This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/d6Z7UBc5EhSMkGXH0Gaz5Rw9J_U.roa File: d6Z7UBc5EhSMkGXH0Gaz5Rw9J_U.roa (raw, json) Hash identifier: 8dd86qayh9ybI6dGd2vsRhGkpkkw2S/+r51kYhKGJsM= Subject key identifier: 77:A6:7B:50:17:39:12:14:8C:90:65:C7:D0:66:B3:E5:1C:3D:27:F5 Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819 Certificate serial: 019B7A5B0D198014F6A781370E439E2174A3 Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/d6Z7UBc5EhSMkGXH0Gaz5Rw9J_U.roa Signing time: Thu 01 Jan 2026 16:19:06 +0000 ROA not before: Thu 01 Jan 2026 16:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205605 IP address blocks: 82.199.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:0d:19:80:14:f6:a7:81:37:0e:43:9e:21:74:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819 Validity Not Before: Jan 1 16:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=77a67b50173912148c9065c7d066b3e51c3d27f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3b:60:82:9f:0e:98:7a:cf:7d:2d:ed:32:9c: 28:8a:91:e4:04:9f:27:7b:b6:29:4d:e0:61:2b:b6: 11:72:09:df:60:bb:d2:46:93:7e:01:e2:ed:f3:b4: e5:b6:5f:10:68:94:dc:85:48:4a:05:d2:ad:ee:50: 1c:8a:b1:46:ba:3f:8e:0e:0a:43:c6:32:da:77:8a: e0:a9:75:18:d3:f2:2d:ba:b2:3f:54:c5:12:80:02: 08:dd:fb:f4:3f:13:bf:cb:28:ac:c0:2f:c7:96:37: 11:e7:cd:2c:a5:f0:a4:d1:6b:5d:ff:6a:c5:78:ca: f9:f6:8f:3b:11:ab:5a:c1:f3:4f:d2:9f:91:09:f3: a9:e4:d3:91:b5:c9:aa:b5:94:74:bc:96:52:10:83: 42:04:c1:4b:2e:d2:4b:e4:19:e2:c2:17:21:2e:e7: 0e:95:57:0f:e6:d1:16:e1:da:b0:7e:49:60:e6:e3: 91:af:d3:fe:ad:98:bb:9d:cd:20:30:eb:9b:6f:7d: d6:fd:93:e7:3e:82:97:d6:03:79:c8:c3:60:54:b4: 78:4e:c6:53:21:8d:c4:cc:9a:2c:26:d5:66:31:fd: ae:99:49:fc:ea:b7:81:39:3e:b4:8a:65:a8:44:c8: 60:ee:4b:23:51:64:68:66:b2:3e:7d:fb:37:d0:f2: 3d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:A6:7B:50:17:39:12:14:8C:90:65:C7:D0:66:B3:E5:1C:3D:27:F5 X509v3 Authority Key Identifier: keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/d6Z7UBc5EhSMkGXH0Gaz5Rw9J_U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.199.201.0/24 Signature Algorithm: sha256WithRSAEncryption c6:14:dd:3a:22:c4:07:33:06:b1:9b:8b:83:e6:94:4c:02:1b: a3:64:c2:ae:71:10:6e:98:b2:61:71:c8:be:f9:f4:bf:9e:df: d6:71:4a:e4:d7:9b:28:cc:ec:78:fc:b7:56:ad:32:52:c4:2f: 98:e2:73:91:48:04:c4:ab:3d:87:3d:bf:3d:dc:1b:47:9c:96: 84:60:43:b3:5d:0c:4b:63:cd:c7:d8:35:14:32:2e:22:9c:00: 8d:52:ac:7e:63:11:73:04:4b:d5:88:5d:9b:72:54:df:54:4f: 7e:81:85:26:19:52:89:5e:0e:b9:8e:ae:52:75:10:09:f7:9a: c3:97:93:e7:c2:47:15:8d:c2:b7:1b:da:45:5e:27:ad:67:37: 23:cc:ed:8b:8c:ca:e5:34:fe:2d:5f:25:6f:0e:2d:14:d2:1c: fd:ea:38:fc:0a:1d:e2:aa:e7:d2:de:b4:58:3a:a2:12:10:3c: 80:ac:e1:e7:86:e7:09:36:f2:53:0c:57:7f:8f:39:e7:f2:00: 2f:d6:2a:bc:76:0b:6a:8d:47:30:9b:4c:a2:62:5f:24:10:8d: f1:f6:c3:91:e5:23:c2:4c:6d:6d:f4:fc:b2:8b:7a:2c:4d:ba: b8:64:c5:21:4b:ca:6b:ea:ec:ef:2d:96:f8:7d:85:0f:39:8a: 3f:83:30:bf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Ww0ZgBT2p4E3DkOeIXSjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjOTBjMzU2ZTI4NjRmNDM4OTQ4NTc0NDM1NTVkOGI1YzAz NTI4MTkwHhcNMjYwMTAxMTYxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3N2E2N2I1MDE3MzkxMjE0OGM5MDY1YzdkMDY2YjNlNTFjM2QyN2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDtggp8OmHrPfS3tMpwoipHkBJ8n e7YpTeBhK7YRcgnfYLvSRpN+AeLt87Tltl8QaJTchUhKBdKt7lAcirFGuj+ODgpD xjLad4rgqXUY0/IturI/VMUSgAII3fv0PxO/yyiswC/HljcR580spfCk0Wtd/2rF eMr59o87EatawfNP0p+RCfOp5NORtcmqtZR0vJZSEINCBMFLLtJL5BniwhchLucO lVcP5tEW4dqwfklg5uORr9P+rZi7nc0gMOubb33W/ZPnPoKX1gN5yMNgVLR4TsZT IY3EzJosJtVmMf2umUn86reBOT60imWoRMhg7ksjUWRoZrI+ffs30PI9+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHeme1AXORIUjJBlx9Bms+UcPSf1MB8GA1UdIwQY MBaAFAyQw1bihk9DiUhXRDVV2LXANSgZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDct ZTM3OTlhZGU5ZGZlLzEvZDZaN1VCYzVFaFNNa0dYSDBHYXo1Unc5Sl9VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDctZTM3OTlhZGU5ZGZl LzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUsfJMA0G CSqGSIb3DQEBCwUAA4IBAQDGFN06IsQHMwaxm4uD5pRMAhujZMKucRBumLJhcci+ +fS/nt/WcUrk15sozOx4/LdWrTJSxC+Y4nORSATEqz2HPb893BtHnJaEYEOzXQxL Y83H2DUUMi4inACNUqx+YxFzBEvViF2bclTfVE9+gYUmGVKJXg65jq5SdRAJ95rD l5PnwkcVjcK3G9pFXietZzcjzO2LjMrlNP4tXyVvDi0U0hz96jj8Ch3iqufS3rRY OqISEDyArOHnhucJNvJTDFd/jznn8gAv1iq8dgtqjUcwm0yiYl8kEI3x9sOR5SPC TG1t9Pyyi3osTbq4ZMUhS8pr6uzvLZb4fYUPOYo/gzC/ -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:34 2026 by rpki-client