This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/6V0B2XbUiwZg1uwyso1jKVGrbd0.roa File: 6V0B2XbUiwZg1uwyso1jKVGrbd0.roa (raw, json) Hash identifier: EhVsz4uU5vPtA18PjB+zS+ctkDe0JVsTRno6/EDARaw= Subject key identifier: E9:5D:01:D9:76:D4:8B:06:60:D6:EC:32:B2:8D:63:29:51:AB:6D:DD Certificate issuer: /CN=571cb51cba68eb7ef9867a75d17ab28018196aa1 Certificate serial: 019B7F15DCC1E7E27B996DA0A58622A5A8BF Authority key identifier: 57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/6V0B2XbUiwZg1uwyso1jKVGrbd0.roa Signing time: Fri 02 Jan 2026 14:21:37 +0000 ROA not before: Fri 02 Jan 2026 14:21:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57844 IP address blocks: 91.210.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:dc:c1:e7:e2:7b:99:6d:a0:a5:86:22:a5:a8:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=571cb51cba68eb7ef9867a75d17ab28018196aa1 Validity Not Before: Jan 2 14:21:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e95d01d976d48b0660d6ec32b28d632951ab6ddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:92:98:27:1f:eb:7f:88:0f:be:72:61:02:d5: 92:27:f6:20:02:20:be:31:e0:f3:1d:c8:56:d2:6d: f2:7a:28:94:28:75:65:e8:d4:17:07:7b:56:f7:4c: 93:b7:d7:39:18:93:94:c5:f5:20:74:b6:ad:70:dd: 75:c7:a5:3e:90:36:d8:f4:98:f1:ec:1a:df:53:53: c0:c0:42:c6:f3:20:4f:62:15:4e:8f:3a:8e:ad:46: 65:83:ee:9c:bf:69:c9:ef:22:5a:74:bd:c7:5c:13: 23:1b:04:ae:66:05:bc:5a:9b:d5:45:23:2f:9c:44: a9:27:42:74:9e:ba:d8:bb:b1:83:7d:70:e0:2c:3a: d9:b9:5e:9f:27:3c:30:73:29:d1:4c:fc:d4:d3:9a: 31:02:00:d2:ed:d5:cd:ee:58:ea:03:97:9e:02:88: c1:46:b0:3a:96:1e:58:c6:0a:86:4a:f7:cf:ab:86: b9:24:6c:60:15:6e:7a:f3:64:fb:10:a7:94:44:9e: 9e:10:e6:4a:62:3c:71:11:22:55:1a:d5:f3:64:a3: 13:ce:43:19:c6:43:ef:4e:40:22:f7:93:0f:4d:63: 40:60:29:1c:6d:b7:16:d0:51:f4:d4:22:d1:a4:64: eb:8f:a2:41:68:0d:2a:62:72:99:9c:d6:12:f6:aa: ed:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:5D:01:D9:76:D4:8B:06:60:D6:EC:32:B2:8D:63:29:51:AB:6D:DD X509v3 Authority Key Identifier: keyid:57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/6V0B2XbUiwZg1uwyso1jKVGrbd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.210.120.0/22 Signature Algorithm: sha256WithRSAEncryption 8b:3e:96:a7:9c:58:0e:c6:8e:24:12:5e:2e:19:db:e1:65:66: 3e:a1:65:e3:4d:4e:88:db:9f:f7:51:e6:00:55:6c:c1:cb:fb: 9b:37:81:52:aa:e3:45:dd:73:a3:a4:d7:bb:95:08:69:2c:28: 1c:04:9d:4a:62:bb:fd:44:2c:0d:59:9f:35:d2:e8:79:23:8a: 99:9e:7b:6a:fa:e4:21:9f:dc:56:55:28:66:25:4d:7c:61:fc: b4:c7:13:3e:8c:ed:29:07:4a:73:f6:f4:4c:05:69:60:0c:9e: 5f:78:d6:63:b7:77:ed:56:ba:59:e7:a2:cf:16:ba:91:50:fd: 99:28:ae:23:19:97:f7:bc:fb:51:bb:bc:e8:6e:0a:0a:0f:b4: 2b:83:73:6d:5b:fb:aa:16:ec:68:15:82:02:f0:b7:ca:bf:ad: d8:1f:60:d7:30:e9:e5:56:2a:bb:fb:8d:cd:50:ca:98:d0:07: 1b:41:5c:75:0c:88:66:0b:13:4e:f6:f2:6a:1a:a6:81:ac:76: 69:83:dd:79:61:c9:65:91:f7:78:90:85:13:0f:b1:50:3d:33: a9:e5:78:30:94:71:76:e2:d1:1e:41:4d:97:b0:3c:31:dc:0d: 3a:6d:92:a9:df:bc:cb:1a:df:17:9a:5e:32:a3:1f:ca:57:a4: 3d:5f:d7:79 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FdzB5+J7mW2gpYYipai/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MWNiNTFjYmE2OGViN2VmOTg2N2E3NWQxN2FiMjgwMTgx OTZhYTEwHhcNMjYwMTAyMTQyMTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTVkMDFkOTc2ZDQ4YjA2NjBkNmVjMzJiMjhkNjMyOTUxYWI2ZGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJKYJx/rf4gPvnJhAtWSJ/YgAiC+ MeDzHchW0m3yeiiUKHVl6NQXB3tW90yTt9c5GJOUxfUgdLatcN11x6U+kDbY9Jjx 7BrfU1PAwELG8yBPYhVOjzqOrUZlg+6cv2nJ7yJadL3HXBMjGwSuZgW8WpvVRSMv nESpJ0J0nrrYu7GDfXDgLDrZuV6fJzwwcynRTPzU05oxAgDS7dXN7ljqA5eeAojB RrA6lh5YxgqGSvfPq4a5JGxgFW5682T7EKeURJ6eEOZKYjxxESJVGtXzZKMTzkMZ xkPvTkAi95MPTWNAYCkcbbcW0FH01CLRpGTrj6JBaA0qYnKZnNYS9qrtYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOldAdl21IsGYNbsMrKNYylRq23dMB8GA1UdIwQY MBaAFFcctRy6aOt++YZ6ddF6soAYGWqhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnh5MUhMcG82Mzc1aG5wMTBYcXlnQmdaYXFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9iOGQyYTgtNTNhOS00MmMwLWI3Yzkt ZGQ4NjI3NzRhMDkyLzEvNlYwQjJYYlVpd1pnMXV3eXNvMWpLVkdyYmQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9iOGQyYTgtNTNhOS00MmMwLWI3YzktZGQ4NjI3NzRhMDky LzEvVnh5MUhMcG82Mzc1aG5wMTBYcXlnQmdaYXFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW9J4MA0G CSqGSIb3DQEBCwUAA4IBAQCLPpannFgOxo4kEl4uGdvhZWY+oWXjTU6I25/3UeYA VWzBy/ubN4FSquNF3XOjpNe7lQhpLCgcBJ1KYrv9RCwNWZ810uh5I4qZnntq+uQh n9xWVShmJU18Yfy0xxM+jO0pB0pz9vRMBWlgDJ5feNZjt3ftVrpZ56LPFrqRUP2Z KK4jGZf3vPtRu7zobgoKD7Qrg3NtW/uqFuxoFYIC8LfKv63YH2DXMOnlViq7+43N UMqY0AcbQVx1DIhmCxNO9vJqGqaBrHZpg915Ycllkfd4kIUTD7FQPTOp5XgwlHF2 4tEeQU2XsDwx3A06bZKp37zLGt8Xml4yox/KV6Q9X9d5 -----END CERTIFICATE-----Generated at Wed Jan 21 15:37:12 2026 by rpki-client