This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa File: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (raw, json) Hash identifier: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4= Subject key identifier: F6:FE:B3:34:3C:56:8B:84:99:BB:32:9D:36:C1:F4:75:48:DC:22:A4 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019B7B36C4C06B73E058D777985461405165 Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa Signing time: Thu 01 Jan 2026 20:19:05 +0000 ROA not before: Thu 01 Jan 2026 20:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215691 IP address blocks: 45.157.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:c4:c0:6b:73:e0:58:d7:77:98:54:61:40:51:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Jan 1 20:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6feb3343c568b8499bb329d36c1f47548dc22a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d4:9f:e8:e3:b9:c5:f6:99:77:f1:07:d3:09: 46:0a:44:6a:3d:99:85:f0:71:84:2c:e3:ec:42:d6: 52:0a:c4:3a:50:3c:96:59:77:ca:7a:db:a0:85:7b: 4e:b0:4a:f9:28:bc:2c:2d:a7:55:37:ac:f1:4b:c1: 5c:e5:75:23:d7:9b:bd:99:ea:f3:4e:95:44:0b:6f: 22:91:63:d1:1e:45:44:ce:e6:11:41:44:14:b2:b2: 2b:d8:a1:02:c6:99:75:7f:ca:c5:63:11:75:8b:c2: 83:32:31:b0:b7:46:d7:89:68:ca:f1:b8:c9:6b:ff: f7:f4:a8:25:eb:89:72:92:26:2a:90:6d:9b:28:38: 43:da:91:e8:71:34:c3:74:c0:fd:2a:48:1e:42:31: 81:bb:b8:f9:19:4e:86:84:73:f8:95:18:75:b8:c9: 84:87:aa:ed:b7:7a:f0:f9:65:3b:4a:72:8c:4e:30: a2:51:e6:bd:3c:1c:07:ff:63:80:90:cf:9a:ba:c6: b3:7a:87:e1:89:cc:99:e3:0c:f2:5a:1d:0b:18:64: b8:55:45:cb:ba:de:2d:1b:eb:fd:dd:7b:ef:5d:d3: bf:a4:f5:1b:ef:67:39:76:24:e7:f8:5c:30:89:6f: b1:b7:fb:a9:9c:c0:a1:2c:57:d3:da:f0:41:68:06: a7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:FE:B3:34:3C:56:8B:84:99:BB:32:9D:36:C1:F4:75:48:DC:22:A4 X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.157.211.0/24 Signature Algorithm: sha256WithRSAEncryption 48:fc:96:70:14:7a:6b:13:cc:2d:13:ab:a8:a9:27:59:e5:07: 30:cb:2f:5d:4e:9f:44:89:94:1d:2e:b8:3b:4a:a4:a9:7c:a2: 1c:57:64:e5:b8:4e:ad:87:c2:46:a0:0a:e5:43:49:b1:0d:d5: 95:b9:dc:bd:06:70:34:d8:79:69:f6:b5:18:8b:3d:d4:4e:12: a5:a2:5b:ca:9b:3d:54:d9:08:0a:f9:26:b1:1c:0c:71:ed:ce: 4c:d2:ae:c1:be:7b:49:54:3f:70:df:cf:e0:64:e6:f9:79:bb: 30:52:55:6d:c5:53:eb:4f:fa:23:d6:28:5d:be:1a:8c:50:4c: 00:79:17:80:2a:dc:c9:75:a5:8b:10:4a:e3:11:da:11:b0:a7: 55:e9:f8:fc:2e:3f:dd:f0:d8:92:40:9f:c9:f7:75:f2:51:a7: 8e:fb:40:03:b6:0d:c7:8a:ea:2a:eb:24:e7:44:7f:2f:cc:b5: 20:14:2d:2a:84:b0:a8:4b:ff:79:81:51:c6:f0:54:7c:51:9f: 7c:c0:57:c0:3d:d7:6f:d7:81:69:a8:b6:a4:45:0e:ba:ca:b5: af:8a:58:be:1f:45:be:16:10:dd:e9:7c:8a:58:c5:97:94:36: 60:5e:1a:db:d8:58:34:61:be:95:1d:49:78:61:91:d7:33:06: 08:f2:20:b2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NsTAa3PgWNd3mFRhQFFlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjYwMTAxMjAxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmZlYjMzNDNjNTY4Yjg0OTliYjMyOWQzNmMxZjQ3NTQ4ZGMyMmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtSf6OO5xfaZd/EH0wlGCkRqPZmF 8HGELOPsQtZSCsQ6UDyWWXfKetughXtOsEr5KLwsLadVN6zxS8Fc5XUj15u9merz TpVEC28ikWPRHkVEzuYRQUQUsrIr2KECxpl1f8rFYxF1i8KDMjGwt0bXiWjK8bjJ a//39Kgl64lykiYqkG2bKDhD2pHocTTDdMD9KkgeQjGBu7j5GU6GhHP4lRh1uMmE h6rtt3rw+WU7SnKMTjCiUea9PBwH/2OAkM+ausazeofhicyZ4wzyWh0LGGS4VUXL ut4tG+v93XvvXdO/pPUb72c5diTn+FwwiW+xt/upnMChLFfT2vBBaAan5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPb+szQ8VouEmbsynTbB9HVI3CKkMB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvOXY2ek5EeFdpNFNadXpLZE5zSDBkVWpjSXFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ3TMA0G CSqGSIb3DQEBCwUAA4IBAQBI/JZwFHprE8wtE6uoqSdZ5Qcwyy9dTp9EiZQdLrg7 SqSpfKIcV2TluE6th8JGoArlQ0mxDdWVudy9BnA02Hlp9rUYiz3UThKlolvKmz1U 2QgK+SaxHAxx7c5M0q7BvntJVD9w38/gZOb5ebswUlVtxVPrT/oj1ihdvhqMUEwA eReAKtzJdaWLEErjEdoRsKdV6fj8Lj/d8NiSQJ/J93XyUaeO+0ADtg3Hiuoq6yTn RH8vzLUgFC0qhLCoS/95gVHG8FR8UZ98wFfAPddv14FpqLakRQ66yrWvili+H0W+ FhDd6XyKWMWXlDZgXhrb2Fg0Yb6VHUl4YZHXMwYI8iCy -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:02 2026 by rpki-client