This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6QCY8jj5sRY8B7ezrR5fko1Dd-E.roa File: 6QCY8jj5sRY8B7ezrR5fko1Dd-E.roa (raw, json) Hash identifier: l49J7qk23km7NfSNEycPtRd/ucFHA/W+KBsygR6cQ/k= Subject key identifier: E9:00:98:F2:38:F9:B1:16:3C:07:B7:B3:AD:1E:5F:92:8D:43:77:E1 Certificate issuer: /CN=eb16e170f79bb05e7c0dec3ec60643e729be4ecd Certificate serial: 019B7AC7A816702DFB4263A445220971C010 Authority key identifier: EB:16:E1:70:F7:9B:B0:5E:7C:0D:EC:3E:C6:06:43:E7:29:BE:4E:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6xbhcPebsF58Dew-xgZD5ym-Ts0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6QCY8jj5sRY8B7ezrR5fko1Dd-E.roa Signing time: Thu 01 Jan 2026 18:17:43 +0000 ROA not before: Thu 01 Jan 2026 18:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34177 IP address blocks: 145.242.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.crl rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.mft rsync://rpki.ripe.net/repository/DEFAULT/6xbhcPebsF58Dew-xgZD5ym-Ts0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:a8:16:70:2d:fb:42:63:a4:45:22:09:71:c0:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb16e170f79bb05e7c0dec3ec60643e729be4ecd Validity Not Before: Jan 1 18:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e90098f238f9b1163c07b7b3ad1e5f928d4377e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8e:45:bf:26:e7:50:83:05:d2:9b:95:f1:6b: 25:a3:3b:13:ec:54:c0:0d:41:00:7a:f7:5c:4d:10: f4:dd:f8:8d:9d:19:06:c7:0c:f5:39:3b:bf:ec:16: 16:52:e5:ac:6f:21:9f:da:e9:f4:6a:6c:b1:1b:94: ec:de:9c:ac:13:ca:fb:cb:84:16:d3:99:24:05:a4: 86:fa:d7:98:08:2b:bb:f0:a8:e6:7f:73:f5:d6:3b: a2:e8:5a:b7:a4:3d:a5:03:c9:8b:48:92:a2:1a:6c: c8:4e:57:c9:07:ed:b9:7a:36:c3:07:89:c0:f5:1c: 39:07:62:7e:cd:f7:7a:9d:40:eb:2a:a2:65:90:72: ba:f8:d7:c1:67:2c:a4:0d:96:3a:47:40:33:e8:86: 4b:e1:d3:3a:9d:b6:e9:1e:ac:71:58:8a:25:1c:e0: 6d:dd:93:67:dc:9e:9a:45:f6:ff:25:6e:13:a6:8d: 01:78:4a:eb:3b:a5:f5:52:a3:ae:cd:eb:c1:be:9b: 07:e2:fa:30:41:e7:b5:d3:88:f3:1d:66:bd:80:1b: 2c:e8:cb:13:3c:40:a3:05:a1:f3:44:09:38:c2:9c: 30:6a:04:9f:b8:d9:bb:a9:b0:4c:05:08:d1:a6:3e: 52:36:8c:d4:50:0d:c0:04:54:87:5b:25:d5:91:fc: c6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:00:98:F2:38:F9:B1:16:3C:07:B7:B3:AD:1E:5F:92:8D:43:77:E1 X509v3 Authority Key Identifier: keyid:EB:16:E1:70:F7:9B:B0:5E:7C:0D:EC:3E:C6:06:43:E7:29:BE:4E:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xbhcPebsF58Dew-xgZD5ym-Ts0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6QCY8jj5sRY8B7ezrR5fko1Dd-E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.242.1.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:77:92:1d:97:1e:8b:d6:54:97:04:57:f7:0d:17:c4:3a:37: 2f:26:e4:2e:74:8a:24:35:e8:f7:38:c7:be:45:87:df:af:24: 93:a5:54:f0:06:0b:c3:6f:35:f1:a4:41:4a:76:04:6a:2c:c2: 28:80:d1:84:ca:bc:fa:e1:56:d3:37:01:87:d1:c4:eb:7f:d7: 5e:33:75:b4:7e:30:76:02:b7:3d:f7:b7:49:86:bd:7f:dc:1c: 25:57:19:a0:f8:c2:b9:45:07:c2:32:18:be:a2:11:e6:db:28: 5e:95:99:ec:7d:b7:a3:e8:8a:c2:18:05:e4:9a:d0:5d:6f:69: fe:a5:7e:61:9f:cb:1a:ad:b2:b8:c5:52:a9:83:20:dd:4c:18: af:aa:5a:3e:81:1b:af:9f:9b:38:36:a1:ef:61:1e:0f:67:e7: cb:4d:56:c2:28:65:4c:51:d0:4f:0a:17:fc:df:f7:60:b3:d3: 6a:92:e8:20:7e:34:dd:0f:a2:b1:ef:17:7d:4a:1e:3f:be:60: b9:e6:46:22:da:bf:24:05:b3:d5:91:3e:83:f2:98:4c:96:a4: 9f:5e:e6:99:12:6d:46:57:01:67:76:5e:ee:ce:a2:63:1a:e8: 71:70:fd:bb:3a:30:52:ed:18:ff:5e:fd:2b:1d:15:7a:04:07: 3e:49:d6:bb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x6gWcC37QmOkRSIJccAQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMTZlMTcwZjc5YmIwNWU3YzBkZWMzZWM2MDY0M2U3Mjli ZTRlY2QwHhcNMjYwMTAxMTgxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTAwOThmMjM4ZjliMTE2M2MwN2I3YjNhZDFlNWY5MjhkNDM3N2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Y5FvybnUIMF0puV8WslozsT7FTA DUEAevdcTRD03fiNnRkGxwz1OTu/7BYWUuWsbyGf2un0amyxG5Ts3pysE8r7y4QW 05kkBaSG+teYCCu78Kjmf3P11jui6Fq3pD2lA8mLSJKiGmzITlfJB+25ejbDB4nA 9Rw5B2J+zfd6nUDrKqJlkHK6+NfBZyykDZY6R0Az6IZL4dM6nbbpHqxxWIolHOBt 3ZNn3J6aRfb/JW4Tpo0BeErrO6X1UqOuzevBvpsH4vowQee104jzHWa9gBss6MsT PECjBaHzRAk4wpwwagSfuNm7qbBMBQjRpj5SNozUUA3ABFSHWyXVkfzGTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOkAmPI4+bEWPAe3s60eX5KNQ3fhMB8GA1UdIwQY MBaAFOsW4XD3m7BefA3sPsYGQ+cpvk7NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnhiaGNQZWJzRjU4RGV3LXhnWkQ1eW0tVHMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS80ZDc2M2EtZmUwZS00ZjBmLTlmMzIt NGJkOWM4NjdiZWU5LzEvNlFDWThqajVzUlk4QjdlenJSNWZrbzFEZC1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS80ZDc2M2EtZmUwZS00ZjBmLTlmMzItNGJkOWM4NjdiZWU5 LzEvNnhiaGNQZWJzRjU4RGV3LXhnWkQ1eW0tVHMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkfIBMA0G CSqGSIb3DQEBCwUAA4IBAQCKd5Idlx6L1lSXBFf3DRfEOjcvJuQudIokNej3OMe+ RYffrySTpVTwBgvDbzXxpEFKdgRqLMIogNGEyrz64VbTNwGH0cTrf9deM3W0fjB2 Arc997dJhr1/3BwlVxmg+MK5RQfCMhi+ohHm2yhelZnsfbej6IrCGAXkmtBdb2n+ pX5hn8sarbK4xVKpgyDdTBivqlo+gRuvn5s4NqHvYR4PZ+fLTVbCKGVMUdBPChf8 3/dgs9NqkuggfjTdD6Kx7xd9Sh4/vmC55kYi2r8kBbPVkT6D8phMlqSfXuaZEm1G VwFndl7uzqJjGuhxcP27OjBS7Rj/Xv0rHRV6BAc+Sda7 -----END CERTIFICATE-----Generated at Mon Jan 26 09:23:50 2026 by rpki-client