This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/a6ojSWctijnSg8Ci1EEFReUXCiE.roa File: a6ojSWctijnSg8Ci1EEFReUXCiE.roa (raw, json) Hash identifier: dbzoLVYRJXZ/LADro8oV1Pfy95eExKX/RbkyCegFXLc= Subject key identifier: 6B:AA:23:49:67:2D:8A:39:D2:83:C0:A2:D4:41:05:45:E5:17:0A:21 Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346 Certificate serial: 019B7E38A45E43270E46E56B099B47EDD133 Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/a6ojSWctijnSg8Ci1EEFReUXCiE.roa Signing time: Fri 02 Jan 2026 10:19:59 +0000 ROA not before: Fri 02 Jan 2026 10:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6807 IP address blocks: 195.178.155.0/24 maxlen: 24 2a01:5c40:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:a4:5e:43:27:0e:46:e5:6b:09:9b:47:ed:d1:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19426325acb8ce609a686fa655b058968809b346 Validity Not Before: Jan 2 10:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6baa2349672d8a39d283c0a2d4410545e5170a21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:04:44:fb:7d:ac:93:35:0c:92:0a:c2:6e:b6: a4:44:78:f8:ea:f1:1c:8a:76:36:4e:ad:3e:d8:40: 7c:33:63:4a:3d:5d:b1:f3:f4:d3:09:5a:9b:8c:e8: 17:a1:8f:22:40:f3:1a:ce:5e:f1:3b:d6:cf:95:79: e4:14:ae:07:ba:ba:75:55:f0:db:70:24:ba:29:59: 9f:8b:77:80:89:98:d4:a3:21:be:90:63:43:6c:81: 42:f3:e6:12:ae:8e:4f:13:a2:b8:70:97:65:0d:9f: 83:ee:78:2a:91:0d:c0:2f:e0:e9:dc:0f:38:13:d7: 38:0c:ed:1f:30:ce:c3:65:6b:aa:02:00:79:03:df: 88:c7:ee:7e:a5:fd:d2:ee:16:e5:69:94:ba:fd:1a: 1d:fd:6a:e4:b7:65:3c:86:4c:eb:d6:4d:ff:5c:ec: 4c:ea:cf:c2:eb:b6:06:fb:35:78:a9:cc:51:81:0b: 86:e7:3d:60:8f:3e:50:91:a0:4a:32:d9:38:08:a8: a3:f8:89:cc:98:95:f4:b4:16:c8:49:af:94:25:9d: 27:eb:3c:4b:0f:2d:13:b5:04:04:6b:af:d0:ea:f8: 75:07:c6:0d:a9:e7:e4:b5:53:2d:68:c8:28:6b:c3: 89:c9:a2:98:1d:d9:3c:7e:ce:81:55:02:48:d6:69: 6b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:AA:23:49:67:2D:8A:39:D2:83:C0:A2:D4:41:05:45:E5:17:0A:21 X509v3 Authority Key Identifier: keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/a6ojSWctijnSg8Ci1EEFReUXCiE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.178.155.0/24 IPv6: 2a01:5c40:3::/48 Signature Algorithm: sha256WithRSAEncryption 9a:84:0d:a8:1c:f0:a4:d9:b8:19:ae:d1:24:4e:0a:0f:9e:04: 4b:71:ea:60:4b:4e:b0:4d:9c:b9:23:44:e4:45:c5:1d:45:4f: 99:3a:9d:f7:4b:5a:52:f0:b3:c8:41:ff:73:d1:33:4a:f0:c1: 0c:a0:bc:93:4e:5e:7f:8e:c5:ec:de:1b:ad:2e:66:37:e1:58: e4:11:4c:83:43:f9:c8:45:46:b2:07:46:43:9d:03:39:ec:c8: 95:39:fa:e3:10:af:f4:a3:8e:67:ab:9c:c7:3d:15:a2:ee:57: d0:a8:0b:24:64:e3:d8:20:7c:bc:b4:cc:75:47:36:49:ac:93: 38:f4:2c:da:d6:ee:02:73:8d:c1:54:a5:4c:79:4a:43:b6:83: 51:93:d4:ee:7f:83:4a:8a:3d:94:e4:da:49:9f:44:71:17:4f: fc:8a:fd:5c:31:b8:1b:90:42:19:a0:ca:5d:c8:4f:ad:c9:f1: 2a:11:f9:d3:e5:5d:72:0a:3b:89:ba:75:88:a0:1e:08:73:4c: cf:79:b5:17:1b:e4:af:c8:6f:15:0d:63:4e:e1:d5:de:15:eb: 0f:93:b4:79:4f:43:c0:98:c1:87:a8:f9:16:e7:9b:83:36:8b: 65:e7:5c:d0:5d:99:60:67:74:97:93:5c:ef:41:f3:23:5a:ae: df:da:02:ac -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+OKReQycORuVrCZtH7dEzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw OWIzNDYwHhcNMjYwMTAyMTAxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YmFhMjM0OTY3MmQ4YTM5ZDI4M2MwYTJkNDQxMDU0NWU1MTcwYTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngRE+32skzUMkgrCbrakRHj46vEc inY2Tq0+2EB8M2NKPV2x8/TTCVqbjOgXoY8iQPMazl7xO9bPlXnkFK4Hurp1VfDb cCS6KVmfi3eAiZjUoyG+kGNDbIFC8+YSro5PE6K4cJdlDZ+D7ngqkQ3AL+Dp3A84 E9c4DO0fMM7DZWuqAgB5A9+Ix+5+pf3S7hblaZS6/Rod/Wrkt2U8hkzr1k3/XOxM 6s/C67YG+zV4qcxRgQuG5z1gjz5QkaBKMtk4CKij+InMmJX0tBbISa+UJZ0n6zxL Dy0TtQQEa6/Q6vh1B8YNqefktVMtaMgoa8OJyaKYHdk8fs6BVQJI1mlrUQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFGuqI0lnLYo50oPAotRBBUXlFwohMB8GA1UdIwQY MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt MDNmNGM3MTEzYzM0LzEvYTZvalNXY3Rpam5TZzhDaTFFRUZSZVVYQ2lFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0 LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAw7KbMA8E AgACMAkDBwAqAVxAAAMwDQYJKoZIhvcNAQELBQADggEBAJqEDagc8KTZuBmu0SRO Cg+eBEtx6mBLTrBNnLkjRORFxR1FT5k6nfdLWlLws8hB/3PRM0rwwQygvJNOXn+O xezeG60uZjfhWOQRTIND+chFRrIHRkOdAznsyJU5+uMQr/SjjmernMc9FaLuV9Co CyRk49ggfLy0zHVHNkmskzj0LNrW7gJzjcFUpUx5SkO2g1GT1O5/g0qKPZTk2kmf RHEXT/yK/VwxuBuQQhmgyl3IT63J8SoR+dPlXXIKO4m6dYigHghzTM95tRcb5K/I bxUNY07h1d4V6w+TtHlPQ8CYwYeo+Rbnm4M2i2XnXNBdmWBndJeTXO9B8yNart/a Aqw= -----END CERTIFICATE-----Generated at Sat Jan 10 04:58:12 2026 by rpki-client