This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/8P6X0x59C3VckILV8m4M69IldqE.roa File: 8P6X0x59C3VckILV8m4M69IldqE.roa (raw, json) Hash identifier: QOXkZ9qVgfqH0XpMQGh9X+mEF5OYLP10GuMRHcWRTjE= Subject key identifier: F0:FE:97:D3:1E:7D:0B:75:5C:90:82:D5:F2:6E:0C:EB:D2:25:76:A1 Certificate issuer: /CN=a6b789b32e16e9dd2f70513119dc77ea61ff1e09 Certificate serial: 019B7C7F7C48DC016DFEB9798ECE9D6A9D61 Authority key identifier: A6:B7:89:B3:2E:16:E9:DD:2F:70:51:31:19:DC:77:EA:61:FF:1E:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/preJsy4W6d0vcFExGdx36mH_Hgk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/8P6X0x59C3VckILV8m4M69IldqE.roa Signing time: Fri 02 Jan 2026 02:18:08 +0000 ROA not before: Fri 02 Jan 2026 02:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34907 IP address blocks: 147.78.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.mft rsync://rpki.ripe.net/repository/DEFAULT/preJsy4W6d0vcFExGdx36mH_Hgk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:7c:48:dc:01:6d:fe:b9:79:8e:ce:9d:6a:9d:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6b789b32e16e9dd2f70513119dc77ea61ff1e09 Validity Not Before: Jan 2 02:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0fe97d31e7d0b755c9082d5f26e0cebd22576a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:33:0e:61:34:5e:fe:1e:e0:4d:77:4d:c3:11: 49:e0:dd:4e:f5:70:57:ac:2e:bd:2a:f4:52:15:9f: 77:e6:14:75:ac:72:79:4e:bd:9c:a3:ba:31:d7:bc: 34:94:f5:bc:21:c5:b6:d4:0f:3e:a2:a6:9b:01:0c: c1:e0:71:7c:60:f3:18:36:43:e2:7a:15:eb:eb:5c: e3:b2:c4:37:6b:6f:df:58:82:df:4b:3f:a7:74:4a: 63:94:20:6f:f7:0a:e5:a8:4b:e3:67:e9:a4:13:10: 66:ab:ad:79:85:df:77:91:26:ed:62:d2:47:42:93: a8:a1:25:bf:ee:b5:90:07:1b:0d:a2:49:c8:d7:90: aa:9a:ad:b2:7f:0d:90:7f:59:b9:fc:d8:f3:e2:95: 50:f2:29:c0:61:d1:aa:0e:5f:28:fb:a5:6c:4e:c1: 39:42:54:7b:e0:02:47:21:e6:71:82:a8:b0:8d:73: 70:56:40:c2:97:21:97:56:62:69:d4:bd:78:db:93: 07:ac:11:56:f5:49:98:29:47:03:55:51:7c:dd:7b: 50:b8:a1:97:54:8f:e4:0d:99:b7:2d:ae:69:18:45: f5:34:40:8e:08:c1:dd:3a:16:0c:e7:58:e8:99:fa: 84:e1:f4:21:40:dc:e7:8a:94:7d:af:f3:cc:11:68: 62:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:FE:97:D3:1E:7D:0B:75:5C:90:82:D5:F2:6E:0C:EB:D2:25:76:A1 X509v3 Authority Key Identifier: keyid:A6:B7:89:B3:2E:16:E9:DD:2F:70:51:31:19:DC:77:EA:61:FF:1E:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/preJsy4W6d0vcFExGdx36mH_Hgk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/8P6X0x59C3VckILV8m4M69IldqE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.78.118.0/24 Signature Algorithm: sha256WithRSAEncryption 51:8a:6d:c0:c8:09:b7:63:21:ee:09:d8:91:d3:77:23:de:15: ce:e3:b8:d1:36:4b:d8:f9:8f:63:4c:95:34:a1:e3:3c:3a:f5: 43:95:af:33:be:5f:64:66:6a:8a:ad:7e:69:a1:f5:1f:0e:de: 0e:ef:f6:60:bd:d5:d9:b4:10:c5:82:bd:a7:58:c0:fc:9c:32: 8c:82:b6:6f:e3:0d:c8:38:8b:ad:de:88:27:7e:7f:b7:d4:2d: d8:1c:d9:77:9c:66:4f:61:10:9e:2b:0a:f0:07:1d:fb:5e:66: 08:76:b4:b6:a7:39:65:4e:17:60:f8:c1:b4:5e:d1:75:6a:1a: 61:27:4e:48:04:fa:58:51:85:05:87:5f:81:03:8e:09:70:b8: ef:1a:23:d2:73:dd:cb:5a:a8:10:a5:34:5a:4b:03:8b:c5:3f: c9:1c:33:5b:b2:eb:16:5c:c0:99:05:5a:cc:c4:d6:22:39:df: af:65:33:f8:77:f0:1a:6e:8e:67:22:e7:e2:1e:80:61:a1:40: 5c:a1:97:04:93:94:dc:e9:4b:df:cf:b4:7a:2f:48:77:f0:75: 2b:ba:3d:e3:61:0a:11:e9:e1:2f:ab:ce:ca:23:9b:c9:bd:db: 98:d7:e4:84:61:cc:90:b3:43:0f:00:7c:6d:0e:a2:f8:53:60: dd:d5:c5:bb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f3xI3AFt/rl5js6dap1hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2Yjc4OWIzMmUxNmU5ZGQyZjcwNTEzMTE5ZGM3N2VhNjFm ZjFlMDkwHhcNMjYwMTAyMDIxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGZlOTdkMzFlN2QwYjc1NWM5MDgyZDVmMjZlMGNlYmQyMjU3NmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzMOYTRe/h7gTXdNwxFJ4N1O9XBX rC69KvRSFZ935hR1rHJ5Tr2co7ox17w0lPW8IcW21A8+oqabAQzB4HF8YPMYNkPi ehXr61zjssQ3a2/fWILfSz+ndEpjlCBv9wrlqEvjZ+mkExBmq615hd93kSbtYtJH QpOooSW/7rWQBxsNoknI15Cqmq2yfw2Qf1m5/Njz4pVQ8inAYdGqDl8o+6VsTsE5 QlR74AJHIeZxgqiwjXNwVkDClyGXVmJp1L1425MHrBFW9UmYKUcDVVF83XtQuKGX VI/kDZm3La5pGEX1NECOCMHdOhYM51jomfqE4fQhQNznipR9r/PMEWhinQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPD+l9MefQt1XJCC1fJuDOvSJXahMB8GA1UdIwQY MBaAFKa3ibMuFundL3BRMRncd+ph/x4JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHJlSnN5NFc2ZDB2Y0ZFeEdkeDM2bUhfSGdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9lNzY4YmQtZjUxMi00YjhhLTkzNmEt MDZjOTI5NmYwOGEyLzEvOFA2WDB4NTlDM1Zja0lMVjhtNE02OUlsZHFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9lNzY4YmQtZjUxMi00YjhhLTkzNmEtMDZjOTI5NmYwOGEy LzEvcHJlSnN5NFc2ZDB2Y0ZFeEdkeDM2bUhfSGdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk052MA0G CSqGSIb3DQEBCwUAA4IBAQBRim3AyAm3YyHuCdiR03cj3hXO47jRNkvY+Y9jTJU0 oeM8OvVDla8zvl9kZmqKrX5pofUfDt4O7/ZgvdXZtBDFgr2nWMD8nDKMgrZv4w3I OIut3ognfn+31C3YHNl3nGZPYRCeKwrwBx37XmYIdrS2pzllThdg+MG0XtF1ahph J05IBPpYUYUFh1+BA44JcLjvGiPSc93LWqgQpTRaSwOLxT/JHDNbsusWXMCZBVrM xNYiOd+vZTP4d/Aabo5nIufiHoBhoUBcoZcEk5Tc6Uvfz7R6L0h38HUruj3jYQoR 6eEvq87KI5vJvduY1+SEYcyQs0MPAHxtDqL4U2Dd1cW7 -----END CERTIFICATE-----Generated at Mon Jan 26 12:56:50 2026 by rpki-client