This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/6CVNw0HuhfYE-VtYjj7hpSTWYM0.roa File: 6CVNw0HuhfYE-VtYjj7hpSTWYM0.roa (raw, json) Hash identifier: c2peJHLqAks7ODKSa9ozbh1moP7dEpQyilF1Kiyo7as= Subject key identifier: E8:25:4D:C3:41:EE:85:F6:04:F9:5B:58:8E:3E:E1:A5:24:D6:60:CD Certificate issuer: /CN=f76fd568674856415eb1e21342aaf323b37b7a2e Certificate serial: 019B7EA72CA78F9FB65974D58C488E3AA111 Authority key identifier: F7:6F:D5:68:67:48:56:41:5E:B1:E2:13:42:AA:F3:23:B3:7B:7A:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92_VaGdIVkFeseITQqrzI7N7ei4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/6CVNw0HuhfYE-VtYjj7hpSTWYM0.roa Signing time: Fri 02 Jan 2026 12:20:43 +0000 ROA not before: Fri 02 Jan 2026 12:20:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216376 IP address blocks: 185.77.98.0/23 maxlen: 23 185.77.98.0/24 maxlen: 24 185.77.99.0/24 maxlen: 24 2a13:ab40::/32 maxlen: 32 2a13:ab40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/92_VaGdIVkFeseITQqrzI7N7ei4.crl rsync://rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/92_VaGdIVkFeseITQqrzI7N7ei4.mft rsync://rpki.ripe.net/repository/DEFAULT/92_VaGdIVkFeseITQqrzI7N7ei4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:2c:a7:8f:9f:b6:59:74:d5:8c:48:8e:3a:a1:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f76fd568674856415eb1e21342aaf323b37b7a2e Validity Not Before: Jan 2 12:20:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8254dc341ee85f604f95b588e3ee1a524d660cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:40:02:c6:d8:73:8c:f0:cc:64:c4:5a:a8:74: ae:1a:2c:25:53:1c:98:20:af:4d:17:e4:00:93:97: 67:48:0e:5d:14:41:a9:3f:04:e1:1a:6b:a7:97:b1: f2:7c:f3:2d:4f:19:f1:da:21:9a:7d:c1:2e:61:32: ef:f3:96:4b:3a:9b:e1:77:77:98:28:fd:e9:e2:ab: 68:20:12:72:ba:fa:b0:63:d2:3f:66:1a:a5:37:64: 0b:5b:17:c1:99:ce:ec:fe:b4:26:b1:0e:9f:e1:37: 9b:77:37:06:26:90:09:b6:7a:92:0b:3d:dc:a1:78: 5a:67:fd:ea:fd:5b:48:b0:62:76:38:44:68:c0:08: ef:8b:4b:08:2f:97:d5:95:6f:bb:c6:07:fe:f7:33: 4d:13:b9:a8:93:5d:60:0c:48:80:3f:15:c9:2d:31: 21:48:02:50:da:5d:a4:d4:f0:66:a5:db:f9:d6:64: 6e:0b:ab:32:d1:bd:f7:91:81:d3:2b:77:39:03:ca: bc:28:9b:39:65:aa:70:e5:d2:a0:66:4c:fb:56:a3: 0d:bd:0f:8b:03:c2:fc:21:e6:92:14:f6:10:1c:a7: d0:f1:d6:44:b8:77:03:36:1c:01:0e:e1:36:0d:88: f7:21:81:51:0d:a8:08:fc:25:da:5b:78:c5:63:a2: ed:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:25:4D:C3:41:EE:85:F6:04:F9:5B:58:8E:3E:E1:A5:24:D6:60:CD X509v3 Authority Key Identifier: keyid:F7:6F:D5:68:67:48:56:41:5E:B1:E2:13:42:AA:F3:23:B3:7B:7A:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92_VaGdIVkFeseITQqrzI7N7ei4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/6CVNw0HuhfYE-VtYjj7hpSTWYM0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/92_VaGdIVkFeseITQqrzI7N7ei4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.77.98.0/23 IPv6: 2a13:ab40::/32 Signature Algorithm: sha256WithRSAEncryption 71:16:ac:8b:ef:cc:aa:a3:21:aa:f8:6e:b7:02:83:c4:23:05: 44:53:d9:37:0f:31:1f:8c:ef:c8:92:7e:f5:55:c7:8b:b7:94: 7c:c3:b3:7a:d8:c8:bf:e1:1e:08:49:55:4f:3e:c2:b0:1c:99: 46:47:43:9a:1d:4d:56:53:cf:2a:cb:3e:43:62:87:c1:94:5e: f8:1c:ab:48:a1:9e:e9:a3:31:61:9c:a8:fa:de:57:3e:e3:f7: 0d:0d:d9:9e:1e:d0:61:0a:de:92:b5:88:1a:e3:31:69:17:a8: c4:27:83:a0:7f:a9:1e:cd:2b:dc:56:06:5e:bc:56:a2:ad:f3: 02:c7:52:e5:4f:ba:6d:73:8f:bc:68:b4:bc:b3:84:e7:2d:40: 98:f0:15:65:90:ac:88:61:d8:24:3c:cc:3c:c5:95:d0:22:04: 83:5a:a5:6f:42:c4:8a:f9:b6:6d:70:f2:b0:74:e7:c2:c8:2d: 7c:42:89:29:b7:28:b4:de:69:8e:a1:00:c0:9d:3a:de:28:00: 85:ac:a5:6e:bc:6d:a9:c1:d2:34:a5:1e:0a:19:41:46:bc:1a: 9e:53:10:7c:4a:87:26:1f:5e:a3:29:10:86:d2:70:a1:56:42: f3:7b:6b:e6:80:71:bc:14:c8:ea:ae:c8:fe:bc:0d:94:c3:53: 41:37:1a:51 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pyynj5+2WXTVjEiOOqERMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3NmZkNTY4Njc0ODU2NDE1ZWIxZTIxMzQyYWFmMzIzYjM3 YjdhMmUwHhcNMjYwMTAyMTIyMDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODI1NGRjMzQxZWU4NWY2MDRmOTViNTg4ZTNlZTFhNTI0ZDY2MGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kACxthzjPDMZMRaqHSuGiwlUxyY IK9NF+QAk5dnSA5dFEGpPwThGmunl7HyfPMtTxnx2iGafcEuYTLv85ZLOpvhd3eY KP3p4qtoIBJyuvqwY9I/ZhqlN2QLWxfBmc7s/rQmsQ6f4TebdzcGJpAJtnqSCz3c oXhaZ/3q/VtIsGJ2OERowAjvi0sIL5fVlW+7xgf+9zNNE7mok11gDEiAPxXJLTEh SAJQ2l2k1PBmpdv51mRuC6sy0b33kYHTK3c5A8q8KJs5Zapw5dKgZkz7VqMNvQ+L A8L8IeaSFPYQHKfQ8dZEuHcDNhwBDuE2DYj3IYFRDagI/CXaW3jFY6LtRQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOglTcNB7oX2BPlbWI4+4aUk1mDNMB8GA1UdIwQY MBaAFPdv1WhnSFZBXrHiE0Kq8yOze3ouMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTJfVmFHZElWa0Zlc2VJVFFxcnpJN043ZWk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi81NDBkYTUtMjdmYi00NmU2LWExMzIt YjU0ZDgyZDhiZTdiLzEvNkNWTncwSHVoZllFLVZ0WWpqN2hwU1RXWU0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi81NDBkYTUtMjdmYi00NmU2LWExMzItYjU0ZDgyZDhiZTdi LzEvOTJfVmFHZElWa0Zlc2VJVFFxcnpJN043ZWk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBuU1iMA0E AgACMAcDBQAqE6tAMA0GCSqGSIb3DQEBCwUAA4IBAQBxFqyL78yqoyGq+G63AoPE IwVEU9k3DzEfjO/Ikn71VceLt5R8w7N62Mi/4R4ISVVPPsKwHJlGR0OaHU1WU88q yz5DYofBlF74HKtIoZ7pozFhnKj63lc+4/cNDdmeHtBhCt6StYga4zFpF6jEJ4Og f6kezSvcVgZevFairfMCx1LlT7ptc4+8aLS8s4TnLUCY8BVlkKyIYdgkPMw8xZXQ IgSDWqVvQsSK+bZtcPKwdOfCyC18Qokptyi03mmOoQDAnTreKACFrKVuvG2pwdI0 pR4KGUFGvBqeUxB8SocmH16jKRCG0nChVkLze2vmgHG8FMjqrsj+vA2Uw1NBNxpR -----END CERTIFICATE-----Generated at Tue Jan 20 04:29:39 2026 by rpki-client