This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/6LKvF_6ld6s3n--fTX7f7BK_ehc.roa File: 6LKvF_6ld6s3n--fTX7f7BK_ehc.roa (raw, json) Hash identifier: /eEnxWv6EmUP6K8zfowjl8E4hGLa0C38VlYeIpY/h7w= Subject key identifier: E8:B2:AF:17:FE:A5:77:AB:37:9F:EF:9F:4D:7E:DF:EC:12:BF:7A:17 Certificate issuer: /CN=12c889964b35b51ba8e5e679a15b19a31f133578 Certificate serial: 019B7BA37661A0CB4CCD01577D3FAA03908C Authority key identifier: 12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/6LKvF_6ld6s3n--fTX7f7BK_ehc.roa Signing time: Thu 01 Jan 2026 22:17:48 +0000 ROA not before: Thu 01 Jan 2026 22:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24634 IP address blocks: 82.146.160.0/19 maxlen: 24 91.245.248.0/22 maxlen: 24 2a0d:b3c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:76:61:a0:cb:4c:cd:01:57:7d:3f:aa:03:90:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12c889964b35b51ba8e5e679a15b19a31f133578 Validity Not Before: Jan 1 22:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8b2af17fea577ab379fef9f4d7edfec12bf7a17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6f:89:9b:88:52:2e:72:82:6e:9d:d2:86:de: 4f:8b:82:0e:a7:5f:47:ef:3b:c1:ae:3f:f4:14:7d: 9e:e3:b7:3e:5a:2a:1d:8b:ca:31:a6:67:08:a3:ed: 82:1c:0e:7a:b4:96:37:4f:3b:38:e3:f3:d9:89:5d: be:05:4b:13:ed:78:b4:a9:7f:5d:b1:91:d0:9a:22: be:ba:82:74:b0:8d:0d:da:f8:ce:eb:02:a8:80:e5: 9b:48:02:b6:79:12:af:bc:7e:7a:20:7c:05:07:f4: ab:44:85:01:82:06:99:ea:98:fc:14:34:3d:0a:bc: 5b:50:8e:0a:8d:f7:ba:f9:99:d8:5c:a8:06:74:c2: 10:16:3a:e9:3b:8e:d9:e1:b2:11:a0:8a:88:36:3f: 68:57:97:bb:dd:66:1b:6c:5a:1b:12:b2:1a:49:88: db:94:cb:2b:76:07:64:82:c6:33:77:c5:3b:d0:78: 00:05:bd:03:85:f7:90:eb:c5:9d:ef:5a:c2:b6:12: 37:4c:10:44:a3:c3:93:6a:5f:c7:fa:ab:27:8e:a0: 42:16:0c:01:d6:92:3b:24:09:23:f5:ba:15:52:f6: f7:8a:e3:b1:43:08:b4:c6:51:c0:3c:5b:6b:fc:53: 92:96:d9:fe:d2:ce:be:f9:49:62:ff:cd:97:f7:49: e4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:B2:AF:17:FE:A5:77:AB:37:9F:EF:9F:4D:7E:DF:EC:12:BF:7A:17 X509v3 Authority Key Identifier: keyid:12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/6LKvF_6ld6s3n--fTX7f7BK_ehc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.146.160.0/19 91.245.248.0/22 IPv6: 2a0d:b3c0::/29 Signature Algorithm: sha256WithRSAEncryption 25:c9:92:51:71:ec:81:c1:d1:29:68:55:4c:c2:9c:4f:7f:29: c6:5b:6d:c0:f8:5a:79:9f:f5:db:f9:ef:31:15:85:9d:26:53: 8f:be:b4:be:26:86:a5:de:21:a4:58:9e:d4:52:5f:11:7f:c8: ff:4c:9c:1e:d0:ad:d3:6c:ba:85:48:41:8f:c8:3e:ab:2a:99: 3c:a9:8a:57:0b:d1:d1:3c:7d:7a:8a:3b:17:ae:28:6c:8e:ea: fe:c8:95:aa:b5:b2:1a:39:01:03:a1:0d:e5:3b:74:2f:91:1d: c3:8a:bf:a7:03:f3:11:fe:77:82:23:13:5e:9d:e0:b4:36:a4: 93:f8:3c:01:51:2a:4d:ab:3b:db:54:8a:77:16:67:be:00:99: 49:ac:1e:e0:aa:2c:30:06:c0:5e:be:3f:19:8f:b2:5d:37:4e: 91:68:be:01:be:a9:27:1e:6a:df:4b:3a:ee:c5:19:db:9e:1e: 24:d3:f7:26:ef:a7:1b:e8:91:c5:ac:fa:19:93:8c:86:0e:21: 2f:fe:a0:72:c2:a1:8c:6d:dc:44:df:30:5d:0c:84:87:ec:c6: cd:f6:5f:ca:ed:77:24:54:c3:41:78:69:b1:49:9c:65:4e:9e: eb:80:64:af:9d:16:c2:cc:b7:c2:9f:5e:24:ed:16:42:64:ef: a8:18:66:79 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7o3ZhoMtMzQFXfT+qA5CMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYzg4OTk2NGIzNWI1MWJhOGU1ZTY3OWExNWIxOWEzMWYx MzM1NzgwHhcNMjYwMTAxMjIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOGIyYWYxN2ZlYTU3N2FiMzc5ZmVmOWY0ZDdlZGZlYzEyYmY3YTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAom+Jm4hSLnKCbp3Sht5Pi4IOp19H 7zvBrj/0FH2e47c+Wiodi8oxpmcIo+2CHA56tJY3Tzs44/PZiV2+BUsT7Xi0qX9d sZHQmiK+uoJ0sI0N2vjO6wKogOWbSAK2eRKvvH56IHwFB/SrRIUBggaZ6pj8FDQ9 CrxbUI4Kjfe6+ZnYXKgGdMIQFjrpO47Z4bIRoIqINj9oV5e73WYbbFobErIaSYjb lMsrdgdkgsYzd8U70HgABb0DhfeQ68Wd71rCthI3TBBEo8OTal/H+qsnjqBCFgwB 1pI7JAkj9boVUvb3iuOxQwi0xlHAPFtr/FOSltn+0s6++Uli/82X90nk5QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFOiyrxf+pXerN5/vn01+3+wSv3oXMB8GA1UdIwQY MBaAFBLIiZZLNbUbqOXmeaFbGaMfEzV4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXNpSmxrczF0UnVvNWVaNW9Wc1pveDhUTlhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8xNmIwMmMtODMzYS00OGYwLWJhNTYt YWQ2ZjBiZjg4NDM4LzEvNkxLdkZfNmxkNnMzbi0tZlRYN2Y3QktfZWhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8xNmIwMmMtODMzYS00OGYwLWJhNTYtYWQ2ZjBiZjg4NDM4 LzEvRXNpSmxrczF0UnVvNWVaNW9Wc1pveDhUTlhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFUpKgAwQC W/X4MA0EAgACMAcDBQMqDbPAMA0GCSqGSIb3DQEBCwUAA4IBAQAlyZJRceyBwdEp aFVMwpxPfynGW23A+Fp5n/Xb+e8xFYWdJlOPvrS+Joal3iGkWJ7UUl8Rf8j/TJwe 0K3TbLqFSEGPyD6rKpk8qYpXC9HRPH16ijsXrihsjur+yJWqtbIaOQEDoQ3lO3Qv kR3Dir+nA/MR/neCIxNeneC0NqST+DwBUSpNqzvbVIp3Fme+AJlJrB7gqiwwBsBe vj8Zj7JdN06RaL4BvqknHmrfSzruxRnbnh4k0/cm76cb6JHFrPoZk4yGDiEv/qBy wqGMbdxE3zBdDISH7MbN9l/K7XckVMNBeGmxSZxlTp7rgGSvnRbCzLfCn14k7RZC ZO+oGGZ5 -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:30 2026 by rpki-client