This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/sDmZmF3fo3gdZLDEv2WCfsdt6Z8.roa File: sDmZmF3fo3gdZLDEv2WCfsdt6Z8.roa (raw, json) Hash identifier: EiTHbukI/Tpn+Gtw5R4ZOGfo0HNyDTx7rIEuV9YoQNo= Subject key identifier: B0:39:99:98:5D:DF:A3:78:1D:64:B0:C4:BF:65:82:7E:C7:6D:E9:9F Certificate issuer: /CN=b817162877da9f4030bbcb9fe8ac143e6ab2871b Certificate serial: 019B7FF17FFB99F3F4C0463B8BF046533C1D Authority key identifier: B8:17:16:28:77:DA:9F:40:30:BB:CB:9F:E8:AC:14:3E:6A:B2:87:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBcWKHfan0Awu8uf6KwUPmqyhxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/sDmZmF3fo3gdZLDEv2WCfsdt6Z8.roa Signing time: Fri 02 Jan 2026 18:21:31 +0000 ROA not before: Fri 02 Jan 2026 18:21:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207992 IP address blocks: 45.145.164.0/24 maxlen: 24 45.145.165.0/24 maxlen: 24 45.145.166.0/24 maxlen: 24 45.145.167.0/24 maxlen: 24 146.19.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.mft rsync://rpki.ripe.net/repository/DEFAULT/uBcWKHfan0Awu8uf6KwUPmqyhxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:7f:fb:99:f3:f4:c0:46:3b:8b:f0:46:53:3c:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b817162877da9f4030bbcb9fe8ac143e6ab2871b Validity Not Before: Jan 2 18:21:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b03999985ddfa3781d64b0c4bf65827ec76de99f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e7:b5:1b:c7:ef:15:6f:e6:48:0c:79:71:3b: c5:e1:f0:dd:fc:05:f6:6e:75:f9:fe:c3:28:01:ac: 5c:b8:e1:d4:07:44:7c:77:e9:8d:47:eb:50:f3:75: e8:b6:28:8f:db:25:ce:59:b5:71:2e:1e:bc:08:62: 43:b2:7b:de:0e:ef:bb:08:68:18:02:47:2d:69:d9: c9:a1:a4:bc:8f:8b:2b:73:a9:83:14:49:5e:91:28: 0d:ca:54:8a:06:dd:32:72:36:ce:87:47:cd:1b:12: 63:2a:0f:7d:3d:70:71:a5:d4:5c:71:6b:37:08:e1: f9:ca:4c:e8:63:04:0c:db:76:53:53:02:13:74:36: df:f5:42:1d:d5:e3:de:49:1f:e5:73:28:3e:9c:06: 74:66:76:3e:de:60:de:98:60:d7:4c:24:91:5b:2b: c4:46:b6:03:f2:9e:00:6c:a2:1f:f6:3f:67:69:7c: 4c:e1:75:83:49:55:7a:d3:d0:da:08:ec:5e:a2:cd: 3f:2e:33:90:6b:e9:21:cc:fe:df:22:b9:4c:41:46: 2e:0c:81:db:b2:ee:18:ca:4a:e3:a6:1e:85:a3:4a: c4:32:5d:6f:5c:18:2e:f8:e4:d8:b6:91:33:09:60: f4:12:91:f2:51:df:2b:94:35:6b:08:e2:6f:dd:fb: 2d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:39:99:98:5D:DF:A3:78:1D:64:B0:C4:BF:65:82:7E:C7:6D:E9:9F X509v3 Authority Key Identifier: keyid:B8:17:16:28:77:DA:9F:40:30:BB:CB:9F:E8:AC:14:3E:6A:B2:87:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBcWKHfan0Awu8uf6KwUPmqyhxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/sDmZmF3fo3gdZLDEv2WCfsdt6Z8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.145.164.0/22 146.19.168.0/24 Signature Algorithm: sha256WithRSAEncryption 38:2b:04:f3:7d:88:eb:32:71:34:69:0e:6a:16:e8:22:64:3e: cc:79:3a:a2:e2:c0:7a:f5:4a:50:c2:c0:c4:07:ea:41:de:f4: f9:39:a3:9d:ad:61:0c:fc:19:14:24:e0:2a:41:af:02:0c:1f: 0f:39:ba:b7:13:ae:18:0b:61:e5:26:2a:57:9e:34:31:df:fa: f7:e8:76:a6:4c:3e:8d:ad:de:27:45:bf:b5:83:61:ac:82:79: ca:82:f5:77:26:e5:35:ba:c6:97:be:68:d3:d3:df:8d:8d:0b: 14:a6:b5:37:6b:aa:26:16:1f:df:a3:32:73:29:06:47:e3:07: 48:eb:99:91:b2:73:a7:98:e6:47:dc:e9:13:c3:16:61:b7:a0: 28:ef:c2:6e:88:6c:ed:30:42:c3:29:94:44:36:2a:cc:d0:d5: d3:a9:93:70:8a:64:85:d4:d9:09:30:92:cf:5d:7c:bf:ae:ea: 2e:96:b7:54:c5:2c:25:9a:cc:39:b4:5f:95:58:90:24:99:fc: ae:17:6a:50:40:64:5c:c9:94:d2:62:2f:d2:b0:26:3c:99:e8: ea:99:00:ca:3c:fa:23:4a:12:47:82:c1:80:7f:2f:23:b3:65: 7a:77:d2:67:a3:9e:5f:f2:96:61:31:6f:19:66:ae:f7:cb:1a: 5a:f4:0a:b1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/8X/7mfP0wEY7i/BGUzwdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MTcxNjI4NzdkYTlmNDAzMGJiY2I5ZmU4YWMxNDNlNmFi Mjg3MWIwHhcNMjYwMTAyMTgyMTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDM5OTk5ODVkZGZhMzc4MWQ2NGIwYzRiZjY1ODI3ZWM3NmRlOTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhue1G8fvFW/mSAx5cTvF4fDd/AX2 bnX5/sMoAaxcuOHUB0R8d+mNR+tQ83XotiiP2yXOWbVxLh68CGJDsnveDu+7CGgY AkctadnJoaS8j4src6mDFElekSgNylSKBt0ycjbOh0fNGxJjKg99PXBxpdRccWs3 COH5ykzoYwQM23ZTUwITdDbf9UId1ePeSR/lcyg+nAZ0ZnY+3mDemGDXTCSRWyvE RrYD8p4AbKIf9j9naXxM4XWDSVV609DaCOxeos0/LjOQa+khzP7fIrlMQUYuDIHb su4Yykrjph6Fo0rEMl1vXBgu+OTYtpEzCWD0EpHyUd8rlDVrCOJv3fst2QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLA5mZhd36N4HWSwxL9lgn7HbemfMB8GA1UdIwQY MBaAFLgXFih32p9AMLvLn+isFD5qsocbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUJjV0tIZmFuMEF3dTh1ZjZLd1VQbXF5aHhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8xNmI3YjQtYmIyMS00YjNlLWFlYjQt YjI3Y2EyOTFiZDc3LzEvc0RtWm1GM2ZvM2dkWkxERXYyV0Nmc2R0Nlo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS8xNmI3YjQtYmIyMS00YjNlLWFlYjQtYjI3Y2EyOTFiZDc3 LzEvdUJjV0tIZmFuMEF3dTh1ZjZLd1VQbXF5aHhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLZGkAwQA khOoMA0GCSqGSIb3DQEBCwUAA4IBAQA4KwTzfYjrMnE0aQ5qFugiZD7MeTqi4sB6 9UpQwsDEB+pB3vT5OaOdrWEM/BkUJOAqQa8CDB8PObq3E64YC2HlJipXnjQx3/r3 6HamTD6Nrd4nRb+1g2GsgnnKgvV3JuU1usaXvmjT09+NjQsUprU3a6omFh/fozJz KQZH4wdI65mRsnOnmOZH3OkTwxZht6Ao78JuiGztMELDKZRENirM0NXTqZNwimSF 1NkJMJLPXXy/ruoulrdUxSwlmsw5tF+VWJAkmfyuF2pQQGRcyZTSYi/SsCY8mejq mQDKPPojShJHgsGAfy8js2V6d9Jno55f8pZhMW8ZZq73yxpa9Aqx -----END CERTIFICATE-----Generated at Sun Jan 25 17:20:01 2026 by rpki-client