxR7oWcscDd04QL41XaD9H2mI.roa Signing time: Thu 01 Jan 2026 14:18:26 +0000 ROA not before: Thu 01 Jan 2026 14:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60667 IP address blocks: 91.132.102.0/24 maxlen: 24 2a13:1e00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft rsync://rpki.ripe.net/repository/DEFAULT/DyKg7jvG4y2JLt3iV8u3mRefLNY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:98:14:0b:f3:c3:c4:0b:c8:13:b9:aa:98:82:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f22a0ee3bc6e32d892edde257cbb799179f2cd6 Validity Not Before: Jan 1 14:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e9a9f147ba1672c703774e102f8d57683f47da62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0c:42:77:71:3b:77:95:b3:70:cf:60:9c:8a: 21:b2:ad:91:c9:fd:f7:bf:45:18:bf:45:91:26:61: 62:c5:9b:5d:9e:8e:da:5a:82:e9:71:72:c1:5a:ea: f4:03:21:47:61:8f:95:0e:4e:d4:61:b3:6d:e0:92: a6:38:b7:97:91:94:88:df:0d:c9:8d:45:af:ff:66: c0:30:cf:32:a6:fc:f3:1d:c3:0a:c6:9f:7b:38:a0: d8:f9:3b:4b:3f:58:5c:b2:83:eb:17:bc:e4:e7:4d: 4f:7b:3c:dc:c5:12:45:61:a2:e9:17:ca:56:d8:ed: bd:9a:df:9d:83:7f:56:35:52:9c:8a:fa:79:71:80: 64:ca:db:da:5e:2b:1c:13:8e:86:76:2c:ce:55:21: 1e:f5:de:7b:da:77:df:ea:42:7d:38:b2:42:76:38: 28:04:52:cc:1c:02:2e:d8:a2:08:2a:c9:89:64:ec: da:04:f9:0d:ec:1c:3a:c7:bf:fe:7c:b7:ee:1e:d0: 4c:b8:64:5e:17:3c:3e:78:57:f6:b4:89:37:b0:fa: 2e:1c:aa:97:22:a6:d8:7e:98:69:29:8f:20:45:df: f3:45:9a:f0:11:7f:b6:79:26:35:66:09:11:e3:54: 7e:05:76:12:26:15:62:43:8e:a4:cd:a7:6e:60:20: 0c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:A9:F1:47:BA:16:72:C7:03:77:4E:10:2F:8D:57:68:3F:47:DA:62 X509v3 Authority Key Identifier: keyid:0F:22:A0:EE:3B:C6:E3:2D:89:2E:DD:E2:57:CB:B7:99:17:9F:2C:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyKg7jvG4y2JLt3iV8u3mRefLNY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/6anxR7oWcscDd04QL41XaD9H2mI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.132.102.0/24 IPv6: 2a13:1e00::/29 Signature Algorithm: sha256WithRSAEncryption 78:0b:45:0a:6c:8b:75:a1:75:d7:9d:8a:0f:b6:83:b4:25:75: 1b:dc:3b:3e:68:71:7d:dc:62:cc:19:20:33:18:a0:03:8c:0b: db:93:94:36:06:b0:03:02:b3:f2:52:27:aa:b3:ac:59:0e:23: 01:bd:a1:78:45:fb:54:23:1d:99:c3:6d:6e:7d:d8:8b:6b:1f: 23:2f:a9:5e:b9:02:75:bb:14:34:d5:3a:56:e1:c4:84:05:34: 89:46:26:b2:d4:1c:a8:ea:ec:61:38:1c:d4:8f:30:b1:3b:f7: 63:5d:e9:06:ee:7e:dd:a4:fa:da:31:8d:01:37:7e:ce:27:f5: 6c:fb:24:8b:d7:e3:43:5f:28:4e:d3:18:d7:3d:69:af:72:37: b3:10:32:24:d7:10:c1:07:ab:0c:78:48:51:40:86:f5:0e:56: b4:ed:73:54:62:35:e8:75:35:aa:a1:4e:8c:d8:06:87:8c:05: 2a:7f:b5:ae:6c:98:91:fd:32:32:a2:65:1f:ac:48:86:24:8b: eb:6b:80:39:09:91:81:88:cb:22:b1:f6:06:35:f9:dc:b3:5a: 46:40:18:2f:d5:f9:33:22:4e:91:f4:38:e9:77:a6:2a:dd:82: 7b:81:f2:bb:80:64:8c:fd:c2:eb:c9:7b:49:1f:64:38:1d:ab: 30:dc:94:56 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57JgUC/PDxAvIE7mqmIKDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMjJhMGVlM2JjNmUzMmQ4OTJlZGRlMjU3Y2JiNzk5MTc5 ZjJjZDYwHhcNMjYwMTAxMTQxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOWE5ZjE0N2JhMTY3MmM3MDM3NzRlMTAyZjhkNTc2ODNmNDdkYTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQxCd3E7d5WzcM9gnIohsq2Ryf33 v0UYv0WRJmFixZtdno7aWoLpcXLBWur0AyFHYY+VDk7UYbNt4JKmOLeXkZSI3w3J jUWv/2bAMM8ypvzzHcMKxp97OKDY+TtLP1hcsoPrF7zk501PezzcxRJFYaLpF8pW 2O29mt+dg39WNVKcivp5cYBkytvaXiscE46GdizOVSEe9d572nff6kJ9OLJCdjgo BFLMHAIu2KIIKsmJZOzaBPkN7Bw6x7/+fLfuHtBMuGReFzw+eFf2tIk3sPouHKqX IqbYfphpKY8gRd/zRZrwEX+2eSY1ZgkR41R+BXYSJhViQ46kzaduYCAMDwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOmp8Ue6FnLHA3dOEC+NV2g/R9piMB8GA1UdIwQY MBaAFA8ioO47xuMtiS7d4lfLt5kXnyzWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHlLZzdqdkc0eTJKTHQzaVY4dTNtUmVmTE5ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8zMDg0ZGUtYjE1OS00ZTU0LTllZDct NDJkNjc4NDA5NDRkLzEvNmFueFI3b1djc2NEZDA0UUw0MVhhRDlIMm1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8zMDg0ZGUtYjE1OS00ZTU0LTllZDctNDJkNjc4NDA5NDRk LzEvRHlLZzdqdkc0eTJKTHQzaVY4dTNtUmVmTE5ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW4RmMA0E AgACMAcDBQMqEx4AMA0GCSqGSIb3DQEBCwUAA4IBAQB4C0UKbIt1oXXXnYoPtoO0 JXUb3Ds+aHF93GLMGSAzGKADjAvbk5Q2BrADArPyUieqs6xZDiMBvaF4RftUIx2Z w21ufdiLax8jL6leuQJ1uxQ01TpW4cSEBTSJRiay1Byo6uxhOBzUjzCxO/djXekG 7n7dpPraMY0BN37OJ/Vs+ySL1+NDXyhO0xjXPWmvcjezEDIk1xDBB6sMeEhRQIb1 Dla07XNUYjXodTWqoU6M2AaHjAUqf7WubJiR/TIyomUfrEiGJIvra4A5CZGBiMsi sfYGNfncs1pGQBgv1fkzIk6R9Djpd6Yq3YJ7gfK7gGSM/cLryXtJH2Q4Hasw3JRW -----END CERTIFICATE-----Generated at Tue Feb 10 03:57:23 2026 by rpki-client