This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/r6hrFX2SuyS_5-kFFGwRupnNrCk.roa File: r6hrFX2SuyS_5-kFFGwRupnNrCk.roa (raw, json) Hash identifier: GJ4Xm7ZQdbr0p4lRRKkLrAW0OgXMd0DL+adKjJvS5dY= Subject key identifier: AF:A8:6B:15:7D:92:BB:24:BF:E7:E9:05:14:6C:11:BA:99:CD:AC:29 Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B18C4CBCEF42734A88D4382B5C29A Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/r6hrFX2SuyS_5-kFFGwRupnNrCk.roa Signing time: Fri 02 Jan 2026 06:18:00 +0000 ROA not before: Fri 02 Jan 2026 06:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200523 IP address blocks: 62.68.70.0/24 maxlen: 24 78.128.120.0/23 maxlen: 24 80.72.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:18:c4:cb:ce:f4:27:34:a8:8d:43:82:b5:c2:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=afa86b157d92bb24bfe7e905146c11ba99cdac29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:59:59:0b:cd:88:1e:ce:33:88:22:d6:57:31: 64:f0:41:b8:6e:f7:1b:ef:b2:d0:76:aa:1c:e1:cf: c3:58:05:4e:24:49:8f:9a:d0:de:e9:b5:02:4d:40: 41:17:b6:09:14:2c:57:9b:76:4f:32:ed:20:0b:a9: e7:f2:83:52:e0:75:29:7a:a1:13:c1:d5:ec:f2:e7: 6d:39:93:b8:8e:7f:fe:e2:a0:39:96:de:c8:0b:58: c3:21:a7:08:14:ef:eb:c5:a3:51:f8:7e:e3:83:f3: 57:65:cb:68:52:9d:91:d9:97:5b:01:a9:e0:a6:e7: e0:96:06:0c:4d:bf:e8:55:0b:fe:b0:4d:3e:29:0f: 0b:fd:19:62:2b:c9:17:a3:a5:a3:35:5f:4c:09:17: 6c:ec:78:05:59:14:44:20:6a:99:b0:f5:be:f8:e3: 6d:b8:03:2e:d7:8a:63:e5:6d:f1:48:c1:f8:0f:7e: 60:28:96:11:27:cd:67:e7:d4:2b:32:e5:e7:fa:ba: c3:15:37:a6:78:b2:31:6c:a8:4d:b4:31:85:1f:d3: 1a:0f:e6:66:d6:9b:d4:a4:8e:b1:86:5a:30:d4:5b: 6b:f0:d0:54:bc:a5:5b:94:5f:14:07:16:bb:14:6e: 63:b2:33:2e:df:3d:a8:f5:1f:d5:b8:7e:dd:83:77: f8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A8:6B:15:7D:92:BB:24:BF:E7:E9:05:14:6C:11:BA:99:CD:AC:29 X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/r6hrFX2SuyS_5-kFFGwRupnNrCk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.68.70.0/24 78.128.120.0/23 80.72.78.0/24 Signature Algorithm: sha256WithRSAEncryption 78:2b:4d:ed:3c:89:29:b4:cc:69:9a:1d:b2:f2:4f:e0:a7:0f: 7b:37:4a:41:ed:d7:6d:45:00:7d:c6:92:9a:af:58:57:5b:f1: 9e:5b:19:cd:66:8a:de:a0:80:9d:2e:87:b5:e9:dc:e3:09:8b: 5d:4d:43:59:c3:7c:2e:bc:10:db:ea:07:1a:74:81:41:48:42: b7:0e:06:42:2b:2f:97:d6:f3:44:a5:60:01:f9:cf:d9:3a:42: 94:f6:f6:d3:ce:21:d8:39:80:82:c3:3c:f4:1e:ff:e0:89:a7: 78:94:df:cd:0d:04:b9:fa:40:4e:9d:09:8f:38:5e:92:6b:a3: 26:cb:ed:79:45:35:46:ff:7c:1b:16:fd:c8:e1:34:b8:c6:78: 51:cc:a9:d1:a8:d5:84:35:8f:12:b4:c7:ee:ba:93:b4:3f:1c: ee:89:a8:74:79:a3:2f:2c:a2:c9:3a:c7:ce:4c:8a:03:67:d2: e3:3e:3a:39:a0:ae:0b:1c:07:c1:64:42:ed:c1:48:a5:e7:62: 98:a0:05:46:0e:0e:ac:a5:81:ca:d9:e1:40:de:99:9f:6d:0c: ab:6f:76:da:ff:60:e5:6e:0f:92:c8:ae:6c:88:9f:92:48:c0: 95:0f:c4:e4:cd:cd:a3:c3:ce:c5:eb:d4:66:77:35:5f:1f:0b: d8:4d:ca:18 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9WxjEy870JzSojUOCtcKaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmE4NmIxNTdkOTJiYjI0YmZlN2U5MDUxNDZjMTFiYTk5Y2RhYzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61lZC82IHs4ziCLWVzFk8EG4bvcb 77LQdqoc4c/DWAVOJEmPmtDe6bUCTUBBF7YJFCxXm3ZPMu0gC6nn8oNS4HUpeqET wdXs8udtOZO4jn/+4qA5lt7IC1jDIacIFO/rxaNR+H7jg/NXZctoUp2R2ZdbAang pufglgYMTb/oVQv+sE0+KQ8L/RliK8kXo6WjNV9MCRds7HgFWRREIGqZsPW++ONt uAMu14pj5W3xSMH4D35gKJYRJ81n59QrMuXn+rrDFTemeLIxbKhNtDGFH9MaD+Zm 1pvUpI6xhlow1Ftr8NBUvKVblF8UBxa7FG5jsjMu3z2o9R/VuH7dg3f4rQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFK+oaxV9krskv+fpBRRsEbqZzawpMB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvcjZockZYMlN1eVNfNS1rRkZHd1J1cG5OckNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAPkRGAwQB ToB4AwQAUEhOMA0GCSqGSIb3DQEBCwUAA4IBAQB4K03tPIkptMxpmh2y8k/gpw97 N0pB7ddtRQB9xpKar1hXW/GeWxnNZoreoICdLoe16dzjCYtdTUNZw3wuvBDb6gca dIFBSEK3DgZCKy+X1vNEpWAB+c/ZOkKU9vbTziHYOYCCwzz0Hv/giad4lN/NDQS5 +kBOnQmPOF6Sa6Mmy+15RTVG/3wbFv3I4TS4xnhRzKnRqNWENY8StMfuupO0Pxzu iah0eaMvLKLJOsfOTIoDZ9LjPjo5oK4LHAfBZELtwUil52KYoAVGDg6spYHK2eFA 3pmfbQyrb3ba/2Dlbg+SyK5siJ+SSMCVD8Tkzc2jw87F69RmdzVfHwvYTcoY -----END CERTIFICATE-----Generated at Fri Jan 23 18:50:58 2026 by rpki-client