This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/6STXpyp9qGkZY6wdqAlUte4FX2k.roa File: 6STXpyp9qGkZY6wdqAlUte4FX2k.roa (raw, json) Hash identifier: h/xbukG0IeP954/751eJeDYhad1+QRH3XUPVSkfy640= Subject key identifier: E9:24:D7:A7:2A:7D:A8:69:19:63:AC:1D:A8:09:54:B5:EE:05:5F:69 Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Certificate serial: 019B7CEDC330E5BB8388D831F20093A0C425 Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/6STXpyp9qGkZY6wdqAlUte4FX2k.roa Signing time: Fri 02 Jan 2026 04:18:35 +0000 ROA not before: Fri 02 Jan 2026 04:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 984 IP address blocks: 77.246.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:c3:30:e5:bb:83:88:d8:31:f2:00:93:a0:c4:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Validity Not Before: Jan 2 04:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e924d7a72a7da8691963ac1da80954b5ee055f69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:38:15:4a:03:a1:e9:e3:1e:bb:18:01:f5:81: 82:5b:9b:49:fe:18:98:12:b7:1d:1f:35:ca:46:97: ec:45:95:33:1d:75:91:96:e8:06:de:ae:1a:34:30: 3d:2b:d3:98:81:00:00:96:17:be:2e:52:1b:2e:3f: c9:05:1e:f1:52:aa:d5:ac:64:98:b9:6c:17:f7:e0: 1b:c2:5b:ea:06:c3:b5:cd:f4:d4:88:aa:b2:7f:4c: 02:c9:48:59:95:9a:62:f9:10:36:9d:ae:ca:c2:e0: 70:f5:6e:eb:c1:27:45:1d:44:85:77:fb:92:74:b3: 26:18:89:08:25:12:1c:7d:7d:1c:ff:3b:68:40:97: 25:01:40:62:cf:af:c8:05:13:aa:03:92:ad:fe:1a: 7b:83:f5:c6:80:8e:80:27:d5:4d:d3:61:1f:e8:cd: 84:bf:da:9a:af:2a:2e:b0:17:66:4a:66:5b:0a:68: 0a:52:35:f1:d2:ae:e2:3f:4c:bf:2a:e4:4e:57:64: 65:15:f2:24:3b:d0:2b:26:88:55:49:d9:87:1f:4a: 06:18:60:75:c8:06:26:c0:b0:50:9f:a8:96:42:07: d8:7d:2f:53:d1:9a:95:d0:c6:f7:eb:25:98:8d:52: f1:43:cb:a0:7c:aa:d0:13:fe:31:9a:06:2e:9e:30: 5d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:24:D7:A7:2A:7D:A8:69:19:63:AC:1D:A8:09:54:B5:EE:05:5F:69 X509v3 Authority Key Identifier: keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/6STXpyp9qGkZY6wdqAlUte4FX2k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.246.223.0/24 Signature Algorithm: sha256WithRSAEncryption 27:2d:e3:fc:37:d5:65:e2:ad:a4:9e:88:cb:7e:00:5c:ed:bf: 94:8a:d4:2b:63:a4:9a:ea:90:25:77:d9:94:77:a0:58:57:30: 46:9f:70:2e:bc:63:21:2a:8e:6a:65:53:10:81:a2:69:a0:67: 1e:f8:8a:ea:31:0a:a7:b5:6e:68:5a:dd:be:31:c7:10:a3:35: be:8c:61:c1:b5:e5:a3:52:2f:1f:95:70:47:f7:dc:de:f6:71: 69:5e:2e:5a:41:78:78:aa:de:df:43:91:7d:d4:e3:ed:03:d9: ef:a1:61:73:d6:55:05:88:1c:72:76:19:68:2d:97:0b:80:80: 13:08:fe:a1:ac:73:48:b1:05:cc:ed:2e:6d:70:84:2a:48:3b: fa:cd:9b:b8:69:1e:be:61:78:af:ff:75:68:b8:f3:3b:f4:82: f7:d5:7f:a1:76:e4:71:ab:8d:e5:91:a7:b4:00:6c:d5:29:bd: f9:0f:a2:a0:00:f7:cf:72:82:c2:00:e4:65:04:59:92:22:c8: 71:0b:e8:0b:b7:8c:cd:87:0d:19:52:f5:26:57:36:1b:3e:35: ef:ea:01:89:88:b3:21:6c:db:97:93:b9:b8:49:dd:6c:25:55: 32:94:52:85:f4:f2:a6:f0:82:db:b3:3f:73:06:2c:0e:b9:0f: 1c:8c:4d:e9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87cMw5buDiNgx8gCToMQlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2 MzFiZmIwHhcNMjYwMTAyMDQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTI0ZDdhNzJhN2RhODY5MTk2M2FjMWRhODA5NTRiNWVlMDU1ZjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDgVSgOh6eMeuxgB9YGCW5tJ/hiY ErcdHzXKRpfsRZUzHXWRlugG3q4aNDA9K9OYgQAAlhe+LlIbLj/JBR7xUqrVrGSY uWwX9+AbwlvqBsO1zfTUiKqyf0wCyUhZlZpi+RA2na7KwuBw9W7rwSdFHUSFd/uS dLMmGIkIJRIcfX0c/ztoQJclAUBiz6/IBROqA5Kt/hp7g/XGgI6AJ9VN02Ef6M2E v9qaryousBdmSmZbCmgKUjXx0q7iP0y/KuROV2RlFfIkO9ArJohVSdmHH0oGGGB1 yAYmwLBQn6iWQgfYfS9T0ZqV0Mb36yWYjVLxQ8ugfKrQE/4xmgYunjBdkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOkk16cqfahpGWOsHagJVLXuBV9pMB8GA1UdIwQY MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt YWI4ZjFmMzM4N2VlLzEvNlNUWHB5cDlxR2taWTZ3ZHFBbFV0ZTRGWDJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATfbfMA0G CSqGSIb3DQEBCwUAA4IBAQAnLeP8N9Vl4q2knojLfgBc7b+UitQrY6Sa6pAld9mU d6BYVzBGn3AuvGMhKo5qZVMQgaJpoGce+IrqMQqntW5oWt2+MccQozW+jGHBteWj Ui8flXBH99ze9nFpXi5aQXh4qt7fQ5F91OPtA9nvoWFz1lUFiBxydhloLZcLgIAT CP6hrHNIsQXM7S5tcIQqSDv6zZu4aR6+YXiv/3VouPM79IL31X+hduRxq43lkae0 AGzVKb35D6KgAPfPcoLCAORlBFmSIshxC+gLt4zNhw0ZUvUmVzYbPjXv6gGJiLMh bNuXk7m4Sd1sJVUylFKF9PKm8ILbsz9zBiwOuQ8cjE3p -----END CERTIFICATE-----Generated at Sun Jan 18 04:27:10 2026 by rpki-client