This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/Q6PIGN4igBIZbEc39u_HTluKRHM.roa File: Q6PIGN4igBIZbEc39u_HTluKRHM.roa (raw, json) Hash identifier: I1ekJZ1I8Lopm9msmw8TKIe9IhJ9R5skSzV4AzmNLVE= Subject key identifier: 43:A3:C8:18:DE:22:80:12:19:6C:47:37:F6:EF:C7:4E:5B:8A:44:73 Certificate issuer: /CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5 Certificate serial: 019B7DCAE0A3E13B1DC178907F52035963EE Authority key identifier: D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/Q6PIGN4igBIZbEc39u_HTluKRHM.roa Signing time: Fri 02 Jan 2026 08:20:06 +0000 ROA not before: Fri 02 Jan 2026 08:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 78.153.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 17 Jan 2026 23:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:e0:a3:e1:3b:1d:c1:78:90:7f:52:03:59:63:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5 Validity Not Before: Jan 2 08:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43a3c818de228012196c4737f6efc74e5b8a4473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f7:1e:f4:1f:8a:d4:1b:2c:4a:7f:d1:c2:67: 18:04:39:6c:63:90:52:2c:8e:d5:79:a2:98:0f:99: 5c:1b:72:91:16:db:17:cb:08:05:95:c0:68:76:4e: 4b:3b:ba:1e:22:07:0a:05:f3:c4:b0:5c:33:c2:50: fb:c0:a6:f8:87:82:5b:42:de:0c:37:11:7c:ff:33: 97:fc:74:95:de:7c:6e:02:73:b3:de:03:d0:8c:c5: fe:4b:c3:4c:34:db:01:9b:12:a7:a8:8b:0d:cf:a1: 95:a8:c9:00:53:94:0a:64:63:27:fe:be:7e:fb:79: fe:d8:c7:db:b4:63:c3:55:5d:a7:dc:21:97:11:5c: c8:c5:72:0b:3f:6e:b7:0a:88:00:72:f8:f1:5f:90: 6b:ec:74:05:d3:fd:f8:27:12:cf:7e:ca:5d:9a:c9: 0b:a2:64:81:cb:ad:23:10:c0:9b:79:8c:cf:c4:3f: 87:32:4d:00:15:8b:44:2d:25:20:8f:68:06:78:45: b6:e0:3b:11:73:cf:92:e4:14:d0:b4:fd:1c:b1:81: 35:ae:cf:1f:0b:47:0f:11:60:d4:0d:4b:ff:76:83: cf:dd:e2:1c:74:57:69:df:c0:0b:12:c2:ac:b2:ab: ae:31:78:d8:9e:ad:7f:f6:51:01:74:79:5d:71:ed: 34:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A3:C8:18:DE:22:80:12:19:6C:47:37:F6:EF:C7:4E:5B:8A:44:73 X509v3 Authority Key Identifier: keyid:D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/Q6PIGN4igBIZbEc39u_HTluKRHM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.153.96.0/20 Signature Algorithm: sha256WithRSAEncryption 0c:49:8b:ed:85:ee:67:a0:5c:8e:58:b3:f2:6e:23:15:67:4f: 45:95:c8:a3:58:02:1c:df:89:ef:f3:8e:96:36:75:8e:ad:1b: 69:8e:b1:b0:4e:b2:c6:f7:59:98:b5:64:d7:c5:9e:bf:f2:84: 8c:bf:92:05:eb:05:44:d6:74:2c:63:7c:2c:f5:01:fd:d9:a0: bc:ba:72:09:d9:e8:a7:38:c5:4a:7f:33:c3:45:39:79:3b:c7: 41:ab:f9:54:59:f5:5b:97:2a:cf:33:63:32:74:ff:c4:d6:0a: 1f:38:7a:38:50:ea:6b:27:36:16:f3:f7:d3:ce:c7:90:d1:9c: 7e:6d:b5:ca:a1:fc:0a:e3:bc:d8:78:33:5e:7d:88:77:d2:72: ef:99:b9:96:c4:65:db:17:5f:a9:79:e0:06:dd:c7:88:ac:e4: 4e:c4:d5:ac:52:f8:62:d5:f1:6e:5a:61:e2:50:27:1e:00:3d: 0b:2d:46:a5:aa:bc:2b:83:e6:8d:48:c6:b3:4a:47:40:d6:b6: b1:5f:1c:25:e3:7f:8a:b3:6f:76:2f:89:a8:7a:66:ed:37:44: b4:0c:71:80:67:2b:2c:6f:d6:f0:b6:90:d4:de:57:0e:25:be: fe:3a:d2:a1:d8:e0:ee:45:27:07:3d:e2:42:db:c2:30:40:3a: 90:5e:4a:85 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yuCj4TsdwXiQf1IDWWPuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNzFlYTA2YjFhNzU2Y2JmNDZhZTA0NjQ4NGJiZDNlNGZj ZTRjYTUwHhcNMjYwMTAyMDgyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2EzYzgxOGRlMjI4MDEyMTk2YzQ3MzdmNmVmYzc0ZTViOGE0NDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/ce9B+K1BssSn/RwmcYBDlsY5BS LI7VeaKYD5lcG3KRFtsXywgFlcBodk5LO7oeIgcKBfPEsFwzwlD7wKb4h4JbQt4M NxF8/zOX/HSV3nxuAnOz3gPQjMX+S8NMNNsBmxKnqIsNz6GVqMkAU5QKZGMn/r5+ +3n+2MfbtGPDVV2n3CGXEVzIxXILP263CogAcvjxX5Br7HQF0/34JxLPfspdmskL omSBy60jEMCbeYzPxD+HMk0AFYtELSUgj2gGeEW24DsRc8+S5BTQtP0csYE1rs8f C0cPEWDUDUv/doPP3eIcdFdp38ALEsKssquuMXjYnq1/9lEBdHldce00WwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEOjyBjeIoASGWxHN/bvx05bikRzMB8GA1UdIwQY MBaAFNJx6gaxp1bL9GrgRkhLvT5PzkylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG5IcUJyR25Wc3YwYXVCR1NFdTlQa19PVEtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hY2VjM2QtNzc1ZS00ZDBlLTg0MzMt ZmMzZDVjMjIzMGIyLzEvUTZQSUdONGlnQklaYkVjMzl1X0hUbHVLUkhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9hY2VjM2QtNzc1ZS00ZDBlLTg0MzMtZmMzZDVjMjIzMGIy LzEvMG5IcUJyR25Wc3YwYXVCR1NFdTlQa19PVEtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQETplgMA0G CSqGSIb3DQEBCwUAA4IBAQAMSYvthe5noFyOWLPybiMVZ09FlcijWAIc34nv846W NnWOrRtpjrGwTrLG91mYtWTXxZ6/8oSMv5IF6wVE1nQsY3ws9QH92aC8unIJ2ein OMVKfzPDRTl5O8dBq/lUWfVblyrPM2MydP/E1gofOHo4UOprJzYW8/fTzseQ0Zx+ bbXKofwK47zYeDNefYh30nLvmbmWxGXbF1+peeAG3ceIrOROxNWsUvhi1fFuWmHi UCceAD0LLUalqrwrg+aNSMazSkdA1raxXxwl43+Ks292L4moembtN0S0DHGAZyss b9bwtpDU3lcOJb7+OtKh2ODuRScHPeJC28IwQDqQXkqF -----END CERTIFICATE-----Generated at Sat Jan 17 08:23:55 2026 by rpki-client