This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/6lV-Ig0ibT7buw89y8SDD91PacM.roa File: 6lV-Ig0ibT7buw89y8SDD91PacM.roa (raw, json) Hash identifier: z/nMgZvG45Jj2T1F4u7ms664fZqwadHDodPyN4djEeg= Subject key identifier: EA:55:7E:22:0D:22:6D:3E:DB:BB:0F:3D:CB:C4:83:0F:DD:4F:69:C3 Certificate issuer: /CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5 Certificate serial: 019B7DCADFF46BDF95F85AC55D86A4A4878A Authority key identifier: D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/6lV-Ig0ibT7buw89y8SDD91PacM.roa Signing time: Fri 02 Jan 2026 08:20:05 +0000 ROA not before: Fri 02 Jan 2026 08:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 78.153.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 14:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:df:f4:6b:df:95:f8:5a:c5:5d:86:a4:a4:87:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5 Validity Not Before: Jan 2 08:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea557e220d226d3edbbb0f3dcbc4830fdd4f69c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4a:2a:9c:bf:50:3a:4a:a8:c8:1d:c4:19:8c: 10:26:80:a8:3b:b9:b4:c9:f4:b7:eb:7c:a4:0e:c7: 8e:70:85:52:8c:86:db:c3:a7:ce:8b:2e:f9:ce:40: 8e:19:ed:ed:64:82:66:a1:51:d4:86:02:0c:e2:ac: 08:49:9b:44:bc:57:b0:e2:7d:38:9a:e6:f5:17:41: a7:52:15:12:d3:27:e8:06:fb:ab:8c:16:e7:04:14: cc:f3:2d:d8:77:f4:7b:d5:8a:01:b2:88:39:59:75: 02:69:3d:a9:a9:8f:fa:6c:f6:a2:5f:b4:18:8b:9c: 4a:5e:ac:d0:99:a8:68:10:9f:f0:fe:a3:60:49:79: c0:9e:74:a7:8a:a6:fb:37:57:50:bc:cd:12:79:8d: 42:4e:eb:9e:89:bc:e3:9d:ce:36:26:89:9d:ff:0d: 28:a0:98:3e:c3:f0:10:af:f2:8f:3c:6e:a6:6c:aa: 69:83:b6:09:bf:da:24:fd:6a:e2:9e:28:e3:3b:86: 41:a8:6d:d2:48:e1:4b:71:9c:e6:3b:9f:2b:c0:0d: 50:af:1e:f6:f2:b0:8a:88:6f:b3:57:58:48:cc:70: 29:ee:56:00:c0:6f:1d:95:40:7b:cc:53:7e:a8:12: 80:ca:4d:0d:c6:99:af:03:cf:9a:66:ee:e1:5c:39: a6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:55:7E:22:0D:22:6D:3E:DB:BB:0F:3D:CB:C4:83:0F:DD:4F:69:C3 X509v3 Authority Key Identifier: keyid:D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/6lV-Ig0ibT7buw89y8SDD91PacM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.153.96.0/20 Signature Algorithm: sha256WithRSAEncryption 52:b0:d2:e1:48:9a:24:68:14:1d:73:58:40:87:e7:fa:3b:b5: cc:13:ab:f1:5a:33:9e:09:d4:37:10:d7:28:fb:aa:c1:3e:d8: b6:13:eb:c0:e6:96:09:8b:00:72:9e:1e:7e:9a:22:71:dc:2c: d8:8f:a6:f2:c8:d2:9f:d6:74:a3:41:b2:de:41:ba:5f:b6:14: 59:82:4a:53:e7:71:5d:72:0f:4a:b8:82:f7:13:06:73:0e:87: 27:b7:b9:f6:81:57:c3:14:65:21:3b:1e:98:23:2f:bc:65:d0: e8:18:ea:03:b9:ad:05:ee:7a:c7:9d:65:b8:10:8d:2d:b9:42: d0:c8:2c:0f:69:0c:fe:15:aa:b1:a4:ad:cb:1e:7d:37:c6:7c: b0:db:25:23:29:ac:09:82:4e:f0:37:81:80:49:94:0b:65:91: 20:d2:61:48:7d:c5:f9:b1:0e:c8:e7:0b:4d:c2:df:ba:1a:e9: e3:e4:52:f6:da:b3:9e:d2:3d:17:14:03:dd:9a:b6:00:d5:9a: c8:5d:39:9d:9d:43:9d:6a:fb:95:fa:8e:88:31:20:7e:ee:f3: 2b:fc:c2:ea:3c:38:21:99:62:3a:f4:5f:75:05:25:62:61:71: 1c:d2:7f:e9:96:e1:86:96:1e:3a:86:0c:b0:e1:5b:2d:09:c3: b7:14:08:6c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yt/0a9+V+FrFXYakpIeKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNzFlYTA2YjFhNzU2Y2JmNDZhZTA0NjQ4NGJiZDNlNGZj ZTRjYTUwHhcNMjYwMTAyMDgyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTU1N2UyMjBkMjI2ZDNlZGJiYjBmM2RjYmM0ODMwZmRkNGY2OWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkoqnL9QOkqoyB3EGYwQJoCoO7m0 yfS363ykDseOcIVSjIbbw6fOiy75zkCOGe3tZIJmoVHUhgIM4qwISZtEvFew4n04 mub1F0GnUhUS0yfoBvurjBbnBBTM8y3Yd/R71YoBsog5WXUCaT2pqY/6bPaiX7QY i5xKXqzQmahoEJ/w/qNgSXnAnnSniqb7N1dQvM0SeY1CTuueibzjnc42Jomd/w0o oJg+w/AQr/KPPG6mbKppg7YJv9ok/WrinijjO4ZBqG3SSOFLcZzmO58rwA1Qrx72 8rCKiG+zV1hIzHAp7lYAwG8dlUB7zFN+qBKAyk0NxpmvA8+aZu7hXDmmoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOpVfiINIm0+27sPPcvEgw/dT2nDMB8GA1UdIwQY MBaAFNJx6gaxp1bL9GrgRkhLvT5PzkylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG5IcUJyR25Wc3YwYXVCR1NFdTlQa19PVEtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hY2VjM2QtNzc1ZS00ZDBlLTg0MzMt ZmMzZDVjMjIzMGIyLzEvNmxWLUlnMGliVDdidXc4OXk4U0REOTFQYWNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9hY2VjM2QtNzc1ZS00ZDBlLTg0MzMtZmMzZDVjMjIzMGIy LzEvMG5IcUJyR25Wc3YwYXVCR1NFdTlQa19PVEtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQETplgMA0G CSqGSIb3DQEBCwUAA4IBAQBSsNLhSJokaBQdc1hAh+f6O7XME6vxWjOeCdQ3ENco +6rBPti2E+vA5pYJiwBynh5+miJx3CzYj6byyNKf1nSjQbLeQbpfthRZgkpT53Fd cg9KuIL3EwZzDocnt7n2gVfDFGUhOx6YIy+8ZdDoGOoDua0F7nrHnWW4EI0tuULQ yCwPaQz+FaqxpK3LHn03xnyw2yUjKawJgk7wN4GASZQLZZEg0mFIfcX5sQ7I5wtN wt+6Gunj5FL22rOe0j0XFAPdmrYA1ZrIXTmdnUOdavuV+o6IMSB+7vMr/MLqPDgh mWI69F91BSViYXEc0n/pluGGlh46hgyw4VstCcO3FAhs -----END CERTIFICATE-----Generated at Wed Jan 7 23:51:45 2026 by rpki-client