This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/sL_kO6glXhgKCKzZJakKCk1w7pw.roa File: sL_kO6glXhgKCKzZJakKCk1w7pw.roa (raw, json) Hash identifier: QnUXfnVCoxqWyTYKHVanM+qXpxh9bvdVjRpLXx6NLxw= Subject key identifier: B0:BF:E4:3B:A8:25:5E:18:0A:08:AC:D9:25:A9:0A:0A:4D:70:EE:9C Certificate issuer: /CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc Certificate serial: 019B7834F2781D3704E7371F16D48343BF9F Authority key identifier: F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/sL_kO6glXhgKCKzZJakKCk1w7pw.roa Signing time: Thu 01 Jan 2026 06:18:14 +0000 ROA not before: Thu 01 Jan 2026 06:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50472 IP address blocks: 195.160.173.0/24 maxlen: 24 2001:678:760::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.crl rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:f2:78:1d:37:04:e7:37:1f:16:d4:83:43:bf:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc Validity Not Before: Jan 1 06:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b0bfe43ba8255e180a08acd925a90a0a4d70ee9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:da:85:94:16:01:ae:5a:54:f7:95:3b:bb:03: 2b:4f:d4:99:3a:9c:88:98:d9:f4:59:3a:b5:d9:8d: 28:88:87:bc:cb:12:1a:b9:b0:01:5b:a0:b1:57:a5: 7d:b3:08:fd:ba:42:4f:29:74:df:ae:1d:f5:01:86: 46:ed:ba:5b:73:5a:23:ec:e7:4b:8f:e2:0d:46:23: a4:22:52:90:bf:f2:b9:00:d4:f9:02:ba:7a:d4:90: fa:5e:b8:cb:6f:04:db:78:37:ec:b3:df:47:94:e0: c1:49:b6:cd:ac:ec:62:ab:20:a8:fe:23:04:40:a2: 50:26:c5:82:ab:7e:eb:ac:9d:d8:43:c3:89:9e:fb: 82:5a:3e:dd:86:66:17:7a:3a:07:57:f1:35:c2:6d: b7:0f:34:8d:fe:a7:78:18:3a:0e:0c:84:49:72:02: 36:07:04:57:ca:a6:66:c5:8f:cc:83:cc:b0:2c:90: 2e:20:f2:48:1a:24:08:97:04:26:c9:b1:e8:af:f6: 5c:14:8e:75:07:ae:16:40:b2:a2:74:33:65:ae:2a: 39:1f:bf:37:2c:df:48:b4:d0:71:36:3a:84:12:a4: 3c:bc:08:55:8f:ea:02:37:d6:4f:18:f0:b7:00:bb: b7:83:cc:e2:74:b2:e3:9c:94:f2:4f:13:82:cd:17: 83:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:BF:E4:3B:A8:25:5E:18:0A:08:AC:D9:25:A9:0A:0A:4D:70:EE:9C X509v3 Authority Key Identifier: keyid:F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/sL_kO6glXhgKCKzZJakKCk1w7pw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.160.173.0/24 IPv6: 2001:678:760::/48 Signature Algorithm: sha256WithRSAEncryption 18:7d:16:f9:c7:fa:e8:d2:a1:cc:dc:9c:cf:f1:a2:15:f1:ff: 83:d7:01:fb:25:b8:e7:a5:a2:2a:fb:65:a8:66:17:8f:d5:f0: f3:28:c7:56:1a:d6:15:99:5e:f7:90:05:63:5e:cb:1a:e3:5a: c3:ef:71:66:f5:38:6c:3f:33:f9:ec:a8:05:52:c9:9b:3a:37: 69:97:83:28:18:31:92:67:aa:c2:44:98:b1:ac:9c:33:a7:f5: 87:ad:7c:d9:b4:6c:65:fb:48:58:e0:ba:f8:c4:29:0f:5f:09: fe:1a:c6:e1:77:2f:eb:33:1d:8a:b1:dc:ec:32:e5:19:03:8e: ce:51:cf:71:08:ae:62:c4:7c:97:8a:98:ea:e1:33:cc:31:e0: 61:78:99:8d:b2:c6:4d:ea:5b:1c:5d:c1:6a:71:9f:e9:08:06: e0:9a:1c:97:88:05:33:fd:89:7e:2d:39:76:c1:51:09:27:01: 0d:7f:05:e1:4c:de:28:30:45:05:22:77:fc:40:de:aa:b6:7f: a5:04:b9:4b:39:21:b6:68:a7:32:87:09:5f:96:5a:2e:4f:f4: 56:e0:ba:84:44:21:8e:f7:9e:0d:0d:d2:52:bd:40:94:75:d5: 3e:3c:5f:d8:91:11:a3:7c:87:d0:84:dd:8f:e5:13:f7:52:6e: 1f:77:82:e6 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4NPJ4HTcE5zcfFtSDQ7+fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYWM4YzdlMzJiYWY3NzhiOGM0NTFhMmQyNGNjNjgxOTY5 NjRiZmMwHhcNMjYwMTAxMDYxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMGJmZTQzYmE4MjU1ZTE4MGEwOGFjZDkyNWE5MGEwYTRkNzBlZTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotqFlBYBrlpU95U7uwMrT9SZOpyI mNn0WTq12Y0oiIe8yxIaubABW6CxV6V9swj9ukJPKXTfrh31AYZG7bpbc1oj7OdL j+INRiOkIlKQv/K5ANT5Arp61JD6XrjLbwTbeDfss99HlODBSbbNrOxiqyCo/iME QKJQJsWCq37rrJ3YQ8OJnvuCWj7dhmYXejoHV/E1wm23DzSN/qd4GDoODIRJcgI2 BwRXyqZmxY/Mg8ywLJAuIPJIGiQIlwQmybHor/ZcFI51B64WQLKidDNlrio5H783 LN9ItNBxNjqEEqQ8vAhVj+oCN9ZPGPC3ALu3g8zidLLjnJTyTxOCzReDPwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFLC/5DuoJV4YCgis2SWpCgpNcO6cMB8GA1UdIwQY MBaAFPOsjH4yuvd4uMRRotJMxoGWlkv8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODZ5TWZqSzY5M2k0eEZHaTBrekdnWmFXU193LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni81YzU4NTktNzVjMC00MzQ1LWJkMjkt NDVjNTY4ZjhhMjdjLzEvc0xfa082Z2xYaGdLQ0t6Wkpha0tDazF3N3B3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni81YzU4NTktNzVjMC00MzQ1LWJkMjktNDVjNTY4ZjhhMjdj LzEvODZ5TWZqSzY5M2k0eEZHaTBrekdnWmFXU193LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAw6CtMA8E AgACMAkDBwAgAQZ4B2AwDQYJKoZIhvcNAQELBQADggEBABh9FvnH+ujSoczcnM/x ohXx/4PXAfsluOeloir7ZahmF4/V8PMox1Ya1hWZXveQBWNeyxrjWsPvcWb1OGw/ M/nsqAVSyZs6N2mXgygYMZJnqsJEmLGsnDOn9YetfNm0bGX7SFjguvjEKQ9fCf4a xuF3L+szHYqx3Owy5RkDjs5Rz3EIrmLEfJeKmOrhM8wx4GF4mY2yxk3qWxxdwWpx n+kIBuCaHJeIBTP9iX4tOXbBUQknAQ1/BeFM3igwRQUid/xA3qq2f6UEuUs5IbZo pzKHCV+WWi5P9FbguoREIY73ng0N0lK9QJR11T48X9iREaN8h9CE3Y/lE/dSbh93 guY= -----END CERTIFICATE-----Generated at Tue Jan 27 05:34:46 2026 by rpki-client