This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/6qpiCml-pX5lqW7GJPxkWzV-tfE.roa File: 6qpiCml-pX5lqW7GJPxkWzV-tfE.roa (raw, json) Hash identifier: 1nonVA7UmTQNKF9oF+gcOnGfYBqyjkprOt68rdCUHlU= Subject key identifier: EA:AA:62:0A:69:7E:A5:7E:65:A9:6E:C6:24:FC:64:5B:35:7E:B5:F1 Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1 Certificate serial: 019B7BA39F9664B8E70C24458A9E3360DFC2 Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/6qpiCml-pX5lqW7GJPxkWzV-tfE.roa Signing time: Thu 01 Jan 2026 22:17:59 +0000 ROA not before: Thu 01 Jan 2026 22:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210583 IP address blocks: 46.32.8.0/24 maxlen: 24 78.158.167.0/24 maxlen: 24 79.132.216.0/24 maxlen: 24 86.109.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:9f:96:64:b8:e7:0c:24:45:8a:9e:33:60:df:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1 Validity Not Before: Jan 1 22:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eaaa620a697ea57e65a96ec624fc645b357eb5f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f2:5e:ed:35:d0:d6:aa:c4:aa:05:d0:21:39: 9b:b0:35:2f:6d:60:f3:d2:b6:2b:82:63:0c:5c:4d: da:ec:2b:1f:b1:77:0c:33:5d:d9:67:8f:6c:d5:6c: 83:d9:89:1f:56:34:1c:5d:62:41:92:dc:b3:1a:1c: 64:4d:84:a0:3c:68:0f:94:96:08:11:3d:af:7e:1b: d9:e8:78:1f:b4:9f:1e:2d:88:30:46:56:2c:77:c7: 7c:f4:04:7b:a2:bf:7b:14:27:77:ed:d7:6b:39:ba: 88:f6:60:8a:ea:15:0c:a5:7e:9d:6a:68:15:2c:d3: 1d:42:78:ed:57:f9:16:ee:1e:63:e0:7e:2f:c3:79: 95:74:60:4b:09:85:66:a3:0e:4b:b8:a7:b6:1a:21: 95:a6:13:61:ab:28:36:10:46:dd:89:f8:08:fa:1d: 9c:26:12:47:dd:ae:58:11:08:fc:db:e5:ad:78:76: 22:fc:52:12:2f:33:19:b2:a0:34:93:65:71:20:7f: 6d:ce:da:f2:f0:38:1c:76:e2:50:71:5d:c5:87:20: 4a:ac:f5:4a:47:cf:e8:7b:81:e8:9d:6b:4a:53:f3: bd:56:09:76:1d:a5:3f:d1:bb:42:8e:5d:0f:e9:95: 8b:d7:e6:dc:eb:a5:8b:d4:48:2b:f8:57:5d:ed:22: 91:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:AA:62:0A:69:7E:A5:7E:65:A9:6E:C6:24:FC:64:5B:35:7E:B5:F1 X509v3 Authority Key Identifier: keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/6qpiCml-pX5lqW7GJPxkWzV-tfE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.32.8.0/24 78.158.167.0/24 79.132.216.0/24 86.109.61.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:8c:31:f9:a5:b2:32:40:54:f6:90:6a:bf:ad:80:85:9c:93: 7a:d7:fb:ea:65:ad:8e:cc:36:58:e9:44:09:e0:e7:39:39:92: a4:71:d6:21:3e:e8:58:a4:72:62:4d:ba:fe:17:55:02:5c:61: 06:4b:06:05:e4:13:66:d8:f5:2c:28:68:68:fa:4c:69:85:42: 0d:1d:6b:e2:a3:15:9d:06:11:4f:bc:23:d5:7d:11:63:62:d0: 49:f7:2b:d3:0a:aa:7f:58:2b:d2:b3:d2:10:99:32:13:b3:e9: 6f:40:db:a9:96:38:94:ba:92:36:4e:09:fd:3e:e4:57:eb:14: 09:c1:af:15:c7:7d:a5:99:20:88:b5:f3:f7:84:a2:c4:ab:3a: f0:f1:28:7c:6b:46:a6:57:42:30:ae:ba:73:63:dc:f6:e3:fc: fb:e6:fa:46:51:4d:f5:28:aa:5f:84:db:7d:09:3b:8c:6f:bb: 4f:3a:0c:67:ca:81:2d:c7:0f:f4:b3:5f:ee:00:79:21:e1:c1: 92:cc:5c:4c:37:be:f1:77:db:b4:a9:cf:7b:53:40:f3:6b:79: 7c:cb:04:71:0e:39:cd:db:93:9e:74:f9:ed:bb:0f:30:ff:25: 92:f6:db:84:e6:a9:5c:95:0e:08:5c:4e:e5:7a:2b:e1:bf:01: 7c:4c:81:5b -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt7o5+WZLjnDCRFip4zYN/CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNjk4YzRiNjEyYWZlZTJjYmIxY2RkNTA5ZTRmMDI0NmZi YjgwZTEwHhcNMjYwMTAxMjIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWFhNjIwYTY5N2VhNTdlNjVhOTZlYzYyNGZjNjQ1YjM1N2ViNWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vJe7TXQ1qrEqgXQITmbsDUvbWDz 0rYrgmMMXE3a7CsfsXcMM13ZZ49s1WyD2YkfVjQcXWJBktyzGhxkTYSgPGgPlJYI ET2vfhvZ6HgftJ8eLYgwRlYsd8d89AR7or97FCd37ddrObqI9mCK6hUMpX6damgV LNMdQnjtV/kW7h5j4H4vw3mVdGBLCYVmow5LuKe2GiGVphNhqyg2EEbdifgI+h2c JhJH3a5YEQj82+WteHYi/FISLzMZsqA0k2VxIH9tztry8DgcduJQcV3FhyBKrPVK R8/oe4HonWtKU/O9Vgl2HaU/0btCjl0P6ZWL1+bc66WL1Egr+Fdd7SKRRwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFOqqYgppfqV+ZaluxiT8ZFs1frXxMB8GA1UdIwQY MBaAFFtpjEthKv7iy7HN1Qnk8CRvu4DhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMt Y2MyZmFmZTNhOGI0LzEvNnFwaUNtbC1wWDVscVc3R0pQeGtXelYtdGZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMtY2MyZmFmZTNhOGI0 LzEvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALiAIAwQA Tp6nAwQAT4TYAwQAVm09MA0GCSqGSIb3DQEBCwUAA4IBAQCejDH5pbIyQFT2kGq/ rYCFnJN61/vqZa2OzDZY6UQJ4Oc5OZKkcdYhPuhYpHJiTbr+F1UCXGEGSwYF5BNm 2PUsKGho+kxphUINHWvioxWdBhFPvCPVfRFjYtBJ9yvTCqp/WCvSs9IQmTITs+lv QNupljiUupI2Tgn9PuRX6xQJwa8Vx32lmSCItfP3hKLEqzrw8Sh8a0amV0Iwrrpz Y9z24/z75vpGUU31KKpfhNt9CTuMb7tPOgxnyoEtxw/0s1/uAHkh4cGSzFxMN77x d9u0qc97U0Dza3l8ywRxDjnN25OedPntuw8w/yWS9tuE5qlclQ4IXE7leivhvwF8 TIFb -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:32 2026 by rpki-client