This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/t6Z6klZ_0NjLgXvq4YpIkhB8psw.roa File: t6Z6klZ_0NjLgXvq4YpIkhB8psw.roa (raw, json) Hash identifier: +OTn+I3wq5DYeVWvGcpxMDqEd8XsWHPUTKNQceql21Y= Subject key identifier: B7:A6:7A:92:56:7F:D0:D8:CB:81:7B:EA:E1:8A:48:92:10:7C:A6:CC Certificate issuer: /CN=f1f17ebcc2a525afcfc92218159caf52882978d2 Certificate serial: 019B7DCADBA9888010623860DE06035474E1 Authority key identifier: F1:F1:7E:BC:C2:A5:25:AF:CF:C9:22:18:15:9C:AF:52:88:29:78:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fF-vMKlJa_PySIYFZyvUogpeNI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/t6Z6klZ_0NjLgXvq4YpIkhB8psw.roa Signing time: Fri 02 Jan 2026 08:20:04 +0000 ROA not before: Fri 02 Jan 2026 08:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197119 IP address blocks: 178.217.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.crl rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft rsync://rpki.ripe.net/repository/DEFAULT/8fF-vMKlJa_PySIYFZyvUogpeNI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:db:a9:88:80:10:62:38:60:de:06:03:54:74:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1f17ebcc2a525afcfc92218159caf52882978d2 Validity Not Before: Jan 2 08:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7a67a92567fd0d8cb817beae18a4892107ca6cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e3:cd:fe:3e:fb:67:2a:18:70:fa:c6:e1:8e: 45:d9:6d:15:d4:33:89:4d:7a:7d:1e:ae:5e:5e:17: c5:c3:36:07:24:e1:c6:2f:b8:ea:32:d4:3e:46:4d: d2:70:23:04:6d:50:17:b8:8d:dc:c5:e6:b0:76:61: 44:9b:dd:64:19:77:01:43:fa:2e:5f:69:70:82:c1: 14:03:f2:3b:f7:0e:a6:85:63:7c:1d:e7:e9:1a:3a: 19:1c:5f:77:9a:2a:1b:5c:c5:8f:6d:21:95:1a:96: d2:95:aa:a8:08:63:04:2a:31:dd:aa:0d:8b:98:15: 51:c0:29:c8:55:d4:39:54:36:95:37:5e:4f:c4:08: 64:97:19:cb:b2:81:cb:07:85:42:ed:d3:72:05:fb: 96:c4:66:1c:72:76:13:24:2b:c2:19:bd:64:f5:7e: 16:a4:22:81:9e:9a:10:2f:80:41:6b:23:20:fa:78: 4c:37:76:ac:73:1a:7f:71:5a:82:68:bd:1d:79:ce: 3e:bb:8e:3c:55:a8:21:ec:76:ee:dc:33:f8:ec:79: a0:a0:63:24:0b:88:3d:64:bf:be:93:31:1e:ca:9a: 34:a5:83:cf:09:ba:b9:f8:b4:cf:ec:ed:44:58:a9: ca:83:e2:f8:92:37:c8:2a:e4:fc:20:ef:db:90:29: 88:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A6:7A:92:56:7F:D0:D8:CB:81:7B:EA:E1:8A:48:92:10:7C:A6:CC X509v3 Authority Key Identifier: keyid:F1:F1:7E:BC:C2:A5:25:AF:CF:C9:22:18:15:9C:AF:52:88:29:78:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fF-vMKlJa_PySIYFZyvUogpeNI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/t6Z6klZ_0NjLgXvq4YpIkhB8psw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.217.168.0/21 Signature Algorithm: sha256WithRSAEncryption 79:c6:a7:ed:06:ab:76:d4:33:3a:07:fd:30:e3:13:2b:04:37: 70:d2:be:f3:77:b2:10:75:62:0b:6e:3f:af:73:a0:a5:bb:e2: 12:f9:5a:57:63:ca:18:4c:c8:63:03:6b:cb:3b:f2:71:1f:96: 27:4e:4a:8d:72:46:48:49:9d:6f:01:e6:02:90:ea:3c:de:a6: 48:ab:cf:50:fe:17:04:57:e8:d9:d9:ef:43:5f:a4:10:d6:ec: 19:11:96:99:24:ed:96:f1:ea:f0:d9:a8:be:49:b2:e9:f7:56: 2f:7a:3d:21:aa:3e:0a:f5:cd:60:78:dc:e0:4b:ce:92:9d:3d: 9f:83:3b:46:a1:cd:35:34:96:2a:8b:b0:d9:4b:41:80:5a:b3: c9:06:a8:e2:4f:ab:3f:91:10:28:ae:e0:5c:b0:cd:57:e5:1d: d4:e3:2f:36:4a:8c:ad:36:c5:1b:98:9e:0a:09:89:34:00:cb: d6:8c:e1:60:6a:e2:89:7c:c6:ed:ab:45:3e:85:83:2f:d7:b0: 3c:b7:8d:43:d9:4d:87:51:da:3e:d9:2b:75:2e:a0:5d:6e:4c: 78:ed:31:de:9d:81:f7:4a:62:b7:6d:2c:05:4c:dc:e7:74:1b: af:a3:34:53:d5:e6:45:cf:9d:70:62:02:80:12:b2:00:ad:25: 7c:2a:9a:da -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ytupiIAQYjhg3gYDVHThMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZjE3ZWJjYzJhNTI1YWZjZmM5MjIxODE1OWNhZjUyODgy OTc4ZDIwHhcNMjYwMTAyMDgyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2E2N2E5MjU2N2ZkMGQ4Y2I4MTdiZWFlMThhNDg5MjEwN2NhNmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOPN/j77ZyoYcPrG4Y5F2W0V1DOJ TXp9Hq5eXhfFwzYHJOHGL7jqMtQ+Rk3ScCMEbVAXuI3cxeawdmFEm91kGXcBQ/ou X2lwgsEUA/I79w6mhWN8HefpGjoZHF93miobXMWPbSGVGpbSlaqoCGMEKjHdqg2L mBVRwCnIVdQ5VDaVN15PxAhklxnLsoHLB4VC7dNyBfuWxGYccnYTJCvCGb1k9X4W pCKBnpoQL4BBayMg+nhMN3ascxp/cVqCaL0dec4+u448Vagh7Hbu3DP47HmgoGMk C4g9ZL++kzEeypo0pYPPCbq5+LTP7O1EWKnKg+L4kjfIKuT8IO/bkCmIpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLemepJWf9DYy4F76uGKSJIQfKbMMB8GA1UdIwQY MBaAFPHxfrzCpSWvz8kiGBWcr1KIKXjSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGZGLXZNS2xKYV9QeVNJWUZaeXZVb2dwZU5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9hNzJkYTEtYWY4MS00Nzg3LWEwODUt ZmYzNGE4YWU5MDFhLzEvdDZaNmtsWl8wTmpMZ1h2cTRZcElraEI4cHN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9hNzJkYTEtYWY4MS00Nzg3LWEwODUtZmYzNGE4YWU5MDFh LzEvOGZGLXZNS2xKYV9QeVNJWUZaeXZVb2dwZU5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDstmoMA0G CSqGSIb3DQEBCwUAA4IBAQB5xqftBqt21DM6B/0w4xMrBDdw0r7zd7IQdWILbj+v c6Clu+IS+VpXY8oYTMhjA2vLO/JxH5YnTkqNckZISZ1vAeYCkOo83qZIq89Q/hcE V+jZ2e9DX6QQ1uwZEZaZJO2W8erw2ai+SbLp91Yvej0hqj4K9c1geNzgS86SnT2f gztGoc01NJYqi7DZS0GAWrPJBqjiT6s/kRAoruBcsM1X5R3U4y82SoytNsUbmJ4K CYk0AMvWjOFgauKJfMbtq0U+hYMv17A8t41D2U2HUdo+2St1LqBdbkx47THenYH3 SmK3bSwFTNzndBuvozRT1eZFz51wYgKAErIArSV8Kpra -----END CERTIFICATE-----Generated at Tue Feb 10 04:16:54 2026 by rpki-client