This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/6H1pHroW_WpI3RuJ_XZZvGns_sM.roa File: 6H1pHroW_WpI3RuJ_XZZvGns_sM.roa (raw, json) Hash identifier: NhpuQWl3vvTwNJCxL4zGLvg+GHPtSA273p3r0OlIk9U= Subject key identifier: E8:7D:69:1E:BA:16:FD:6A:48:DD:1B:89:FD:76:59:BC:69:EC:FE:C3 Certificate issuer: /CN=ab53ec0e9a053cbbe0e9a071bcad9e68a99ccfa8 Certificate serial: 019B7EA72675E3CBA8AB81097BF91B27E8F0 Authority key identifier: AB:53:EC:0E:9A:05:3C:BB:E0:E9:A0:71:BC:AD:9E:68:A9:9C:CF:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/6H1pHroW_WpI3RuJ_XZZvGns_sM.roa Signing time: Fri 02 Jan 2026 12:20:42 +0000 ROA not before: Fri 02 Jan 2026 12:20:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34731 IP address blocks: 80.76.16.0/20 maxlen: 20 80.76.16.0/21 maxlen: 23 80.76.24.0/21 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:26:75:e3:cb:a8:ab:81:09:7b:f9:1b:27:e8:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab53ec0e9a053cbbe0e9a071bcad9e68a99ccfa8 Validity Not Before: Jan 2 12:20:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e87d691eba16fd6a48dd1b89fd7659bc69ecfec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ce:87:7b:d6:08:42:0b:85:34:65:7f:67:8b: 1f:ec:35:9e:48:84:83:70:f4:bb:67:6d:f1:9d:e9: a3:76:14:87:86:4a:b0:77:08:51:df:56:8e:75:a5: e2:11:f0:87:07:84:76:a3:2d:30:19:aa:3d:33:13: d8:25:4a:94:26:fd:fd:af:6f:5f:bd:5b:4c:50:83: 69:86:6c:ee:b5:03:1f:36:45:66:03:5c:e9:6d:57: 0d:80:4b:de:eb:f5:48:e4:ec:2a:12:c3:c6:ef:15: d7:b8:6d:bf:03:54:ac:6b:bb:28:ac:77:18:c7:48: 3f:5c:a5:02:0d:29:4a:15:ff:bc:60:60:1b:63:d2: 68:c3:fd:7a:bb:5f:2b:e5:80:50:f4:40:67:69:de: 70:4c:2f:a1:8b:81:7c:df:72:71:37:93:35:9a:70: c9:11:bf:f6:a6:52:76:94:09:7d:2f:c7:82:77:57: 15:e6:e2:3d:ce:67:eb:3d:a9:7b:12:bd:81:96:fc: 9b:3d:71:8d:18:53:28:4c:9e:12:61:0f:f6:f3:dd: cd:31:53:ff:3a:da:55:35:bb:8a:93:d7:44:89:f4: 6c:87:09:81:29:76:96:13:bc:48:fe:70:ae:c0:2b: a2:3b:c9:4a:5d:f8:83:ca:26:e2:83:b4:d1:52:4f: be:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:7D:69:1E:BA:16:FD:6A:48:DD:1B:89:FD:76:59:BC:69:EC:FE:C3 X509v3 Authority Key Identifier: keyid:AB:53:EC:0E:9A:05:3C:BB:E0:E9:A0:71:BC:AD:9E:68:A9:9C:CF:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/6H1pHroW_WpI3RuJ_XZZvGns_sM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.76.16.0/20 Signature Algorithm: sha256WithRSAEncryption c5:00:4f:76:03:fd:82:e3:d2:e4:6b:b2:cb:64:de:d6:dc:8d: 6d:a6:e4:4c:c9:b0:7c:be:1d:2b:66:9c:76:c1:9f:ae:c1:cf: 3d:25:f5:1e:fa:be:37:2a:3e:ad:8c:a9:f5:04:f0:8b:c0:d9: dc:50:c3:52:10:b2:83:c8:48:c4:1c:54:93:05:fc:34:89:9f: 78:60:cc:5e:83:c7:71:d2:db:12:e8:3c:99:1d:d6:b3:82:1f: e8:9c:ea:77:fc:74:74:0a:ef:b2:9d:ce:c2:08:ab:46:e5:89: 13:eb:4c:ff:7a:4d:5f:a7:cf:e5:2c:e7:02:6b:15:54:d4:a0: 64:1e:a5:8a:48:66:75:68:4e:6d:ea:d2:a1:48:f8:12:dd:f7: 79:83:c9:dd:4f:91:a2:f8:98:c1:75:63:4d:47:fd:16:d2:34: f6:ce:45:4e:ed:33:65:be:e2:25:39:56:9a:5a:63:3f:2f:59: 8e:c3:0e:be:55:b3:10:94:8f:fe:4b:4e:66:e3:3e:45:2d:90: 23:03:84:c9:90:e1:e0:2a:0b:80:51:29:93:e9:77:42:86:4a: 53:85:20:53:f8:5b:15:2c:9a:98:10:63:32:d8:6f:bd:fd:b9: cd:b1:9a:e8:ec:b3:ca:a2:bd:ad:9d:b4:72:39:8b:53:e3:b2: a8:06:22:61 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pyZ148uoq4EJe/kbJ+jwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiNTNlYzBlOWEwNTNjYmJlMGU5YTA3MWJjYWQ5ZTY4YTk5 Y2NmYTgwHhcNMjYwMTAyMTIyMDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODdkNjkxZWJhMTZmZDZhNDhkZDFiODlmZDc2NTliYzY5ZWNmZWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnc6He9YIQguFNGV/Z4sf7DWeSISD cPS7Z23xnemjdhSHhkqwdwhR31aOdaXiEfCHB4R2oy0wGao9MxPYJUqUJv39r29f vVtMUINphmzutQMfNkVmA1zpbVcNgEve6/VI5OwqEsPG7xXXuG2/A1Ssa7sorHcY x0g/XKUCDSlKFf+8YGAbY9Jow/16u18r5YBQ9EBnad5wTC+hi4F833JxN5M1mnDJ Eb/2plJ2lAl9L8eCd1cV5uI9zmfrPal7Er2BlvybPXGNGFMoTJ4SYQ/2893NMVP/ OtpVNbuKk9dEifRshwmBKXaWE7xI/nCuwCuiO8lKXfiDyibig7TRUk++gwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOh9aR66Fv1qSN0bif12Wbxp7P7DMB8GA1UdIwQY MBaAFKtT7A6aBTy74OmgcbytnmipnM+oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTFQc0Rwb0ZQTHZnNmFCeHZLMmVhS21jejZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82MWYzOTgtOTRmNi00NDY4LTg1ZjMt NjNmY2FhYzMxY2EzLzEvNkgxcEhyb1dfV3BJM1J1Sl9YWlp2R25zX3NNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy82MWYzOTgtOTRmNi00NDY4LTg1ZjMtNjNmY2FhYzMxY2Ez LzEvcTFQc0Rwb0ZQTHZnNmFCeHZLMmVhS21jejZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEUEwQMA0G CSqGSIb3DQEBCwUAA4IBAQDFAE92A/2C49Lka7LLZN7W3I1tpuRMybB8vh0rZpx2 wZ+uwc89JfUe+r43Kj6tjKn1BPCLwNncUMNSELKDyEjEHFSTBfw0iZ94YMxeg8dx 0tsS6DyZHdazgh/onOp3/HR0Cu+ync7CCKtG5YkT60z/ek1fp8/lLOcCaxVU1KBk HqWKSGZ1aE5t6tKhSPgS3fd5g8ndT5Gi+JjBdWNNR/0W0jT2zkVO7TNlvuIlOVaa WmM/L1mOww6+VbMQlI/+S05m4z5FLZAjA4TJkOHgKguAUSmT6XdChkpThSBT+FsV LJqYEGMy2G+9/bnNsZro7LPKor2tnbRyOYtT47KoBiJh -----END CERTIFICATE-----Generated at Sat Jan 3 06:40:34 2026 by rpki-client