This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/Y_-6cR-Ot-YkSDcVXJ6Sf9LgN2I.roa File: Y_-6cR-Ot-YkSDcVXJ6Sf9LgN2I.roa (raw, json) Hash identifier: 6nifGRrcDpgAxnDj7xvX5R59QywyMQ7qljbxshYjizQ= Subject key identifier: 63:FF:BA:71:1F:8E:B7:E6:24:48:37:15:5C:9E:92:7F:D2:E0:37:62 Certificate issuer: /CN=e43dd424384759b5e85595825019b69fe9bf9220 Certificate serial: 019B7EA520B3FA65B2CF3CE140F6E1A4EF96 Authority key identifier: E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/Y_-6cR-Ot-YkSDcVXJ6Sf9LgN2I.roa Signing time: Fri 02 Jan 2026 12:18:29 +0000 ROA not before: Fri 02 Jan 2026 12:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62000 IP address blocks: 45.157.60.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:20:b3:fa:65:b2:cf:3c:e1:40:f6:e1:a4:ef:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e43dd424384759b5e85595825019b69fe9bf9220 Validity Not Before: Jan 2 12:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63ffba711f8eb7e6244837155c9e927fd2e03762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a2:dc:6f:72:3c:4a:01:24:db:4a:cc:65:9d: 90:77:fc:fb:73:fd:d0:46:8d:9c:b1:a1:e3:52:7a: e9:0a:7a:69:15:4d:6f:2d:c3:1f:c5:cc:3f:d7:66: 83:be:69:14:6f:3d:b9:2b:ee:36:9c:ef:09:4d:91: 2f:dd:e0:c0:3e:e0:97:04:10:a2:61:6b:61:09:fe: b6:f2:2b:24:68:e7:75:bc:9b:3b:b3:4b:94:c3:0c: de:d5:e2:18:a5:48:f6:6f:90:cf:5e:75:f8:2a:91: 49:34:ab:a0:7b:26:3f:b5:ef:43:60:d6:f3:aa:5a: aa:98:c2:3d:1c:4c:2b:2e:7b:0a:59:c8:1b:9e:f0: 8b:3d:2c:9d:8f:8f:a3:15:39:d8:97:c8:39:93:e7: 40:aa:96:99:9f:75:fe:ea:6c:a0:f4:35:62:2d:9f: 6a:fd:ae:b5:00:aa:63:af:f9:71:7d:dc:81:a5:09: 5d:bc:24:ca:dd:4d:fe:c0:b5:d3:20:ca:b6:f4:d4: a5:ee:1c:0b:f0:96:5c:ec:1b:cc:ac:bc:37:5b:2c: 7f:0c:c5:1d:28:bc:bb:da:27:b5:0b:c6:3d:85:ae: 66:8e:26:0b:4b:39:7e:f6:99:90:fc:ca:58:55:fb: ad:ce:ec:32:18:ef:93:48:e2:43:3a:42:f6:7c:b6: 66:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:FF:BA:71:1F:8E:B7:E6:24:48:37:15:5C:9E:92:7F:D2:E0:37:62 X509v3 Authority Key Identifier: keyid:E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/Y_-6cR-Ot-YkSDcVXJ6Sf9LgN2I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.157.60.0/22 Signature Algorithm: sha256WithRSAEncryption be:50:06:70:fd:7e:b8:2e:5c:63:59:1d:f9:46:f2:ad:b0:d5: e2:42:49:a7:d5:42:ce:be:e9:a1:6d:9d:a1:25:f8:6d:6a:2c: 4b:1d:de:53:ce:0b:cd:ef:c4:f2:c0:56:38:4a:c4:5f:0c:7b: f0:05:57:98:c6:32:ec:61:4d:ac:df:5c:f4:fb:f0:eb:bb:28: 19:da:95:a8:6b:24:d7:68:c5:e2:4f:d6:7e:ab:6f:ad:2c:7f: 74:b6:c1:e8:23:14:15:37:15:9b:e2:46:8c:48:70:ef:47:b1: db:70:8c:f1:1f:66:ed:db:f6:6c:b3:2c:c0:f0:b8:a6:a5:c7: ca:00:97:de:3a:83:ed:e1:81:58:da:d5:4b:6c:a2:0e:be:f1: 63:36:06:37:57:21:c4:d7:0c:be:76:bf:c9:05:61:68:44:94: ab:e6:36:41:91:63:2c:0c:71:c2:ce:ec:9a:a3:4d:6a:72:37: 6c:99:cf:02:86:98:ea:d8:15:ef:83:12:18:3f:1d:77:5f:ed: 1d:ce:d6:3c:78:32:c6:ed:0d:d8:a4:be:c9:b8:bc:8d:80:b5: 1f:59:df:5b:1d:e4:25:d8:9b:3a:36:5d:20:25:03:ed:d6:20: 8c:9c:0b:b4:4f:fe:13:a3:7b:bc:3f:41:a2:84:67:6d:03:15: 90:11:ba:3f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pSCz+mWyzzzhQPbhpO+WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0M2RkNDI0Mzg0NzU5YjVlODU1OTU4MjUwMTliNjlmZTli ZjkyMjAwHhcNMjYwMTAyMTIxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2ZmYmE3MTFmOGViN2U2MjQ0ODM3MTU1YzllOTI3ZmQyZTAzNzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6Lcb3I8SgEk20rMZZ2Qd/z7c/3Q Ro2csaHjUnrpCnppFU1vLcMfxcw/12aDvmkUbz25K+42nO8JTZEv3eDAPuCXBBCi YWthCf628iskaOd1vJs7s0uUwwze1eIYpUj2b5DPXnX4KpFJNKugeyY/te9DYNbz qlqqmMI9HEwrLnsKWcgbnvCLPSydj4+jFTnYl8g5k+dAqpaZn3X+6myg9DViLZ9q /a61AKpjr/lxfdyBpQldvCTK3U3+wLXTIMq29NSl7hwL8JZc7BvMrLw3Wyx/DMUd KLy72ie1C8Y9ha5mjiYLSzl+9pmQ/MpYVfutzuwyGO+TSOJDOkL2fLZmbwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGP/unEfjrfmJEg3FVyekn/S4DdiMB8GA1UdIwQY MBaAFOQ91CQ4R1m16FWVglAZtp/pv5IgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUQzVUpEaEhXYlhvVlpXQ1VCbTJuLW1fa2lBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy80YjJjZjktZDhlZC00YTI3LTkzYmEt OTNiNjkxZWUxY2NlLzEvWV8tNmNSLU90LVlrU0RjVlhKNlNmOUxnTjJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy80YjJjZjktZDhlZC00YTI3LTkzYmEtOTNiNjkxZWUxY2Nl LzEvNUQzVUpEaEhXYlhvVlpXQ1VCbTJuLW1fa2lBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZ08MA0G CSqGSIb3DQEBCwUAA4IBAQC+UAZw/X64LlxjWR35RvKtsNXiQkmn1ULOvumhbZ2h JfhtaixLHd5TzgvN78TywFY4SsRfDHvwBVeYxjLsYU2s31z0+/DruygZ2pWoayTX aMXiT9Z+q2+tLH90tsHoIxQVNxWb4kaMSHDvR7HbcIzxH2bt2/ZssyzA8LimpcfK AJfeOoPt4YFY2tVLbKIOvvFjNgY3VyHE1wy+dr/JBWFoRJSr5jZBkWMsDHHCzuya o01qcjdsmc8Chpjq2BXvgxIYPx13X+0dztY8eDLG7Q3YpL7JuLyNgLUfWd9bHeQl 2Js6Nl0gJQPt1iCMnAu0T/4To3u8P0GihGdtAxWQEbo/ -----END CERTIFICATE-----Generated at Mon Jan 26 01:01:54 2026 by rpki-client