This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/b6Ec59zC9lFvp8qO1E_qy7bLbBY.roa File: b6Ec59zC9lFvp8qO1E_qy7bLbBY.roa (raw, json) Hash identifier: SQckYCa4+okO5I+DMGHM5Y4dE0WQTR0MxL1ypMQXcJc= Subject key identifier: 6F:A1:1C:E7:DC:C2:F6:51:6F:A7:CA:8E:D4:4F:EA:CB:B6:CB:6C:16 Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Certificate serial: 019B7F13722285AC5EAD38E7288A327D7D31 Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/b6Ec59zC9lFvp8qO1E_qy7bLbBY.roa Signing time: Fri 02 Jan 2026 14:18:59 +0000 ROA not before: Fri 02 Jan 2026 14:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41998 IP address blocks: 77.90.154.0/24 maxlen: 24 185.230.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:72:22:85:ac:5e:ad:38:e7:28:8a:32:7d:7d:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Validity Not Before: Jan 2 14:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6fa11ce7dcc2f6516fa7ca8ed44feacbb6cb6c16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0c:f1:f4:f3:92:ae:97:4b:29:f9:00:81:fe: a7:4d:16:40:09:56:48:86:cf:72:49:1e:c2:93:0f: a4:01:d8:ca:4a:ad:6a:7a:7b:e7:7d:9c:fd:f8:ee: c4:97:a9:3a:79:b9:5e:0a:82:68:c2:ae:c3:d1:1b: 96:18:bb:77:19:dd:89:74:04:c6:54:b2:af:0b:7a: 2d:a6:44:d5:b9:fb:74:09:ef:87:3b:77:8f:aa:28: 8a:5c:19:b7:13:8d:1d:8f:c0:86:86:92:f3:77:44: 4e:6b:d2:cd:28:81:01:f4:88:c2:8b:dc:86:63:01: 7c:aa:14:19:e2:5d:b1:d8:c5:d2:e7:64:ef:fb:7f: d7:b1:25:bf:5a:72:46:13:cf:b9:f5:37:2d:83:fe: bc:83:83:15:be:b3:a2:15:a2:83:bf:7a:04:ff:5c: f3:36:46:4a:50:f0:92:c0:7b:44:8d:d5:e1:3c:ba: 58:1b:14:3a:48:3b:78:0b:62:71:39:9f:e3:6a:dd: 9e:85:c1:12:71:b3:5e:8c:c3:65:23:09:a5:34:1f: 61:5a:bf:b8:db:27:4c:67:0d:99:0b:e1:79:b9:ee: a7:a0:78:78:b9:9a:47:fe:40:17:82:71:2b:4a:a8: 08:38:c2:6c:88:0b:cd:52:53:34:f3:f8:ac:b0:e0: 55:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:A1:1C:E7:DC:C2:F6:51:6F:A7:CA:8E:D4:4F:EA:CB:B6:CB:6C:16 X509v3 Authority Key Identifier: keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/b6Ec59zC9lFvp8qO1E_qy7bLbBY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.90.154.0/24 185.230.14.0/24 Signature Algorithm: sha256WithRSAEncryption b0:17:4c:20:13:52:f0:ab:af:cd:fb:2f:31:87:98:80:af:c5: 43:43:cb:94:66:89:cc:aa:09:29:03:d7:66:2f:16:32:81:61: 28:00:55:60:01:de:ed:09:e4:1b:f1:5b:b0:9e:47:d0:d5:1d: b6:6f:ab:b3:15:34:75:e9:2a:3c:87:71:73:37:d0:67:9d:da: b3:07:f0:5f:a3:89:58:1d:fd:c8:e2:cb:ba:5e:1b:a6:92:fe: 34:8b:d9:95:84:81:32:81:b5:98:57:42:fa:c9:4b:9b:19:cf: d0:e4:54:c4:50:9f:fa:31:96:e6:74:d1:1e:3d:1e:f0:55:ce: 16:2e:70:f0:8f:97:78:a2:f8:24:c0:dc:3f:f5:8e:85:81:d6: 6a:41:3c:6e:15:93:40:95:95:ab:48:c5:7e:8e:88:37:9a:0f: f3:f6:66:5a:ba:20:5a:24:e5:2d:09:3b:6c:6f:52:12:bf:a3: be:46:09:29:ff:0c:44:c4:da:bd:c5:85:7e:0d:e8:73:60:de: c1:70:88:3b:8f:ec:b9:22:56:7c:c4:cf:cd:8e:2c:74:b6:7e: ed:bc:46:d6:94:9e:ed:01:13:52:c3:64:c4:d5:13:84:c2:d8: 5a:4d:eb:79:b1:61:ac:4b:b8:40:bc:51:5e:4a:7d:f4:77:57: cb:f6:a1:f3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/E3IihaxerTjnKIoyfX0xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz Yzg0NDkwHhcNMjYwMTAyMTQxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZmExMWNlN2RjYzJmNjUxNmZhN2NhOGVkNDRmZWFjYmI2Y2I2YzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgzx9POSrpdLKfkAgf6nTRZACVZI hs9ySR7Ckw+kAdjKSq1qenvnfZz9+O7El6k6ebleCoJowq7D0RuWGLt3Gd2JdATG VLKvC3otpkTVuft0Ce+HO3ePqiiKXBm3E40dj8CGhpLzd0ROa9LNKIEB9IjCi9yG YwF8qhQZ4l2x2MXS52Tv+3/XsSW/WnJGE8+59Tctg/68g4MVvrOiFaKDv3oE/1zz NkZKUPCSwHtEjdXhPLpYGxQ6SDt4C2JxOZ/jat2ehcEScbNejMNlIwmlNB9hWr+4 2ydMZw2ZC+F5ue6noHh4uZpH/kAXgnErSqgIOMJsiAvNUlM08/issOBVuQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFG+hHOfcwvZRb6fKjtRP6su2y2wWMB8GA1UdIwQY MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt NmNiZmYzYzRkYTAxLzEvYjZFYzU5ekM5bEZ2cDhxTzFFX3F5N2JMYkJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATVqaAwQA ueYOMA0GCSqGSIb3DQEBCwUAA4IBAQCwF0wgE1Lwq6/N+y8xh5iAr8VDQ8uUZonM qgkpA9dmLxYygWEoAFVgAd7tCeQb8VuwnkfQ1R22b6uzFTR16So8h3FzN9Bnndqz B/Bfo4lYHf3I4su6Xhumkv40i9mVhIEygbWYV0L6yUubGc/Q5FTEUJ/6MZbmdNEe PR7wVc4WLnDwj5d4ovgkwNw/9Y6FgdZqQTxuFZNAlZWrSMV+jog3mg/z9mZauiBa JOUtCTtsb1ISv6O+Rgkp/wxExNq9xYV+DehzYN7BcIg7j+y5IlZ8xM/Njix0tn7t vEbWlJ7tARNSw2TE1ROEwthaTet5sWGsS7hAvFFeSn30d1fL9qHz -----END CERTIFICATE-----Generated at Wed Jan 21 07:48:05 2026 by rpki-client