This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/6sFpb8WZ2FpEoOhfgAeHaWhNfBM.roa File: 6sFpb8WZ2FpEoOhfgAeHaWhNfBM.roa (raw, json) Hash identifier: DCVUEWY0Ae55SxyN7GOlHbx53XiQ/Cd9CWL2YNHIEjc= Subject key identifier: EA:C1:69:6F:C5:99:D8:5A:44:A0:E8:5F:80:07:87:69:68:4D:7C:13 Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f Certificate serial: 019B78349C8EA2F2A6FDFB67974268D6975F Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/6sFpb8WZ2FpEoOhfgAeHaWhNfBM.roa Signing time: Thu 01 Jan 2026 06:17:52 +0000 ROA not before: Thu 01 Jan 2026 06:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55410 IP address blocks: 91.108.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:9c:8e:a2:f2:a6:fd:fb:67:97:42:68:d6:97:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f Validity Not Before: Jan 1 06:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eac1696fc599d85a44a0e85f80078769684d7c13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9e:d1:40:c3:cf:f7:30:0c:9a:9e:4e:4e:70: 7e:4f:e7:1b:31:4b:f1:9a:14:f0:85:59:0c:d6:3a: cd:33:f7:18:21:d2:66:82:58:cd:64:ad:53:5d:89: 1a:10:3a:c0:1d:67:47:f9:c6:a1:6e:13:2f:3b:c9: 94:a3:9e:e0:f9:92:6a:ed:bc:aa:3c:e1:b6:66:99: 93:74:7a:72:51:a2:3d:3c:94:af:1f:5b:48:b3:b2: f8:55:cb:5f:8a:62:23:03:c3:dc:7a:1d:f0:69:38: a0:2a:b2:db:cb:7f:07:28:89:5a:e2:19:b4:59:a2: e7:f6:8c:1f:04:39:d6:03:d2:40:ac:fc:31:72:b7: b9:a1:53:56:0d:08:e0:5c:78:d5:b3:7d:30:7d:e0: de:0c:6f:84:35:4c:46:36:56:03:e0:f5:e0:93:3e: 9f:83:e1:99:61:bb:7c:9a:74:a9:0c:f7:df:00:be: a7:7e:85:6f:e8:a3:e7:26:76:0c:3d:9d:35:87:20: 12:3a:bb:27:37:4c:0e:2f:22:81:54:a9:9a:24:fd: 3f:a1:75:e4:88:90:84:48:30:e6:e6:2c:73:dd:58: 80:5d:6a:26:e7:85:b5:84:67:6d:51:3f:a9:35:0e: 40:83:e9:e8:84:a8:dc:86:4c:4e:93:f1:72:8a:6b: d3:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C1:69:6F:C5:99:D8:5A:44:A0:E8:5F:80:07:87:69:68:4D:7C:13 X509v3 Authority Key Identifier: keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/6sFpb8WZ2FpEoOhfgAeHaWhNfBM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.108.72.0/21 Signature Algorithm: sha256WithRSAEncryption b2:50:5d:d2:a7:e8:fd:9d:f6:9d:c0:1d:e8:c4:aa:a7:ea:22: 7d:39:8d:7b:4c:2d:ff:f6:46:84:5d:bb:95:8b:1a:27:9a:80: 67:66:8e:ed:5a:31:d2:57:67:69:03:44:2d:bf:43:22:21:4b: 75:ba:cd:64:50:0f:ca:57:6c:dd:37:26:02:48:df:a5:3d:f5: 35:f1:df:2b:6c:e2:57:07:f6:73:3e:f2:2d:8e:c2:5e:c0:07: 9a:d8:d4:ce:bf:9a:03:33:9b:65:d1:f4:cb:a0:b2:b0:dd:8f: b1:f7:3b:5f:a3:a4:1b:70:e1:06:9d:89:d8:6a:f3:73:c8:06: 23:3f:13:fe:79:a3:ba:5f:ee:21:bb:b4:b7:52:dd:31:48:38: a2:9b:4a:14:44:36:ea:07:55:aa:46:bb:d8:30:b5:61:e6:9d: 64:4e:0a:bd:9d:07:cf:36:16:3f:c4:78:5d:71:47:78:83:aa: fd:f9:79:ff:0c:fd:59:fb:51:7a:5b:68:26:bb:8a:b8:27:57: f5:d8:f3:5a:9c:2b:0f:6e:e5:a2:cb:8b:51:04:ba:21:7f:be: a5:25:95:02:65:81:33:dd:20:b6:6b:d7:55:f2:fd:3d:2a:6f: 57:d6:66:02:ce:89:df:3b:a8:f3:14:db:ee:71:69:ef:d5:75: 8d:41:21:77 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NJyOovKm/ftnl0Jo1pdfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNzhiYzNiZDM1MGVlZGM0ZjM3N2MyMjQ1NTZiMjUwZGE2 ZGRlNmYwHhcNMjYwMTAxMDYxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWMxNjk2ZmM1OTlkODVhNDRhMGU4NWY4MDA3ODc2OTY4NGQ3YzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnp7RQMPP9zAMmp5OTnB+T+cbMUvx mhTwhVkM1jrNM/cYIdJmgljNZK1TXYkaEDrAHWdH+cahbhMvO8mUo57g+ZJq7byq POG2ZpmTdHpyUaI9PJSvH1tIs7L4VctfimIjA8Pceh3waTigKrLby38HKIla4hm0 WaLn9owfBDnWA9JArPwxcre5oVNWDQjgXHjVs30wfeDeDG+ENUxGNlYD4PXgkz6f g+GZYbt8mnSpDPffAL6nfoVv6KPnJnYMPZ01hyASOrsnN0wOLyKBVKmaJP0/oXXk iJCESDDm5ixz3ViAXWom54W1hGdtUT+pNQ5Ag+nohKjchkxOk/FyimvTAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOrBaW/FmdhaRKDoX4AHh2loTXwTMB8GA1UdIwQY MBaAFMN4vDvTUO7cTzd8IkVWslDabd5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYt NDQxNDU1OGZkY2JiLzEvNnNGcGI4V1oyRnBFb09oZmdBZUhhV2hOZkJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYtNDQxNDU1OGZkY2Ji LzEvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDW2xIMA0G CSqGSIb3DQEBCwUAA4IBAQCyUF3Sp+j9nfadwB3oxKqn6iJ9OY17TC3/9kaEXbuV ixonmoBnZo7tWjHSV2dpA0Qtv0MiIUt1us1kUA/KV2zdNyYCSN+lPfU18d8rbOJX B/ZzPvItjsJewAea2NTOv5oDM5tl0fTLoLKw3Y+x9ztfo6QbcOEGnYnYavNzyAYj PxP+eaO6X+4hu7S3Ut0xSDiim0oURDbqB1WqRrvYMLVh5p1kTgq9nQfPNhY/xHhd cUd4g6r9+Xn/DP1Z+1F6W2gmu4q4J1f12PNanCsPbuWiy4tRBLohf76lJZUCZYEz 3SC2a9dV8v09Km9X1mYCzonfO6jzFNvucWnv1XWNQSF3 -----END CERTIFICATE-----Generated at Wed Jan 21 07:23:25 2026 by rpki-client