This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/ip6lgFSdHPPoc5AbiR65_3quNRY.roa File: ip6lgFSdHPPoc5AbiR65_3quNRY.roa (raw, json) Hash identifier: govzY4apgqLVTp2slFGOIi/50yHvd38w2N8kLYkKEcg= Subject key identifier: 8A:9E:A5:80:54:9D:1C:F3:E8:73:90:1B:89:1E:B9:FF:7A:AE:35:16 Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Certificate serial: 019BDAC1A2BA7D537C8A83701791FF7AA1ED Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/ip6lgFSdHPPoc5AbiR65_3quNRY.roa Signing time: Tue 20 Jan 2026 09:34:41 +0000 ROA not before: Tue 20 Jan 2026 09:34:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29802 IP address blocks: 80.174.117.0/24 maxlen: 24 80.174.124.0/24 maxlen: 24 80.174.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:da:c1:a2:ba:7d:53:7c:8a:83:70:17:91:ff:7a:a1:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Validity Not Before: Jan 20 09:34:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a9ea580549d1cf3e873901b891eb9ff7aae3516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8b:79:7f:de:de:aa:8c:4b:fd:93:c5:75:9e: a6:6c:30:4f:9d:1f:63:87:d2:18:ef:b2:92:e1:23: 39:80:58:e0:27:d2:7a:80:87:87:77:1a:dc:14:47: 4c:80:9c:e4:36:c4:3c:76:03:6a:17:58:58:bc:07: af:41:8b:b6:bf:f1:43:0a:a0:34:44:49:b2:a0:41: f1:48:ce:a4:ee:d9:49:13:2e:e7:54:2a:3e:af:df: f0:5e:09:82:64:5f:7d:03:d0:a8:fb:03:ca:64:35: 57:d6:29:4f:e2:9d:a3:eb:f1:29:01:d7:ed:0d:35: 13:b0:4a:12:37:4f:ff:21:1d:e6:20:20:5f:14:5f: 96:d2:1a:88:ba:67:41:ce:8d:c1:27:bd:a5:06:55: cd:3a:29:ce:88:75:ec:fe:f5:5e:5b:07:1a:f2:73: b3:27:4f:c5:2d:54:80:03:cf:a3:fd:3c:37:6f:43: 4e:46:25:28:66:99:89:18:6e:f9:21:0d:9f:97:46: c4:57:76:75:cb:64:ed:ff:ff:f8:88:51:b4:90:39: 23:91:7c:41:d9:41:9c:ab:8b:7f:be:f7:f4:64:3c: 06:b9:89:f8:c6:a2:a3:6e:2e:d5:d8:d5:44:fc:74: f9:49:5d:b7:fc:1c:2a:4b:e3:b7:11:c0:ba:4b:52: 35:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:9E:A5:80:54:9D:1C:F3:E8:73:90:1B:89:1E:B9:FF:7A:AE:35:16 X509v3 Authority Key Identifier: keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/ip6lgFSdHPPoc5AbiR65_3quNRY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.174.117.0/24 80.174.124.0/24 80.174.127.0/24 Signature Algorithm: sha256WithRSAEncryption 21:87:57:1b:e5:80:00:81:73:8f:a5:f7:05:94:25:28:fc:54: 14:62:17:07:6a:8e:41:d6:9a:5a:11:51:cc:39:8f:62:0c:50: e7:ac:33:0e:42:4c:61:93:0d:66:71:32:f2:9b:c4:50:12:22: 72:e8:3a:c2:a3:6d:a6:7c:29:d0:6d:f0:3a:49:41:be:ef:54: 4c:fc:96:78:ba:8e:6b:b5:5f:cb:46:4b:d1:de:f7:4a:82:cd: 5a:41:21:b9:ed:4b:ab:c7:9c:97:50:a6:86:99:dc:30:54:1b: 04:1b:63:6c:1c:2c:c3:5c:23:88:ae:5c:6d:a1:a5:76:9a:ce: 32:65:2e:5a:8e:fc:98:7d:dd:12:de:96:41:74:87:1f:47:50: 45:1e:1c:c8:03:96:46:b2:4a:21:77:cd:24:9d:4b:4e:b7:d2: 0c:07:6a:ec:8f:d0:cd:e1:81:b9:29:99:c6:47:be:84:42:7a: 50:5b:f0:55:3c:3c:be:94:2b:cb:60:06:8e:c9:b4:7a:0f:f8: cb:66:5a:63:26:8c:22:20:90:d4:b2:2a:40:54:0d:76:8f:3a: 5f:5a:b2:09:e9:69:f8:8d:e4:a0:b6:a4:d1:65:8a:b3:a8:1c: fc:5f:d6:37:04:8f:c6:13:c0:7b:d3:be:2c:fc:8c:cd:fd:41: 2b:4d:eb:9d -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZvawaK6fVN8ioNwF5H/eqHtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NTk5OTg5OWY3NmQyZTJlNGNjZGZjODE3Zjk4NzljZmFj MDZiYmUwHhcNMjYwMTIwMDkzNDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTllYTU4MDU0OWQxY2YzZTg3MzkwMWI4OTFlYjlmZjdhYWUzNTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYt5f97eqoxL/ZPFdZ6mbDBPnR9j h9IY77KS4SM5gFjgJ9J6gIeHdxrcFEdMgJzkNsQ8dgNqF1hYvAevQYu2v/FDCqA0 REmyoEHxSM6k7tlJEy7nVCo+r9/wXgmCZF99A9Co+wPKZDVX1ilP4p2j6/EpAdft DTUTsEoSN0//IR3mICBfFF+W0hqIumdBzo3BJ72lBlXNOinOiHXs/vVeWwca8nOz J0/FLVSAA8+j/Tw3b0NORiUoZpmJGG75IQ2fl0bEV3Z1y2Tt///4iFG0kDkjkXxB 2UGcq4t/vvf0ZDwGuYn4xqKjbi7V2NVE/HT5SV23/BwqS+O3EcC6S1I1kwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFIqepYBUnRzz6HOQG4keuf96rjUWMB8GA1UdIwQY MBaAFLRZmYmfdtLi5MzfyBf5h5z6wGu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUt NzM0MjhmOWM3YmZmLzEvaXA2bGdGU2RIUFBvYzVBYmlSNjVfM3F1TlJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUtNzM0MjhmOWM3YmZm LzEvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUK51AwQA UK58AwQAUK5/MA0GCSqGSIb3DQEBCwUAA4IBAQAhh1cb5YAAgXOPpfcFlCUo/FQU YhcHao5B1ppaEVHMOY9iDFDnrDMOQkxhkw1mcTLym8RQEiJy6DrCo22mfCnQbfA6 SUG+71RM/JZ4uo5rtV/LRkvR3vdKgs1aQSG57Uurx5yXUKaGmdwwVBsEG2NsHCzD XCOIrlxtoaV2ms4yZS5ajvyYfd0S3pZBdIcfR1BFHhzIA5ZGskohd80knUtOt9IM B2rsj9DN4YG5KZnGR76EQnpQW/BVPDy+lCvLYAaOybR6D/jLZlpjJowiIJDUsipA VA12jzpfWrIJ6Wn4jeSgtqTRZYqzqBz8X9Y3BI/GE8B7074s/IzN/UErTeud -----END CERTIFICATE-----Generated at Sun Jan 25 08:50:37 2026 by rpki-client