This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/6KBg76wO49ZTNeUZLEQvdfuAEnc.roa File: 6KBg76wO49ZTNeUZLEQvdfuAEnc.roa (raw, json) Hash identifier: C78F4tRrcjaUZ0tkRMKZ6DDDl8hmlq6D1hHs1hdNls0= Subject key identifier: E8:A0:60:EF:AC:0E:E3:D6:53:35:E5:19:2C:44:2F:75:FB:80:12:77 Certificate issuer: /CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1 Certificate serial: 019B7F15173584E431FDBABDE83ECE3848C1 Authority key identifier: 5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/6KBg76wO49ZTNeUZLEQvdfuAEnc.roa Signing time: Fri 02 Jan 2026 14:20:47 +0000 ROA not before: Fri 02 Jan 2026 14:20:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12611 IP address blocks: 194.55.106.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:17:35:84:e4:31:fd:ba:bd:e8:3e:ce:38:48:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1 Validity Not Before: Jan 2 14:20:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8a060efac0ee3d65335e5192c442f75fb801277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1f:7a:91:d7:71:ea:48:61:c8:11:a0:ae:b8: 09:c4:ac:cc:cc:d2:ca:2e:e9:04:e5:44:5e:35:6d: a1:f1:c2:99:a1:3b:5b:3e:eb:9e:89:79:60:15:84: 15:73:9b:23:96:20:08:e0:25:38:08:5e:aa:03:79: 0f:72:ca:bf:1f:4a:72:71:12:3e:a0:32:4d:ce:00: e5:d7:27:69:07:16:b5:b3:26:a0:95:9a:2a:1c:f5: ed:65:7d:1b:e9:ea:9b:7a:8c:a2:19:6a:b4:4a:b8: 7b:4a:07:c2:0c:c2:28:4d:d3:bb:e2:e5:1c:79:17: 8f:e4:7e:48:58:dd:29:90:b8:89:e0:97:eb:a9:47: 3f:6f:e7:05:46:55:0d:72:db:f8:1f:a9:80:b8:42: 79:b0:a4:0f:84:ee:56:a4:0a:c6:1a:f5:96:96:95: 26:74:c7:5f:c9:5a:60:71:0c:61:37:9f:82:46:63: ec:29:f8:df:37:11:e1:51:5f:46:c1:4d:68:d6:29: 74:79:fa:ca:02:5a:77:43:c1:23:e7:4b:74:59:66: 49:83:ca:f0:71:9b:b8:d8:d0:a2:ba:76:7e:3b:ee: f5:3d:fe:53:ba:ec:02:cf:b7:94:4b:c2:c2:c7:ad: 5d:85:b9:68:f7:73:bd:89:70:db:74:e5:e7:05:2a: c2:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A0:60:EF:AC:0E:E3:D6:53:35:E5:19:2C:44:2F:75:FB:80:12:77 X509v3 Authority Key Identifier: keyid:5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/6KBg76wO49ZTNeUZLEQvdfuAEnc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.55.106.0/23 Signature Algorithm: sha256WithRSAEncryption a2:9c:3d:ea:65:80:b5:51:fc:32:90:77:a5:ed:8d:ed:2d:8a: a3:03:d3:58:14:e4:69:95:9c:d4:ab:42:04:c2:fd:cb:f9:b7: 52:22:7e:9f:f3:4b:01:59:b2:e5:41:1d:83:d4:83:0c:10:bc: 19:9c:39:6d:79:30:19:58:e9:5f:ed:78:54:b7:81:5e:ee:f3: e6:42:8f:a2:62:5f:d8:a0:39:e2:2c:fd:b5:d8:40:ff:b1:19: b1:d7:fb:f8:d2:6d:b6:92:df:db:de:43:c3:1a:9f:1e:09:f7: 63:db:ce:6a:b2:9f:e3:cc:09:e1:6c:d4:b0:29:e7:48:27:ff: d4:66:04:db:06:1d:c6:10:d6:1a:50:27:50:6c:ad:f0:ad:47: 0d:c9:31:3b:8c:51:cd:72:85:2a:a8:7f:89:89:92:00:f0:ba: c0:3d:63:b5:21:d9:7a:0e:66:53:03:a0:b2:ac:e7:f3:d5:c8: 77:be:24:af:bc:fb:2d:8e:89:c7:b7:31:7c:25:4b:6d:bf:f9: 65:d5:53:5e:02:8a:67:de:fc:bd:dd:d1:cc:cb:6a:07:70:05: d4:2f:23:19:16:25:ed:c0:eb:1a:67:9b:1f:89:9f:ab:33:52: 2a:cd:5a:b1:e8:bf:9d:18:ea:c5:15:0a:48:d9:a2:23:99:e8: da:e8:8c:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FRc1hOQx/bq96D7OOEjBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkNGQ2MzExNjZlOGVlZGU3ODcyZWFkOGFiOWE4MWFkYzg3 N2Q0ZDEwHhcNMjYwMTAyMTQyMDQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOGEwNjBlZmFjMGVlM2Q2NTMzNWU1MTkyYzQ0MmY3NWZiODAxMjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR96kddx6khhyBGgrrgJxKzMzNLK LukE5UReNW2h8cKZoTtbPuueiXlgFYQVc5sjliAI4CU4CF6qA3kPcsq/H0pycRI+ oDJNzgDl1ydpBxa1syaglZoqHPXtZX0b6eqbeoyiGWq0Srh7SgfCDMIoTdO74uUc eReP5H5IWN0pkLiJ4JfrqUc/b+cFRlUNctv4H6mAuEJ5sKQPhO5WpArGGvWWlpUm dMdfyVpgcQxhN5+CRmPsKfjfNxHhUV9GwU1o1il0efrKAlp3Q8Ej50t0WWZJg8rw cZu42NCiunZ+O+71Pf5TuuwCz7eUS8LCx61dhblo93O9iXDbdOXnBSrCgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOigYO+sDuPWUzXlGSxEL3X7gBJ3MB8GA1UdIwQY MBaAFF1NYxFm6O7eeHLq2Kuaga3Id9TRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFUxakVXYm83dDU0Y3VyWXE1cUJyY2gzMU5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS80M2I3OGMtNDUzOS00MTEyLWI3NTct ZmEzNmZjM2I3Mzc2LzEvNktCZzc2d080OVpUTmVVWkxFUXZkZnVBRW5jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS80M2I3OGMtNDUzOS00MTEyLWI3NTctZmEzNmZjM2I3Mzc2 LzEvWFUxakVXYm83dDU0Y3VyWXE1cUJyY2gzMU5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwjdqMA0G CSqGSIb3DQEBCwUAA4IBAQCinD3qZYC1UfwykHel7Y3tLYqjA9NYFORplZzUq0IE wv3L+bdSIn6f80sBWbLlQR2D1IMMELwZnDlteTAZWOlf7XhUt4Fe7vPmQo+iYl/Y oDniLP212ED/sRmx1/v40m22kt/b3kPDGp8eCfdj285qsp/jzAnhbNSwKedIJ//U ZgTbBh3GENYaUCdQbK3wrUcNyTE7jFHNcoUqqH+JiZIA8LrAPWO1Idl6DmZTA6Cy rOfz1ch3viSvvPstjonHtzF8JUttv/ll1VNeAopn3vy93dHMy2oHcAXULyMZFiXt wOsaZ5sfiZ+rM1IqzVqx6L+dGOrFFQpI2aIjmeja6Iys -----END CERTIFICATE-----Generated at Fri Jan 2 18:34:16 2026 by rpki-client