This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/6SEduMHXynvLbGLXlQ-nCG4KDz0.roa File: 6SEduMHXynvLbGLXlQ-nCG4KDz0.roa (raw, json) Hash identifier: hLjPkc07rz71V/VBtG395boX8ca8vKM/q8gofGURfjw= Subject key identifier: E9:21:1D:B8:C1:D7:CA:7B:CB:6C:62:D7:95:0F:A7:08:6E:0A:0F:3D Certificate issuer: /CN=db2ec22a66b5b24986395feed7fb5b90e28c9be4 Certificate serial: 019BFAADDF0E13CA6DBE08E65626100D232D Authority key identifier: DB:2E:C2:2A:66:B5:B2:49:86:39:5F:EE:D7:FB:5B:90:E2:8C:9B:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2y7CKma1skmGOV_u1_tbkOKMm-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/6SEduMHXynvLbGLXlQ-nCG4KDz0.roa Signing time: Mon 26 Jan 2026 14:20:57 +0000 ROA not before: Mon 26 Jan 2026 14:20:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9145 IP address blocks: 195.226.216.0/24 maxlen: 24 2a12:5dc0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/2y7CKma1skmGOV_u1_tbkOKMm-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 23:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:ad:df:0e:13:ca:6d:be:08:e6:56:26:10:0d:23:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db2ec22a66b5b24986395feed7fb5b90e28c9be4 Validity Not Before: Jan 26 14:20:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e9211db8c1d7ca7bcb6c62d7950fa7086e0a0f3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:89:60:60:91:0b:94:b7:b6:38:7f:db:f0:4e: 3b:24:d0:8b:10:67:82:e6:51:f0:fa:1c:b1:3b:07: ea:e9:9e:76:ba:2c:b9:5c:4d:46:3d:76:eb:5a:a1: 27:69:50:ed:0c:c7:70:34:b5:27:7c:27:b4:88:0f: 67:9d:30:af:e6:59:a3:08:9d:a2:48:3a:8b:33:21: 7b:31:56:cf:61:01:0d:8c:65:3a:2a:a2:a8:ae:ae: f1:42:a6:34:df:0c:81:31:03:47:75:28:fc:c3:2f: e1:c9:19:02:20:47:0e:77:d5:12:13:f2:bc:65:c4: ad:9f:a2:50:5b:01:b7:cd:50:1f:77:d8:24:da:57: b7:49:45:63:fa:e8:4c:f1:ff:39:a1:75:c4:84:36: 21:5d:ed:69:50:46:eb:20:73:b1:6b:1d:9e:05:70: 32:b6:1e:38:25:2b:bd:06:bb:c2:23:34:6b:3b:46: 2d:61:f3:e0:ce:96:8a:7e:94:82:9a:b9:6e:9a:3e: 61:71:d7:dd:36:0e:e4:01:95:b0:d6:9e:b2:03:43: d8:55:5e:e3:97:ea:f4:ef:08:32:ba:44:16:26:53: 3b:a2:3a:67:ed:0e:f9:da:42:4c:17:f2:86:b6:ba: 78:28:ff:04:1c:cb:09:1a:dc:c5:39:09:14:b1:8d: 13:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:21:1D:B8:C1:D7:CA:7B:CB:6C:62:D7:95:0F:A7:08:6E:0A:0F:3D X509v3 Authority Key Identifier: keyid:DB:2E:C2:2A:66:B5:B2:49:86:39:5F:EE:D7:FB:5B:90:E2:8C:9B:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2y7CKma1skmGOV_u1_tbkOKMm-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/6SEduMHXynvLbGLXlQ-nCG4KDz0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.226.216.0/24 IPv6: 2a12:5dc0::/29 Signature Algorithm: sha256WithRSAEncryption 1b:47:08:cc:9b:2b:b7:b3:a4:bf:e4:38:cb:72:af:d9:ce:ec: 5b:4c:90:f1:41:49:6a:58:33:ce:46:4f:8d:c9:68:3e:01:38: d9:2e:9e:ec:9b:08:3f:84:cd:46:18:c0:1c:cf:d5:e7:a7:24: 0d:83:de:7a:9c:c5:81:23:42:fc:af:61:13:88:b6:6c:ad:ed: 18:20:c2:33:74:e7:30:19:cc:c1:89:72:19:16:de:d5:7b:dc: 2a:7f:10:d3:6d:71:22:91:38:49:4b:14:de:a2:19:31:70:70: 79:95:80:1f:9e:03:8e:4c:16:cf:27:76:7c:ed:c3:c8:9a:fc: 2e:e6:d9:a1:30:ea:87:65:bd:1d:a6:52:d5:ff:64:a6:6c:88: 82:77:ad:5b:c7:62:4d:96:dd:fe:c9:40:70:73:58:c9:58:b3: 7b:57:24:28:a0:e3:2f:75:c7:77:ea:5a:d7:87:f2:b2:cb:35: 37:bd:e7:0b:29:d5:85:b5:71:7d:0f:f4:68:9b:c6:f9:3d:f5: 82:12:b2:2d:e5:2e:1a:54:2a:22:74:a4:75:c8:e2:75:20:01: b9:b8:53:f4:f6:dc:50:33:35:5a:4b:9a:05:ad:80:2b:76:ed: 83:65:9d:f1:c6:4e:1c:ae:32:ea:50:79:dd:90:9a:ee:2a:66: 37:e5:bd:6f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZv6rd8OE8ptvgjmViYQDSMtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMmVjMjJhNjZiNWIyNDk4NjM5NWZlZWQ3ZmI1YjkwZTI4 YzliZTQwHhcNMjYwMTI2MTQyMDU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTIxMWRiOGMxZDdjYTdiY2I2YzYyZDc5NTBmYTcwODZlMGEwZjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIlgYJELlLe2OH/b8E47JNCLEGeC 5lHw+hyxOwfq6Z52uiy5XE1GPXbrWqEnaVDtDMdwNLUnfCe0iA9nnTCv5lmjCJ2i SDqLMyF7MVbPYQENjGU6KqKorq7xQqY03wyBMQNHdSj8wy/hyRkCIEcOd9USE/K8 ZcStn6JQWwG3zVAfd9gk2le3SUVj+uhM8f85oXXEhDYhXe1pUEbrIHOxax2eBXAy th44JSu9BrvCIzRrO0YtYfPgzpaKfpSCmrlumj5hcdfdNg7kAZWw1p6yA0PYVV7j l+r07wgyukQWJlM7ojpn7Q752kJMF/KGtrp4KP8EHMsJGtzFOQkUsY0TpwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOkhHbjB18p7y2xi15UPpwhuCg89MB8GA1UdIwQY MBaAFNsuwipmtbJJhjlf7tf7W5DijJvkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnk3Q0ttYTFza21HT1ZfdTFfdGJrT0tNbS1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8yZmJjYmYtMzU4ZS00OTI4LTlhODQt Y2U3OGQ0YzA2NDJmLzEvNlNFZHVNSFh5bnZMYkdMWGxRLW5DRzRLRHowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8yZmJjYmYtMzU4ZS00OTI4LTlhODQtY2U3OGQ0YzA2NDJm LzEvMnk3Q0ttYTFza21HT1ZfdTFfdGJrT0tNbS1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAw+LYMA0E AgACMAcDBQMqEl3AMA0GCSqGSIb3DQEBCwUAA4IBAQAbRwjMmyu3s6S/5DjLcq/Z zuxbTJDxQUlqWDPORk+NyWg+ATjZLp7smwg/hM1GGMAcz9XnpyQNg956nMWBI0L8 r2ETiLZsre0YIMIzdOcwGczBiXIZFt7Ve9wqfxDTbXEikThJSxTeohkxcHB5lYAf ngOOTBbPJ3Z87cPImvwu5tmhMOqHZb0dplLV/2SmbIiCd61bx2JNlt3+yUBwc1jJ WLN7VyQooOMvdcd36lrXh/KyyzU3vecLKdWFtXF9D/Rom8b5PfWCErIt5S4aVCoi dKR1yOJ1IAG5uFP09txQMzVaS5oFrYArdu2DZZ3xxk4crjLqUHndkJruKmY35b1v -----END CERTIFICATE-----Generated at Mon Feb 2 09:39:30 2026 by rpki-client