This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/R-q6ieQ5ZRpyZAS3VuKsjP1lbqI.roa File: R-q6ieQ5ZRpyZAS3VuKsjP1lbqI.roa (raw, json) Hash identifier: LE0wpmfemoMC71Up9yLLrAR45HiWA1m8U6namnoo6+E= Subject key identifier: 47:EA:BA:89:E4:39:65:1A:72:64:04:B7:56:E2:AC:8C:FD:65:6E:A2 Certificate issuer: /CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9 Certificate serial: 019B7AC80B6D1C2F7C99AFE8C4A04AAD0994 Authority key identifier: BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/R-q6ieQ5ZRpyZAS3VuKsjP1lbqI.roa Signing time: Thu 01 Jan 2026 18:18:09 +0000 ROA not before: Thu 01 Jan 2026 18:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209605 IP address blocks: 91.224.92.0/24 maxlen: 24 185.36.81.0/24 maxlen: 24 185.169.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 21:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:0b:6d:1c:2f:7c:99:af:e8:c4:a0:4a:ad:09:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9 Validity Not Before: Jan 1 18:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47eaba89e439651a726404b756e2ac8cfd656ea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:84:b6:e8:90:86:02:e5:b3:dc:73:71:a8:c1: d7:c3:2e:48:91:fc:8f:22:12:c4:3a:2d:c7:e3:92: 7e:3f:de:00:4c:7c:91:78:bf:3d:0a:4f:c2:13:cc: 4a:4a:a4:6c:13:6f:d2:4a:db:20:89:86:54:d3:eb: 90:14:57:1c:a1:4d:c7:11:09:ca:83:73:7a:2b:9e: 17:38:7c:e4:1b:12:88:7c:38:d1:5b:fc:5e:85:ae: 30:df:c6:7d:53:3f:ef:9c:2d:71:80:2b:43:3c:93: fd:e0:1d:26:c7:bd:05:4c:f5:ab:1b:fa:e7:6f:5c: 3f:3c:18:9c:94:3e:7a:68:d4:42:60:93:3c:02:03: f5:23:bd:6c:07:cc:ae:52:00:8a:e6:a5:6c:90:c0: d8:cb:39:e0:44:3f:ba:cb:bc:43:2a:f8:65:06:ea: fb:88:f6:2b:d6:15:13:13:17:99:5f:46:9a:df:ab: c8:b5:1c:0b:5c:2d:b2:67:15:a6:84:55:20:41:b2: 3a:ae:bc:6e:31:2e:3c:ee:96:a8:cf:91:df:c3:a9: 1c:f5:36:a0:58:d6:c2:c5:94:85:21:d8:4c:37:05: 03:5c:c1:d5:d6:66:6b:ba:98:9f:11:6f:17:85:56: b1:b6:07:53:e3:97:7a:2d:1f:77:62:ba:3a:b7:e7: 21:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:EA:BA:89:E4:39:65:1A:72:64:04:B7:56:E2:AC:8C:FD:65:6E:A2 X509v3 Authority Key Identifier: keyid:BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/R-q6ieQ5ZRpyZAS3VuKsjP1lbqI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.224.92.0/24 185.36.81.0/24 185.169.4.0/24 Signature Algorithm: sha256WithRSAEncryption af:5f:bf:fa:2a:c5:ca:59:1a:d8:cd:71:5c:cf:46:a5:d2:49: 56:47:b5:e7:fe:07:f5:20:f1:b0:67:19:aa:23:b9:f8:bf:eb: 41:32:65:30:f7:e6:5a:da:ee:22:23:db:ef:97:8d:5d:73:a5: cb:ef:51:02:4b:48:ac:36:33:26:de:1e:47:14:4f:4a:19:74: 33:b1:df:ab:57:15:ec:ad:25:b3:f9:66:0a:88:4f:09:15:ce: 44:98:31:eb:1c:07:2a:87:8e:96:f1:d4:eb:50:e4:19:99:5f: 57:9f:a6:e5:28:47:a0:c3:77:27:e1:b0:0c:3c:84:3d:5b:92: 8c:20:03:3d:ff:98:43:66:c1:71:ea:03:f5:25:e7:a8:36:e9: 97:46:be:9a:2f:01:05:1a:2d:87:d1:2a:3a:0a:e8:1c:fa:b9: 2c:10:57:a5:6c:52:0d:df:46:84:88:11:4a:57:52:56:0e:5a: d6:ea:d8:14:42:33:4b:06:db:c0:d5:51:ee:f0:bb:41:77:b2: f7:65:1a:45:54:68:e8:e3:1a:35:ce:97:67:cb:07:49:a3:fc: 7f:8a:df:68:4a:f1:69:98:e6:2d:a5:db:f5:b5:2b:0f:f4:0c: f0:23:03:c0:a3:5c:d8:13:4d:30:34:39:4b:be:9e:ce:0d:1e: 2e:f1:8d:83 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6yAttHC98ma/oxKBKrQmUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlNDlmYjE5MGY0YmQwZjU4MTVhOGU1NzlmMzY2YWQ1OGQ1 ZDQxZjkwHhcNMjYwMTAxMTgxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0N2VhYmE4OWU0Mzk2NTFhNzI2NDA0Yjc1NmUyYWM4Y2ZkNjU2ZWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoS26JCGAuWz3HNxqMHXwy5IkfyP IhLEOi3H45J+P94ATHyReL89Ck/CE8xKSqRsE2/SStsgiYZU0+uQFFccoU3HEQnK g3N6K54XOHzkGxKIfDjRW/xeha4w38Z9Uz/vnC1xgCtDPJP94B0mx70FTPWrG/rn b1w/PBiclD56aNRCYJM8AgP1I71sB8yuUgCK5qVskMDYyzngRD+6y7xDKvhlBur7 iPYr1hUTExeZX0aa36vItRwLXC2yZxWmhFUgQbI6rrxuMS487paoz5Hfw6kc9Tag WNbCxZSFIdhMNwUDXMHV1mZrupifEW8XhVaxtgdT45d6LR93Yro6t+chBQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEfquonkOWUacmQEt1birIz9ZW6iMB8GA1UdIwQY MBaAFL5J+xkPS9D1gVqOV582atWNXUH5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmtuN0dROUwwUFdCV281WG56WnExWTFkUWZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9iZDBkMTMtZTk4My00ZmY5LWI1MDct NWU2NTZmMWI0ODc2LzEvUi1xNmllUTVaUnB5WkFTM1Z1S3NqUDFsYnFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9iZDBkMTMtZTk4My00ZmY5LWI1MDctNWU2NTZmMWI0ODc2 LzEvdmtuN0dROUwwUFdCV281WG56WnExWTFkUWZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW+BcAwQA uSRRAwQAuakEMA0GCSqGSIb3DQEBCwUAA4IBAQCvX7/6KsXKWRrYzXFcz0al0klW R7Xn/gf1IPGwZxmqI7n4v+tBMmUw9+Za2u4iI9vvl41dc6XL71ECS0isNjMm3h5H FE9KGXQzsd+rVxXsrSWz+WYKiE8JFc5EmDHrHAcqh46W8dTrUOQZmV9Xn6blKEeg w3cn4bAMPIQ9W5KMIAM9/5hDZsFx6gP1JeeoNumXRr6aLwEFGi2H0So6Cugc+rks EFelbFIN30aEiBFKV1JWDlrW6tgUQjNLBtvA1VHu8LtBd7L3ZRpFVGjo4xo1zpdn ywdJo/x/it9oSvFpmOYtpdv1tSsP9AzwIwPAo1zYE00wNDlLvp7ODR4u8Y2D -----END CERTIFICATE-----Generated at Wed Jan 21 04:03:58 2026 by rpki-client