This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/O6eW5NgA4SYtR0QdMpos9kGVbx8.roa File: O6eW5NgA4SYtR0QdMpos9kGVbx8.roa (raw, json) Hash identifier: vNWr6WjAQo4/b29D3hI5zGTafpoZZFqPo9hkvS1ZF+M= Subject key identifier: 3B:A7:96:E4:D8:00:E1:26:2D:47:44:1D:32:9A:2C:F6:41:95:6F:1F Certificate issuer: /CN=d2075c84f529c87dd85fd4afea4e0934366af54a Certificate serial: 019B7D5B52C16661D937A29E42A38C28D56F Authority key identifier: D2:07:5C:84:F5:29:C8:7D:D8:5F:D4:AF:EA:4E:09:34:36:6A:F5:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/O6eW5NgA4SYtR0QdMpos9kGVbx8.roa Signing time: Fri 02 Jan 2026 06:18:15 +0000 ROA not before: Fri 02 Jan 2026 06:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20751 IP address blocks: 78.40.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:52:c1:66:61:d9:37:a2:9e:42:a3:8c:28:d5:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2075c84f529c87dd85fd4afea4e0934366af54a Validity Not Before: Jan 2 06:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ba796e4d800e1262d47441d329a2cf641956f1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:80:2b:a8:9e:d1:6e:9a:fe:b1:c1:68:63:89: 6c:21:27:0c:cc:b5:b7:f3:50:65:fa:a6:0d:23:7e: 98:10:04:33:e3:78:33:46:51:88:07:35:00:1b:21: 07:46:b0:08:f0:e6:6d:1d:fd:cb:6c:75:0b:76:51: 24:63:a6:7e:c4:8e:87:6f:c5:4a:cf:e3:98:ce:0d: f2:01:6b:f8:7e:ee:d4:d8:28:f5:72:0f:9a:e6:f6: 63:61:73:9e:df:1c:7f:5f:e6:fb:7b:56:75:f9:06: 16:f9:d1:84:a4:b1:5b:a4:bb:10:b9:7a:bb:4d:2a: 18:cc:f5:14:5e:02:02:9c:b8:64:4f:01:82:e7:db: 2b:ba:f0:83:9d:33:2a:40:df:31:91:ce:c8:fa:7c: 50:07:76:6a:84:be:45:95:01:03:e8:9b:f9:e1:a4: da:cb:2a:d9:14:ae:36:6d:04:e6:09:1b:0e:8f:2b: 19:d1:3f:68:21:74:b5:80:1b:e7:0a:38:13:34:ac: 7b:a2:a4:b4:a3:f9:b6:b8:40:35:cb:b1:32:29:0c: 19:36:b1:bb:19:f0:3b:ab:90:96:37:80:f5:ab:cb: 75:3b:4a:0e:74:de:56:08:94:a3:74:a2:31:0d:d5: 48:42:2a:aa:8d:f9:4d:87:08:bc:c6:c2:b1:07:1a: f0:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:A7:96:E4:D8:00:E1:26:2D:47:44:1D:32:9A:2C:F6:41:95:6F:1F X509v3 Authority Key Identifier: keyid:D2:07:5C:84:F5:29:C8:7D:D8:5F:D4:AF:EA:4E:09:34:36:6A:F5:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/O6eW5NgA4SYtR0QdMpos9kGVbx8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.40.213.0/24 Signature Algorithm: sha256WithRSAEncryption 31:a0:ec:43:b6:af:7a:0f:c0:ad:7a:81:42:c5:5a:ca:0e:48: 42:de:e4:2f:15:2c:b8:ca:bd:05:34:f9:6e:ca:1a:01:74:46: e7:42:34:92:d2:52:39:68:73:54:8c:69:5e:34:1f:cc:96:14: d2:e2:ed:1c:bf:26:21:4f:65:fb:10:fd:55:6d:9c:6a:8e:90: b8:5e:b0:5e:e2:1f:c9:67:0e:9c:9e:08:45:a2:b1:e8:66:17: 33:41:20:48:4b:74:b9:92:a5:4f:40:86:bb:5d:84:5e:61:ac: b7:93:a6:6c:d2:6d:81:74:e9:2b:71:e5:ef:52:b4:49:87:66: 45:ee:ae:bc:97:5c:14:bf:b6:fa:42:81:84:9f:02:91:99:91: 40:09:91:f8:1f:90:d1:bd:9b:4a:48:ff:57:ec:67:3d:b5:b2: 35:ff:54:33:00:cc:23:0c:61:f5:05:2c:70:59:ce:62:d6:e3: 56:bd:9f:9a:37:37:ad:73:b0:66:d4:9d:e2:62:ca:21:24:46: 82:cf:75:3c:95:24:17:e6:1a:52:67:00:cb:2d:7a:93:96:c0: 16:25:cb:1d:5b:2e:26:bb:47:67:58:54:b6:83:54:1d:70:3f: 11:08:1f:6c:8d:38:0f:b5:74:86:82:ac:ac:3a:42:62:ca:05: fb:6f:67:7c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W1LBZmHZN6KeQqOMKNVvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMDc1Yzg0ZjUyOWM4N2RkODVmZDRhZmVhNGUwOTM0MzY2 YWY1NGEwHhcNMjYwMTAyMDYxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmE3OTZlNGQ4MDBlMTI2MmQ0NzQ0MWQzMjlhMmNmNjQxOTU2ZjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYArqJ7Rbpr+scFoY4lsIScMzLW3 81Bl+qYNI36YEAQz43gzRlGIBzUAGyEHRrAI8OZtHf3LbHULdlEkY6Z+xI6Hb8VK z+OYzg3yAWv4fu7U2Cj1cg+a5vZjYXOe3xx/X+b7e1Z1+QYW+dGEpLFbpLsQuXq7 TSoYzPUUXgICnLhkTwGC59sruvCDnTMqQN8xkc7I+nxQB3ZqhL5FlQED6Jv54aTa yyrZFK42bQTmCRsOjysZ0T9oIXS1gBvnCjgTNKx7oqS0o/m2uEA1y7EyKQwZNrG7 GfA7q5CWN4D1q8t1O0oOdN5WCJSjdKIxDdVIQiqqjflNhwi8xsKxBxrwjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDunluTYAOEmLUdEHTKaLPZBlW8fMB8GA1UdIwQY MBaAFNIHXIT1Kch92F/Ur+pOCTQ2avVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGdkY2hQVXB5SDNZWDlTdjZrNEpORFpxOVVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9lZWZhNzItOGY0Yy00ODZjLWIwMTkt YjRlYWEwNTYxZmM3LzEvTzZlVzVOZ0E0U1l0UjBRZE1wb3M5a0dWYng4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9lZWZhNzItOGY0Yy00ODZjLWIwMTktYjRlYWEwNTYxZmM3 LzEvMGdkY2hQVXB5SDNZWDlTdjZrNEpORFpxOVVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATijVMA0G CSqGSIb3DQEBCwUAA4IBAQAxoOxDtq96D8CteoFCxVrKDkhC3uQvFSy4yr0FNPlu yhoBdEbnQjSS0lI5aHNUjGleNB/MlhTS4u0cvyYhT2X7EP1VbZxqjpC4XrBe4h/J Zw6cnghForHoZhczQSBIS3S5kqVPQIa7XYReYay3k6Zs0m2BdOkrceXvUrRJh2ZF 7q68l1wUv7b6QoGEnwKRmZFACZH4H5DRvZtKSP9X7Gc9tbI1/1QzAMwjDGH1BSxw Wc5i1uNWvZ+aNzetc7Bm1J3iYsohJEaCz3U8lSQX5hpSZwDLLXqTlsAWJcsdWy4m u0dnWFS2g1QdcD8RCB9sjTgPtXSGgqysOkJiygX7b2d8 -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:40 2026 by rpki-client