This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/6KkpY3UMlsn4lmwRTfmLoXlCvZo.roa File: 6KkpY3UMlsn4lmwRTfmLoXlCvZo.roa (raw, json) Hash identifier: h6bDcvlLQ2oWH39OehL7j4jN9y68+hpsxgqt/2oRmFc= Subject key identifier: E8:A9:29:63:75:0C:96:C9:F8:96:6C:11:4D:F9:8B:A1:79:42:BD:9A Certificate issuer: /CN=b7bc1adfbf362648fc635c3332f383bcbc01e774 Certificate serial: 019B7B35DFD987AA08BD32664DD814F78948 Authority key identifier: B7:BC:1A:DF:BF:36:26:48:FC:63:5C:33:32:F3:83:BC:BC:01:E7:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7wa3782Jkj8Y1wzMvODvLwB53Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/6KkpY3UMlsn4lmwRTfmLoXlCvZo.roa Signing time: Thu 01 Jan 2026 20:18:06 +0000 ROA not before: Thu 01 Jan 2026 20:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50572 IP address blocks: 37.49.240.0/20 maxlen: 20 91.211.168.0/24 maxlen: 24 91.211.169.0/24 maxlen: 24 91.211.170.0/23 maxlen: 23 109.205.216.0/21 maxlen: 21 185.5.20.0/22 maxlen: 22 2a02:1380::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft rsync://rpki.ripe.net/repository/DEFAULT/t7wa3782Jkj8Y1wzMvODvLwB53Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:df:d9:87:aa:08:bd:32:66:4d:d8:14:f7:89:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7bc1adfbf362648fc635c3332f383bcbc01e774 Validity Not Before: Jan 1 20:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8a92963750c96c9f8966c114df98ba17942bd9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3d:67:1f:d5:71:b4:5a:8c:5f:17:04:00:59: 43:e8:a7:80:8e:73:e5:3d:4e:66:c9:27:7c:f0:5c: e4:38:ab:47:03:49:68:4f:fa:1b:47:19:fd:1d:2d: a7:f6:20:ee:14:29:be:88:67:4d:b4:40:e1:85:84: d0:0d:85:58:1e:09:bd:a9:c5:9f:32:59:5d:7b:b4: 64:8e:42:d9:ee:1a:80:2b:dd:8f:da:29:14:92:29: 43:a4:b1:2e:68:5a:7a:f8:28:f1:3d:b2:f2:c5:7b: 64:0f:4d:39:c1:e1:ca:fa:a5:e5:6f:25:e1:f8:57: 70:21:0d:0b:1e:98:3a:2a:e2:90:5c:70:23:1a:c1: be:6d:11:c5:20:a9:d5:51:49:27:84:4e:2d:d3:66: 69:78:ed:d0:a1:8f:69:73:a3:02:a6:9d:0d:94:27: e8:4f:98:33:3d:91:38:49:2d:37:14:c6:23:29:8a: 92:3e:6a:7b:0e:c5:a6:29:aa:62:6a:a5:16:23:2a: 68:89:4b:a1:52:52:b2:4e:e9:75:4e:78:0d:cf:6e: ac:4a:34:69:36:93:26:2f:12:cd:5a:07:5b:3c:29: c7:b7:93:04:3d:c6:95:30:43:55:28:1b:69:ff:54: af:8c:82:b9:ce:38:74:12:46:72:a6:6c:8b:8a:ab: bf:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A9:29:63:75:0C:96:C9:F8:96:6C:11:4D:F9:8B:A1:79:42:BD:9A X509v3 Authority Key Identifier: keyid:B7:BC:1A:DF:BF:36:26:48:FC:63:5C:33:32:F3:83:BC:BC:01:E7:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7wa3782Jkj8Y1wzMvODvLwB53Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/6KkpY3UMlsn4lmwRTfmLoXlCvZo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.49.240.0/20 91.211.168.0/22 109.205.216.0/21 185.5.20.0/22 IPv6: 2a02:1380::/32 Signature Algorithm: sha256WithRSAEncryption 8e:40:6d:b4:c9:ca:4a:23:d9:e6:3b:ef:42:58:6c:26:c7:3b: 8e:93:44:a0:6c:58:83:27:a0:5c:54:b4:36:ba:5a:6a:59:e1: a6:fe:a9:ab:14:43:a2:8f:e3:9c:0b:22:10:81:a1:ef:c6:ee: 00:ad:49:ea:49:0d:0d:c1:2b:50:68:fc:25:4b:34:2d:0f:4b: 35:74:a0:1e:a8:94:f6:bd:db:aa:dd:7a:49:35:a8:c8:a4:c6: 70:d1:b9:64:a5:a4:96:82:e0:00:de:54:20:93:29:55:14:dd: 9a:6d:26:37:65:d0:f2:0e:83:c4:ed:2a:e6:c0:7f:07:a5:13: 5c:95:36:ca:68:9f:5f:c9:18:ca:e1:9f:bc:b6:2d:40:da:62: ec:00:5f:fe:d9:22:58:4a:3e:80:32:64:c4:09:04:c9:e2:1d: 50:9f:68:4b:9f:25:95:a1:08:65:ef:b0:1a:f0:58:fa:c3:1b: 08:0e:23:35:f7:dd:de:6d:35:89:8a:f4:36:ea:1b:18:ab:82: a5:74:90:b0:8b:53:dd:0a:0c:97:d0:5b:85:a4:76:a9:90:be: 20:48:a1:cb:45:4d:52:3a:2b:5c:a6:40:88:7d:0e:96:bd:07: fa:ba:2f:94:24:4d:ab:72:f7:78:38:07:89:60:44:40:23:bb: e3:4c:e9:91 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt7Nd/Zh6oIvTJmTdgU94lIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3YmMxYWRmYmYzNjI2NDhmYzYzNWMzMzMyZjM4M2JjYmMw MWU3NzQwHhcNMjYwMTAxMjAxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOGE5Mjk2Mzc1MGM5NmM5Zjg5NjZjMTE0ZGY5OGJhMTc5NDJiZDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoD1nH9VxtFqMXxcEAFlD6KeAjnPl PU5mySd88FzkOKtHA0loT/obRxn9HS2n9iDuFCm+iGdNtEDhhYTQDYVYHgm9qcWf Mllde7RkjkLZ7hqAK92P2ikUkilDpLEuaFp6+CjxPbLyxXtkD005weHK+qXlbyXh +FdwIQ0LHpg6KuKQXHAjGsG+bRHFIKnVUUknhE4t02ZpeO3QoY9pc6MCpp0NlCfo T5gzPZE4SS03FMYjKYqSPmp7DsWmKapiaqUWIypoiUuhUlKyTul1TngNz26sSjRp NpMmLxLNWgdbPCnHt5MEPcaVMENVKBtp/1SvjIK5zjh0EkZypmyLiqu/XwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFOipKWN1DJbJ+JZsEU35i6F5Qr2aMB8GA1UdIwQY MBaAFLe8Gt+/NiZI/GNcMzLzg7y8Aed0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDd3YTM3ODJKa2o4WTF3ek12T0R2THdCNTNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xYzlkYzctNzhhNS00ZDhhLWIxODUt ZmQ2MDZiMDZhMDFhLzEvNktrcFkzVU1sc240bG13UlRmbUxvWGxDdlpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xYzlkYzctNzhhNS00ZDhhLWIxODUtZmQ2MDZiMDZhMDFh LzEvdDd3YTM3ODJKa2o4WTF3ek12T0R2THdCNTNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQEJTHwAwQC W9OoAwQDbc3YAwQCuQUUMA0EAgACMAcDBQAqAhOAMA0GCSqGSIb3DQEBCwUAA4IB AQCOQG20ycpKI9nmO+9CWGwmxzuOk0SgbFiDJ6BcVLQ2ulpqWeGm/qmrFEOij+Oc CyIQgaHvxu4ArUnqSQ0NwStQaPwlSzQtD0s1dKAeqJT2vduq3XpJNajIpMZw0blk paSWguAA3lQgkylVFN2abSY3ZdDyDoPE7SrmwH8HpRNclTbKaJ9fyRjK4Z+8ti1A 2mLsAF/+2SJYSj6AMmTECQTJ4h1Qn2hLnyWVoQhl77Aa8Fj6wxsIDiM1993ebTWJ ivQ26hsYq4KldJCwi1PdCgyX0FuFpHapkL4gSKHLRU1SOitcpkCIfQ6WvQf6ui+U JE2rcvd4OAeJYERAI7vjTOmR -----END CERTIFICATE-----Generated at Mon Feb 9 21:24:26 2026 by rpki-client