This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/P6MvyijEdfDH8PowPKZBFJvbCwc.roa File: P6MvyijEdfDH8PowPKZBFJvbCwc.roa (raw, json) Hash identifier: QIBBo/B7mvu6Y0jpzZUhzPlgiko0hJqHLmPYVtkObOo= Subject key identifier: 3F:A3:2F:CA:28:C4:75:F0:C7:F0:FA:30:3C:A6:41:14:9B:DB:0B:07 Certificate issuer: /CN=9ec448e1b1e0ebe4e976b120d398fe74d5e135f8 Certificate serial: 019B7CED364ABE37AA3D7ABF7734D00F7409 Authority key identifier: 9E:C4:48:E1:B1:E0:EB:E4:E9:76:B1:20:D3:98:FE:74:D5:E1:35:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nsRI4bHg6-TpdrEg05j-dNXhNfg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/P6MvyijEdfDH8PowPKZBFJvbCwc.roa Signing time: Fri 02 Jan 2026 04:17:59 +0000 ROA not before: Fri 02 Jan 2026 04:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50231 IP address blocks: 80.65.212.0/22 maxlen: 24 81.30.136.0/23 maxlen: 23 81.30.140.0/22 maxlen: 22 89.200.160.0/21 maxlen: 21 91.123.208.0/20 maxlen: 20 91.205.244.0/22 maxlen: 22 91.233.69.0/24 maxlen: 24 91.233.70.0/23 maxlen: 23 91.233.72.0/22 maxlen: 22 94.232.32.0/21 maxlen: 21 109.95.232.0/21 maxlen: 21 109.196.48.0/20 maxlen: 20 193.17.54.0/24 maxlen: 24 193.27.210.0/23 maxlen: 23 193.34.220.0/22 maxlen: 22 193.150.42.0/23 maxlen: 23 193.150.44.0/22 maxlen: 22 195.14.116.0/23 maxlen: 23 195.189.40.0/22 maxlen: 22 213.5.136.0/21 maxlen: 21 2a0d:1d40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft rsync://rpki.ripe.net/repository/DEFAULT/nsRI4bHg6-TpdrEg05j-dNXhNfg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:36:4a:be:37:aa:3d:7a:bf:77:34:d0:0f:74:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ec448e1b1e0ebe4e976b120d398fe74d5e135f8 Validity Not Before: Jan 2 04:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3fa32fca28c475f0c7f0fa303ca641149bdb0b07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b0:ed:40:df:64:51:ee:c9:bc:75:37:63:c3: b0:19:47:04:25:97:c0:92:ac:a2:ae:88:a8:b0:57: 5a:59:27:85:c6:2f:37:c8:ab:06:55:83:c3:c4:7f: 1f:43:df:fe:e8:3e:47:c8:79:db:4d:6d:5e:51:e1: e9:08:30:56:95:5f:f3:c0:97:ed:cd:e3:57:7b:e7: 43:07:e7:96:62:a2:01:7e:ce:01:b9:11:00:39:81: 00:20:12:7e:e6:ec:47:2a:56:9b:fb:3f:15:a3:45: 23:3f:c8:1a:26:19:fb:c7:6e:c7:bc:61:a9:0c:e1: 58:b7:e5:55:f0:41:96:7b:20:b6:c7:e8:88:cb:0a: 52:2d:00:f5:17:0f:ac:76:62:d3:3c:61:ca:00:fc: ab:69:07:62:fc:0f:3a:f2:58:ff:36:c6:bf:5b:10: 36:7e:6d:eb:f6:47:3d:eb:e4:35:a8:b3:f5:97:45: 07:e2:de:fd:32:9a:ba:21:13:37:5c:7d:43:e5:b9: 08:4f:09:a9:dc:31:ec:35:3d:a9:65:19:03:8e:57: 6c:3e:19:76:45:bf:02:8b:09:de:9a:3e:c2:a3:f2: ed:90:6b:34:96:10:01:c6:3a:cd:de:bf:19:de:8d: 0d:e3:53:0d:30:6e:9d:25:96:9c:d4:11:7f:88:07: 6f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:A3:2F:CA:28:C4:75:F0:C7:F0:FA:30:3C:A6:41:14:9B:DB:0B:07 X509v3 Authority Key Identifier: keyid:9E:C4:48:E1:B1:E0:EB:E4:E9:76:B1:20:D3:98:FE:74:D5:E1:35:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nsRI4bHg6-TpdrEg05j-dNXhNfg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/P6MvyijEdfDH8PowPKZBFJvbCwc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.65.212.0/22 81.30.136.0/23 81.30.140.0/22 89.200.160.0/21 91.123.208.0/20 91.205.244.0/22 91.233.69.0-91.233.75.255 94.232.32.0/21 109.95.232.0/21 109.196.48.0/20 193.17.54.0/24 193.27.210.0/23 193.34.220.0/22 193.150.42.0-193.150.47.255 195.14.116.0/23 195.189.40.0/22 213.5.136.0/21 IPv6: 2a0d:1d40::/29 Signature Algorithm: sha256WithRSAEncryption 83:db:4f:e1:00:7d:2c:0a:ff:0b:91:d3:91:0b:e3:a2:52:f4: 36:ee:71:27:98:3b:08:ce:1c:1b:1b:74:11:6d:0f:cb:7b:16: 19:85:5e:6c:88:89:9c:58:6c:19:b3:30:b0:e2:b9:5d:da:16: 7b:59:c4:0e:0d:11:73:9a:1b:96:02:67:2f:c2:65:d5:ed:c2: e9:8a:5b:e0:c6:86:88:29:8b:09:bc:08:91:0d:1e:26:3e:e3: 05:a6:96:dc:85:81:b6:4c:bb:ac:60:67:0b:3e:06:99:35:b2: 64:65:2b:cd:47:47:0b:50:75:2a:da:f9:40:11:17:86:4f:4b: 56:dd:9a:dc:0c:af:b5:24:7c:dc:2b:87:49:d1:e9:3e:34:5f: 1b:31:81:a2:57:af:b5:fa:e9:3a:a8:32:58:a2:ad:e7:4f:ac: 6b:11:bb:86:96:d5:e0:9c:4a:8b:3b:c4:0c:7e:ac:dd:7b:24: c1:9a:14:a4:9e:5b:73:88:28:2c:5e:ec:8c:f4:2e:e3:61:18: 4c:8b:d8:67:85:55:fd:de:9d:f0:0b:70:45:8e:d7:9f:ef:f9: 09:7f:90:2d:dd:42:3f:ca:b7:1d:6a:5f:12:cd:cb:94:4c:4d: 54:9f:b9:42:d2:b9:d8:60:9e:72:3e:8e:05:8b:c4:ae:34:22: 43:2b:1e:38 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgISAZt87TZKvjeqPXq/dzTQD3QJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllYzQ0OGUxYjFlMGViZTRlOTc2YjEyMGQzOThmZTc0ZDVl MTM1ZjgwHhcNMjYwMTAyMDQxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZmEzMmZjYTI4YzQ3NWYwYzdmMGZhMzAzY2E2NDExNDliZGIwYjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLDtQN9kUe7JvHU3Y8OwGUcEJZfA kqyiroiosFdaWSeFxi83yKsGVYPDxH8fQ9/+6D5HyHnbTW1eUeHpCDBWlV/zwJft zeNXe+dDB+eWYqIBfs4BuREAOYEAIBJ+5uxHKlab+z8Vo0UjP8gaJhn7x27HvGGp DOFYt+VV8EGWeyC2x+iIywpSLQD1Fw+sdmLTPGHKAPyraQdi/A868lj/Nsa/WxA2 fm3r9kc96+Q1qLP1l0UH4t79Mpq6IRM3XH1D5bkITwmp3DHsNT2pZRkDjldsPhl2 Rb8Ciwnemj7Co/LtkGs0lhABxjrN3r8Z3o0N41MNMG6dJZac1BF/iAdvnQIDAQAB o4ICizCCAocwHQYDVR0OBBYEFD+jL8ooxHXwx/D6MDymQRSb2wsHMB8GA1UdIwQY MBaAFJ7ESOGx4Ovk6XaxINOY/nTV4TX4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnNSSTRiSGc2LVRwZHJFZzA1ai1kTlhoTmZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9mNGNhNzktMzg0Zi00N2YyLWFlZDgt YThkMDAzODNiY2RkLzEvUDZNdnlpakVkZkRIOFBvd1BLWkJGSnZiQ3djLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9mNGNhNzktMzg0Zi00N2YyLWFlZDgtYThkMDAzODNiY2Rk LzEvbnNSSTRiSGc2LVRwZHJFZzA1ai1kTlhoTmZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGgBggrBgEFBQcBBwEB/wSBkDCBjTB8BAIAATB2AwQCUEHU AwQBUR6IAwQCUR6MAwQDWcigAwQEW3vQAwQCW830MAwDBABb6UUDBAJb6UgDBANe 6CADBANtX+gDBARtxDADBADBETYDBAHBG9IDBALBItwwDAMEAcGWKgMEBMGWIAME AcMOdAMEAsO9KAMEA9UFiDANBAIAAjAHAwUDKg0dQDANBgkqhkiG9w0BAQsFAAOC AQEAg9tP4QB9LAr/C5HTkQvjolL0Nu5xJ5g7CM4cGxt0EW0Py3sWGYVebIiJnFhs GbMwsOK5XdoWe1nEDg0Rc5oblgJnL8Jl1e3C6Ypb4MaGiCmLCbwIkQ0eJj7jBaaW 3IWBtky7rGBnCz4GmTWyZGUrzUdHC1B1Ktr5QBEXhk9LVt2a3AyvtSR83CuHSdHp PjRfGzGBolevtfrpOqgyWKKt50+saxG7hpbV4JxKizvEDH6s3XskwZoUpJ5bc4go LF7sjPQu42EYTIvYZ4VV/d6d8AtwRY7Xn+/5CX+QLd1CP8q3HWpfEs3LlExNVJ+5 QtK52GCecj6OBYvErjQiQyseOA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:45 2026 by rpki-client