This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/_t6wIiysABeKcuzVW24u5ajYADU.roa File: _t6wIiysABeKcuzVW24u5ajYADU.roa (raw, json) Hash identifier: 6EqeSIlvHufo3qj6O3uSbA7U6nO0xRsokQ5NP0Lmu4U= Subject key identifier: FE:DE:B0:22:2C:AC:00:17:8A:72:EC:D5:5B:6E:2E:E5:A8:D8:00:35 Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Certificate serial: 019B78A2C57507D5B11B0342CDFE963DD706 Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/_t6wIiysABeKcuzVW24u5ajYADU.roa Signing time: Thu 01 Jan 2026 08:18:11 +0000 ROA not before: Thu 01 Jan 2026 08:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3320 IP address blocks: 109.72.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 04:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:c5:75:07:d5:b1:1b:03:42:cd:fe:96:3d:d7:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Validity Not Before: Jan 1 08:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fedeb0222cac00178a72ecd55b6e2ee5a8d80035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b9:79:38:24:65:82:b7:a0:e3:0b:c3:07:74: 4c:46:c9:3a:04:ed:73:76:be:a9:5a:1c:4b:6d:cc: 11:8a:fc:cd:d6:76:7d:f8:94:f9:95:e5:28:9c:7f: 1a:08:1b:d1:fa:d7:52:49:50:c5:40:a3:e1:bf:25: 3f:b8:64:86:1c:80:59:97:88:21:79:d5:f9:79:ef: b9:ed:b0:19:64:0d:a1:1d:d9:27:ee:30:af:69:df: 5d:75:80:bf:4a:fa:93:6f:d4:2e:05:53:cb:b7:03: 33:4a:f0:f9:4f:6b:32:08:dc:6c:fe:e8:d1:18:4b: 3a:8f:30:81:46:d3:47:c3:ec:c2:70:a3:b5:4e:7e: e6:9a:65:1c:31:d5:93:ff:46:79:8a:c7:b2:1f:80: 62:59:89:74:e8:20:51:d8:9e:90:a3:67:9c:28:9d: 71:d6:83:cd:0a:1e:e2:34:26:26:08:18:9e:3f:2e: 78:6f:57:de:47:00:5a:4b:66:d6:1d:c5:19:d5:5a: b4:4b:08:1b:dd:e8:9c:a8:27:36:83:ae:c5:a6:e7: 32:16:6d:63:08:90:74:5f:c4:7b:94:85:91:71:f3: e8:5a:86:34:77:d6:52:1c:14:44:fe:59:83:38:49: 42:2f:54:ff:9b:da:70:d0:41:5a:a0:fb:17:2b:cb: 32:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:DE:B0:22:2C:AC:00:17:8A:72:EC:D5:5B:6E:2E:E5:A8:D8:00:35 X509v3 Authority Key Identifier: keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/_t6wIiysABeKcuzVW24u5ajYADU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.72.116.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:44:d0:a9:f8:1d:45:e1:d6:6c:6b:0c:8d:c8:09:6e:35:82: 5b:26:3c:39:a6:48:28:f4:ab:02:a2:6b:01:a2:fc:6d:5b:f7: da:98:ab:cd:96:bd:ce:19:0a:c8:6b:64:b4:e8:53:e3:22:3b: b9:6e:df:34:5a:15:1d:39:19:19:4f:9d:b7:c4:5b:29:18:7f: e8:1d:4a:e0:4c:9d:33:84:93:30:49:d9:73:56:af:26:25:64: 10:a0:ca:85:ea:97:a1:da:7b:a2:75:97:78:31:a7:4d:60:6f: 5e:b3:5a:34:54:01:7d:0b:65:8a:82:22:10:e9:ee:43:55:a6: cf:e9:69:c2:29:e4:8b:a5:39:96:34:e7:20:c7:4f:e0:21:54: bb:ae:4d:31:2a:8a:da:ce:a6:6f:62:88:ba:af:43:ab:00:fe: c3:01:39:ef:12:cb:16:49:cc:e6:1f:31:20:23:8f:8f:d8:47: 17:aa:af:41:5e:cf:c9:a4:b5:9f:8c:e1:c6:f5:8e:c3:ff:fe: 7c:df:38:23:8b:c5:1e:55:b1:d3:e3:47:40:b7:f8:16:4f:12: 1a:07:fb:3b:64:02:a7:47:94:a2:92:95:85:36:f5:74:c0:13: e0:ef:88:b1:54:a4:82:f0:98:61:ea:e9:f4:77:c1:0c:61:e8: e2:b4:1b:7e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4osV1B9WxGwNCzf6WPdcGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk OGRhYmUwHhcNMjYwMTAxMDgxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZWRlYjAyMjJjYWMwMDE3OGE3MmVjZDU1YjZlMmVlNWE4ZDgwMDM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rl5OCRlgreg4wvDB3RMRsk6BO1z dr6pWhxLbcwRivzN1nZ9+JT5leUonH8aCBvR+tdSSVDFQKPhvyU/uGSGHIBZl4gh edX5ee+57bAZZA2hHdkn7jCvad9ddYC/SvqTb9QuBVPLtwMzSvD5T2syCNxs/ujR GEs6jzCBRtNHw+zCcKO1Tn7mmmUcMdWT/0Z5iseyH4BiWYl06CBR2J6Qo2ecKJ1x 1oPNCh7iNCYmCBiePy54b1feRwBaS2bWHcUZ1Vq0Swgb3eicqCc2g67FpucyFm1j CJB0X8R7lIWRcfPoWoY0d9ZSHBRE/lmDOElCL1T/m9pw0EFaoPsXK8syQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP7esCIsrAAXinLs1VtuLuWo2AA1MB8GA1UdIwQY MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt ODJhZDE0NTU1ZWFhLzEvX3Q2d0lpeXNBQmVLY3V6VlcyNHU1YWpZQURVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbUh0MA0G CSqGSIb3DQEBCwUAA4IBAQA9RNCp+B1F4dZsawyNyAluNYJbJjw5pkgo9KsComsB ovxtW/famKvNlr3OGQrIa2S06FPjIju5bt80WhUdORkZT523xFspGH/oHUrgTJ0z hJMwSdlzVq8mJWQQoMqF6peh2nuidZd4MadNYG9es1o0VAF9C2WKgiIQ6e5DVabP 6WnCKeSLpTmWNOcgx0/gIVS7rk0xKorazqZvYoi6r0OrAP7DATnvEssWSczmHzEg I4+P2EcXqq9BXs/JpLWfjOHG9Y7D//583zgji8UeVbHT40dAt/gWTxIaB/s7ZAKn R5SikpWFNvV0wBPg74ixVKSC8Jhh6un0d8EMYejitBt+ -----END CERTIFICATE-----Generated at Mon Jan 19 11:51:16 2026 by rpki-client