This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/f6m0hqb0BBxiTxktGTcPrNXvB2g.roa File: f6m0hqb0BBxiTxktGTcPrNXvB2g.roa (raw, json) Hash identifier: wEO7iV67QNAygsspSwBpIYn+S9XY1EpUPceKq+Gbr8U= Subject key identifier: 7F:A9:B4:86:A6:F4:04:1C:62:4F:19:2D:19:37:0F:AC:D5:EF:07:68 Certificate issuer: /CN=b578a461a859ddc986c08a88e9512d5c3d2210e6 Certificate serial: 019B7FF1F6066DA878196938CEAA5240AB7C Authority key identifier: B5:78:A4:61:A8:59:DD:C9:86:C0:8A:88:E9:51:2D:5C:3D:22:10:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/f6m0hqb0BBxiTxktGTcPrNXvB2g.roa Signing time: Fri 02 Jan 2026 18:22:02 +0000 ROA not before: Fri 02 Jan 2026 18:22:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207920 IP address blocks: 194.53.118.0/23 maxlen: 23 194.53.118.0/24 maxlen: 24 194.53.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.crl rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:f6:06:6d:a8:78:19:69:38:ce:aa:52:40:ab:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b578a461a859ddc986c08a88e9512d5c3d2210e6 Validity Not Before: Jan 2 18:22:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7fa9b486a6f4041c624f192d19370facd5ef0768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cf:cb:89:85:6a:b0:e4:db:b2:55:ea:b6:55: cd:5c:07:1f:ff:64:a0:f9:5a:08:bb:04:dd:7d:04: a1:5c:e3:96:b1:88:65:b3:27:2f:a9:09:cc:90:c4: 87:bf:19:74:9e:0b:cc:b7:ae:6b:a8:f5:13:9f:b5: ce:a4:54:66:88:05:b3:ac:2b:d3:5e:1f:0b:19:ff: a9:87:4d:9c:ca:f9:9f:3c:5b:4d:1d:fd:a6:37:e9: fc:66:3a:88:46:70:cc:6e:95:81:f7:18:63:b1:56: 81:c0:00:7c:31:11:35:a3:84:0c:bb:77:5f:a2:ef: b7:4c:a9:57:dc:cd:2c:bd:a3:21:5b:a7:20:67:03: 35:63:33:eb:ff:f0:e3:49:ef:7d:bb:86:07:79:54: a4:f2:c0:bf:1a:4b:3a:7f:14:4b:45:a4:a5:82:c2: a6:b7:22:97:3d:6d:6a:61:1f:43:a6:f6:bd:fe:a7: e6:dd:f9:b1:43:4d:1e:75:31:2c:54:19:d9:4c:02: 55:f9:8a:07:39:9d:7f:46:39:02:8c:4f:f7:79:b3: 1c:ea:6a:d6:d4:e8:4a:21:4f:62:7c:98:bf:b2:f1: 95:2b:72:62:99:81:45:c5:6e:38:d4:9a:8f:f2:88: 2f:cc:bd:1b:99:bc:75:d4:95:df:ab:d0:8c:f2:4f: b6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:A9:B4:86:A6:F4:04:1C:62:4F:19:2D:19:37:0F:AC:D5:EF:07:68 X509v3 Authority Key Identifier: keyid:B5:78:A4:61:A8:59:DD:C9:86:C0:8A:88:E9:51:2D:5C:3D:22:10:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/f6m0hqb0BBxiTxktGTcPrNXvB2g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.53.118.0/23 Signature Algorithm: sha256WithRSAEncryption 8a:55:ae:8f:41:67:a8:c9:88:ce:98:57:02:c2:04:ab:47:33: 7e:ca:85:40:74:f2:96:3a:83:32:13:9a:90:13:60:93:06:07: 4f:1b:02:f7:8f:11:77:72:d3:fc:22:dd:3b:aa:7f:37:60:19: dc:59:6e:c2:2a:bf:91:0d:d7:c0:24:f6:ba:14:98:bf:6d:7b: 62:bb:a5:e0:56:ca:ad:fe:84:86:f1:af:af:30:97:79:d8:3d: ff:b2:2c:09:7c:79:dc:fa:dd:ac:ae:33:36:2e:f2:3b:9f:a0: 2f:35:37:27:3d:b6:31:25:4c:dd:6a:8a:0d:d5:26:21:f7:d5: 5e:36:c4:f4:2e:09:a7:5d:6d:f3:b2:26:13:cf:cf:45:72:b0: 37:89:49:e8:eb:09:fc:f2:28:36:60:43:6a:2b:86:76:94:2b: 63:1a:ef:95:15:29:61:82:9d:56:6b:79:a9:04:13:16:ce:7d: 02:f5:77:85:ba:54:62:14:48:1d:03:77:7b:e0:99:05:2f:f0: 80:44:b2:c8:0b:6b:c1:e4:4c:17:24:93:05:91:91:ea:08:36: 1b:0d:46:8c:92:94:f3:65:36:82:93:b3:72:c6:8d:0a:b6:2a: 12:f1:a0:ec:52:1d:f8:91:2f:f3:75:97:75:56:f6:83:0c:07: 49:ad:fc:3f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8fYGbah4GWk4zqpSQKt8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NzhhNDYxYTg1OWRkYzk4NmMwOGE4OGU5NTEyZDVjM2Qy MjEwZTYwHhcNMjYwMTAyMTgyMjAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZmE5YjQ4NmE2ZjQwNDFjNjI0ZjE5MmQxOTM3MGZhY2Q1ZWYwNzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyM/LiYVqsOTbslXqtlXNXAcf/2Sg +VoIuwTdfQShXOOWsYhlsycvqQnMkMSHvxl0ngvMt65rqPUTn7XOpFRmiAWzrCvT Xh8LGf+ph02cyvmfPFtNHf2mN+n8ZjqIRnDMbpWB9xhjsVaBwAB8MRE1o4QMu3df ou+3TKlX3M0svaMhW6cgZwM1YzPr//DjSe99u4YHeVSk8sC/Gks6fxRLRaSlgsKm tyKXPW1qYR9Dpva9/qfm3fmxQ00edTEsVBnZTAJV+YoHOZ1/RjkCjE/3ebMc6mrW 1OhKIU9ifJi/svGVK3JimYFFxW441JqP8ogvzL0bmbx11JXfq9CM8k+2PQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH+ptIam9AQcYk8ZLRk3D6zV7wdoMB8GA1UdIwQY MBaAFLV4pGGoWd3JhsCKiOlRLVw9IhDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFhpa1lhaFozY21Hd0lxSTZWRXRYRDBpRU9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8wY2VlMzQtNWFjYy00MmQ1LWE1YmYt ZmMxYzBjY2JjMGI3LzEvZjZtMGhxYjBCQnhpVHhrdEdUY1ByTlh2QjJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8wY2VlMzQtNWFjYy00MmQ1LWE1YmYtZmMxYzBjY2JjMGI3 LzEvdFhpa1lhaFozY21Hd0lxSTZWRXRYRDBpRU9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwjV2MA0G CSqGSIb3DQEBCwUAA4IBAQCKVa6PQWeoyYjOmFcCwgSrRzN+yoVAdPKWOoMyE5qQ E2CTBgdPGwL3jxF3ctP8It07qn83YBncWW7CKr+RDdfAJPa6FJi/bXtiu6XgVsqt /oSG8a+vMJd52D3/siwJfHnc+t2srjM2LvI7n6AvNTcnPbYxJUzdaooN1SYh99Ve NsT0LgmnXW3zsiYTz89FcrA3iUno6wn88ig2YENqK4Z2lCtjGu+VFSlhgp1Wa3mp BBMWzn0C9XeFulRiFEgdA3d74JkFL/CARLLIC2vB5EwXJJMFkZHqCDYbDUaMkpTz ZTaCk7Nyxo0KtioS8aDsUh34kS/zdZd1VvaDDAdJrfw/ -----END CERTIFICATE-----Generated at Mon Jan 26 12:58:14 2026 by rpki-client