This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bEw5sCgCycmnwH0jvM4nquRCY3I.roa File: bEw5sCgCycmnwH0jvM4nquRCY3I.roa (raw, json) Hash identifier: 3QaZNtqof+lUOH/KwwyaVDyzs65OBWvVZmx9SV9wg/A= Subject key identifier: 6C:4C:39:B0:28:02:C9:C9:A7:C0:7D:23:BC:CE:27:AA:E4:42:63:72 Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe Certificate serial: 019B7D5B2E95145E28E17E8A9FB108752D16 Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bEw5sCgCycmnwH0jvM4nquRCY3I.roa Signing time: Fri 02 Jan 2026 06:18:05 +0000 ROA not before: Fri 02 Jan 2026 06:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214922 IP address blocks: 45.94.213.0/24 maxlen: 24 45.94.214.0/24 maxlen: 24 45.94.215.0/24 maxlen: 24 89.44.240.0/24 maxlen: 24 89.44.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:2e:95:14:5e:28:e1:7e:8a:9f:b1:08:75:2d:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe Validity Not Before: Jan 2 06:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c4c39b02802c9c9a7c07d23bcce27aae4426372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:9f:17:ca:ad:25:60:80:50:d5:a8:18:3f:dc: 6d:99:c1:72:21:62:96:d0:4b:fe:dc:ce:63:52:43: 90:94:b4:87:07:cf:30:fd:77:a0:59:7f:20:f0:cb: 96:f0:81:a6:7c:03:72:e3:97:74:5d:c6:0d:d1:14: bb:3b:83:97:3a:f7:1c:72:c2:48:1b:08:6c:9e:84: 0e:d2:8a:6f:24:12:47:96:b9:5a:88:81:3e:2a:3c: 31:a1:b3:54:51:c9:7d:7b:6f:14:0b:52:e3:5e:ad: c0:8d:e8:dd:fe:54:38:63:15:ac:97:9e:80:7d:b2: 4f:2d:ad:3e:f3:b3:b7:83:b2:e4:89:16:80:d1:ec: e8:4f:3f:77:ad:7f:5b:37:11:33:a8:d1:3f:9c:b1: 28:87:a7:56:75:e2:0e:14:43:31:9d:32:bf:b8:e6: 4a:ed:54:b7:d9:54:e6:13:86:32:69:1c:06:bd:5f: 55:e8:e0:74:a5:a5:1b:61:1e:4a:6e:a0:ea:67:1f: d7:b8:b4:d0:4a:74:92:4d:71:3d:e1:45:c6:60:64: 4c:87:13:6a:d9:bb:72:03:4f:61:cf:2c:45:28:ac: 90:0d:cf:a0:7b:94:32:a1:d1:6c:a2:6e:33:b1:01: 93:45:87:b5:f7:9a:ec:9b:62:58:75:f2:87:1e:3a: a1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:4C:39:B0:28:02:C9:C9:A7:C0:7D:23:BC:CE:27:AA:E4:42:63:72 X509v3 Authority Key Identifier: keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bEw5sCgCycmnwH0jvM4nquRCY3I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.94.213.0-45.94.215.255 89.44.240.0/23 Signature Algorithm: sha256WithRSAEncryption 38:2b:01:85:4b:1c:b2:ba:a0:cc:f6:8e:bb:f5:f6:2f:eb:2c: 1e:c9:25:a8:b2:9e:78:8c:ef:0c:5a:2c:76:a1:9f:20:9d:00: 6e:e7:1b:d2:91:86:d6:d0:88:c5:11:26:1e:1a:c1:32:81:eb: d6:af:0a:9f:40:11:65:34:7a:9f:7b:83:ee:ba:66:d7:9c:3d: 7e:e3:b4:bf:7b:cc:ed:9b:fd:37:7c:9d:86:49:d0:bc:74:4a: 4c:8b:47:90:e3:de:30:6d:6e:09:ce:eb:8e:c7:a7:0c:a0:d5: 41:91:2b:c2:a2:a7:25:11:0d:1f:19:32:74:d8:20:66:50:dc: ee:9c:e5:e8:f2:41:96:53:5d:55:40:13:1f:08:19:4d:75:b8: ca:46:c0:95:48:35:3a:9a:98:ca:a3:55:0d:58:0e:57:40:21: a5:76:e9:f4:cc:43:d4:a5:3c:aa:2a:c8:26:90:c0:0e:3f:cd: 4b:fb:06:c9:a2:90:cb:64:d1:76:19:6b:00:2d:f9:58:d7:07: 0a:af:b0:7d:96:77:16:22:36:91:77:13:7a:1f:78:69:b2:c3: e2:51:56:c9:10:ad:a7:a4:e6:ae:2c:3e:41:f1:4c:36:26:f1: 3d:a7:c5:35:a1:83:a4:e3:bf:df:07:a4:90:52:6e:13:fc:7a: 88:39:0c:33 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt9Wy6VFF4o4X6Kn7EIdS0WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZGIzOGIzNDNkYTJkMTE5MzA5ZWRhYTE5YzdhNzg4NzAz MjdlYmUwHhcNMjYwMTAyMDYxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzRjMzliMDI4MDJjOWM5YTdjMDdkMjNiY2NlMjdhYWU0NDI2MzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2p8Xyq0lYIBQ1agYP9xtmcFyIWKW 0Ev+3M5jUkOQlLSHB88w/XegWX8g8MuW8IGmfANy45d0XcYN0RS7O4OXOvcccsJI GwhsnoQO0opvJBJHlrlaiIE+KjwxobNUUcl9e28UC1LjXq3Ajejd/lQ4YxWsl56A fbJPLa0+87O3g7LkiRaA0ezoTz93rX9bNxEzqNE/nLEoh6dWdeIOFEMxnTK/uOZK 7VS32VTmE4YyaRwGvV9V6OB0paUbYR5KbqDqZx/XuLTQSnSSTXE94UXGYGRMhxNq 2btyA09hzyxFKKyQDc+ge5QyodFsom4zsQGTRYe195rsm2JYdfKHHjqhEwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFGxMObAoAsnJp8B9I7zOJ6rkQmNyMB8GA1UdIwQY MBaAFG3bOLND2i0RkwntqhnHp4hwMn6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQt M2RmYTUxMGQ2YjE2LzEvYkV3NXNDZ0N5Y21ud0gwanZNNG5xdVJDWTNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQtM2RmYTUxMGQ2YjE2 LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAAtXtUD BAMtXtADBAFZLPAwDQYJKoZIhvcNAQELBQADggEBADgrAYVLHLK6oMz2jrv19i/r LB7JJaiynniM7wxaLHahnyCdAG7nG9KRhtbQiMURJh4awTKB69avCp9AEWU0ep97 g+66ZtecPX7jtL97zO2b/Td8nYZJ0Lx0SkyLR5Dj3jBtbgnO647Hpwyg1UGRK8Ki pyURDR8ZMnTYIGZQ3O6c5ejyQZZTXVVAEx8IGU11uMpGwJVINTqamMqjVQ1YDldA IaV26fTMQ9SlPKoqyCaQwA4/zUv7BsmikMtk0XYZawAt+VjXBwqvsH2WdxYiNpF3 E3ofeGmyw+JRVskQraek5q4sPkHxTDYm8T2nxTWhg6Tjv98HpJBSbhP8eog5DDM= -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:42 2026 by rpki-client