This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/6MkxZOCAknG2K-8b272IPhdocok.roa File: 6MkxZOCAknG2K-8b272IPhdocok.roa (raw, json) Hash identifier: y/CqhaiNH9OwE/p4Zf1xynOs+ihS7UO8SYoBEISJe/c= Subject key identifier: E8:C9:31:64:E0:80:92:71:B6:2B:EF:1B:DB:BD:88:3E:17:68:72:89 Certificate issuer: /CN=fada41774765a4cdb050d82af11ba7d2d54b6e13 Certificate serial: 019B79ED57F7AB0211B57C5985D2CEF8DF9D Authority key identifier: FA:DA:41:77:47:65:A4:CD:B0:50:D8:2A:F1:1B:A7:D2:D5:4B:6E:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tpBd0dlpM2wUNgq8Run0tVLbhM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/6MkxZOCAknG2K-8b272IPhdocok.roa Signing time: Thu 01 Jan 2026 14:19:16 +0000 ROA not before: Thu 01 Jan 2026 14:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47922 IP address blocks: 91.216.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-tpBd0dlpM2wUNgq8Run0tVLbhM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:57:f7:ab:02:11:b5:7c:59:85:d2:ce:f8:df:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fada41774765a4cdb050d82af11ba7d2d54b6e13 Validity Not Before: Jan 1 14:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8c93164e0809271b62bef1bdbbd883e17687289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e8:2e:d5:40:7d:55:78:bd:2a:cf:6a:cf:43: f8:c5:69:94:fb:b9:07:f6:3b:af:13:fe:7a:d8:74: fa:36:ff:06:39:de:2b:d1:e0:75:4c:5c:9f:f8:74: b7:bd:48:10:7d:a0:32:2a:8e:4d:ac:03:7f:d7:a9: eb:c1:b1:12:21:ac:38:38:6b:ec:61:ee:45:c9:1d: d4:0b:38:f9:54:29:66:8f:4d:13:92:92:08:e7:b2: 94:27:99:5e:37:b6:9d:24:61:00:19:a4:96:0e:c1: 80:14:fc:ef:41:77:1c:71:c9:ec:cb:56:9a:7f:ff: 38:6e:ba:8b:6b:48:6e:a8:e3:ac:68:5f:16:50:26: c9:4b:11:70:f7:af:e7:15:ba:bf:91:a4:8e:9e:67: d7:56:67:32:d9:b8:f9:09:ca:f5:e3:ef:4f:8b:c6: 1c:ee:66:88:f9:59:be:a6:70:fa:ad:98:28:c7:8d: 8c:11:38:30:fa:da:0b:01:b1:23:a1:e6:7b:8f:ed: e8:d7:b1:79:c5:af:35:35:0c:f4:2a:01:eb:45:f3: ac:11:e2:2f:cb:52:7c:75:2c:32:fd:bf:68:6a:92: da:a5:19:34:f6:8d:c6:6a:a7:53:10:40:35:67:9d: 2f:25:54:8f:9b:00:fd:fc:26:c8:79:da:d1:b5:ee: c4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:C9:31:64:E0:80:92:71:B6:2B:EF:1B:DB:BD:88:3E:17:68:72:89 X509v3 Authority Key Identifier: keyid:FA:DA:41:77:47:65:A4:CD:B0:50:D8:2A:F1:1B:A7:D2:D5:4B:6E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tpBd0dlpM2wUNgq8Run0tVLbhM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/6MkxZOCAknG2K-8b272IPhdocok.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.2.0/24 Signature Algorithm: sha256WithRSAEncryption 64:73:c3:c6:72:23:56:68:68:1a:92:2b:8f:d6:6f:3a:a2:bf: 50:f9:31:76:86:20:33:7d:8f:33:58:25:68:34:95:4f:31:3d: 0e:82:e5:00:a2:6a:8c:68:98:e6:db:31:d4:0d:ab:db:a6:32: ff:e6:cf:61:b5:4e:31:d1:f0:e0:72:07:51:e3:4c:ab:19:e3: d2:0e:31:1f:fd:13:16:30:66:51:c9:af:ff:93:46:6f:e2:b8: 57:a1:b5:dd:c3:c4:13:a4:e6:53:2e:f1:6d:d9:c8:e0:85:f6: 30:8b:3d:f2:83:55:0e:de:6e:5a:55:79:b3:ee:81:9a:80:ce: 4c:b5:e4:91:3b:c5:23:1a:9d:2c:4e:df:79:b9:a8:98:b9:d1: d5:f7:d6:be:61:50:7c:91:57:ee:4b:11:06:ae:76:68:b5:11: 3a:f0:e3:72:12:93:71:27:a0:8a:27:ef:a9:b4:44:59:03:cd: a3:09:62:61:22:0c:99:c4:bd:7c:7a:28:30:d9:4c:12:26:21: 8e:06:3b:c6:23:79:7f:39:e3:c6:77:d7:28:c6:e2:2d:5f:c1: 22:0d:68:5d:fd:10:32:c5:4b:74:c2:9b:32:8c:72:d4:b6:7a: c7:51:4b:30:53:b4:5f:44:fb:91:cb:0d:70:7e:fe:0a:82:fb: 71:62:c0:37 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt57Vf3qwIRtXxZhdLO+N+dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZGE0MTc3NDc2NWE0Y2RiMDUwZDgyYWYxMWJhN2QyZDU0 YjZlMTMwHhcNMjYwMTAxMTQxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOGM5MzE2NGUwODA5MjcxYjYyYmVmMWJkYmJkODgzZTE3Njg3Mjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOgu1UB9VXi9Ks9qz0P4xWmU+7kH 9juvE/562HT6Nv8GOd4r0eB1TFyf+HS3vUgQfaAyKo5NrAN/16nrwbESIaw4OGvs Ye5FyR3UCzj5VClmj00TkpII57KUJ5leN7adJGEAGaSWDsGAFPzvQXccccnsy1aa f/84brqLa0huqOOsaF8WUCbJSxFw96/nFbq/kaSOnmfXVmcy2bj5Ccr14+9Pi8Yc 7maI+Vm+pnD6rZgox42METgw+toLAbEjoeZ7j+3o17F5xa81NQz0KgHrRfOsEeIv y1J8dSwy/b9oapLapRk09o3GaqdTEEA1Z50vJVSPmwD9/CbIedrRte7EoQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFOjJMWTggJJxtivvG9u9iD4XaHKJMB8GA1UdIwQY MBaAFPraQXdHZaTNsFDYKvEbp9LVS24TMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS10cEJkMGRscE0yd1VOZ3E4UnVuMHRWTGJoTS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvOWU2N2Y1LWU1ODAtNDY4Ni1iODJh LTZiOWRjYTljNGVjZS8xLzZNa3haT0NBa25HMkstOGIyNzJJUGhkb2Nvay5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZWEvOWU2N2Y1LWU1ODAtNDY4Ni1iODJhLTZiOWRjYTljNGVj ZS8xLzEtdHBCZDBkbHBNMndVTmdxOFJ1bjB0VkxiaE0uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABb2AIw DQYJKoZIhvcNAQELBQADggEBAGRzw8ZyI1ZoaBqSK4/Wbzqiv1D5MXaGIDN9jzNY JWg0lU8xPQ6C5QCiaoxomObbMdQNq9umMv/mz2G1TjHR8OByB1HjTKsZ49IOMR/9 ExYwZlHJr/+TRm/iuFehtd3DxBOk5lMu8W3ZyOCF9jCLPfKDVQ7eblpVebPugZqA zky15JE7xSManSxO33m5qJi50dX31r5hUHyRV+5LEQaudmi1ETrw43ISk3EnoIon 76m0RFkDzaMJYmEiDJnEvXx6KDDZTBImIY4GO8YjeX8548Z31yjG4i1fwSINaF39 EDLFS3TCmzKMctS2esdRSzBTtF9E+5HLDXB+/gqC+3FiwDc= -----END CERTIFICATE-----Generated at Mon Feb 2 08:06:54 2026 by rpki-client