This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6amDSMQ_855VNIbRII_DXHjnq_k.roa File: 6amDSMQ_855VNIbRII_DXHjnq_k.roa (raw, json) Hash identifier: HCMqnracA8A73jBfs9v8hnmmkLDx0vR0XfYQrjLn7vw= Subject key identifier: E9:A9:83:48:C4:3F:F3:9E:55:34:86:D1:20:8F:C3:5C:78:E7:AB:F9 Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881 Certificate serial: 019B7B369D4BC16CDBFA872DD5A520DA132A Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6amDSMQ_855VNIbRII_DXHjnq_k.roa Signing time: Thu 01 Jan 2026 20:18:55 +0000 ROA not before: Thu 01 Jan 2026 20:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197788 IP address blocks: 185.78.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:9d:4b:c1:6c:db:fa:87:2d:d5:a5:20:da:13:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881 Validity Not Before: Jan 1 20:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e9a98348c43ff39e553486d1208fc35c78e7abf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:72:63:9a:86:05:c7:c2:eb:13:6e:d9:8a:18: 2a:81:bb:f1:5b:2c:32:c6:9e:3e:ce:7e:3d:9a:f3: ca:79:9d:84:fc:b6:bd:45:d8:14:13:ed:0f:18:98: 32:29:ae:e6:df:fc:ce:5b:1e:ab:6c:82:bb:fe:ba: e9:70:cb:fd:d7:4b:30:10:ff:d9:7c:f8:f2:6c:a7: e2:9a:13:c9:e0:74:c7:bb:f1:09:a4:a2:56:d8:bc: 8b:fe:11:ff:11:ac:8b:49:62:36:da:94:a0:7d:a0: f9:4b:57:9b:b8:c3:cc:12:72:15:80:35:0e:d7:25: 64:ec:56:2d:a2:e0:7c:d1:ca:03:46:01:21:ca:48: 4c:6e:c5:09:83:e2:a6:8c:8b:bb:43:7b:91:d9:87: 9c:64:dc:2f:c6:db:fa:fe:2f:33:6a:42:12:e2:5e: 22:0a:04:2d:97:5d:07:da:3c:ce:c2:75:f4:30:05: d8:f9:7e:16:69:b9:26:42:e6:22:83:91:60:47:ed: e3:06:30:fc:8b:d1:05:8e:ce:d5:aa:6e:be:c1:6e: 63:86:9f:85:28:80:6e:ff:24:e0:71:32:68:76:2c: 6f:6e:3e:bf:13:82:a8:5c:7a:8b:1b:8f:05:e7:c0: dd:7a:cc:7c:88:24:c3:11:43:79:fa:7e:82:7e:e4: c1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:A9:83:48:C4:3F:F3:9E:55:34:86:D1:20:8F:C3:5C:78:E7:AB:F9 X509v3 Authority Key Identifier: keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6amDSMQ_855VNIbRII_DXHjnq_k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.78.157.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:ec:7a:5e:f9:05:a9:4e:9e:54:9c:51:07:a8:cf:65:fe:60: f7:f7:96:a0:e0:66:72:15:bc:68:ec:62:1f:eb:91:5b:0d:72: cc:14:cf:b8:68:b3:61:dc:35:87:6c:d5:ca:5c:a5:c1:25:73: 8a:23:8f:a8:19:ff:32:28:3c:3b:26:c3:45:d4:de:1d:79:05: fe:71:83:81:b9:b2:32:d9:a5:88:27:be:66:97:8c:3c:74:c9: 27:ba:09:58:4d:a1:ae:4b:1a:99:44:ec:c7:fc:37:66:54:d3: 22:f9:de:b3:97:5b:a8:2f:12:5b:a8:ab:fa:c4:d8:bb:32:3f: b3:79:a8:47:ec:e3:c6:8e:e7:b8:3c:e4:16:26:58:ac:fa:db: b3:cb:25:3a:89:71:fd:bf:04:bc:84:50:47:b8:80:71:86:7f: 37:40:48:b8:b6:b5:64:5c:9f:93:6e:19:d6:93:ca:e9:cd:d1: 9e:3b:d4:22:b1:37:ec:c2:f5:cf:d2:e6:d9:1c:93:31:e8:36: e4:3f:78:bb:94:d3:0d:68:57:e8:f4:4c:8d:e9:b9:c4:37:d0: e6:a5:5e:04:9c:3c:be:c4:2b:5d:4a:29:f3:cf:e4:2a:d9:c9: c5:2e:78:51:1c:cd:83:85:1a:aa:d2:c5:79:5f:ac:ec:aa:23: c9:e1:fa:75 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Np1LwWzb+oct1aUg2hMqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MDllZTNkNjE4OTc0ZGEwY2JkODA1YTJkYTgwNDEwYTQ5 ODk4ODEwHhcNMjYwMTAxMjAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOWE5ODM0OGM0M2ZmMzllNTUzNDg2ZDEyMDhmYzM1Yzc4ZTdhYmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHJjmoYFx8LrE27ZihgqgbvxWywy xp4+zn49mvPKeZ2E/La9RdgUE+0PGJgyKa7m3/zOWx6rbIK7/rrpcMv910swEP/Z fPjybKfimhPJ4HTHu/EJpKJW2LyL/hH/EayLSWI22pSgfaD5S1ebuMPMEnIVgDUO 1yVk7FYtouB80coDRgEhykhMbsUJg+KmjIu7Q3uR2YecZNwvxtv6/i8zakIS4l4i CgQtl10H2jzOwnX0MAXY+X4WabkmQuYig5FgR+3jBjD8i9EFjs7Vqm6+wW5jhp+F KIBu/yTgcTJodixvbj6/E4KoXHqLG48F58Ddesx8iCTDEUN5+n6CfuTBSQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOmpg0jEP/OeVTSG0SCPw1x456v5MB8GA1UdIwQY MBaAFOkJ7j1hiXTaDL2AWi2oBBCkmJiBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEt ZGQxMTVmOWUzMzAxLzEvNmFtRFNNUV84NTVWTkliUklJX0RYSGpucV9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEtZGQxMTVmOWUzMzAx LzEvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuU6dMA0G CSqGSIb3DQEBCwUAA4IBAQAL7Hpe+QWpTp5UnFEHqM9l/mD395ag4GZyFbxo7GIf 65FbDXLMFM+4aLNh3DWHbNXKXKXBJXOKI4+oGf8yKDw7JsNF1N4deQX+cYOBubIy 2aWIJ75ml4w8dMknuglYTaGuSxqZROzH/DdmVNMi+d6zl1uoLxJbqKv6xNi7Mj+z eahH7OPGjue4POQWJlis+tuzyyU6iXH9vwS8hFBHuIBxhn83QEi4trVkXJ+TbhnW k8rpzdGeO9QisTfswvXP0ubZHJMx6DbkP3i7lNMNaFfo9EyN6bnEN9DmpV4EnDy+ xCtdSinzz+Qq2cnFLnhRHM2DhRqq0sV5X6zsqiPJ4fp1 -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:45 2026 by rpki-client