This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/6oKUApxHK-A6wFLcAOVC_Vncs0o.roa File: 6oKUApxHK-A6wFLcAOVC_Vncs0o.roa (raw, json) Hash identifier: Y4ry5AUNDW3ohZpeX6miLAL6noppLU6MsLDgbmpThRQ= Subject key identifier: EA:82:94:02:9C:47:2B:E0:3A:C0:52:DC:00:E5:42:FD:59:DC:B3:4A Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019C1E07733ACBBBD53D391120AC58A9E368 Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/6oKUApxHK-A6wFLcAOVC_Vncs0o.roa Signing time: Mon 02 Feb 2026 11:05:30 +0000 ROA not before: Mon 02 Feb 2026 11:05:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211261 IP address blocks: 78.136.101.0/24 maxlen: 24 178.156.93.0/24 maxlen: 24 178.156.112.0/24 maxlen: 24 178.156.113.0/24 maxlen: 24 185.25.196.0/24 maxlen: 24 185.25.197.0/24 maxlen: 24 185.25.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1e:07:73:3a:cb:bb:d5:3d:39:11:20:ac:58:a9:e3:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Feb 2 11:05:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea8294029c472be03ac052dc00e542fd59dcb34a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:0c:df:8b:07:96:b7:fa:8e:fb:ba:98:53:83: 60:08:fb:18:60:ea:b8:22:00:68:cb:2a:01:da:27: 4b:90:f8:5b:79:28:1c:df:e8:8f:e6:5b:0f:87:2e: 43:32:51:9a:bd:32:8d:2f:0f:e9:59:b3:c8:8a:b7: 43:b2:cb:e6:c7:3b:be:34:74:67:77:0d:21:fb:06: b0:56:b3:75:4c:1d:1c:6c:fb:f8:da:f3:fb:93:ba: 81:65:a3:64:e4:2c:30:a2:de:47:6d:5e:df:ab:08: 22:3b:0d:f5:de:9c:fd:57:d4:6f:36:b8:6b:d3:f6: ed:18:68:92:ae:33:7d:a7:95:15:c4:20:90:32:36: db:37:34:2b:d0:86:41:31:32:c9:ca:60:36:9b:fa: fd:d1:e4:94:8f:82:85:25:06:97:9f:27:f0:52:e6: fd:48:f7:8e:d4:8c:cb:14:71:48:a9:26:42:e0:88: 7f:ab:e6:39:1b:ef:f4:37:a6:5a:92:aa:1c:62:2b: 1b:8c:93:94:97:bf:08:3a:ae:d1:64:19:c9:89:cb: 80:41:63:69:07:a3:ab:f7:d8:d1:50:78:2d:e0:49: 6d:23:c4:7b:a6:5a:5c:c6:03:6b:9e:c1:fd:c2:b5: 15:34:d7:0a:57:09:8f:d7:08:71:c3:ce:e4:91:95: 54:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:82:94:02:9C:47:2B:E0:3A:C0:52:DC:00:E5:42:FD:59:DC:B3:4A X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/6oKUApxHK-A6wFLcAOVC_Vncs0o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.136.101.0/24 178.156.93.0/24 178.156.112.0/23 185.25.196.0-185.25.198.255 Signature Algorithm: sha256WithRSAEncryption 4f:29:ae:18:40:30:44:2b:64:1e:ab:0c:16:04:28:b8:f3:58: f2:4a:da:3a:ee:6a:57:48:60:2b:da:88:b3:c9:e7:9d:40:02: 91:a5:07:2d:a4:75:b3:52:0e:1c:2a:1d:9c:fc:8b:13:b0:69: 21:90:05:cb:7f:6c:58:b0:68:c1:8a:59:67:23:91:72:6d:7a: a2:bb:2b:a5:07:61:42:79:c4:77:74:9d:d1:35:c9:35:f5:9d: 77:33:b5:5e:d5:80:ef:f4:01:6b:50:b3:d5:50:32:3e:03:c2: 0e:30:41:dd:50:12:24:c5:b0:0e:1f:22:9f:e6:25:ee:ab:c9: 85:50:54:c3:8c:51:64:54:85:98:3a:0b:c4:02:0b:9a:80:73: 16:1e:8b:0b:28:2b:bc:34:dd:c0:e4:40:85:d4:f1:89:84:82: 70:df:bb:6a:54:cd:8c:29:b0:49:47:ea:dc:98:f1:6d:c4:66: 58:cd:b7:8f:94:7d:09:60:36:67:84:81:39:9c:e2:70:ce:24: bf:5a:97:f2:f1:ef:d5:c0:4d:1a:3e:20:b2:08:f7:ed:b8:5d: 4a:84:4f:a4:9f:34:ca:ef:42:16:19:f5:9a:6a:bd:c6:de:14: 90:f6:a4:1b:5f:a0:ad:b5:e3:a7:a9:d5:90:1b:57:31:5e:0e: fd:09:c1:a6 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZweB3M6y7vVPTkRIKxYqeNoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjYwMjAyMTEwNTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTgyOTQwMjljNDcyYmUwM2FjMDUyZGMwMGU1NDJmZDU5ZGNiMzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgzfiweWt/qO+7qYU4NgCPsYYOq4 IgBoyyoB2idLkPhbeSgc3+iP5lsPhy5DMlGavTKNLw/pWbPIirdDssvmxzu+NHRn dw0h+wawVrN1TB0cbPv42vP7k7qBZaNk5Cwwot5HbV7fqwgiOw313pz9V9RvNrhr 0/btGGiSrjN9p5UVxCCQMjbbNzQr0IZBMTLJymA2m/r90eSUj4KFJQaXnyfwUub9 SPeO1IzLFHFIqSZC4Ih/q+Y5G+/0N6ZakqocYisbjJOUl78IOq7RZBnJicuAQWNp B6Or99jRUHgt4EltI8R7plpcxgNrnsH9wrUVNNcKVwmP1whxw87kkZVUoQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFOqClAKcRyvgOsBS3ADlQv1Z3LNKMB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvNm9LVUFweEhLLUE2d0ZMY0FPVkNfVm5jczBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQATohlAwQA spxdAwQBspxwMAwDBAK5GcQDBAC5GcYwDQYJKoZIhvcNAQELBQADggEBAE8prhhA MEQrZB6rDBYEKLjzWPJK2jrualdIYCvaiLPJ551AApGlBy2kdbNSDhwqHZz8ixOw aSGQBct/bFiwaMGKWWcjkXJteqK7K6UHYUJ5xHd0ndE1yTX1nXcztV7VgO/0AWtQ s9VQMj4Dwg4wQd1QEiTFsA4fIp/mJe6ryYVQVMOMUWRUhZg6C8QCC5qAcxYeiwso K7w03cDkQIXU8YmEgnDfu2pUzYwpsElH6tyY8W3EZljNt4+UfQlgNmeEgTmc4nDO JL9al/Lx79XATRo+ILII9+24XUqET6SfNMrvQhYZ9ZpqvcbeFJD2pBtfoK2146ep 1ZAbVzFeDv0JwaY= -----END CERTIFICATE-----Generated at Tue Feb 10 01:28:25 2026 by rpki-client