This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/0Q-Zfa5EM9tNo04k8RE6e6TtkfU.roa File: 0Q-Zfa5EM9tNo04k8RE6e6TtkfU.roa (raw, json) Hash identifier: RGjdNXoSFFGrfTu/Ti51Lk+K5F2xhb4depOlZwB8FXE= Subject key identifier: D1:0F:99:7D:AE:44:33:DB:4D:A3:4E:24:F1:11:3A:7B:A4:ED:91:F5 Certificate issuer: /CN=8e3f1663996be1707611fdce1ddea8920dd398a3 Certificate serial: 019B7B3579DF8DD8F1C55575EE5AC919F9F6 Authority key identifier: 8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/0Q-Zfa5EM9tNo04k8RE6e6TtkfU.roa Signing time: Thu 01 Jan 2026 20:17:40 +0000 ROA not before: Thu 01 Jan 2026 20:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64286 IP address blocks: 45.139.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:79:df:8d:d8:f1:c5:55:75:ee:5a:c9:19:f9:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e3f1663996be1707611fdce1ddea8920dd398a3 Validity Not Before: Jan 1 20:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d10f997dae4433db4da34e24f1113a7ba4ed91f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d0:de:b9:e6:51:cd:74:56:48:88:1a:7a:e5: 22:b1:84:68:04:6f:6a:1a:f6:52:69:c6:ce:75:f3: 55:85:8a:62:35:80:66:de:03:97:30:ba:8d:2e:d7: 68:74:04:9e:73:ba:4c:41:a2:6c:f1:21:5c:41:6b: 3e:7d:97:00:2d:8c:74:58:67:91:5a:5c:44:8b:1c: a5:e5:95:45:2e:e9:31:ea:89:03:b1:30:f0:c4:4d: 46:eb:05:02:d6:5d:d9:55:a3:48:b9:e9:f9:4f:0d: 74:35:b9:76:d7:f6:b8:55:65:46:b2:5d:b9:d5:ff: 1b:ae:49:b7:f3:9b:ce:39:d3:3b:4d:a8:b1:30:7f: 98:60:d9:e6:96:6c:b6:9e:36:f6:6f:91:79:87:45: 6a:7c:2e:f6:6d:23:2d:2d:1f:d4:2a:09:63:a9:02: e8:e4:ed:fb:00:b3:0d:a8:55:db:e3:36:81:04:c1: d0:62:f6:c6:bc:3b:23:7e:33:1e:80:18:83:57:85: d4:c6:35:15:0b:3c:fd:08:d6:ec:b8:87:af:97:19: a7:1c:a7:89:2a:81:d4:4a:bc:16:ed:a9:06:09:58: 30:11:02:8c:16:9f:43:e5:3e:f8:c2:8a:d2:a1:85: 0a:0a:94:4e:03:6e:23:25:94:c3:cd:02:6b:9a:df: 6d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:0F:99:7D:AE:44:33:DB:4D:A3:4E:24:F1:11:3A:7B:A4:ED:91:F5 X509v3 Authority Key Identifier: keyid:8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/0Q-Zfa5EM9tNo04k8RE6e6TtkfU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.139.210.0/24 Signature Algorithm: sha256WithRSAEncryption 36:e6:98:86:94:ee:d7:1c:97:c3:aa:fb:a0:76:07:83:4f:45: b8:56:03:e6:84:52:68:3c:c7:9a:be:20:6c:df:1f:0f:9b:e3: 54:da:d7:c5:8b:64:1d:c1:ed:36:68:75:56:df:41:20:1e:69: 3c:02:b4:6d:7b:b7:48:8f:f2:19:c6:b3:27:90:39:07:a5:d1: cd:72:cd:81:e8:e0:73:80:ae:30:f2:e3:84:ba:a0:66:e9:f7: 5f:86:0d:fd:11:35:37:eb:71:76:c7:83:43:a6:df:8a:fa:cf: 14:90:a4:7e:80:37:27:1c:b4:a1:d6:36:33:92:8e:47:46:cb: 52:62:df:68:76:6d:dc:d2:ab:bd:cf:6b:76:26:45:15:84:40: 54:49:c3:f9:1c:84:1e:5f:db:3c:a2:c8:ec:6e:6e:06:cd:ae: ae:99:22:81:10:b1:5d:a1:03:34:ef:38:89:1d:05:26:c1:d5: 69:a3:2c:47:67:2a:e1:7c:45:03:da:ee:e5:27:6a:0f:d6:fd: 79:1a:11:db:a4:95:28:69:ca:1f:d6:4c:a5:bb:c3:f3:62:b2: c6:26:4d:d2:1a:25:2e:96:34:78:88:e7:4f:98:fc:6d:99:8f: 34:37:e5:fa:3d:7a:d5:6c:15:28:9e:0c:dc:c9:35:31:1e:d2: d8:9f:22:5d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NXnfjdjxxVV17lrJGfn2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlM2YxNjYzOTk2YmUxNzA3NjExZmRjZTFkZGVhODkyMGRk Mzk4YTMwHhcNMjYwMTAxMjAxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTBmOTk3ZGFlNDQzM2RiNGRhMzRlMjRmMTExM2E3YmE0ZWQ5MWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttDeueZRzXRWSIgaeuUisYRoBG9q GvZSacbOdfNVhYpiNYBm3gOXMLqNLtdodASec7pMQaJs8SFcQWs+fZcALYx0WGeR WlxEixyl5ZVFLukx6okDsTDwxE1G6wUC1l3ZVaNIuen5Tw10Nbl21/a4VWVGsl25 1f8brkm385vOOdM7TaixMH+YYNnmlmy2njb2b5F5h0VqfC72bSMtLR/UKgljqQLo 5O37ALMNqFXb4zaBBMHQYvbGvDsjfjMegBiDV4XUxjUVCzz9CNbsuIevlxmnHKeJ KoHUSrwW7akGCVgwEQKMFp9D5T74worSoYUKCpROA24jJZTDzQJrmt9tMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNEPmX2uRDPbTaNOJPEROnuk7ZH1MB8GA1UdIwQY MBaAFI4/FmOZa+FwdhH9zh3eqJIN05ijMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamo4V1k1bHI0WEIyRWYzT0hkNm9rZzNUbUtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9jZDk3Y2MtY2UyYi00MjY0LTllNzkt YzhmOWJlN2QxOWRmLzEvMFEtWmZhNUVNOXRObzA0azhSRTZlNlR0a2ZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9jZDk3Y2MtY2UyYi00MjY0LTllNzktYzhmOWJlN2QxOWRm LzEvamo4V1k1bHI0WEIyRWYzT0hkNm9rZzNUbUtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYvSMA0G CSqGSIb3DQEBCwUAA4IBAQA25piGlO7XHJfDqvugdgeDT0W4VgPmhFJoPMeaviBs 3x8Pm+NU2tfFi2Qdwe02aHVW30EgHmk8ArRte7dIj/IZxrMnkDkHpdHNcs2B6OBz gK4w8uOEuqBm6fdfhg39ETU363F2x4NDpt+K+s8UkKR+gDcnHLSh1jYzko5HRstS Yt9odm3c0qu9z2t2JkUVhEBUScP5HIQeX9s8osjsbm4Gza6umSKBELFdoQM07ziJ HQUmwdVpoyxHZyrhfEUD2u7lJ2oP1v15GhHbpJUoacof1kylu8PzYrLGJk3SGiUu ljR4iOdPmPxtmY80N+X6PXrVbBUongzcyTUxHtLYnyJd -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:27 2026 by rpki-client