This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/g6Ux-iBqw5pRnRrg3U9EpW7v5Jc.roa File: g6Ux-iBqw5pRnRrg3U9EpW7v5Jc.roa (raw, json) Hash identifier: KFBqHuaTNX9BJpnJ/kNbP6C31mWv4bvManEdzG/ajqc= Subject key identifier: 83:A5:31:FA:20:6A:C3:9A:51:9D:1A:E0:DD:4F:44:A5:6E:EF:E4:97 Certificate issuer: /CN=56c8a1713c7476e00ed2b77fd98fd89330365d87 Certificate serial: 019B7F83DB3A01B39F9557C427D0ECD86096 Authority key identifier: 56:C8:A1:71:3C:74:76:E0:0E:D2:B7:7F:D9:8F:D8:93:30:36:5D:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/g6Ux-iBqw5pRnRrg3U9EpW7v5Jc.roa Signing time: Fri 02 Jan 2026 16:21:46 +0000 ROA not before: Fri 02 Jan 2026 16:21:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210672 IP address blocks: 88.80.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.mft rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:db:3a:01:b3:9f:95:57:c4:27:d0:ec:d8:60:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56c8a1713c7476e00ed2b77fd98fd89330365d87 Validity Not Before: Jan 2 16:21:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=83a531fa206ac39a519d1ae0dd4f44a56eefe497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1b:7f:65:91:a0:0e:f1:71:cd:a7:39:d9:14: 24:79:11:f7:c6:4d:f8:6a:e8:a7:a3:81:4c:7c:ca: 39:58:8d:75:27:00:01:6d:75:cd:8a:5c:4a:7e:56: 9b:ca:c1:94:7f:a8:99:70:6e:c1:40:c3:dc:34:04: 43:7c:d2:ab:b9:34:45:f2:99:c9:d6:ea:e2:e2:55: a9:77:06:5e:0f:d8:91:48:17:a6:4d:3d:17:29:89: c2:8a:99:aa:87:9e:dd:31:1c:97:6c:06:7f:96:98: 8f:49:ab:e7:98:55:56:b1:01:8d:d8:a8:a2:f6:8b: e1:9e:f4:6c:75:1f:53:81:d2:01:ba:43:42:f1:eb: 06:bf:88:06:74:f5:01:38:57:90:7b:ce:e7:c9:d4: 13:4f:f5:22:df:62:49:73:e1:c5:55:7e:25:42:c8: 6b:57:09:82:8b:88:38:1a:90:ea:53:d7:1d:4d:27: 76:66:08:94:ca:eb:0f:5a:9e:6e:e2:8f:7e:ea:5a: e3:be:e0:9b:9a:ce:e2:75:a2:ac:71:df:a8:23:bd: 13:cd:ce:82:83:33:bf:74:04:b0:99:17:3f:47:d9: ba:81:08:cd:f1:04:ef:bc:08:69:ba:b4:22:31:61: fc:f6:05:6f:8c:78:f8:ed:0e:ea:73:6f:6c:2a:52: f8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:A5:31:FA:20:6A:C3:9A:51:9D:1A:E0:DD:4F:44:A5:6E:EF:E4:97 X509v3 Authority Key Identifier: keyid:56:C8:A1:71:3C:74:76:E0:0E:D2:B7:7F:D9:8F:D8:93:30:36:5D:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/g6Ux-iBqw5pRnRrg3U9EpW7v5Jc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.80.149.0/24 Signature Algorithm: sha256WithRSAEncryption 76:6d:b2:3c:51:7a:dd:1e:bf:17:60:7b:95:1d:ae:c4:2d:95: 86:10:21:60:65:e2:3d:e9:c1:a2:30:e9:49:8b:64:6b:a7:0d: 2e:52:eb:9d:dd:d1:96:f5:f7:d0:7c:70:28:64:c0:bc:99:9b: 2a:f5:31:28:b6:b6:5d:2a:66:bc:01:f0:1c:69:39:4b:c2:9c: 40:c7:0e:ff:5c:ed:0e:f6:0f:89:c7:c3:8e:7c:85:6d:c7:4f: 22:a0:bc:a3:69:bc:e3:f4:c8:4a:8f:da:7b:7a:98:35:7a:0f: 11:a8:56:85:c1:0c:3e:fc:2c:55:a7:87:fd:08:42:d8:1d:ca: a1:89:9a:e2:6e:a2:b8:20:94:2a:30:74:68:2a:8f:86:e8:27: c9:12:9b:ce:ed:41:42:4f:17:80:bf:88:1f:e5:0a:a7:26:e5: bf:d4:50:9b:02:4c:cf:1c:cf:1b:7b:bb:7b:69:91:38:19:21: e5:26:0d:d0:34:3c:f2:97:b2:9e:2f:6d:af:91:53:1f:74:cb: bc:7b:fc:9d:86:b0:c2:a6:f6:c0:16:c1:54:4e:06:6b:f6:73: 8e:7e:ce:14:3e:8b:ad:1c:07:e6:cc:42:c9:4f:03:e3:17:9e: 0b:2e:f7:c6:48:ec:51:16:8a:d6:68:7e:b1:f3:41:f9:ea:46: f8:9f:f6:50 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g9s6AbOflVfEJ9Ds2GCWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2YzhhMTcxM2M3NDc2ZTAwZWQyYjc3ZmQ5OGZkODkzMzAz NjVkODcwHhcNMjYwMTAyMTYyMTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4M2E1MzFmYTIwNmFjMzlhNTE5ZDFhZTBkZDRmNDRhNTZlZWZlNDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxt/ZZGgDvFxzac52RQkeRH3xk34 auino4FMfMo5WI11JwABbXXNilxKflabysGUf6iZcG7BQMPcNARDfNKruTRF8pnJ 1uri4lWpdwZeD9iRSBemTT0XKYnCipmqh57dMRyXbAZ/lpiPSavnmFVWsQGN2Kii 9ovhnvRsdR9TgdIBukNC8esGv4gGdPUBOFeQe87nydQTT/Ui32JJc+HFVX4lQshr VwmCi4g4GpDqU9cdTSd2ZgiUyusPWp5u4o9+6lrjvuCbms7idaKscd+oI70Tzc6C gzO/dASwmRc/R9m6gQjN8QTvvAhpurQiMWH89gVvjHj47Q7qc29sKlL4kQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIOlMfogasOaUZ0a4N1PRKVu7+SXMB8GA1UdIwQY MBaAFFbIoXE8dHbgDtK3f9mP2JMwNl2HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnNpaGNUeDBkdUFPMHJkXzJZX1lrekEyWFljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8yM2Q1MjUtODI5Ni00ZjljLTlkZTQt OTFlMzJjNTE3MTUyLzEvZzZVeC1pQnF3NXBSblJyZzNVOUVwVzd2NUpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8yM2Q1MjUtODI5Ni00ZjljLTlkZTQtOTFlMzJjNTE3MTUy LzEvVnNpaGNUeDBkdUFPMHJkXzJZX1lrekEyWFljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWFCVMA0G CSqGSIb3DQEBCwUAA4IBAQB2bbI8UXrdHr8XYHuVHa7ELZWGECFgZeI96cGiMOlJ i2Rrpw0uUuud3dGW9ffQfHAoZMC8mZsq9TEotrZdKma8AfAcaTlLwpxAxw7/XO0O 9g+Jx8OOfIVtx08ioLyjabzj9MhKj9p7epg1eg8RqFaFwQw+/CxVp4f9CELYHcqh iZribqK4IJQqMHRoKo+G6CfJEpvO7UFCTxeAv4gf5QqnJuW/1FCbAkzPHM8be7t7 aZE4GSHlJg3QNDzyl7KeL22vkVMfdMu8e/ydhrDCpvbAFsFUTgZr9nOOfs4UPout HAfmzELJTwPjF54LLvfGSOxRForWaH6x80H56kb4n/ZQ -----END CERTIFICATE-----Generated at Mon Jan 26 03:08:28 2026 by rpki-client