This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/6brxduzXhHDEdEdLPYo-IkEXumQ.roa File: 6brxduzXhHDEdEdLPYo-IkEXumQ.roa (raw, json) Hash identifier: BNtGnX+ZgfT95cD+u1NiIdsjMWlhX2+WUP0xdw5BCqw= Subject key identifier: E9:BA:F1:76:EC:D7:84:70:C4:74:47:4B:3D:8A:3E:22:41:17:BA:64 Certificate issuer: /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021 Certificate serial: 019B7F1446FC2D3304DA59921B9B4E94D300 Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/6brxduzXhHDEdEdLPYo-IkEXumQ.roa Signing time: Fri 02 Jan 2026 14:19:53 +0000 ROA not before: Fri 02 Jan 2026 14:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204392 IP address blocks: 78.159.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 14:59:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:46:fc:2d:33:04:da:59:92:1b:9b:4e:94:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021 Validity Not Before: Jan 2 14:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e9baf176ecd78470c474474b3d8a3e224117ba64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3c:d5:6f:52:ae:61:44:13:47:cb:92:3c:86: 46:a3:14:97:e0:96:1a:e6:e7:8b:be:a1:5b:6b:69: 4f:01:44:d3:e7:d7:43:2d:3e:fa:65:56:c4:b1:43: f6:27:ba:26:ad:4d:40:60:86:b4:ac:ec:2d:16:8a: 8e:0c:a3:3f:87:bd:21:23:ff:75:aa:ea:14:b0:94: 40:92:a1:86:b3:99:e0:5f:b8:03:d8:d9:92:55:d2: c6:29:73:8f:f0:dc:9b:65:f3:3e:42:53:bf:22:00: ab:ca:2a:bc:de:d7:19:2d:54:f9:ae:bb:5d:76:0a: 43:de:06:51:fa:b1:df:35:6e:40:da:a2:f8:95:8c: 0b:d0:e3:30:f6:ff:22:16:d7:29:35:87:88:5c:03: fd:a7:60:b8:80:78:d9:07:9d:14:86:72:2d:69:7f: cd:56:a6:96:4a:e6:f1:38:07:7a:82:78:69:a9:fb: d2:a0:80:3d:73:22:63:ca:36:e7:c8:29:06:ec:14: 8b:11:90:7d:79:03:7f:53:0c:4a:35:e3:62:b8:a2: e8:7c:e1:6a:b9:a4:bf:7c:3f:27:fc:4c:ca:be:dc: e7:03:2b:9c:87:0f:44:58:49:97:11:f4:1c:43:92: ff:db:dd:60:be:7a:75:56:fe:38:93:78:01:ad:4d: a6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:BA:F1:76:EC:D7:84:70:C4:74:47:4B:3D:8A:3E:22:41:17:BA:64 X509v3 Authority Key Identifier: keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/6brxduzXhHDEdEdLPYo-IkEXumQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.159.88.0/24 Signature Algorithm: sha256WithRSAEncryption c8:ef:31:5c:f8:94:75:6b:14:e3:2a:b9:c4:01:c6:29:37:9f: fe:2e:7a:ff:72:d7:7a:19:da:f4:52:60:c5:a4:43:a8:b9:6d: d0:3d:5b:c3:f0:47:3a:a7:48:6f:76:62:b3:99:ce:2a:3f:79: 38:56:46:66:8f:97:c5:ab:6b:ed:03:a9:7c:b7:a6:0f:2e:23: 8e:8e:ff:de:f9:6a:4c:d6:41:a1:9e:17:64:19:5b:c3:eb:4e: 38:42:37:d4:41:89:1a:62:06:08:eb:d9:7c:d1:5c:a5:8d:b8: d2:88:06:33:52:45:83:68:a0:92:b9:0c:b3:bf:7f:8e:73:e5: a8:ab:59:e8:6c:80:1e:47:1b:e4:c5:ec:61:33:8c:3f:5a:93: 73:d8:89:54:e5:47:07:18:de:49:0d:f3:c9:a9:c8:cd:1a:8e: e5:da:d2:1f:4e:60:01:29:99:56:0e:d9:0e:21:12:02:a0:59: 12:85:1d:03:9a:04:b4:5b:3c:cc:f2:3c:c5:9d:67:07:a5:5e: 11:29:13:80:21:fa:e3:58:e8:a8:24:f5:2f:32:2f:7d:41:95: 18:d6:88:85:70:c3:7f:39:e6:11:d8:e7:fd:49:23:3c:ef:53: 6a:3a:2c:fb:ad:04:98:26:8d:65:95:2f:df:f9:9a:c3:ba:2f: df:5c:ca:0b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FEb8LTME2lmSG5tOlNMAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjMzk2M2JhMmFhZTVhYmQzOGE2ZWVkMDlkYTk4NTYxMWYx YjUwMjEwHhcNMjYwMTAyMTQxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOWJhZjE3NmVjZDc4NDcwYzQ3NDQ3NGIzZDhhM2UyMjQxMTdiYTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TzVb1KuYUQTR8uSPIZGoxSX4JYa 5ueLvqFba2lPAUTT59dDLT76ZVbEsUP2J7omrU1AYIa0rOwtFoqODKM/h70hI/91 quoUsJRAkqGGs5ngX7gD2NmSVdLGKXOP8NybZfM+QlO/IgCryiq83tcZLVT5rrtd dgpD3gZR+rHfNW5A2qL4lYwL0OMw9v8iFtcpNYeIXAP9p2C4gHjZB50UhnItaX/N VqaWSubxOAd6gnhpqfvSoIA9cyJjyjbnyCkG7BSLEZB9eQN/UwxKNeNiuKLofOFq uaS/fD8n/EzKvtznAyuchw9EWEmXEfQcQ5L/291gvnp1Vv44k3gBrU2m6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOm68Xbs14RwxHRHSz2KPiJBF7pkMB8GA1UdIwQY MBaAFCw5Y7oqrlq9OKbu0J2phWEfG1AhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYt MTc2OTNlN2VhNjdhLzEvNmJyeGR1elhoSERFZEVkTFBZby1Ja0VYdW1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYtMTc2OTNlN2VhNjdh LzEvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATp9YMA0G CSqGSIb3DQEBCwUAA4IBAQDI7zFc+JR1axTjKrnEAcYpN5/+Lnr/ctd6Gdr0UmDF pEOouW3QPVvD8Ec6p0hvdmKzmc4qP3k4VkZmj5fFq2vtA6l8t6YPLiOOjv/e+WpM 1kGhnhdkGVvD6044QjfUQYkaYgYI69l80VyljbjSiAYzUkWDaKCSuQyzv3+Oc+Wo q1nobIAeRxvkxexhM4w/WpNz2IlU5UcHGN5JDfPJqcjNGo7l2tIfTmABKZlWDtkO IRICoFkShR0DmgS0WzzM8jzFnWcHpV4RKROAIfrjWOioJPUvMi99QZUY1oiFcMN/ OeYR2Of9SSM871NqOiz7rQSYJo1llS/f+ZrDui/fXMoL -----END CERTIFICATE-----Generated at Fri Jan 9 23:45:11 2026 by rpki-client