This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/RL6QZS_NULlTuG3Ek-MVDyUcgDo.roa File: RL6QZS_NULlTuG3Ek-MVDyUcgDo.roa (raw, json) Hash identifier: IplpMakeUolRKqMcAngwQ0jbRvEmY2a6dczG9twnMGc= Subject key identifier: 44:BE:90:65:2F:CD:50:B9:53:B8:6D:C4:93:E3:15:0F:25:1C:80:3A Certificate issuer: /CN=bf7f0b6dd12a374bc2935cbe9df61e093b55bef6 Certificate serial: 019B7CEDFDA2B7C750FF318765D1322A7F43 Authority key identifier: BF:7F:0B:6D:D1:2A:37:4B:C2:93:5C:BE:9D:F6:1E:09:3B:55:BE:F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v38LbdEqN0vCk1y-nfYeCTtVvvY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/RL6QZS_NULlTuG3Ek-MVDyUcgDo.roa Signing time: Fri 02 Jan 2026 04:18:50 +0000 ROA not before: Fri 02 Jan 2026 04:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34326 IP address blocks: 77.240.244.0/22 maxlen: 22 178.236.192.0/22 maxlen: 22 193.138.188.0/24 maxlen: 24 193.138.189.0/24 maxlen: 24 193.138.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.mft rsync://rpki.ripe.net/repository/DEFAULT/v38LbdEqN0vCk1y-nfYeCTtVvvY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:fd:a2:b7:c7:50:ff:31:87:65:d1:32:2a:7f:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7f0b6dd12a374bc2935cbe9df61e093b55bef6 Validity Not Before: Jan 2 04:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44be90652fcd50b953b86dc493e3150f251c803a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f8:2a:cd:c4:dd:cf:50:52:71:66:c1:13:8d: 4b:7b:98:ac:68:66:69:66:24:21:97:5e:ea:7d:1d: da:3b:93:5d:a4:79:08:52:48:11:86:78:58:06:40: e7:ea:9f:43:de:ff:b8:6e:3c:71:99:10:52:7e:09: f2:77:3d:55:01:e5:e4:55:06:92:32:4f:30:50:a2: de:5b:e7:7d:d1:b1:2e:df:4d:c1:c0:0c:68:02:4b: 02:9c:6f:5f:c9:3a:bd:de:84:fa:a9:2d:9a:5e:cb: 94:a6:20:f2:1d:0c:fc:4c:4e:0b:4f:07:35:3b:db: 19:21:98:8f:c9:e3:9c:6d:56:03:00:af:ea:18:eb: 5f:68:a9:29:9d:44:77:2c:53:67:7f:ef:24:8c:3d: 05:67:ae:e0:bc:d8:25:d4:4f:21:83:8e:d6:1d:a6: b9:5a:58:63:aa:0e:d8:76:28:2e:3c:59:a4:58:ab: c6:bd:2b:6b:0a:0a:a3:fb:e9:0e:ac:16:42:96:5d: 66:d9:38:04:2f:78:ea:73:49:c6:12:62:d8:26:22: d3:f9:77:ca:a6:f4:ff:73:33:6b:77:e3:de:11:c1: bd:4d:2e:55:37:d4:1c:26:9a:cf:2c:3d:ec:16:f2: 2d:18:8d:b1:f3:8f:66:4f:89:bd:c9:4d:3a:52:c8: c9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:BE:90:65:2F:CD:50:B9:53:B8:6D:C4:93:E3:15:0F:25:1C:80:3A X509v3 Authority Key Identifier: keyid:BF:7F:0B:6D:D1:2A:37:4B:C2:93:5C:BE:9D:F6:1E:09:3B:55:BE:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v38LbdEqN0vCk1y-nfYeCTtVvvY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/RL6QZS_NULlTuG3Ek-MVDyUcgDo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.240.244.0/22 178.236.192.0/22 193.138.188.0-193.138.190.255 Signature Algorithm: sha256WithRSAEncryption 42:0a:0a:e6:d4:b5:0c:18:a5:45:33:7c:0e:6b:ce:c2:39:22: 15:76:34:08:fe:c0:13:93:bd:24:c9:9d:12:73:13:5d:b4:1c: ec:33:ac:6d:7c:29:cb:95:6d:63:83:ab:48:2f:63:a0:e5:51: 6b:c0:76:68:bd:69:4e:40:10:0b:03:f5:ed:e1:4c:e1:34:b1: b3:f8:bb:07:24:36:b5:3f:56:2c:67:d2:9d:c4:a9:4b:16:08: 85:74:e8:30:4e:ef:7d:c7:73:a9:8d:8f:32:00:41:73:bb:b1: 56:3c:e9:d3:e8:37:ce:b0:6d:7a:c6:3c:48:3c:ce:58:04:b0: 25:47:81:dd:c8:db:fe:07:3b:b1:ce:66:4d:22:07:4b:48:01: 55:bc:18:99:20:0d:e6:d4:da:39:fa:d4:d6:9a:ca:b0:1a:46: 54:84:55:cd:65:80:74:b1:80:3c:23:83:c9:04:4a:e5:23:e2: 9d:3d:eb:cf:db:4c:d3:51:7f:e4:97:ca:af:cb:9c:71:40:42: 9b:59:9a:2a:41:97:80:a9:0f:de:86:0f:72:cd:03:67:20:8b: 0f:7b:16:f3:ab:6b:2b:db:a6:71:6e:94:0e:8f:fa:6d:e3:c0: 33:b0:26:3f:f1:f8:b2:43:4a:b6:93:41:5d:d8:45:13:16:8a: 5e:ba:35:de -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt87f2it8dQ/zGHZdEyKn9DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmN2YwYjZkZDEyYTM3NGJjMjkzNWNiZTlkZjYxZTA5M2I1 NWJlZjYwHhcNMjYwMTAyMDQxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NGJlOTA2NTJmY2Q1MGI5NTNiODZkYzQ5M2UzMTUwZjI1MWM4MDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/gqzcTdz1BScWbBE41Le5isaGZp ZiQhl17qfR3aO5NdpHkIUkgRhnhYBkDn6p9D3v+4bjxxmRBSfgnydz1VAeXkVQaS Mk8wUKLeW+d90bEu303BwAxoAksCnG9fyTq93oT6qS2aXsuUpiDyHQz8TE4LTwc1 O9sZIZiPyeOcbVYDAK/qGOtfaKkpnUR3LFNnf+8kjD0FZ67gvNgl1E8hg47WHaa5 Wlhjqg7YdiguPFmkWKvGvStrCgqj++kOrBZCll1m2TgEL3jqc0nGEmLYJiLT+XfK pvT/czNrd+PeEcG9TS5VN9QcJprPLD3sFvItGI2x849mT4m9yU06UsjJIwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFES+kGUvzVC5U7htxJPjFQ8lHIA6MB8GA1UdIwQY MBaAFL9/C23RKjdLwpNcvp32Hgk7Vb72MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjM4TGJkRXFOMHZDazF5LW5mWWVDVHRWdnZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hODYzMTctOTVjNC00ZGM3LWEzMGIt ZjdkMTEzMzlkYmFkLzEvUkw2UVpTX05VTGxUdUczRWstTVZEeVVjZ0RvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9hODYzMTctOTVjNC00ZGM3LWEzMGItZjdkMTEzMzlkYmFk LzEvdjM4TGJkRXFOMHZDazF5LW5mWWVDVHRWdnZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCTfD0AwQC suzAMAwDBALBirwDBADBir4wDQYJKoZIhvcNAQELBQADggEBAEIKCubUtQwYpUUz fA5rzsI5IhV2NAj+wBOTvSTJnRJzE120HOwzrG18KcuVbWODq0gvY6DlUWvAdmi9 aU5AEAsD9e3hTOE0sbP4uwckNrU/Vixn0p3EqUsWCIV06DBO733Hc6mNjzIAQXO7 sVY86dPoN86wbXrGPEg8zlgEsCVHgd3I2/4HO7HOZk0iB0tIAVW8GJkgDebU2jn6 1NaayrAaRlSEVc1lgHSxgDwjg8kESuUj4p0968/bTNNRf+SXyq/LnHFAQptZmipB l4CpD96GD3LNA2cgiw97FvOrayvbpnFulA6P+m3jwDOwJj/x+LJDSraTQV3YRRMW il66Nd4= -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:44 2026 by rpki-client