This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/l6g5cRLwfzGSk8db5JuW24EySDI.roa File: l6g5cRLwfzGSk8db5JuW24EySDI.roa (raw, json) Hash identifier: vgdCsDG7+TIHFOHJjv7u8i4m1Io6EEjzSnBPC2bEVVY= Subject key identifier: 97:A8:39:71:12:F0:7F:31:92:93:C7:5B:E4:9B:96:DB:81:32:48:32 Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Certificate serial: 019B7BA327A7E6208E548D76FB3733B9DFF5 Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/l6g5cRLwfzGSk8db5JuW24EySDI.roa Signing time: Thu 01 Jan 2026 22:17:28 +0000 ROA not before: Thu 01 Jan 2026 22:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214422 IP address blocks: 77.91.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:27:a7:e6:20:8e:54:8d:76:fb:37:33:b9:df:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Validity Not Before: Jan 1 22:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=97a8397112f07f319293c75be49b96db81324832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fa:6e:3b:90:9f:4b:1e:cc:8c:54:72:04:f7: 42:ff:4a:9e:98:72:99:21:ee:b5:f6:88:9d:dd:6e: 09:40:3e:09:32:ce:83:97:b5:55:3d:b0:02:85:bb: 22:fc:82:e8:6f:86:19:13:12:b8:20:ac:2f:e8:8b: 43:da:3e:b4:01:ab:fc:1c:79:e7:ce:f8:de:3d:6c: 17:e8:a9:d5:07:13:16:21:ee:77:66:75:c7:af:ec: 33:b1:1b:7b:da:ed:bf:3c:6d:cc:e0:c4:42:6d:93: 4e:49:93:d0:59:a6:3f:7a:0e:60:9e:de:d7:e8:26: ce:a4:71:65:a6:f5:3d:c6:95:56:8d:c3:06:fa:3e: 6a:1a:f7:da:cf:7c:03:7e:b2:89:36:a2:0f:b5:20: dc:8c:46:a7:a3:79:9f:a4:b0:fd:bf:91:d9:5e:52: dd:9e:c4:ce:51:e5:80:fb:d7:81:1d:8a:fb:65:77: 25:69:5a:1c:c5:ab:20:3d:57:dd:fd:9c:c6:37:bb: bf:9f:e3:c7:ce:9b:cd:c5:bf:1a:b2:6a:15:e0:c7: 1f:2b:f6:8c:ec:82:fe:a5:23:9f:fb:4e:2c:3e:1d: 7b:26:56:52:80:68:23:9f:2a:46:4c:09:a0:a3:85: 65:a4:f6:f6:95:18:7a:bf:38:9e:8f:69:e8:b6:52: 45:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A8:39:71:12:F0:7F:31:92:93:C7:5B:E4:9B:96:DB:81:32:48:32 X509v3 Authority Key Identifier: keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/l6g5cRLwfzGSk8db5JuW24EySDI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.91.66.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:a1:43:f6:e8:2d:37:3c:9e:24:ff:97:9e:f1:54:f2:ba:e6: 67:81:f0:a6:2c:d4:84:e2:81:c4:23:0e:81:0f:b5:6a:e1:3d: fe:36:63:e1:e4:0e:32:b9:05:6f:49:83:bf:51:44:7b:f8:c9: d4:e4:f8:9a:e7:80:f2:de:c6:40:76:6d:a3:bd:98:57:f0:a9: ae:53:6a:f5:9a:78:29:c6:a5:f2:5f:97:e2:7c:d8:d7:e1:88: 6d:85:a7:d0:b0:51:8d:83:09:8d:1b:ae:ff:89:ac:14:cf:a2: 2d:2c:c2:ef:e6:07:19:b6:8c:0e:03:b3:53:74:2e:02:d8:52: ca:e0:6d:e7:92:2e:c3:d9:cf:b5:f0:b0:26:39:32:92:4e:bb: de:70:21:2d:32:72:67:60:09:b6:fc:ac:99:e9:72:78:f2:c2: d6:e5:d1:c7:1b:62:cb:c7:67:e5:af:53:a9:a0:9f:ed:ad:a8: 8b:a1:b0:8f:24:4a:dc:f6:a0:2e:7a:53:e5:ae:53:3d:9b:ed: e2:f1:98:d9:4d:f1:20:cf:69:73:03:88:3f:0d:67:cf:5a:b3: eb:f1:85:58:f5:82:53:8b:4a:a6:7f:e1:97:ba:c2:02:5d:d1: ff:d3:df:36:45:da:c9:1e:53:69:d5:d3:2d:83:64:8b:0c:98: ef:d2:28:0d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7oyen5iCOVI12+zczud/1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMDg4Y2VmMjhlMDJhZjdkMDBmMjk3ODE2YzU1ZjhlM2M0 M2Q1MzUwHhcNMjYwMTAxMjIxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5N2E4Mzk3MTEyZjA3ZjMxOTI5M2M3NWJlNDliOTZkYjgxMzI0ODMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvpuO5CfSx7MjFRyBPdC/0qemHKZ Ie619oid3W4JQD4JMs6Dl7VVPbAChbsi/ILob4YZExK4IKwv6ItD2j60Aav8HHnn zvjePWwX6KnVBxMWIe53ZnXHr+wzsRt72u2/PG3M4MRCbZNOSZPQWaY/eg5gnt7X 6CbOpHFlpvU9xpVWjcMG+j5qGvfaz3wDfrKJNqIPtSDcjEano3mfpLD9v5HZXlLd nsTOUeWA+9eBHYr7ZXclaVocxasgPVfd/ZzGN7u/n+PHzpvNxb8asmoV4McfK/aM 7IL+pSOf+04sPh17JlZSgGgjnypGTAmgo4VlpPb2lRh6vziej2notlJFJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJeoOXES8H8xkpPHW+SbltuBMkgyMB8GA1UdIwQY MBaAFG0IjO8o4Cr30A8peBbFX448Q9U1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYt ZmVlOGVhZjczYjBkLzEvbDZnNWNSTHdmekdTazhkYjVKdVcyNEV5U0RJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYtZmVlOGVhZjczYjBk LzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVtCMA0G CSqGSIb3DQEBCwUAA4IBAQAKoUP26C03PJ4k/5ee8VTyuuZngfCmLNSE4oHEIw6B D7Vq4T3+NmPh5A4yuQVvSYO/UUR7+MnU5Pia54Dy3sZAdm2jvZhX8KmuU2r1mngp xqXyX5fifNjX4YhthafQsFGNgwmNG67/iawUz6ItLMLv5gcZtowOA7NTdC4C2FLK 4G3nki7D2c+18LAmOTKSTrvecCEtMnJnYAm2/KyZ6XJ48sLW5dHHG2LLx2flr1Op oJ/traiLobCPJErc9qAuelPlrlM9m+3i8ZjZTfEgz2lzA4g/DWfPWrPr8YVY9YJT i0qmf+GXusICXdH/0982RdrJHlNp1dMtg2SLDJjv0igN -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:23 2026 by rpki-client