This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/G6OyRmGGSlEkPDR314TXAEQi9rc.roa File: G6OyRmGGSlEkPDR314TXAEQi9rc.roa (raw, json) Hash identifier: js9ydtB3OE/PEaAkA7z3NDnhzc/fPT98lQkdRYKZuV8= Subject key identifier: 1B:A3:B2:46:61:86:4A:51:24:3C:34:77:D7:84:D7:00:44:22:F6:B7 Certificate issuer: /CN=709d69957d333432accac810231e289388e302e2 Certificate serial: 019B791073B83FACDDCCA88657FA880E95A6 Authority key identifier: 70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/G6OyRmGGSlEkPDR314TXAEQi9rc.roa Signing time: Thu 01 Jan 2026 10:17:59 +0000 ROA not before: Thu 01 Jan 2026 10:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13287 IP address blocks: 178.255.224.0/24 maxlen: 24 178.255.225.0/24 maxlen: 24 178.255.226.0/24 maxlen: 24 178.255.227.0/24 maxlen: 24 178.255.228.0/24 maxlen: 24 178.255.229.0/24 maxlen: 24 178.255.230.0/24 maxlen: 24 178.255.231.0/24 maxlen: 24 2a00:a220::/33 maxlen: 33 2a00:a220:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 07:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:73:b8:3f:ac:dd:cc:a8:86:57:fa:88:0e:95:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=709d69957d333432accac810231e289388e302e2 Validity Not Before: Jan 1 10:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ba3b24661864a51243c3477d784d7004422f6b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9f:40:14:3e:ca:a2:53:7a:1b:9c:4f:57:5c: 11:42:31:8e:d0:36:03:49:10:5c:d2:eb:d7:0a:35: b0:b1:6a:13:b6:3a:9a:4d:e3:be:b7:68:71:6e:6d: ed:c7:cb:b8:e5:f1:eb:c7:bf:2f:cb:96:22:c8:7a: 60:3d:df:c0:65:5e:7f:ea:37:07:63:54:44:58:9c: e3:1c:1b:5b:fd:a3:24:79:f4:44:a5:d8:5c:27:77: 91:36:43:8a:8d:2c:cf:57:5d:01:1e:c8:35:f2:d0: ca:8b:2b:20:26:54:d9:bb:dd:a3:53:89:42:f9:78: 21:dd:9e:07:3f:8d:2d:00:81:cf:87:88:1f:8a:ff: 21:bf:47:d0:5c:28:16:fe:5e:36:6a:ab:de:47:45: 88:69:66:fd:8e:ba:78:4c:3f:c4:25:3b:e4:b5:5d: 8a:52:a7:36:c9:69:42:b0:94:63:b3:c0:b1:c6:85: 27:ce:8d:0c:d2:8e:2f:cd:f6:41:73:c7:2c:d9:91: b5:ca:22:f4:5c:87:04:27:62:ff:69:f5:8f:2a:5b: d3:04:52:be:01:a0:89:e5:17:8e:5c:f0:19:dd:15: df:c7:db:e2:9e:eb:90:f4:30:2f:3e:9e:c5:45:29: e7:39:b7:68:c7:39:40:bf:b2:20:a1:ce:40:fc:a2: fb:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A3:B2:46:61:86:4A:51:24:3C:34:77:D7:84:D7:00:44:22:F6:B7 X509v3 Authority Key Identifier: keyid:70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/G6OyRmGGSlEkPDR314TXAEQi9rc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.255.224.0/21 IPv6: 2a00:a220::/32 Signature Algorithm: sha256WithRSAEncryption 98:70:d3:1c:2e:ee:47:f1:5a:c4:ec:2e:3d:f1:9d:d8:7e:53: 44:81:75:a6:99:04:c9:c6:19:95:c3:e9:99:01:b5:8c:97:b7: f0:b8:9e:e6:ce:bc:05:72:53:4a:81:19:84:6c:64:f2:c1:8e: 18:52:b9:55:61:99:df:76:97:6d:e9:00:1e:35:f1:95:29:37: d2:a7:43:1e:e5:1e:05:17:5f:0d:0d:e6:66:dc:c5:a4:60:d0: f1:2a:ae:5f:42:f8:ab:54:86:46:62:d2:fe:20:8c:5f:40:5f: 8c:8b:51:72:b0:4a:24:0a:1a:89:e1:5f:c6:f3:bb:17:b7:a6: 73:38:de:34:cb:d5:e3:c2:8c:66:a0:7e:d2:7c:02:a1:07:a7: 10:5e:e0:7c:32:7a:da:4d:10:f3:8c:0f:bb:fa:2a:8c:69:55: 68:dc:47:f5:d2:44:7c:c1:76:6e:fc:7d:86:c5:b9:e4:19:23: de:6b:93:1b:cf:bf:a5:9a:87:b8:0e:7e:9a:80:59:ee:ed:c1: 0b:75:0a:e2:d9:40:1c:a9:1e:dd:40:6c:ee:fd:c7:fa:8c:b7: 9e:de:0b:13:0b:dd:7a:73:45:25:98:70:83:ab:85:43:20:98: 94:7d:06:99:38:48:b1:e7:57:54:be:08:f5:a1:78:f7:6d:ac: 14:32:83:69 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5EHO4P6zdzKiGV/qIDpWmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwOWQ2OTk1N2QzMzM0MzJhY2NhYzgxMDIzMWUyODkzODhl MzAyZTIwHhcNMjYwMTAxMTAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmEzYjI0NjYxODY0YTUxMjQzYzM0NzdkNzg0ZDcwMDQ0MjJmNmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy59AFD7KolN6G5xPV1wRQjGO0DYD SRBc0uvXCjWwsWoTtjqaTeO+t2hxbm3tx8u45fHrx78vy5YiyHpgPd/AZV5/6jcH Y1REWJzjHBtb/aMkefREpdhcJ3eRNkOKjSzPV10BHsg18tDKiysgJlTZu92jU4lC +Xgh3Z4HP40tAIHPh4gfiv8hv0fQXCgW/l42aqveR0WIaWb9jrp4TD/EJTvktV2K Uqc2yWlCsJRjs8CxxoUnzo0M0o4vzfZBc8cs2ZG1yiL0XIcEJ2L/afWPKlvTBFK+ AaCJ5ReOXPAZ3RXfx9vinuuQ9DAvPp7FRSnnObdoxzlAv7Igoc5A/KL7vwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBujskZhhkpRJDw0d9eE1wBEIva3MB8GA1UdIwQY MBaAFHCdaZV9MzQyrMrIECMeKJOI4wLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0oxcGxYMHpOREtzeXNnUUl4NG9rNGpqQXVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81M2Q1NmEtMDk2ZS00NThhLTlhOTQt MDhhNjg2MzJhNjNhLzEvRzZPeVJtR0dTbEVrUERSMzE0VFhBRVFpOXJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81M2Q1NmEtMDk2ZS00NThhLTlhOTQtMDhhNjg2MzJhNjNh LzEvY0oxcGxYMHpOREtzeXNnUUl4NG9rNGpqQXVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDsv/gMA0E AgACMAcDBQAqAKIgMA0GCSqGSIb3DQEBCwUAA4IBAQCYcNMcLu5H8VrE7C498Z3Y flNEgXWmmQTJxhmVw+mZAbWMl7fwuJ7mzrwFclNKgRmEbGTywY4YUrlVYZnfdpdt 6QAeNfGVKTfSp0Me5R4FF18NDeZm3MWkYNDxKq5fQvirVIZGYtL+IIxfQF+Mi1Fy sEokChqJ4V/G87sXt6ZzON40y9XjwoxmoH7SfAKhB6cQXuB8MnraTRDzjA+7+iqM aVVo3Ef10kR8wXZu/H2GxbnkGSPea5Mbz7+lmoe4Dn6agFnu7cELdQri2UAcqR7d QGzu/cf6jLee3gsTC916c0UlmHCDq4VDIJiUfQaZOEix51dUvgj1oXj3bawUMoNp -----END CERTIFICATE-----Generated at Tue Jan 27 18:01:01 2026 by rpki-client