This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/6fkc9vbG8GlJ-ztun97m-zUYfg4.roa File: 6fkc9vbG8GlJ-ztun97m-zUYfg4.roa (raw, json) Hash identifier: zRY0m0UC6TjY6n8pP6oxYqs0avAat2u0qcFHm3tj6MI= Subject key identifier: E9:F9:1C:F6:F6:C6:F0:69:49:FB:3B:6E:9F:DE:E6:FB:35:18:7E:0E Certificate issuer: /CN=b7695b98e08a378bf0dc944d2f1a60a1f6954981 Certificate serial: 019B7F158B0343AD6975673973F40460A509 Authority key identifier: B7:69:5B:98:E0:8A:37:8B:F0:DC:94:4D:2F:1A:60:A1:F6:95:49:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2lbmOCKN4vw3JRNLxpgofaVSYE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/6fkc9vbG8GlJ-ztun97m-zUYfg4.roa Signing time: Fri 02 Jan 2026 14:21:16 +0000 ROA not before: Fri 02 Jan 2026 14:21:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42841 IP address blocks: 88.212.0.0/18 maxlen: 18 88.212.0.0/19 maxlen: 19 88.212.0.0/20 maxlen: 20 88.212.16.0/20 maxlen: 20 88.212.32.0/19 maxlen: 19 88.212.32.0/20 maxlen: 20 88.212.48.0/20 maxlen: 20 185.61.16.0/22 maxlen: 22 2a02:130::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft rsync://rpki.ripe.net/repository/DEFAULT/t2lbmOCKN4vw3JRNLxpgofaVSYE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:8b:03:43:ad:69:75:67:39:73:f4:04:60:a5:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7695b98e08a378bf0dc944d2f1a60a1f6954981 Validity Not Before: Jan 2 14:21:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e9f91cf6f6c6f06949fb3b6e9fdee6fb35187e0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e2:b4:8a:13:e5:91:d8:79:97:19:13:76:46: e4:e9:98:03:de:ba:6d:a3:35:7a:83:ed:0f:dc:2e: cc:6f:d3:8b:04:08:63:8b:1f:12:13:e3:8a:22:a1: 98:a6:cd:28:21:72:a2:c1:e9:5c:c8:be:59:15:9d: 63:4f:46:39:95:fe:99:6d:4d:13:87:ca:cf:4c:5b: 5a:d3:f4:ad:64:0e:4c:a8:36:ed:02:10:da:54:ee: 00:e3:e3:b0:7e:4e:b0:db:8f:e5:3f:8e:f1:f0:f5: 86:53:3d:0a:ec:b2:53:3a:f0:65:f7:b9:12:02:35: 16:fb:f1:68:ea:f9:ec:1c:43:64:33:cb:ab:78:3c: 6f:2e:09:52:d3:3c:bc:88:30:a0:d9:d3:96:c6:a3: 82:f3:15:01:42:d5:d1:79:20:45:82:90:49:08:84: 58:e4:0d:5f:be:b5:b6:49:f3:5c:e3:30:9d:a7:65: 1c:70:8a:15:89:de:63:d4:5f:3b:07:e9:97:23:8d: c2:d0:40:3f:62:52:fb:9f:d7:2e:ed:ce:e9:cb:73: 9f:62:9b:93:3c:3b:3e:46:44:eb:5e:ca:b7:2c:4e: 1c:aa:96:94:a8:d6:a3:89:5f:eb:f2:8d:aa:1a:a4: e0:46:46:87:44:5f:ba:f0:85:f2:51:e1:f8:d8:49: 83:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:F9:1C:F6:F6:C6:F0:69:49:FB:3B:6E:9F:DE:E6:FB:35:18:7E:0E X509v3 Authority Key Identifier: keyid:B7:69:5B:98:E0:8A:37:8B:F0:DC:94:4D:2F:1A:60:A1:F6:95:49:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2lbmOCKN4vw3JRNLxpgofaVSYE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/6fkc9vbG8GlJ-ztun97m-zUYfg4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.212.0.0/18 185.61.16.0/22 IPv6: 2a02:130::/32 Signature Algorithm: sha256WithRSAEncryption a4:57:dd:84:de:e5:d5:19:0b:97:92:c3:1a:c3:13:16:52:76: af:f3:01:31:02:ac:77:02:85:57:7e:a3:99:4d:c2:d8:70:20: 57:61:f3:82:6e:1f:0c:49:b8:c7:c3:de:1b:b7:4b:d5:b5:82: 62:8b:f7:ec:da:13:17:db:60:71:09:29:cf:8a:66:dc:ec:62: a2:56:f6:2e:02:59:97:c6:03:5d:7f:fd:89:de:70:38:88:d3: 3d:81:71:6c:ce:28:32:c3:da:5b:b1:d8:ed:d9:f9:2c:15:21: 88:c2:f8:6f:d5:2e:80:35:94:cc:f7:61:37:8a:c5:23:d2:71: 3f:b3:1b:bf:67:be:66:1b:6f:26:b6:0c:79:b3:3d:f2:94:60: 93:77:18:06:f5:8c:8b:55:be:d8:2c:87:70:ff:6a:40:a0:46: 92:61:a2:63:d9:4e:e2:90:0e:46:de:78:ca:62:71:73:d6:47: 60:ec:4a:71:10:ee:9b:93:2f:29:7d:b4:da:1c:41:9f:53:d1: 6e:46:26:ca:1b:03:72:d0:75:5c:b9:11:52:1b:49:4e:c3:db: 3f:9b:27:ba:2d:44:cb:15:1a:6e:17:31:35:bf:21:fc:f8:c0: 48:21:16:14:0c:6e:ad:ff:32:7a:08:57:3e:ca:5d:4a:7d:69: 45:74:8d:40 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/FYsDQ61pdWc5c/QEYKUJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3Njk1Yjk4ZTA4YTM3OGJmMGRjOTQ0ZDJmMWE2MGExZjY5 NTQ5ODEwHhcNMjYwMTAyMTQyMTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOWY5MWNmNmY2YzZmMDY5NDlmYjNiNmU5ZmRlZTZmYjM1MTg3ZTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uK0ihPlkdh5lxkTdkbk6ZgD3rpt ozV6g+0P3C7Mb9OLBAhjix8SE+OKIqGYps0oIXKiwelcyL5ZFZ1jT0Y5lf6ZbU0T h8rPTFta0/StZA5MqDbtAhDaVO4A4+Owfk6w24/lP47x8PWGUz0K7LJTOvBl97kS AjUW+/Fo6vnsHENkM8ureDxvLglS0zy8iDCg2dOWxqOC8xUBQtXReSBFgpBJCIRY 5A1fvrW2SfNc4zCdp2UccIoVid5j1F87B+mXI43C0EA/YlL7n9cu7c7py3OfYpuT PDs+RkTrXsq3LE4cqpaUqNajiV/r8o2qGqTgRkaHRF+68IXyUeH42EmDrQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFOn5HPb2xvBpSfs7bp/e5vs1GH4OMB8GA1UdIwQY MBaAFLdpW5jgijeL8NyUTS8aYKH2lUmBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDJsYm1PQ0tONHZ3M0pSTkx4cGdvZmFWU1lFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC84MWU5YWEtODVlZC00ODUwLWI0NmIt Njg4NWFhODdjNGZkLzEvNmZrYzl2Ykc4R2xKLXp0dW45N20telVZZmc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC84MWU5YWEtODVlZC00ODUwLWI0NmItNjg4NWFhODdjNGZk LzEvdDJsYm1PQ0tONHZ3M0pSTkx4cGdvZmFWU1lFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQGWNQAAwQC uT0QMA0EAgACMAcDBQAqAgEwMA0GCSqGSIb3DQEBCwUAA4IBAQCkV92E3uXVGQuX ksMawxMWUnav8wExAqx3AoVXfqOZTcLYcCBXYfOCbh8MSbjHw94bt0vVtYJii/fs 2hMX22BxCSnPimbc7GKiVvYuAlmXxgNdf/2J3nA4iNM9gXFszigyw9pbsdjt2fks FSGIwvhv1S6ANZTM92E3isUj0nE/sxu/Z75mG28mtgx5sz3ylGCTdxgG9YyLVb7Y LIdw/2pAoEaSYaJj2U7ikA5G3njKYnFz1kdg7EpxEO6bky8pfbTaHEGfU9FuRibK GwNy0HVcuRFSG0lOw9s/mye6LUTLFRpuFzE1vyH8+MBIIRYUDG6t/zJ6CFc+yl1K fWlFdI1A -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:47 2026 by rpki-client