This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/Mk6KT-G0Nd_n-6Ue0npJ0Pqa4CI.roa File: Mk6KT-G0Nd_n-6Ue0npJ0Pqa4CI.roa (raw, json) Hash identifier: 2cQhzB6rvIgJcWKL8JGJ8AUuDd5CAqSH0lZjme07urY= Subject key identifier: 32:4E:8A:4F:E1:B4:35:DF:E7:FB:A5:1E:D2:7A:49:D0:FA:9A:E0:22 Certificate issuer: /CN=c4b7a3386723ba8a2ea482c7b68031a54122ac4f Certificate serial: 019B7B36DCAE488500BF080A86CD61C2CD99 Authority key identifier: C4:B7:A3:38:67:23:BA:8A:2E:A4:82:C7:B6:80:31:A5:41:22:AC:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/Mk6KT-G0Nd_n-6Ue0npJ0Pqa4CI.roa Signing time: Thu 01 Jan 2026 20:19:11 +0000 ROA not before: Thu 01 Jan 2026 20:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215487 IP address blocks: 77.83.59.0/24 maxlen: 24 2a14:340::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:dc:ae:48:85:00:bf:08:0a:86:cd:61:c2:cd:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4b7a3386723ba8a2ea482c7b68031a54122ac4f Validity Not Before: Jan 1 20:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=324e8a4fe1b435dfe7fba51ed27a49d0fa9ae022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:46:2f:81:4a:af:15:f9:70:e4:40:c9:ae:e6: 21:29:3c:f7:3d:fa:e9:6b:68:c1:35:86:0a:7d:af: 1f:b9:47:bb:b7:f3:d2:fb:8a:9f:59:d9:05:17:84: 16:25:55:7b:f3:19:ba:5a:22:c2:c3:bb:5a:89:31: 6a:4e:b1:77:e8:94:e0:d3:11:55:61:4d:86:15:28: 2c:11:79:e1:39:93:d7:35:f2:01:26:ed:75:42:11: 8e:ba:df:3b:ab:c8:db:08:73:a5:c6:a9:6a:af:dd: e0:f0:f2:90:53:d7:e7:a9:73:19:be:f5:1f:13:bd: e8:91:c8:80:a8:ef:67:08:8d:d9:1e:3d:b4:3a:90: 6d:59:a0:36:94:9c:dc:33:a2:90:e8:12:a1:5a:b3: 1e:5a:a5:51:f1:a1:a1:42:03:97:03:2c:38:de:9f: eb:1b:cd:c1:03:c0:6b:9a:54:b9:cf:4d:a8:73:69: 3b:f0:33:d9:3f:1d:e2:f8:38:4e:d9:15:1b:8c:2f: 96:84:a8:75:b6:3e:55:dc:c0:8b:f2:02:f8:ba:ad: a8:62:b1:d8:6b:c2:29:a1:13:d0:a5:b4:4f:18:c0: 3e:61:6d:bd:34:7d:4d:a2:1e:16:4f:78:cd:99:69: ec:50:2a:e3:76:3f:37:50:02:b8:a1:b0:12:a1:40: 83:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:4E:8A:4F:E1:B4:35:DF:E7:FB:A5:1E:D2:7A:49:D0:FA:9A:E0:22 X509v3 Authority Key Identifier: keyid:C4:B7:A3:38:67:23:BA:8A:2E:A4:82:C7:B6:80:31:A5:41:22:AC:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/Mk6KT-G0Nd_n-6Ue0npJ0Pqa4CI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.83.59.0/24 IPv6: 2a14:340::/29 Signature Algorithm: sha256WithRSAEncryption 55:4f:fa:ff:2d:05:bc:08:98:2c:63:01:53:4b:1d:0f:91:0d: 3b:14:59:c6:a4:63:25:e3:b8:f3:58:63:91:6f:84:14:9f:40: d0:5f:5f:a7:c4:a1:82:00:91:f5:4e:d7:a4:7a:13:ac:fc:57: b6:3c:19:5a:68:48:82:8a:2f:40:68:b5:11:2b:59:c1:61:71: c0:69:a7:e5:d0:43:0b:7e:5e:1b:a5:18:c0:db:d3:b2:26:cf: 5c:bf:53:55:bc:46:83:92:1e:c4:6b:fe:29:7b:bc:79:c2:82: 41:1f:a3:e2:ea:70:c8:a6:f7:40:c5:bf:f1:43:ea:e2:89:1f: 07:68:51:30:73:2c:a5:b8:6c:e2:c7:6e:22:1d:52:38:01:22: a2:6c:23:fa:f6:72:33:40:07:39:12:45:4e:38:49:6a:30:5e: d2:c2:c3:39:f8:7c:a5:d7:36:a7:09:b8:1c:a6:f7:45:04:9b: a2:0f:e5:d6:4b:dc:68:d6:a0:5d:fc:f3:b8:99:05:79:48:78: a0:ad:54:bc:f7:23:15:1b:2e:61:02:17:94:4a:f4:d5:91:d3: 90:15:f5:46:73:65:bd:8c:9e:d6:b5:47:bc:12:d6:52:27:fd: 60:e7:d2:2f:8f:d8:fb:e9:35:03:eb:25:09:ec:fe:4b:b4:9b: f8:18:ce:92 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7NtyuSIUAvwgKhs1hws2ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0YjdhMzM4NjcyM2JhOGEyZWE0ODJjN2I2ODAzMWE1NDEy MmFjNGYwHhcNMjYwMTAxMjAxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjRlOGE0ZmUxYjQzNWRmZTdmYmE1MWVkMjdhNDlkMGZhOWFlMDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEYvgUqvFflw5EDJruYhKTz3Pfrp a2jBNYYKfa8fuUe7t/PS+4qfWdkFF4QWJVV78xm6WiLCw7taiTFqTrF36JTg0xFV YU2GFSgsEXnhOZPXNfIBJu11QhGOut87q8jbCHOlxqlqr93g8PKQU9fnqXMZvvUf E73okciAqO9nCI3ZHj20OpBtWaA2lJzcM6KQ6BKhWrMeWqVR8aGhQgOXAyw43p/r G83BA8BrmlS5z02oc2k78DPZPx3i+DhO2RUbjC+WhKh1tj5V3MCL8gL4uq2oYrHY a8IpoRPQpbRPGMA+YW29NH1Noh4WT3jNmWnsUCrjdj83UAK4obASoUCDPQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDJOik/htDXf5/ulHtJ6SdD6muAiMB8GA1UdIwQY MBaAFMS3ozhnI7qKLqSCx7aAMaVBIqxPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveExlak9HY2p1b291cElMSHRvQXhwVUVpckU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9hYTdiZjYtNjUyNS00Mzk0LTgwYmEt YmQ0MGRmYWU3ODg2LzEvTWs2S1QtRzBOZF9uLTZVZTBucEowUHFhNENJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9hYTdiZjYtNjUyNS00Mzk0LTgwYmEtYmQ0MGRmYWU3ODg2 LzEveExlak9HY2p1b291cElMSHRvQXhwVUVpckU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQATVM7MA0E AgACMAcDBQMqFANAMA0GCSqGSIb3DQEBCwUAA4IBAQBVT/r/LQW8CJgsYwFTSx0P kQ07FFnGpGMl47jzWGORb4QUn0DQX1+nxKGCAJH1TtekehOs/Fe2PBlaaEiCii9A aLURK1nBYXHAaafl0EMLfl4bpRjA29OyJs9cv1NVvEaDkh7Ea/4pe7x5woJBH6Pi 6nDIpvdAxb/xQ+riiR8HaFEwcyyluGzix24iHVI4ASKibCP69nIzQAc5EkVOOElq MF7SwsM5+Hyl1zanCbgcpvdFBJuiD+XWS9xo1qBd/PO4mQV5SHigrVS89yMVGy5h AheUSvTVkdOQFfVGc2W9jJ7WtUe8EtZSJ/1g59Ivj9j76TUD6yUJ7P5LtJv4GM6S -----END CERTIFICATE-----Generated at Mon Jan 26 10:23:33 2026 by rpki-client