This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/606JAzklsOqsRlrbcuzv28QnWpo.roa File: 606JAzklsOqsRlrbcuzv28QnWpo.roa (raw, json) Hash identifier: Ui6APTAkf1hdKOgIZctUG0CdW7HPm77LlztW2I8sf0k= Subject key identifier: EB:4E:89:03:39:25:B0:EA:AC:46:5A:DB:72:EC:EF:DB:C4:27:5A:9A Certificate issuer: /CN=8b124b124942a5d7ead6bb7d37a64e58c7e6da41 Certificate serial: 019B77C661D0F477F1198402242081779E7C Authority key identifier: 8B:12:4B:12:49:42:A5:D7:EA:D6:BB:7D:37:A6:4E:58:C7:E6:DA:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/606JAzklsOqsRlrbcuzv28QnWpo.roa Signing time: Thu 01 Jan 2026 04:17:28 +0000 ROA not before: Thu 01 Jan 2026 04:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31477 IP address blocks: 91.206.136.0/23 maxlen: 24 2001:678:d0c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:61:d0:f4:77:f1:19:84:02:24:20:81:77:9e:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b124b124942a5d7ead6bb7d37a64e58c7e6da41 Validity Not Before: Jan 1 04:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb4e89033925b0eaac465adb72ecefdbc4275a9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b7:ee:af:2d:bc:b6:a3:a9:39:88:91:4f:f9: cf:47:c4:af:6a:8b:db:cc:3b:5b:2c:f5:e0:24:44: b1:9d:0a:61:0c:30:ac:9a:74:e9:c5:b9:73:bb:2c: 60:61:21:ab:b9:86:0d:59:42:78:6f:ff:a7:5a:6f: d4:61:e4:ea:b8:c7:39:a8:a8:98:38:64:94:db:7f: 2f:0c:e2:3a:f6:f0:6e:f0:ae:5a:a5:b6:f2:c3:28: dc:0d:bb:99:30:e3:24:ce:b2:62:08:e3:45:31:87: 41:60:d8:35:bf:f8:14:f4:51:93:eb:af:fa:68:bd: 4c:6c:79:5f:52:59:b6:33:86:e2:32:b1:05:6b:5c: f8:9c:93:6a:f9:4f:f5:45:4c:75:f6:45:77:5f:a0: 5b:72:04:64:dd:b5:6b:1d:6e:ff:7c:f2:f3:2d:dc: 92:e8:99:12:fb:60:46:ed:39:a4:22:f9:18:01:62: 00:b9:9f:34:ba:5d:db:c8:c7:ba:9c:d2:33:9f:88: 41:de:b2:ec:b0:a7:10:40:83:5c:01:7c:6d:64:82: 0a:97:57:cf:b9:3e:9c:e2:a9:ae:1a:3c:53:16:29: d3:d1:29:00:15:0b:19:52:ef:d1:36:95:be:14:a9: d8:75:b4:b7:53:19:be:7e:d6:7b:bd:6c:d1:6a:8f: c8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:4E:89:03:39:25:B0:EA:AC:46:5A:DB:72:EC:EF:DB:C4:27:5A:9A X509v3 Authority Key Identifier: keyid:8B:12:4B:12:49:42:A5:D7:EA:D6:BB:7D:37:A6:4E:58:C7:E6:DA:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/606JAzklsOqsRlrbcuzv28QnWpo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.136.0/23 IPv6: 2001:678:d0c::/48 Signature Algorithm: sha256WithRSAEncryption 14:da:1a:48:81:6e:38:8c:aa:6d:fb:65:70:cb:14:63:24:d6: ad:e5:11:c8:7c:5f:04:61:17:54:83:50:aa:ba:3a:2f:6c:e1: d3:4b:ed:7e:85:e1:5a:8a:34:e4:87:e1:98:3b:28:8c:77:21: 0a:28:a9:ea:7f:21:c6:f9:b9:4c:60:d7:fa:eb:d4:4e:84:51: 5b:c2:02:72:67:e4:bc:db:2a:6b:66:5b:e8:28:75:c6:13:0c: 2e:da:1e:63:4b:bf:31:51:3b:9f:70:4e:0e:a5:9c:39:96:48: b6:33:2f:d1:45:49:d5:fb:5c:c3:94:17:d2:22:4c:69:90:d9: c2:54:cf:ca:8a:c9:80:ca:0b:0e:2b:05:24:e1:09:5b:42:cf: 92:3a:d0:2b:fa:80:44:21:25:25:ef:88:41:c8:13:3f:2c:f7: ef:6f:a8:49:f8:3c:30:81:9b:cf:eb:f7:17:8a:8a:1e:76:0c: 51:9d:98:8c:61:74:dc:c8:f6:5e:6f:72:1e:40:b3:01:95:dc: 44:64:f9:a9:dd:38:d8:fa:dc:79:d6:cb:8d:9c:47:70:29:3a: 3b:72:d1:4a:97:3c:13:d6:45:6b:5a:ed:68:91:c7:e9:6d:5f: 83:85:82:43:b3:07:ff:d3:44:96:58:fd:87:aa:c5:63:f8:8d: 85:bc:e2:47 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt3xmHQ9HfxGYQCJCCBd558MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMTI0YjEyNDk0MmE1ZDdlYWQ2YmI3ZDM3YTY0ZTU4Yzdl NmRhNDEwHhcNMjYwMTAxMDQxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjRlODkwMzM5MjViMGVhYWM0NjVhZGI3MmVjZWZkYmM0Mjc1YTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Lfury28tqOpOYiRT/nPR8Svaovb zDtbLPXgJESxnQphDDCsmnTpxblzuyxgYSGruYYNWUJ4b/+nWm/UYeTquMc5qKiY OGSU238vDOI69vBu8K5apbbywyjcDbuZMOMkzrJiCONFMYdBYNg1v/gU9FGT66/6 aL1MbHlfUlm2M4biMrEFa1z4nJNq+U/1RUx19kV3X6BbcgRk3bVrHW7/fPLzLdyS 6JkS+2BG7TmkIvkYAWIAuZ80ul3byMe6nNIzn4hB3rLssKcQQINcAXxtZIIKl1fP uT6c4qmuGjxTFinT0SkAFQsZUu/RNpW+FKnYdbS3Uxm+ftZ7vWzRao/IUQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFOtOiQM5JbDqrEZa23Ls79vEJ1qaMB8GA1UdIwQY MBaAFIsSSxJJQqXX6ta7fTemTljH5tpBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXhKTEVrbENwZGZxMXJ0OU42Wk9XTWZtMmtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9jNjU1M2UtOWVhYy00ZWFmLTg1ZmIt ZWI2NTkxYjg3N2FlLzEvNjA2SkF6a2xzT3FzUmxyYmN1enYyOFFuV3BvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9jNjU1M2UtOWVhYy00ZWFmLTg1ZmItZWI2NTkxYjg3N2Fl LzEvaXhKTEVrbENwZGZxMXJ0OU42Wk9XTWZtMmtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBW86IMA8E AgACMAkDBwAgAQZ4DQwwDQYJKoZIhvcNAQELBQADggEBABTaGkiBbjiMqm37ZXDL FGMk1q3lEch8XwRhF1SDUKq6Oi9s4dNL7X6F4VqKNOSH4Zg7KIx3IQooqep/Icb5 uUxg1/rr1E6EUVvCAnJn5LzbKmtmW+godcYTDC7aHmNLvzFRO59wTg6lnDmWSLYz L9FFSdX7XMOUF9IiTGmQ2cJUz8qKyYDKCw4rBSThCVtCz5I60Cv6gEQhJSXviEHI Ez8s9+9vqEn4PDCBm8/r9xeKih52DFGdmIxhdNzI9l5vch5AswGV3ERk+andONj6 3HnWy42cR3ApOjty0UqXPBPWRWta7WiRx+ltX4OFgkOzB//TRJZY/YeqxWP4jYW8 4kc= -----END CERTIFICATE-----Generated at Wed Feb 4 09:27:05 2026 by rpki-client