This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/6LC4FnmLLsng6HVU2xR3jbERaDc.roa File: 6LC4FnmLLsng6HVU2xR3jbERaDc.roa (raw, json) Hash identifier: LpXh0JZ4HonUdcN7azN27CT2g+jjECs6HIXpWyOrLLQ= Subject key identifier: E8:B0:B8:16:79:8B:2E:C9:E0:E8:75:54:DB:14:77:8D:B1:11:68:37 Certificate issuer: /CN=188ed4884f111939ca6c7f0f34b2792b39b93423 Certificate serial: 019B7D5B551013C9C0EF8542B82CE7E4D7E3 Authority key identifier: 18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/6LC4FnmLLsng6HVU2xR3jbERaDc.roa Signing time: Fri 02 Jan 2026 06:18:16 +0000 ROA not before: Fri 02 Jan 2026 06:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 192.76.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:55:10:13:c9:c0:ef:85:42:b8:2c:e7:e4:d7:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=188ed4884f111939ca6c7f0f34b2792b39b93423 Validity Not Before: Jan 2 06:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8b0b816798b2ec9e0e87554db14778db1116837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:78:76:5b:d5:c0:37:1f:57:d7:c7:f4:5b:27: 74:aa:52:35:9f:32:68:cf:dc:27:d8:5e:62:bc:15: 60:93:d7:25:7a:27:4f:26:ea:9a:bf:fe:43:4f:ad: ef:a5:38:75:ea:01:46:4a:96:10:0c:ef:e2:f8:34: a7:5c:3e:d5:f7:84:b7:3a:0c:f8:32:68:f2:46:c1: b1:ae:43:1f:81:7e:f8:4e:10:d9:c7:3f:a1:c1:22: 91:f3:79:f5:b0:f0:2d:a8:cc:aa:31:fa:40:2c:3d: 22:4a:37:af:3a:87:f7:0c:34:36:51:77:b6:69:d8: 4a:cd:99:a9:66:21:e9:b1:2d:89:17:1c:08:ec:ce: a9:b8:9a:77:47:ba:99:70:4e:d8:32:62:7b:a1:99: 07:ac:cf:9b:4c:7e:9d:40:54:ff:9b:58:dc:3b:e7: ce:02:51:0e:ff:68:fd:8e:b2:2b:95:11:dc:4a:8e: d7:76:3e:db:ea:4e:7c:ef:fc:46:64:ad:8e:d3:26: 5e:f7:cf:24:dc:53:e1:88:d2:a4:39:e4:34:5b:58: 1c:3f:a9:40:05:f7:3f:45:86:d3:b4:33:c6:1a:53: 00:11:cf:dc:d7:47:07:9d:ed:34:df:1c:bd:98:90: 82:60:e2:d2:80:c5:af:3e:7f:94:0b:f3:be:59:ae: 90:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:B0:B8:16:79:8B:2E:C9:E0:E8:75:54:DB:14:77:8D:B1:11:68:37 X509v3 Authority Key Identifier: keyid:18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/6LC4FnmLLsng6HVU2xR3jbERaDc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.76.154.0/24 Signature Algorithm: sha256WithRSAEncryption 18:7e:64:1e:93:d6:ac:94:9e:15:4e:c9:70:8b:d8:c0:1b:c5: 29:41:02:72:6c:a8:50:b9:55:ac:2b:45:07:04:70:4b:97:7a: 3f:ed:af:05:88:17:ee:eb:b0:b7:4d:ff:eb:0b:d0:8c:a8:0e: ca:ac:6b:d7:03:ed:73:ce:f6:17:54:af:32:10:3a:09:46:1c: 02:c1:f4:a3:05:23:01:63:64:38:8d:4b:18:93:58:ae:17:ea: 32:60:5e:af:fc:2b:04:e7:cd:9d:52:f5:9a:89:6d:14:6b:35: 3d:7e:54:21:15:05:31:9d:c8:8c:d7:b7:54:4c:1d:78:4d:d7: 05:eb:91:02:98:2e:b2:87:45:af:b8:3e:f0:9d:21:2e:05:5c: a7:d4:92:41:06:c6:9f:4b:7c:b3:8d:d3:5d:b1:e9:e4:02:ef: 50:6a:f7:6e:a4:3b:81:a6:34:99:8b:82:5e:fd:2c:0e:da:98: 19:cb:01:43:8d:d3:1d:6a:00:a4:f6:60:71:3e:8a:6f:a9:67: 49:43:73:85:02:ac:a9:2c:76:09:12:9c:b7:11:b2:cc:b9:71: 71:19:b4:41:68:bb:ed:bb:dd:7c:3b:92:1e:b7:f3:1b:5e:94: cc:f1:01:4c:09:29:c7:85:e6:4f:05:d5:4a:af:86:c2:39:aa: 9e:80:fb:8c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W1UQE8nA74VCuCzn5NfjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4OGVkNDg4NGYxMTE5MzljYTZjN2YwZjM0YjI3OTJiMzli OTM0MjMwHhcNMjYwMTAyMDYxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOGIwYjgxNjc5OGIyZWM5ZTBlODc1NTRkYjE0Nzc4ZGIxMTE2ODM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Xh2W9XANx9X18f0Wyd0qlI1nzJo z9wn2F5ivBVgk9cleidPJuqav/5DT63vpTh16gFGSpYQDO/i+DSnXD7V94S3Ogz4 MmjyRsGxrkMfgX74ThDZxz+hwSKR83n1sPAtqMyqMfpALD0iSjevOof3DDQ2UXe2 adhKzZmpZiHpsS2JFxwI7M6puJp3R7qZcE7YMmJ7oZkHrM+bTH6dQFT/m1jcO+fO AlEO/2j9jrIrlRHcSo7Xdj7b6k587/xGZK2O0yZe988k3FPhiNKkOeQ0W1gcP6lA Bfc/RYbTtDPGGlMAEc/c10cHne003xy9mJCCYOLSgMWvPn+UC/O+Wa6QuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOiwuBZ5iy7J4Oh1VNsUd42xEWg3MB8GA1UdIwQY MBaAFBiO1IhPERk5ymx/DzSyeSs5uTQjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0k3VWlFOFJHVG5LYkg4UE5MSjVLem01TkNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9iODg1MzItOTk3NC00NjEyLTk0YzQt NWUwNzc3YjA0MDQ5LzEvNkxDNEZubUxMc25nNkhWVTJ4UjNqYkVSYURjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9iODg1MzItOTk3NC00NjEyLTk0YzQtNWUwNzc3YjA0MDQ5 LzEvR0k3VWlFOFJHVG5LYkg4UE5MSjVLem01TkNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEyaMA0G CSqGSIb3DQEBCwUAA4IBAQAYfmQek9aslJ4VTslwi9jAG8UpQQJybKhQuVWsK0UH BHBLl3o/7a8FiBfu67C3Tf/rC9CMqA7KrGvXA+1zzvYXVK8yEDoJRhwCwfSjBSMB Y2Q4jUsYk1iuF+oyYF6v/CsE582dUvWaiW0UazU9flQhFQUxnciM17dUTB14TdcF 65ECmC6yh0WvuD7wnSEuBVyn1JJBBsafS3yzjdNdsenkAu9QavdupDuBpjSZi4Je /SwO2pgZywFDjdMdagCk9mBxPopvqWdJQ3OFAqypLHYJEpy3EbLMuXFxGbRBaLvt u918O5Iet/MbXpTM8QFMCSnHheZPBdVKr4bCOaqegPuM -----END CERTIFICATE-----Generated at Tue Jan 27 11:25:38 2026 by rpki-client