This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/6vNlJPUrMrbTh1eOOipn8AK2h3w.roa File: 6vNlJPUrMrbTh1eOOipn8AK2h3w.roa (raw, json) Hash identifier: 5F+X9YtQX+RhbdoXXgbOWJDvAvP+YvO4D5dj6R+cMg0= Subject key identifier: EA:F3:65:24:F5:2B:32:B6:D3:87:57:8E:3A:2A:67:F0:02:B6:87:7C Certificate issuer: /CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0 Certificate serial: 019B7A5B081C4888A9C515FFB8F2C250016C Authority key identifier: 82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/6vNlJPUrMrbTh1eOOipn8AK2h3w.roa Signing time: Thu 01 Jan 2026 16:19:04 +0000 ROA not before: Thu 01 Jan 2026 16:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1299 IP address blocks: 194.56.124.0/23 maxlen: 23 194.56.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:08:1c:48:88:a9:c5:15:ff:b8:f2:c2:50:01:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0 Validity Not Before: Jan 1 16:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eaf36524f52b32b6d387578e3a2a67f002b6877c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ec:67:f1:31:c8:b4:d8:86:9f:20:3f:6b:c4: 6d:61:7e:de:df:0c:14:dc:92:af:c5:98:01:95:c7: ee:ca:70:a6:99:1c:9f:92:80:01:c3:e5:ba:9c:8f: 1b:90:e1:f9:23:b3:eb:df:80:60:bc:4a:fb:1d:6b: a3:f2:0c:36:18:d1:82:01:0e:d9:ec:38:1a:44:73: 56:7b:b1:99:d0:ff:d6:cd:f4:cc:64:94:d2:3b:af: 56:40:0b:33:15:da:4e:89:35:c9:b0:fc:5b:3d:07: 35:2a:79:b4:3e:fb:5c:b3:3a:96:3f:16:62:2a:07: 5a:04:7c:f6:2f:5c:6e:df:a0:3c:d8:3f:b6:e7:33: e4:ee:0e:25:e3:dc:57:c8:55:a2:91:11:88:e3:9e: 47:cd:26:dd:87:35:d2:c0:b5:74:b4:24:33:41:41: 50:c2:f6:c3:0d:0e:60:e8:83:c4:77:92:07:08:ef: 62:e2:e6:7d:9b:4f:ed:6d:38:60:ff:7f:88:84:16: eb:d8:85:67:e7:07:7a:c4:b9:44:d9:92:17:82:e1: b7:7b:2c:4e:7e:b7:71:d2:ba:ac:e1:cb:5d:f2:f6: 51:8f:96:16:50:6e:f2:5c:90:7a:eb:d9:e3:33:2c: 9f:1e:8d:f6:2b:9c:3e:5d:56:b8:e8:e1:ad:8d:c2: a2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:F3:65:24:F5:2B:32:B6:D3:87:57:8E:3A:2A:67:F0:02:B6:87:7C X509v3 Authority Key Identifier: keyid:82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/6vNlJPUrMrbTh1eOOipn8AK2h3w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.56.124.0-194.56.126.255 Signature Algorithm: sha256WithRSAEncryption 67:3a:33:b3:b6:3a:28:92:d9:06:38:50:f3:d7:ab:63:90:f7: 83:1e:a8:ff:d2:90:50:81:31:54:47:21:95:81:3d:b3:50:3f: 8b:64:93:4f:69:5d:0a:af:25:a3:d8:f6:3b:35:58:41:1b:4d: c4:49:bb:6a:4b:95:4b:22:c4:27:0d:2f:a7:c8:b2:99:bf:1d: 77:45:9a:95:91:e5:f4:89:48:25:b7:32:5f:92:b5:05:8a:41: f4:30:4c:7c:51:a0:8c:05:ad:19:34:a5:e0:84:b9:43:5c:0d: 7a:46:5e:0e:18:22:d9:11:93:1c:74:84:f4:fb:cb:3f:d3:7f: 77:9c:11:d2:a2:6f:d8:c7:e8:eb:d8:8b:7c:70:3f:d3:d5:61: a5:cc:39:8c:3c:22:c5:7c:4b:e7:57:90:fa:cf:7d:4b:aa:39: 89:ce:2d:59:08:67:43:e6:0a:12:09:98:da:90:3f:75:be:5b: 0b:95:fb:73:0c:cb:cb:68:a8:d3:37:b3:f4:39:f8:59:51:6d: 2e:5f:63:7d:01:21:3a:7c:68:97:5e:7e:69:a2:a8:2d:21:22: ba:71:c4:5d:1f:49:b6:93:b3:c7:f5:a5:75:0b:4b:e0:79:0c: 79:d8:bd:97:6f:c9:81:c7:f0:b5:75:05:de:4c:b7:d5:68:fd: f5:b5:8d:4d -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt6WwgcSIipxRX/uPLCUAFsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyZTAxNGYxYzhjYTM5NjZhOTNlZjM5ZGJjNjEyZGFhYzBk ODNkYzAwHhcNMjYwMTAxMTYxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWYzNjUyNGY1MmIzMmI2ZDM4NzU3OGUzYTJhNjdmMDAyYjY4NzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+xn8THItNiGnyA/a8RtYX7e3wwU 3JKvxZgBlcfuynCmmRyfkoABw+W6nI8bkOH5I7Pr34BgvEr7HWuj8gw2GNGCAQ7Z 7DgaRHNWe7GZ0P/WzfTMZJTSO69WQAszFdpOiTXJsPxbPQc1Knm0PvtcszqWPxZi KgdaBHz2L1xu36A82D+25zPk7g4l49xXyFWikRGI455HzSbdhzXSwLV0tCQzQUFQ wvbDDQ5g6IPEd5IHCO9i4uZ9m0/tbThg/3+IhBbr2IVn5wd6xLlE2ZIXguG3eyxO frdx0rqs4ctd8vZRj5YWUG7yXJB669njMyyfHo32K5w+XVa46OGtjcKixQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFOrzZST1KzK204dXjjoqZ/ACtod8MB8GA1UdIwQY MBaAFILgFPHIyjlmqT7znbxhLarA2D3AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3VBVThjaktPV2FwUHZPZHZHRXRxc0RZUGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84ZmE3OGYtMWQ3My00YzVhLTllMGIt NjZkODBlZDA5YmM3LzEvNnZObEpQVXJNcmJUaDFlT09pcG44QUsyaDN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS84ZmE3OGYtMWQ3My00YzVhLTllMGItNjZkODBlZDA5YmM3 LzEvZ3VBVThjaktPV2FwUHZPZHZHRXRxc0RZUGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALCOHwD BADCOH4wDQYJKoZIhvcNAQELBQADggEBAGc6M7O2OiiS2QY4UPPXq2OQ94MeqP/S kFCBMVRHIZWBPbNQP4tkk09pXQqvJaPY9js1WEEbTcRJu2pLlUsixCcNL6fIspm/ HXdFmpWR5fSJSCW3Ml+StQWKQfQwTHxRoIwFrRk0peCEuUNcDXpGXg4YItkRkxx0 hPT7yz/Tf3ecEdKib9jH6OvYi3xwP9PVYaXMOYw8IsV8S+dXkPrPfUuqOYnOLVkI Z0PmChIJmNqQP3W+WwuV+3MMy8toqNM3s/Q5+FlRbS5fY30BITp8aJdefmmiqC0h IrpxxF0fSbaTs8f1pXULS+B5DHnYvZdvyYHH8LV1Bd5Mt9Vo/fW1jU0= -----END CERTIFICATE-----Generated at Wed Jan 21 07:23:28 2026 by rpki-client