This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/92d5b2-f793-489d-84c9-6bbca4d757a3/1/6Z8hob1Upqwo2EW6PTUCNBVkao0.roa File: 6Z8hob1Upqwo2EW6PTUCNBVkao0.roa (raw, json) Hash identifier: MOFWzSd7ItSNB7fFtao0bMERMdYn11je1kVjMRXFl78= Subject key identifier: E9:9F:21:A1:BD:54:A6:AC:28:D8:45:BA:3D:35:02:34:15:64:6A:8D Certificate issuer: /CN=556e82265afb6ba60ee0b0c503c48ca8a09edb34 Certificate serial: 019B791023B568331BCBC67823CE7091193B Authority key identifier: 55:6E:82:26:5A:FB:6B:A6:0E:E0:B0:C5:03:C4:8C:A8:A0:9E:DB:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VW6CJlr7a6YO4LDFA8SMqKCe2zQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/92d5b2-f793-489d-84c9-6bbca4d757a3/1/6Z8hob1Upqwo2EW6PTUCNBVkao0.roa Signing time: Thu 01 Jan 2026 10:17:39 +0000 ROA not before: Thu 01 Jan 2026 10:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42876 IP address blocks: 77.221.224.0/19 maxlen: 19 77.221.254.0/23 maxlen: 23 86.54.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/92d5b2-f793-489d-84c9-6bbca4d757a3/1/VW6CJlr7a6YO4LDFA8SMqKCe2zQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/92d5b2-f793-489d-84c9-6bbca4d757a3/1/VW6CJlr7a6YO4LDFA8SMqKCe2zQ.mft rsync://rpki.ripe.net/repository/DEFAULT/VW6CJlr7a6YO4LDFA8SMqKCe2zQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:23:b5:68:33:1b:cb:c6:78:23:ce:70:91:19:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=556e82265afb6ba60ee0b0c503c48ca8a09edb34 Validity Not Before: Jan 1 10:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e99f21a1bd54a6ac28d845ba3d35023415646a8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c3:d3:a7:4a:f2:d4:a0:50:26:8b:72:e5:eb: 38:40:2e:40:a5:87:39:45:35:5c:2c:cb:ee:c7:23: 60:81:95:a9:7a:a6:0c:fa:ef:56:20:4d:c8:c0:a4: 2e:eb:b7:60:5d:41:3a:c3:6a:01:93:aa:9f:59:09: 26:2f:77:b1:52:75:9d:2d:4e:eb:cc:5f:77:ed:68: 1b:41:e8:71:99:55:9b:82:63:58:89:cd:21:86:49: ed:d8:39:c0:04:5e:ef:3f:00:45:0c:3a:bf:db:b7: 24:22:bd:7e:79:cc:20:a6:74:6b:03:03:65:4e:f3: ce:30:9f:a7:fd:0e:dc:a6:35:65:b6:23:c8:b2:f5: 33:c3:69:98:2e:51:59:b7:27:a7:b2:e7:d5:7c:09: 9d:6c:d9:42:b3:fa:f2:fe:29:ef:78:43:b6:7b:6d: 99:49:35:f5:2d:94:c6:11:c8:1f:ad:89:0b:88:86: 6b:f4:24:a7:c5:dc:bd:86:f3:57:a8:5e:4b:df:a9: 7c:f2:3d:4a:03:da:79:31:36:54:e9:f4:47:74:29: 6d:13:fe:b9:5a:a7:f5:66:ba:43:fa:42:55:22:26: 58:2b:21:6e:df:f1:db:da:e2:62:a2:f8:c8:92:38: a5:7d:95:d0:4e:64:57:6d:dc:21:61:25:cc:24:77: 3c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:9F:21:A1:BD:54:A6:AC:28:D8:45:BA:3D:35:02:34:15:64:6A:8D X509v3 Authority Key Identifier: keyid:55:6E:82:26:5A:FB:6B:A6:0E:E0:B0:C5:03:C4:8C:A8:A0:9E:DB:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VW6CJlr7a6YO4LDFA8SMqKCe2zQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/92d5b2-f793-489d-84c9-6bbca4d757a3/1/6Z8hob1Upqwo2EW6PTUCNBVkao0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/92d5b2-f793-489d-84c9-6bbca4d757a3/1/VW6CJlr7a6YO4LDFA8SMqKCe2zQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.221.224.0/19 86.54.12.0/22 Signature Algorithm: sha256WithRSAEncryption 90:c7:b5:0d:87:5e:87:03:36:03:16:ba:94:19:2d:6d:7a:af: 75:5d:33:e4:ae:c8:49:2c:d6:92:dc:22:83:c6:5e:af:fe:c5: f2:56:15:7a:ba:ef:24:62:2d:0a:f6:ba:4d:0b:ce:16:a5:90: 11:7f:ea:7d:09:ce:9d:c9:4d:dc:9c:4b:e7:fe:4d:49:23:22: d7:01:03:98:dc:55:34:07:95:65:63:7a:ea:7f:50:3f:46:91: b6:a8:fb:33:7e:52:90:01:89:e2:03:f1:ee:bc:80:b1:e3:78: ac:5f:32:ca:0f:74:49:b6:39:1f:e5:2c:59:26:9d:bc:e8:e9: 05:cf:64:9c:8c:d3:ed:ef:07:e9:5b:67:83:ed:0d:7e:a4:ec: 13:6b:60:ab:ac:df:e3:e5:47:3a:ef:f5:8e:d0:6c:4b:c5:92: 79:be:b6:af:0d:83:32:9b:95:ef:64:43:ff:b2:11:20:42:77: 3f:6f:61:94:f5:9b:a6:85:65:02:2a:3d:1c:9a:52:81:e3:b0: 4f:49:d2:3c:eb:35:12:41:db:75:66:c5:5c:4f:76:5c:8a:56: b3:d2:5b:9e:59:99:db:d6:82:4a:9d:5b:7d:80:de:66:19:b2: 08:9b:c4:a1:c3:c5:24:5b:d7:cb:66:0f:4a:01:23:11:b1:0d: c7:07:93:cd -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5ECO1aDMby8Z4I85wkRk7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1NmU4MjI2NWFmYjZiYTYwZWUwYjBjNTAzYzQ4Y2E4YTA5 ZWRiMzQwHhcNMjYwMTAxMTAxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTlmMjFhMWJkNTRhNmFjMjhkODQ1YmEzZDM1MDIzNDE1NjQ2YThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsPTp0ry1KBQJoty5es4QC5ApYc5 RTVcLMvuxyNggZWpeqYM+u9WIE3IwKQu67dgXUE6w2oBk6qfWQkmL3exUnWdLU7r zF937WgbQehxmVWbgmNYic0hhknt2DnABF7vPwBFDDq/27ckIr1+ecwgpnRrAwNl TvPOMJ+n/Q7cpjVltiPIsvUzw2mYLlFZtyensufVfAmdbNlCs/ry/inveEO2e22Z STX1LZTGEcgfrYkLiIZr9CSnxdy9hvNXqF5L36l88j1KA9p5MTZU6fRHdCltE/65 Wqf1ZrpD+kJVIiZYKyFu3/Hb2uJiovjIkjilfZXQTmRXbdwhYSXMJHc81QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOmfIaG9VKasKNhFuj01AjQVZGqNMB8GA1UdIwQY MBaAFFVugiZa+2umDuCwxQPEjKignts0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlc2Q0pscjdhNllPNExERkE4U01xS0NlMnpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC85MmQ1YjItZjc5My00ODlkLTg0Yzkt NmJiY2E0ZDc1N2EzLzEvNlo4aG9iMVVwcXdvMkVXNlBUVUNOQlZrYW8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC85MmQ1YjItZjc5My00ODlkLTg0YzktNmJiY2E0ZDc1N2Ez LzEvVlc2Q0pscjdhNllPNExERkE4U01xS0NlMnpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFTd3gAwQC VjYMMA0GCSqGSIb3DQEBCwUAA4IBAQCQx7UNh16HAzYDFrqUGS1teq91XTPkrshJ LNaS3CKDxl6v/sXyVhV6uu8kYi0K9rpNC84WpZARf+p9Cc6dyU3cnEvn/k1JIyLX AQOY3FU0B5VlY3rqf1A/RpG2qPszflKQAYniA/HuvICx43isXzLKD3RJtjkf5SxZ Jp286OkFz2ScjNPt7wfpW2eD7Q1+pOwTa2CrrN/j5Uc67/WO0GxLxZJ5vravDYMy m5XvZEP/shEgQnc/b2GU9ZumhWUCKj0cmlKB47BPSdI86zUSQdt1ZsVcT3Zcilaz 0lueWZnb1oJKnVt9gN5mGbIIm8Shw8UkW9fLZg9KASMRsQ3HB5PN -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:03 2026 by rpki-client