This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/6HLmOIlw0JJlLfNpuVhkS5VevII.roa File: 6HLmOIlw0JJlLfNpuVhkS5VevII.roa (raw, json) Hash identifier: duraaLF3+tphpAPz7hcD0W+ai9uSm22QFtqEemAzlOs= Subject key identifier: E8:72:E6:38:89:70:D0:92:65:2D:F3:69:B9:58:64:4B:95:5E:BC:82 Certificate issuer: /CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918 Certificate serial: 019B7834FF39F89824460D06542C0E374DED Authority key identifier: AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/6HLmOIlw0JJlLfNpuVhkS5VevII.roa Signing time: Thu 01 Jan 2026 06:18:17 +0000 ROA not before: Thu 01 Jan 2026 06:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 10753 IP address blocks: 178.209.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:ff:39:f8:98:24:46:0d:06:54:2c:0e:37:4d:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918 Validity Not Before: Jan 1 06:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e872e6388970d092652df369b958644b955ebc82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:17:6a:78:b3:4c:43:97:c7:8c:11:1c:1f:56: cc:7e:48:ea:98:a4:47:e8:fa:ca:ae:dc:a6:c1:0e: d6:04:e5:c0:5f:f2:01:bb:14:d7:d0:56:f6:52:30: 1f:bd:e9:27:e9:62:81:91:aa:8e:f0:79:20:90:03: 89:ee:86:2a:b9:59:62:87:9b:d5:d2:15:1b:a1:a3: bc:6b:12:b2:49:cc:d0:83:94:bc:24:1e:0f:03:3c: 07:a4:8a:6d:a6:67:25:47:2b:24:7f:61:d4:1f:37: 90:75:aa:39:5d:7d:1b:f7:e4:67:b1:a5:0a:6c:13: 19:c2:74:53:d7:39:31:b4:fd:92:99:2f:6a:e3:36: 79:63:11:ba:37:dd:d9:65:16:55:ce:5b:81:01:98: 51:bf:f3:fa:8c:7f:6b:bd:2c:6c:5e:23:0e:4b:e8: d5:de:e0:99:b0:39:5f:ba:db:13:9c:ed:22:07:17: a3:ae:a5:a9:8d:d5:c1:5e:37:be:cf:59:75:ff:52: 91:00:a4:b1:b6:54:a1:b9:be:40:b2:0a:f1:9d:02: a8:80:09:fb:8f:d2:fd:a9:14:b8:c5:63:98:2b:c3: 82:f6:f2:1d:d4:4e:0c:d7:76:9e:b6:eb:b3:80:3b: de:b4:9a:5c:f4:0b:aa:d8:0f:24:c8:6e:2e:03:50: 1b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:72:E6:38:89:70:D0:92:65:2D:F3:69:B9:58:64:4B:95:5E:BC:82 X509v3 Authority Key Identifier: keyid:AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/6HLmOIlw0JJlLfNpuVhkS5VevII.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.209.64.0/20 Signature Algorithm: sha256WithRSAEncryption 53:16:84:cb:cb:41:0e:01:ae:7c:81:e7:0d:3e:3c:be:b8:0f: 15:4a:3e:34:4f:81:5a:b8:7b:07:0d:65:42:2a:53:a4:26:bb: eb:54:c1:95:f2:70:12:84:ee:78:1e:74:0f:45:f5:d7:cb:41: 7b:75:dd:cb:0a:6b:b5:ef:d9:3f:af:40:f5:c6:80:1d:f7:7b: 28:83:3f:a5:53:4f:74:0d:de:22:cc:45:a1:65:c4:98:25:46: fd:75:69:fa:23:6e:f4:7b:65:25:a0:64:d3:b5:bf:ef:19:07: 4a:22:6e:10:85:ba:0c:76:27:41:7c:f5:ea:ae:50:a5:74:91: da:b7:c6:97:06:78:92:67:76:03:2f:4b:38:4f:32:e4:ba:70: c7:81:f1:59:a8:2a:61:81:ca:19:fa:b6:53:9b:1e:2f:44:6e: c3:bc:6a:a7:73:09:ed:b3:91:3d:0d:b2:b6:e0:ad:48:12:7a: 1d:94:4a:55:d0:f0:c9:19:7e:e2:94:19:3d:97:3d:81:a5:f4: 25:1e:a2:22:f1:65:a3:4d:43:4a:7a:ed:88:c4:3c:25:03:4e: dd:dd:30:a5:4d:33:fc:0f:39:08:32:ac:1f:6d:79:1f:ae:e9: d0:3d:da:16:68:a5:6a:02:ec:92:99:ba:c8:77:9d:4f:3d:ec: 7a:d6:34:85 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NP85+JgkRg0GVCwON03tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiNGYwMGY1YzNhYjNkZjRjNjc0YTQxMGQ4YTBmMDE4MmZi NWU5MTgwHhcNMjYwMTAxMDYxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODcyZTYzODg5NzBkMDkyNjUyZGYzNjliOTU4NjQ0Yjk1NWViYzgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBdqeLNMQ5fHjBEcH1bMfkjqmKRH 6PrKrtymwQ7WBOXAX/IBuxTX0Fb2UjAfvekn6WKBkaqO8HkgkAOJ7oYquVlih5vV 0hUboaO8axKySczQg5S8JB4PAzwHpIptpmclRyskf2HUHzeQdao5XX0b9+RnsaUK bBMZwnRT1zkxtP2SmS9q4zZ5YxG6N93ZZRZVzluBAZhRv/P6jH9rvSxsXiMOS+jV 3uCZsDlfutsTnO0iBxejrqWpjdXBXje+z1l1/1KRAKSxtlShub5AsgrxnQKogAn7 j9L9qRS4xWOYK8OC9vId1E4M13aetuuzgDvetJpc9Auq2A8kyG4uA1AbrQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOhy5jiJcNCSZS3zablYZEuVXryCMB8GA1UdIwQY MBaAFKtPAPXDqz30xnSkENig8BgvtekYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTA4QTljT3JQZlRHZEtRUTJLRHdHQy0xNlJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hMWYyMTItYmEzNS00NjZiLWI1MmUt Mzg1M2QzNDBjOWE2LzEvNkhMbU9JbHcwSkpsTGZOcHVWaGtTNVZldklJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9hMWYyMTItYmEzNS00NjZiLWI1MmUtMzg1M2QzNDBjOWE2 LzEvcTA4QTljT3JQZlRHZEtRUTJLRHdHQy0xNlJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEstFAMA0G CSqGSIb3DQEBCwUAA4IBAQBTFoTLy0EOAa58gecNPjy+uA8VSj40T4FauHsHDWVC KlOkJrvrVMGV8nAShO54HnQPRfXXy0F7dd3LCmu179k/r0D1xoAd93sogz+lU090 Dd4izEWhZcSYJUb9dWn6I270e2UloGTTtb/vGQdKIm4QhboMdidBfPXqrlCldJHa t8aXBniSZ3YDL0s4TzLkunDHgfFZqCphgcoZ+rZTmx4vRG7DvGqncwnts5E9DbK2 4K1IEnodlEpV0PDJGX7ilBk9lz2BpfQlHqIi8WWjTUNKeu2IxDwlA07d3TClTTP8 DzkIMqwfbXkfrunQPdoWaKVqAuySmbrId51PPex61jSF -----END CERTIFICATE-----Generated at Sun Jan 25 18:07:08 2026 by rpki-client