This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/6ukLV0KulIPLZFYeMSixVEL1RhM.roa File: 6ukLV0KulIPLZFYeMSixVEL1RhM.roa (raw, json) Hash identifier: wWVKYiLRQV/kCSgMzDQKw35a/Is44S5aHAIYhJlN+Hw= Subject key identifier: EA:E9:0B:57:42:AE:94:83:CB:64:56:1E:31:28:B1:54:42:F5:46:13 Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3 Certificate serial: 019B7C8054F41481399E82DF7E13878F7E61 Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/6ukLV0KulIPLZFYeMSixVEL1RhM.roa Signing time: Fri 02 Jan 2026 02:19:03 +0000 ROA not before: Fri 02 Jan 2026 02:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42689 IP address blocks: 77.111.120.0/24 maxlen: 24 77.111.122.0/24 maxlen: 24 91.190.188.0/24 maxlen: 24 91.190.190.0/24 maxlen: 24 92.61.96.0/24 maxlen: 24 92.61.98.0/24 maxlen: 24 92.61.99.0/24 maxlen: 24 92.61.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:54:f4:14:81:39:9e:82:df:7e:13:87:8f:7e:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3 Validity Not Before: Jan 2 02:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eae90b5742ae9483cb64561e3128b15442f54613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1c:a0:c7:cf:f9:78:78:90:b7:07:01:dd:90: 1f:cc:ba:23:87:38:f4:ce:60:02:87:90:42:c8:f3: 2a:60:99:9f:2d:9c:61:10:4c:26:33:40:62:b1:bd: d4:66:1a:7c:12:d0:f5:ba:94:10:f0:b4:84:b7:3c: 9f:e7:43:fb:eb:35:ac:87:54:94:3f:a0:92:e0:21: 1e:af:c8:f8:89:b6:98:5f:36:a3:c1:d2:77:17:b8: 96:43:26:b2:ca:7d:1f:04:3a:9e:aa:4f:2d:92:96: 50:42:90:e3:a2:95:10:2d:84:e2:29:b7:38:e3:48: be:e2:bb:84:fa:9d:2f:cf:85:fa:c0:82:02:fa:c2: ef:fa:96:0d:f5:14:2d:ff:6a:9b:6a:07:b9:1b:5b: d1:fb:b1:f1:7f:f8:60:f4:a0:aa:0e:8d:33:39:8a: 5d:cb:a8:01:38:95:0a:73:a1:7c:7c:b7:ba:32:3b: 4b:60:4b:fc:dd:94:76:b6:be:3e:8e:2c:f4:11:48: b2:96:2f:84:cb:b4:c6:08:6e:1e:c3:4d:84:30:ff: 50:de:ed:ba:a5:c0:df:d6:77:f3:ba:b5:ce:8d:31: 2d:d0:40:e1:cb:93:07:59:75:7f:b7:a1:ad:0d:7f: 62:dd:30:c9:c9:fd:54:12:3c:28:82:0c:eb:56:a5: 9a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:E9:0B:57:42:AE:94:83:CB:64:56:1E:31:28:B1:54:42:F5:46:13 X509v3 Authority Key Identifier: keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/6ukLV0KulIPLZFYeMSixVEL1RhM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.111.120.0/24 77.111.122.0/24 91.190.188.0/24 91.190.190.0/24 92.61.96.0/24 92.61.98.0-92.61.101.255 Signature Algorithm: sha256WithRSAEncryption 0e:e5:4b:ae:61:53:e3:71:1f:fe:f8:40:2b:01:5e:d7:74:82: 94:54:d3:9f:73:1d:f5:5f:fb:b6:9e:90:a6:8f:a3:2f:6a:fc: f2:cc:68:a5:e1:2c:b1:9a:c1:40:cd:3f:c3:f6:58:42:99:f1: 96:20:a7:65:74:2b:f3:89:ed:8d:5c:4f:cb:74:c9:47:4c:15: a6:85:d2:ac:92:a8:9a:9f:c7:8a:ae:78:ca:ff:7b:4f:52:ca: fe:3f:a1:7e:cd:25:9d:22:dd:7f:48:57:b5:8a:4d:ab:00:1c: 8c:5f:21:4a:6a:f4:64:50:2f:e4:ba:a3:fc:18:7a:57:43:6a: 4e:f4:c6:7f:46:f4:25:3f:40:33:cc:21:92:d1:fa:ce:e4:54: e7:52:d7:c8:94:8c:19:39:48:84:e9:33:70:e9:44:ea:79:06: ba:77:87:41:ad:68:da:5a:5e:2c:f6:7f:44:7f:35:e0:3c:01: 9b:05:d9:a2:02:b1:7c:0e:c9:29:8a:3c:53:33:39:ca:38:47: cc:8f:5f:10:59:04:d9:9f:b1:84:0b:3b:34:f4:fe:87:da:c0: 3d:c3:5c:83:e0:59:3f:78:bd:09:f0:c1:fd:6d:7a:4e:d1:49: 4b:01:8c:ec:7d:d0:6b:35:93:fd:b4:d9:b2:a5:6b:1f:33:40: ea:c5:89:07 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt8gFT0FIE5noLffhOHj35hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MTk3NTU4M2IyNTAzNjJjODE1MGY2M2FkYjMwYTBmNmEw YzZmYzMwHhcNMjYwMTAyMDIxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWU5MGI1NzQyYWU5NDgzY2I2NDU2MWUzMTI4YjE1NDQyZjU0NjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxygx8/5eHiQtwcB3ZAfzLojhzj0 zmACh5BCyPMqYJmfLZxhEEwmM0Bisb3UZhp8EtD1upQQ8LSEtzyf50P76zWsh1SU P6CS4CEer8j4ibaYXzajwdJ3F7iWQyayyn0fBDqeqk8tkpZQQpDjopUQLYTiKbc4 40i+4ruE+p0vz4X6wIIC+sLv+pYN9RQt/2qbage5G1vR+7Hxf/hg9KCqDo0zOYpd y6gBOJUKc6F8fLe6MjtLYEv83ZR2tr4+jiz0EUiyli+Ey7TGCG4ew02EMP9Q3u26 pcDf1nfzurXOjTEt0EDhy5MHWXV/t6GtDX9i3TDJyf1UEjwoggzrVqWaRwIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFOrpC1dCrpSDy2RWHjEosVRC9UYTMB8GA1UdIwQY MBaAFGQZdVg7JQNiyBUPY62zCg9qDG/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQt ZjFjMzNhYTJmZDUwLzEvNnVrTFYwS3VsSVBMWkZZZU1TaXhWRUwxUmhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQtZjFjMzNhYTJmZDUw LzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQATW94AwQA TW96AwQAW768AwQAW76+AwQAXD1gMAwDBAFcPWIDBAFcPWQwDQYJKoZIhvcNAQEL BQADggEBAA7lS65hU+NxH/74QCsBXtd0gpRU059zHfVf+7aekKaPoy9q/PLMaKXh LLGawUDNP8P2WEKZ8ZYgp2V0K/OJ7Y1cT8t0yUdMFaaF0qySqJqfx4queMr/e09S yv4/oX7NJZ0i3X9IV7WKTasAHIxfIUpq9GRQL+S6o/wYeldDak70xn9G9CU/QDPM IZLR+s7kVOdS18iUjBk5SITpM3DpROp5Brp3h0GtaNpaXiz2f0R/NeA8AZsF2aIC sXwOySmKPFMzOco4R8yPXxBZBNmfsYQLOzT0/ofawD3DXIPgWT94vQnwwf1tek7R SUsBjOx90Gs1k/202bKlax8zQOrFiQc= -----END CERTIFICATE-----Generated at Mon Jan 19 23:21:45 2026 by rpki-client