This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/8aSgnBiee21nHnHdoWG0UhIValQ.roa File: 8aSgnBiee21nHnHdoWG0UhIValQ.roa (raw, json) Hash identifier: YhuSs4FGn4TIHIwZ7BzCcCCzXr8oW9ygTIMAtZY8VYk= Subject key identifier: F1:A4:A0:9C:18:9E:7B:6D:67:1E:71:DD:A1:61:B4:52:12:15:6A:54 Certificate issuer: /CN=e6636ab81a343a9ffd8257eacb1ddec538966804 Certificate serial: 019B7758A177A8EA0260A72C30FAA8A5A7FC Authority key identifier: E6:63:6A:B8:1A:34:3A:9F:FD:82:57:EA:CB:1D:DE:C5:38:96:68:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5mNquBo0Op_9glfqyx3exTiWaAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/8aSgnBiee21nHnHdoWG0UhIValQ.roa Signing time: Thu 01 Jan 2026 02:17:35 +0000 ROA not before: Thu 01 Jan 2026 02:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 26506 IP address blocks: 78.89.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/5mNquBo0Op_9glfqyx3exTiWaAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:a1:77:a8:ea:02:60:a7:2c:30:fa:a8:a5:a7:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6636ab81a343a9ffd8257eacb1ddec538966804 Validity Not Before: Jan 1 02:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1a4a09c189e7b6d671e71dda161b45212156a54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4a:51:dc:f8:0e:6a:00:31:64:64:44:79:9e: d8:ae:f0:7b:53:de:50:6a:8b:01:3c:46:15:b7:0a: 3e:43:ed:26:d6:10:ce:4d:7b:db:dc:e2:86:50:18: 5e:0a:13:e4:83:8b:7b:b7:e2:d4:a0:62:5f:f2:55: d7:17:87:1e:ea:fb:f8:c1:30:58:31:20:f7:27:86: 8d:79:15:fd:cc:c2:a5:42:3d:1c:ae:b9:76:d6:6f: fe:50:98:a4:35:18:55:09:64:79:f6:5e:0e:5d:27: ba:e7:b9:87:22:2a:b1:03:41:76:22:ea:f6:46:06: 80:2c:ea:04:1f:28:2e:70:aa:8b:5b:14:f2:54:07: bb:90:4f:0c:4d:c1:2a:68:ed:05:5a:51:9f:cb:43: 64:c1:30:16:ff:18:7e:96:a2:32:55:ff:05:a4:31: 6b:1c:79:bc:98:5b:f6:44:4b:5e:b5:32:98:e0:75: 27:92:63:27:2d:b6:a7:c4:0d:24:97:81:67:5e:7c: b0:d9:f9:39:e2:4e:95:1d:4d:86:07:46:6e:1b:8d: 5b:17:34:91:78:ed:d6:a0:e0:5e:dc:c3:81:14:26: 40:d1:f3:e0:4e:fc:e3:81:a9:bd:12:25:49:db:28: 8d:5b:b1:35:97:90:8a:a9:54:d3:94:91:79:46:c0: 20:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:A4:A0:9C:18:9E:7B:6D:67:1E:71:DD:A1:61:B4:52:12:15:6A:54 X509v3 Authority Key Identifier: keyid:E6:63:6A:B8:1A:34:3A:9F:FD:82:57:EA:CB:1D:DE:C5:38:96:68:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5mNquBo0Op_9glfqyx3exTiWaAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/8aSgnBiee21nHnHdoWG0UhIValQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.89.148.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:1a:06:b3:0e:13:82:38:47:e1:a3:0f:aa:9b:b1:ce:ea:59: 9a:f3:f0:bc:6a:c1:37:c3:97:e4:e7:f7:0e:33:6a:c8:14:5e: 45:12:a1:c1:6e:7a:14:30:e8:c6:16:69:18:0f:2d:99:b5:be: 94:47:44:f6:68:b7:33:0a:fd:e7:22:e7:bc:ca:95:65:22:66: b3:37:00:5c:af:56:a6:64:8b:6a:58:ab:f4:96:ba:d4:79:99: ab:13:29:71:13:ab:38:8f:0c:f6:52:06:53:51:c7:3f:d4:4f: 74:a8:16:dd:68:07:e0:2b:77:7c:2b:f8:03:7e:69:3b:77:09: 9b:3f:68:9f:30:93:35:dc:26:bc:45:f3:e9:75:16:9a:9d:dc: ec:be:83:f0:3b:b5:6e:0b:28:66:66:c8:5a:73:eb:f8:50:a7: 44:5a:b3:89:11:66:73:44:81:c8:91:44:fd:fc:47:cf:18:a2: 78:f2:0f:96:91:ef:3d:49:53:8c:c2:97:3a:3a:3b:29:d0:e7: 07:d9:ab:83:49:d4:14:ff:31:29:b3:f3:9f:1c:3f:af:b1:e3: 79:16:72:4a:7d:31:14:e5:d4:a9:26:a4:30:48:0d:c2:c3:62: 43:54:80:31:83:48:52:a4:c9:7f:0e:ca:84:b1:ab:2b:e0:c4: 9c:c4:64:44 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WKF3qOoCYKcsMPqopaf8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2NjM2YWI4MWEzNDNhOWZmZDgyNTdlYWNiMWRkZWM1Mzg5 NjY4MDQwHhcNMjYwMTAxMDIxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWE0YTA5YzE4OWU3YjZkNjcxZTcxZGRhMTYxYjQ1MjEyMTU2YTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkpR3PgOagAxZGREeZ7YrvB7U95Q aosBPEYVtwo+Q+0m1hDOTXvb3OKGUBheChPkg4t7t+LUoGJf8lXXF4ce6vv4wTBY MSD3J4aNeRX9zMKlQj0crrl21m/+UJikNRhVCWR59l4OXSe657mHIiqxA0F2Iur2 RgaALOoEHygucKqLWxTyVAe7kE8MTcEqaO0FWlGfy0NkwTAW/xh+lqIyVf8FpDFr HHm8mFv2REtetTKY4HUnkmMnLbanxA0kl4FnXnyw2fk54k6VHU2GB0ZuG41bFzSR eO3WoOBe3MOBFCZA0fPgTvzjgam9EiVJ2yiNW7E1l5CKqVTTlJF5RsAg2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPGkoJwYnnttZx5x3aFhtFISFWpUMB8GA1UdIwQY MBaAFOZjargaNDqf/YJX6ssd3sU4lmgEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNW1OcXVCbzBPcF85Z2xmcXl4M2V4VGlXYUFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8xNDU1ZDItNzI0YS00MzllLTk2ZWQt OTg3NmFlYmJkMmM5LzEvOGFTZ25CaWVlMjFuSG5IZG9XRzBVaElWYWxRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC8xNDU1ZDItNzI0YS00MzllLTk2ZWQtOTg3NmFlYmJkMmM5 LzEvNW1OcXVCbzBPcF85Z2xmcXl4M2V4VGlXYUFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATlmUMA0G CSqGSIb3DQEBCwUAA4IBAQCOGgazDhOCOEfhow+qm7HO6lma8/C8asE3w5fk5/cO M2rIFF5FEqHBbnoUMOjGFmkYDy2Ztb6UR0T2aLczCv3nIue8ypVlImazNwBcr1am ZItqWKv0lrrUeZmrEylxE6s4jwz2UgZTUcc/1E90qBbdaAfgK3d8K/gDfmk7dwmb P2ifMJM13Ca8RfPpdRaandzsvoPwO7VuCyhmZshac+v4UKdEWrOJEWZzRIHIkUT9 /EfPGKJ48g+Wke89SVOMwpc6Ojsp0OcH2auDSdQU/zEps/OfHD+vseN5FnJKfTEU 5dSpJqQwSA3Cw2JDVIAxg0hSpMl/DsqEsasr4MScxGRE -----END CERTIFICATE-----Generated at Wed Jan 21 14:41:06 2026 by rpki-client