This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/ca1cf4-acac-4555-bc40-e4322c9dde9c/1/6_7eZf24isCNW4I6xx_t7mR7qHQ.roa File: 6_7eZf24isCNW4I6xx_t7mR7qHQ.roa (raw, json) Hash identifier: K+RrpBJZJgRykfH3os4A5wEvK1ISeCA14xU5M4pO5jk= Subject key identifier: EB:FE:DE:65:FD:B8:8A:C0:8D:5B:82:3A:C7:1F:ED:EE:64:7B:A8:74 Certificate issuer: /CN=e796ffbbdf44efc1e8e10200d49da8eed0a3b71e Certificate serial: 019B7C7F6AE32EA6389468284D0D0870A5A4 Authority key identifier: E7:96:FF:BB:DF:44:EF:C1:E8:E1:02:00:D4:9D:A8:EE:D0:A3:B7:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/55b_u99E78Ho4QIA1J2o7tCjtx4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/ca1cf4-acac-4555-bc40-e4322c9dde9c/1/6_7eZf24isCNW4I6xx_t7mR7qHQ.roa Signing time: Fri 02 Jan 2026 02:18:03 +0000 ROA not before: Fri 02 Jan 2026 02:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8560 IP address blocks: 77.68.0.0/17 maxlen: 24 79.99.40.0/21 maxlen: 24 88.208.192.0/18 maxlen: 24 93.90.192.0/20 maxlen: 24 109.228.0.0/18 maxlen: 24 185.132.36.0/22 maxlen: 24 185.132.40.0/22 maxlen: 24 213.171.192.0/19 maxlen: 24 217.174.240.0/20 maxlen: 24 2a00:da00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/ca1cf4-acac-4555-bc40-e4322c9dde9c/1/55b_u99E78Ho4QIA1J2o7tCjtx4.crl rsync://rpki.ripe.net/repository/DEFAULT/20/ca1cf4-acac-4555-bc40-e4322c9dde9c/1/55b_u99E78Ho4QIA1J2o7tCjtx4.mft rsync://rpki.ripe.net/repository/DEFAULT/55b_u99E78Ho4QIA1J2o7tCjtx4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:6a:e3:2e:a6:38:94:68:28:4d:0d:08:70:a5:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e796ffbbdf44efc1e8e10200d49da8eed0a3b71e Validity Not Before: Jan 2 02:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ebfede65fdb88ac08d5b823ac71fedee647ba874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7c:d7:d1:23:78:d9:ed:c9:85:a9:bb:7f:e9: fd:95:3e:ca:be:24:66:9e:39:d7:21:bc:91:cc:81: cf:4d:21:17:7c:4c:dc:f6:95:49:54:f8:ad:32:dc: 1b:c2:70:a0:b4:14:45:85:fc:54:ba:ae:92:66:3d: 5b:5e:e6:18:7d:fa:da:73:c9:3a:e8:c6:41:70:ac: 8a:e5:e0:0e:ec:d4:8e:83:32:3c:29:1e:dc:b7:c3: 25:4c:99:7d:cf:97:4f:fb:a9:d6:78:a8:c3:33:d1: 22:9e:8d:13:53:40:a8:cd:28:c2:8a:18:7a:fb:a5: 5e:19:0b:4f:0c:e0:dd:43:4a:6f:e6:53:bc:63:9a: 89:e4:9e:53:45:42:56:45:c6:4e:bd:18:22:e9:2a: d3:a9:8f:5f:61:e8:6b:b0:1c:bc:6a:12:cf:61:33: ae:e3:d9:52:18:60:15:8e:4f:38:be:7c:43:4c:4c: a5:a1:3f:10:c4:1d:61:d4:7e:67:20:1e:db:c4:0a: 02:ab:80:84:c4:bc:e2:da:d3:7b:0d:d7:08:f2:fb: d7:ae:19:1c:62:ca:70:ce:8d:e9:56:f9:1e:52:46: 48:2e:99:50:a3:51:86:75:65:73:d6:02:8f:8a:d4: 14:4d:1f:bf:a0:00:7e:ec:f6:31:7b:5a:13:65:a1: a1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:FE:DE:65:FD:B8:8A:C0:8D:5B:82:3A:C7:1F:ED:EE:64:7B:A8:74 X509v3 Authority Key Identifier: keyid:E7:96:FF:BB:DF:44:EF:C1:E8:E1:02:00:D4:9D:A8:EE:D0:A3:B7:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55b_u99E78Ho4QIA1J2o7tCjtx4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ca1cf4-acac-4555-bc40-e4322c9dde9c/1/6_7eZf24isCNW4I6xx_t7mR7qHQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ca1cf4-acac-4555-bc40-e4322c9dde9c/1/55b_u99E78Ho4QIA1J2o7tCjtx4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.68.0.0/17 79.99.40.0/21 88.208.192.0/18 93.90.192.0/20 109.228.0.0/18 185.132.36.0-185.132.43.255 213.171.192.0/19 217.174.240.0/20 IPv6: 2a00:da00::/32 Signature Algorithm: sha256WithRSAEncryption 4c:78:6d:8e:b5:7b:e1:81:d6:e5:f1:24:22:11:0d:cc:b8:48: 72:4a:d9:52:1f:79:2c:b9:b1:b2:f8:ed:e5:b1:9c:ef:1e:16: 0c:0f:f8:5b:1d:5f:a5:7e:9c:5c:fe:eb:bb:e2:d6:3e:81:43: 50:e1:2b:d8:8a:0d:5d:61:35:9f:b8:f1:6c:a0:4a:8e:88:1d: c0:41:6c:45:4c:f6:e6:c9:21:23:67:d4:9f:36:e3:40:44:e3: 9f:8d:c9:dd:cd:48:ab:ba:70:f0:a9:e2:d7:b3:16:f1:7e:77: 5c:61:70:07:eb:99:8a:4d:55:eb:d3:75:77:3e:01:1b:8a:1e: 5b:6f:16:0f:6a:ac:3b:87:d3:1f:75:4a:71:70:41:19:3c:07: fe:89:a8:fa:91:77:23:75:2b:fb:a5:d0:b1:bd:ca:2c:e3:90: 1d:e2:97:26:8c:57:c1:65:b1:7e:b8:30:93:05:a0:12:c7:1e: e2:75:34:5a:5f:11:97:19:0f:a2:03:6b:68:eb:64:39:8f:c7: a5:06:ca:6c:f5:2c:c4:43:1c:d6:03:13:5a:2f:31:b0:d2:aa: 40:85:89:ff:5e:50:fa:e7:49:08:e8:63:22:62:81:69:aa:ec: 80:63:ee:7c:b8:57:6f:50:32:0f:d8:5b:eb:63:5b:f1:78:b0: 44:b1:2d:a5 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgISAZt8f2rjLqY4lGgoTQ0IcKWkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3OTZmZmJiZGY0NGVmYzFlOGUxMDIwMGQ0OWRhOGVlZDBh M2I3MWUwHhcNMjYwMTAyMDIxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYmZlZGU2NWZkYjg4YWMwOGQ1YjgyM2FjNzFmZWRlZTY0N2JhODc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XzX0SN42e3Jham7f+n9lT7KviRm njnXIbyRzIHPTSEXfEzc9pVJVPitMtwbwnCgtBRFhfxUuq6SZj1bXuYYffrac8k6 6MZBcKyK5eAO7NSOgzI8KR7ct8MlTJl9z5dP+6nWeKjDM9Eino0TU0CozSjCihh6 +6VeGQtPDODdQ0pv5lO8Y5qJ5J5TRUJWRcZOvRgi6SrTqY9fYehrsBy8ahLPYTOu 49lSGGAVjk84vnxDTEyloT8QxB1h1H5nIB7bxAoCq4CExLzi2tN7DdcI8vvXrhkc Yspwzo3pVvkeUkZILplQo1GGdWVz1gKPitQUTR+/oAB+7PYxe1oTZaGhcQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOv+3mX9uIrAjVuCOscf7e5ke6h0MB8GA1UdIwQY MBaAFOeW/7vfRO/B6OECANSdqO7Qo7ceMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTViX3U5OUU3OEhvNFFJQTFKMm83dENqdHg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9jYTFjZjQtYWNhYy00NTU1LWJjNDAt ZTQzMjJjOWRkZTljLzEvNl83ZVpmMjRpc0NOVzRJNnh4X3Q3bVI3cUhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9jYTFjZjQtYWNhYy00NTU1LWJjNDAtZTQzMjJjOWRkZTlj LzEvNTViX3U5OUU3OEhvNFFJQTFKMm83dENqdHg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGAGCCsGAQUFBwEHAQH/BFEwTzA+BAIAATA4AwQHTUQAAwQD T2MoAwQGWNDAAwQEXVrAAwQGbeQAMAwDBAK5hCQDBAK5hCgDBAXVq8ADBATZrvAw DQQCAAIwBwMFACoA2gAwDQYJKoZIhvcNAQELBQADggEBAEx4bY61e+GB1uXxJCIR Dcy4SHJK2VIfeSy5sbL47eWxnO8eFgwP+FsdX6V+nFz+67vi1j6BQ1DhK9iKDV1h NZ+48WygSo6IHcBBbEVM9ubJISNn1J8240BE45+Nyd3NSKu6cPCp4tezFvF+d1xh cAfrmYpNVevTdXc+ARuKHltvFg9qrDuH0x91SnFwQRk8B/6JqPqRdyN1K/ul0LG9 yizjkB3ilyaMV8FlsX64MJMFoBLHHuJ1NFpfEZcZD6IDa2jrZDmPx6UGymz1LMRD HNYDE1ovMbDSqkCFif9eUPrnSQjoYyJigWmq7IBj7ny4V29QMg/YW+tjW/F4sESx LaU= -----END CERTIFICATE-----Generated at Tue Jan 27 16:03:40 2026 by rpki-client