This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/6lRgb3MGRN0CzqxKgomWEIyJ3Mg.roa File: 6lRgb3MGRN0CzqxKgomWEIyJ3Mg.roa (raw, json) Hash identifier: CYhce381HzbX7vSncPONtF+Lbdg5xHx48Q/vd4tyB6g= Subject key identifier: EA:54:60:6F:73:06:44:DD:02:CE:AC:4A:82:89:96:10:8C:89:DC:C8 Certificate issuer: /CN=d2b11159b72d4015ed867b42b784381e5d955a8f Certificate serial: 019B7910CF024979D56E55A4A2CD5C354C53 Authority key identifier: D2:B1:11:59:B7:2D:40:15:ED:86:7B:42:B7:84:38:1E:5D:95:5A:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/6lRgb3MGRN0CzqxKgomWEIyJ3Mg.roa Signing time: Thu 01 Jan 2026 10:18:23 +0000 ROA not before: Thu 01 Jan 2026 10:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60396 IP address blocks: 91.209.0.0/24 maxlen: 24 2001:67c:2e74::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:cf:02:49:79:d5:6e:55:a4:a2:cd:5c:35:4c:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2b11159b72d4015ed867b42b784381e5d955a8f Validity Not Before: Jan 1 10:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea54606f730644dd02ceac4a828996108c89dcc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:17:19:d3:bf:0d:0f:63:4e:4c:c2:88:77:63: a1:2c:a0:ca:22:c2:d6:17:97:c6:b1:c5:31:c5:74: 22:0f:f4:b3:6a:1f:c4:50:7e:1e:52:c6:5a:6e:d4: 30:da:17:39:c2:18:a5:45:f6:a5:a1:fc:92:0e:40: 5a:64:f3:69:a9:0e:c6:21:42:2c:51:9a:45:43:f9: 29:71:ec:4a:61:b5:6b:5d:81:89:84:b5:57:8f:ed: 91:3c:27:ab:23:d8:5c:fc:b4:c5:d6:35:9f:1f:39: 00:b1:1e:72:d0:b9:7d:4b:5c:0d:84:63:91:ea:84: f9:7f:f6:7c:e3:49:88:e6:ab:f5:a2:d1:71:d4:76: 82:4d:53:da:b0:c9:da:ef:1b:c9:d8:d0:67:fa:d7: c6:d7:d2:28:6b:5d:a1:da:53:39:6e:1f:c6:02:44: ce:4c:c2:a0:40:62:37:0a:c1:99:f7:7c:0f:72:88: 98:8a:2d:19:4b:34:e3:18:8b:d8:97:7d:b6:e4:35: 93:6b:d5:6a:4d:36:95:9d:f7:13:f2:94:3b:08:7c: 47:b6:10:05:04:39:0e:29:39:b5:ef:69:84:35:9d: d5:2f:77:f4:19:f2:d3:d3:6d:a9:a3:a2:52:61:7a: 06:9f:8c:68:9c:1c:7f:64:b2:49:1f:1f:bf:30:87: 5a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:54:60:6F:73:06:44:DD:02:CE:AC:4A:82:89:96:10:8C:89:DC:C8 X509v3 Authority Key Identifier: keyid:D2:B1:11:59:B7:2D:40:15:ED:86:7B:42:B7:84:38:1E:5D:95:5A:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/6lRgb3MGRN0CzqxKgomWEIyJ3Mg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.0.0/24 IPv6: 2001:67c:2e74::/48 Signature Algorithm: sha256WithRSAEncryption 62:a6:3f:46:69:99:de:8b:4e:d7:97:be:0d:9f:51:ec:7a:71: a2:7c:d1:ae:b7:0e:c2:46:68:53:7f:f5:e2:54:1f:97:33:a3: 16:37:ee:51:a7:41:31:76:de:f8:a5:43:dc:63:1b:cb:51:1a: da:29:26:79:49:b8:2f:c4:95:02:05:69:d6:1e:a0:86:ec:29: 98:8e:66:fb:2f:4c:df:31:07:1c:b9:8a:65:73:e6:62:9d:fa: d5:6b:ce:be:8a:98:a1:23:54:02:26:65:62:28:fb:d3:fd:0e: 4d:e2:fc:61:2c:18:d0:6d:fb:43:4b:db:d1:4a:0e:ad:f4:2d: 4d:1c:5a:0c:82:8e:b7:e5:63:b4:e7:e0:b0:fe:d1:ff:81:28: 27:27:83:9f:1f:05:4a:86:60:5c:ab:8e:3a:d3:92:3e:e0:c4: 2f:5a:ba:08:b9:5f:ab:58:59:74:0d:7b:22:6e:88:4f:c4:24: c1:2a:b6:a6:b0:ab:e0:4e:8d:8b:a8:9a:83:1e:73:b3:91:bb: 44:5d:61:ec:a5:a9:a4:89:e4:0e:b9:09:c3:e0:68:62:ba:17: 40:49:4d:f8:5a:63:a3:cc:55:03:01:db:71:eb:af:56:c6:cf: 3a:41:eb:14:af:d4:4e:82:1c:73:9c:ee:12:e3:69:8f:c7:a1: e7:5b:80:db -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5EM8CSXnVblWkos1cNUxTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyYjExMTU5YjcyZDQwMTVlZDg2N2I0MmI3ODQzODFlNWQ5 NTVhOGYwHhcNMjYwMTAxMTAxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTU0NjA2ZjczMDY0NGRkMDJjZWFjNGE4Mjg5OTYxMDhjODlkY2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRcZ078ND2NOTMKId2OhLKDKIsLW F5fGscUxxXQiD/Szah/EUH4eUsZabtQw2hc5whilRfalofySDkBaZPNpqQ7GIUIs UZpFQ/kpcexKYbVrXYGJhLVXj+2RPCerI9hc/LTF1jWfHzkAsR5y0Ll9S1wNhGOR 6oT5f/Z840mI5qv1otFx1HaCTVPasMna7xvJ2NBn+tfG19Ioa12h2lM5bh/GAkTO TMKgQGI3CsGZ93wPcoiYii0ZSzTjGIvYl3225DWTa9VqTTaVnfcT8pQ7CHxHthAF BDkOKTm172mENZ3VL3f0GfLT022po6JSYXoGn4xonBx/ZLJJHx+/MIdaewIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFOpUYG9zBkTdAs6sSoKJlhCMidzIMB8GA1UdIwQY MBaAFNKxEVm3LUAV7YZ7QreEOB5dlVqPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHJFUldiY3RRQlh0aG50Q3Q0UTRIbDJWV284LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85YzA5MWItZjg3OS00M2Y3LTkwMjAt ZjViOTQ5NTljOWY3LzEvNmxSZ2IzTUdSTjBDenF4S2dvbVdFSXlKM01nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy85YzA5MWItZjg3OS00M2Y3LTkwMjAtZjViOTQ5NTljOWY3 LzEvMHJFUldiY3RRQlh0aG50Q3Q0UTRIbDJWV284LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW9EAMA8E AgACMAkDBwAgAQZ8LnQwDQYJKoZIhvcNAQELBQADggEBAGKmP0Zpmd6LTteXvg2f Uex6caJ80a63DsJGaFN/9eJUH5czoxY37lGnQTF23vilQ9xjG8tRGtopJnlJuC/E lQIFadYeoIbsKZiOZvsvTN8xBxy5imVz5mKd+tVrzr6KmKEjVAImZWIo+9P9Dk3i /GEsGNBt+0NL29FKDq30LU0cWgyCjrflY7Tn4LD+0f+BKCcng58fBUqGYFyrjjrT kj7gxC9augi5X6tYWXQNeyJuiE/EJMEqtqawq+BOjYuomoMec7ORu0RdYeylqaSJ 5A65CcPgaGK6F0BJTfhaY6PMVQMB23Hrr1bGzzpB6xSv1E6CHHOc7hLjaY/Hoedb gNs= -----END CERTIFICATE-----Generated at Tue Feb 10 01:24:05 2026 by rpki-client