This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/6mRk8qkPUY_hAEIfcfoj_C8oppM.roa File: 6mRk8qkPUY_hAEIfcfoj_C8oppM.roa (raw, json) Hash identifier: oQ/nvQVeem5/81dVrUzfG4QYNlLbYK0KGRFBYiZ/qW8= Subject key identifier: EA:64:64:F2:A9:0F:51:8F:E1:00:42:1F:71:FA:23:FC:2F:28:A6:93 Certificate issuer: /CN=74a47e3a67160ae4662e0ebcced7a9233ce47abf Certificate serial: 019B7F8323C1A7252CF3DE38B25E16570F09 Authority key identifier: 74:A4:7E:3A:67:16:0A:E4:66:2E:0E:BC:CE:D7:A9:23:3C:E4:7A:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKR-OmcWCuRmLg68ztepIzzker8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/6mRk8qkPUY_hAEIfcfoj_C8oppM.roa Signing time: Fri 02 Jan 2026 16:20:59 +0000 ROA not before: Fri 02 Jan 2026 16:20:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44945 IP address blocks: 78.108.16.0/20 maxlen: 20 185.43.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.crl rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft rsync://rpki.ripe.net/repository/DEFAULT/dKR-OmcWCuRmLg68ztepIzzker8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:23:c1:a7:25:2c:f3:de:38:b2:5e:16:57:0f:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74a47e3a67160ae4662e0ebcced7a9233ce47abf Validity Not Before: Jan 2 16:20:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea6464f2a90f518fe100421f71fa23fc2f28a693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4a:9f:9c:18:01:81:b1:5e:4a:0e:70:60:1f: 5e:43:4c:b1:3d:0d:01:b8:22:35:ff:44:65:e7:5d: eb:24:97:0e:59:a3:f7:7d:f3:f0:99:67:17:30:39: 94:fe:e9:df:5a:7d:23:29:f4:69:aa:59:a2:15:44: c0:14:da:ac:c3:07:21:be:7c:1a:45:00:7b:ba:c1: f2:c0:97:14:a8:25:61:79:da:e6:08:02:f9:03:2d: ac:4a:a0:c8:90:8d:2e:52:ac:5e:a9:2b:25:eb:8c: d3:85:5c:33:07:25:f7:37:97:89:94:26:e8:91:15: db:4b:20:07:ff:a4:c2:ad:0c:3a:b5:cf:5d:da:be: 2e:6c:8e:2d:d6:d1:0b:49:3b:2b:da:fd:e3:25:da: d3:8c:dd:1a:f1:a6:03:fd:11:dd:c5:31:bd:46:23: b7:a7:9a:a6:ce:b7:56:5e:af:f5:7a:ad:4f:be:65: f9:61:5f:2e:91:10:83:52:ae:08:aa:03:38:9b:7e: f8:4c:2b:6d:2b:a7:e3:cc:b9:3f:c1:a9:90:ee:27: 1c:d4:90:57:58:84:84:e6:65:ed:30:5b:b0:b6:fe: 4d:e0:20:59:87:e7:ce:70:d7:03:36:b8:13:13:99: 42:29:9e:39:af:ab:c2:70:aa:ab:43:cc:b8:bb:ae: 52:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:64:64:F2:A9:0F:51:8F:E1:00:42:1F:71:FA:23:FC:2F:28:A6:93 X509v3 Authority Key Identifier: keyid:74:A4:7E:3A:67:16:0A:E4:66:2E:0E:BC:CE:D7:A9:23:3C:E4:7A:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKR-OmcWCuRmLg68ztepIzzker8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/6mRk8qkPUY_hAEIfcfoj_C8oppM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.108.16.0/20 185.43.172.0/22 Signature Algorithm: sha256WithRSAEncryption b9:4f:00:cb:86:e9:d7:46:ff:ab:56:47:42:b8:90:ec:9c:a5: c3:c3:34:01:8f:80:95:98:e2:f2:5b:88:f8:4e:f8:33:6f:b1: b5:cd:35:1f:43:70:35:e0:f3:74:e8:cc:41:9e:3e:9d:07:ec: 29:65:4c:60:46:c9:88:a4:d0:ed:3d:e9:2b:89:8f:d4:d9:8e: 8c:ee:c5:66:c8:bb:94:2d:ed:7f:a6:e9:f1:6d:a9:d7:f0:ae: 5d:77:c3:35:e9:5e:b0:e9:78:50:9d:10:d1:31:ea:64:65:18: 84:95:98:2b:c3:5c:ba:55:3d:c1:79:ba:3c:2f:e7:e9:39:c1: 38:93:07:ff:ec:3e:57:f9:6a:2a:de:2a:a1:4e:49:c5:d0:c3: 55:12:64:00:d2:dd:20:dc:9a:7b:12:1b:fc:49:b1:dc:e3:f0: f9:ca:bf:e6:cc:7a:a3:aa:4e:24:c7:3b:57:57:c1:45:69:a5: fa:7c:61:ae:2f:b6:70:ba:6b:e4:cb:33:29:f4:4e:59:e1:97: ed:ff:88:3a:16:03:57:11:ce:da:8e:3d:1d:b1:13:21:80:17: 8d:67:9c:ae:aa:23:ce:f8:b0:b5:ae:8a:87:a0:c0:08:36:c0: b2:da:a9:cb:95:e8:bf:70:bb:7d:45:f9:19:c1:53:a8:5f:e2: bb:95:9f:5c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/gyPBpyUs8944sl4WVw8JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0YTQ3ZTNhNjcxNjBhZTQ2NjJlMGViY2NlZDdhOTIzM2Nl NDdhYmYwHhcNMjYwMTAyMTYyMDU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTY0NjRmMmE5MGY1MThmZTEwMDQyMWY3MWZhMjNmYzJmMjhhNjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00qfnBgBgbFeSg5wYB9eQ0yxPQ0B uCI1/0Rl513rJJcOWaP3ffPwmWcXMDmU/unfWn0jKfRpqlmiFUTAFNqswwchvnwa RQB7usHywJcUqCVhedrmCAL5Ay2sSqDIkI0uUqxeqSsl64zThVwzByX3N5eJlCbo kRXbSyAH/6TCrQw6tc9d2r4ubI4t1tELSTsr2v3jJdrTjN0a8aYD/RHdxTG9RiO3 p5qmzrdWXq/1eq1PvmX5YV8ukRCDUq4IqgM4m374TCttK6fjzLk/wamQ7icc1JBX WISE5mXtMFuwtv5N4CBZh+fOcNcDNrgTE5lCKZ45r6vCcKqrQ8y4u65ShwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOpkZPKpD1GP4QBCH3H6I/wvKKaTMB8GA1UdIwQY MBaAFHSkfjpnFgrkZi4OvM7XqSM85Hq/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEtSLU9tY1dDdVJtTGc2OHp0ZXBJenprZXI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9kNmQ2MjUtZGRhMi00ZjJmLWI4Y2Yt OTJjN2Q0NmRkYjg5LzEvNm1Sazhxa1BVWV9oQUVJZmNmb2pfQzhvcHBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9kNmQ2MjUtZGRhMi00ZjJmLWI4Y2YtOTJjN2Q0NmRkYjg5 LzEvZEtSLU9tY1dDdVJtTGc2OHp0ZXBJenprZXI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQETmwQAwQC uSusMA0GCSqGSIb3DQEBCwUAA4IBAQC5TwDLhunXRv+rVkdCuJDsnKXDwzQBj4CV mOLyW4j4Tvgzb7G1zTUfQ3A14PN06MxBnj6dB+wpZUxgRsmIpNDtPekriY/U2Y6M 7sVmyLuULe1/punxbanX8K5dd8M16V6w6XhQnRDRMepkZRiElZgrw1y6VT3Bebo8 L+fpOcE4kwf/7D5X+Woq3iqhTknF0MNVEmQA0t0g3Jp7Ehv8SbHc4/D5yr/mzHqj qk4kxztXV8FFaaX6fGGuL7ZwumvkyzMp9E5Z4Zft/4g6FgNXEc7ajj0dsRMhgBeN Z5yuqiPO+LC1roqHoMAINsCy2qnLlei/cLt9RfkZwVOoX+K7lZ9c -----END CERTIFICATE-----Generated at Mon Feb 9 23:45:09 2026 by rpki-client