This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/S6LDiSZNAtNW9WaLmO93KBHAmgw.roa File: S6LDiSZNAtNW9WaLmO93KBHAmgw.roa (raw, json) Hash identifier: ZIGmwTvUiK6b6UCle+orNcBI4IjhGrQXuAzo5Uyml1c= Subject key identifier: 4B:A2:C3:89:26:4D:02:D3:56:F5:66:8B:98:EF:77:28:11:C0:9A:0C Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430 Certificate serial: 019B7FF19743E92EE0139D040B7DFCA99412 Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/S6LDiSZNAtNW9WaLmO93KBHAmgw.roa Signing time: Fri 02 Jan 2026 18:21:37 +0000 ROA not before: Fri 02 Jan 2026 18:21:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205220 IP address blocks: 212.16.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:97:43:e9:2e:e0:13:9d:04:0b:7d:fc:a9:94:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430 Validity Not Before: Jan 2 18:21:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ba2c389264d02d356f5668b98ef772811c09a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f2:f7:fe:fe:7c:d7:b0:40:b5:36:0f:de:3a: a3:5d:76:1c:e7:36:6a:39:11:2a:1e:ac:e7:2d:72: ae:e2:a3:af:e2:08:d3:45:f6:9b:63:dc:e7:1d:e0: e5:6c:de:7b:6b:21:53:6a:f7:75:64:c0:2a:2c:92: 17:e5:fd:c1:c5:b1:4f:24:44:3e:ff:38:a6:b0:4c: 6d:ef:25:28:99:9f:19:9b:92:cb:77:c5:99:a6:f6: d6:13:59:0b:46:b7:fb:7d:48:3c:d8:1a:47:ec:d2: 08:12:e6:25:f6:2d:39:43:64:36:e6:74:5a:c1:32: 7f:a9:a0:e5:67:44:bd:9a:bd:47:f8:45:5b:e9:ab: c9:91:36:05:28:10:75:81:aa:af:1d:64:a4:12:59: 38:e6:2f:85:cb:a3:25:b1:d5:d5:ce:2d:e3:75:7b: 90:cd:2b:c8:d1:1c:f8:74:cf:24:7a:1f:8c:ff:5e: 88:df:cb:b9:f2:61:21:73:b9:86:c7:ef:e3:6d:88: dc:d6:f4:3b:11:ab:c2:73:fc:16:88:61:98:31:a4: 86:fd:df:34:83:78:8a:b1:5c:b5:e9:1a:e4:8b:3e: 2a:00:0d:bd:38:30:6f:e7:9b:20:31:20:ce:01:bb: da:c0:82:85:e8:ef:26:d8:75:80:52:32:37:04:21: b7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:A2:C3:89:26:4D:02:D3:56:F5:66:8B:98:EF:77:28:11:C0:9A:0C X509v3 Authority Key Identifier: keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/S6LDiSZNAtNW9WaLmO93KBHAmgw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.16.79.0/24 Signature Algorithm: sha256WithRSAEncryption a7:1c:95:2e:72:53:e8:71:58:99:2f:04:48:e1:87:c1:f6:67: 2e:bd:e7:e6:83:b0:65:5c:72:4c:4e:08:c2:1b:1f:3e:9b:d7: fc:7e:a3:ee:4d:67:ea:10:29:b7:d0:35:d6:f4:90:25:9d:98: 54:99:0f:0a:b7:51:3e:1b:1b:26:e8:58:d1:8a:77:91:71:b4: 6b:b7:41:d8:17:e5:fa:94:c2:f8:c2:87:72:5a:da:50:bc:ba: cb:fe:1c:b6:7a:c5:aa:b4:2d:db:5e:00:f5:0f:e8:9e:64:88: 83:20:e9:c0:10:f6:76:13:6c:41:97:2f:fc:cc:8c:29:a9:83: cc:41:fc:f5:e2:07:c0:bf:0d:ec:45:07:01:3d:e7:f6:80:02: af:3d:0d:9a:9f:02:2a:5e:a0:ac:5b:ff:01:7f:74:89:e6:64: 2e:a5:9d:93:37:8d:dd:b9:2c:77:bc:a3:30:cc:66:9b:0e:58: a1:b8:42:29:07:78:f9:6f:de:5a:81:99:5d:d7:bc:0a:9b:27: a4:b0:a6:9a:19:0f:52:26:1b:df:30:83:7d:40:ac:ab:a4:3a: ca:aa:c8:90:5d:30:bd:70:84:fe:96:cc:f0:ea:f5:dc:61:9a: df:60:a2:71:58:2c:c8:c8:6a:8d:d4:2f:13:95:6c:ef:c6:59: 85:46:4f:b4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8ZdD6S7gE50EC338qZQSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj NWY0MzAwHhcNMjYwMTAyMTgyMTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YmEyYzM4OTI2NGQwMmQzNTZmNTY2OGI5OGVmNzcyODExYzA5YTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/L3/v5817BAtTYP3jqjXXYc5zZq OREqHqznLXKu4qOv4gjTRfabY9znHeDlbN57ayFTavd1ZMAqLJIX5f3BxbFPJEQ+ /zimsExt7yUomZ8Zm5LLd8WZpvbWE1kLRrf7fUg82BpH7NIIEuYl9i05Q2Q25nRa wTJ/qaDlZ0S9mr1H+EVb6avJkTYFKBB1gaqvHWSkElk45i+Fy6MlsdXVzi3jdXuQ zSvI0Rz4dM8keh+M/16I38u58mEhc7mGx+/jbYjc1vQ7EavCc/wWiGGYMaSG/d80 g3iKsVy16Rrkiz4qAA29ODBv55sgMSDOAbvawIKF6O8m2HWAUjI3BCG3JwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEuiw4kmTQLTVvVmi5jvdygRwJoMMB8GA1UdIwQY MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt MmEwOWNjNTNhODA1LzEvUzZMRGlTWk5BdE5XOVdhTG1POTNLQkhBbWd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1 LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1BBPMA0G CSqGSIb3DQEBCwUAA4IBAQCnHJUuclPocViZLwRI4YfB9mcuvefmg7BlXHJMTgjC Gx8+m9f8fqPuTWfqECm30DXW9JAlnZhUmQ8Kt1E+Gxsm6FjRineRcbRrt0HYF+X6 lML4wodyWtpQvLrL/hy2esWqtC3bXgD1D+ieZIiDIOnAEPZ2E2xBly/8zIwpqYPM Qfz14gfAvw3sRQcBPef2gAKvPQ2anwIqXqCsW/8Bf3SJ5mQupZ2TN43duSx3vKMw zGabDlihuEIpB3j5b95agZld17wKmyeksKaaGQ9SJhvfMIN9QKyrpDrKqsiQXTC9 cIT+lszw6vXcYZrfYKJxWCzIyGqN1C8TlWzvxlmFRk+0 -----END CERTIFICATE-----Generated at Wed Jan 21 01:08:00 2026 by rpki-client