This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/5h6kFRQXVVJn7vc_7-eg5_4Zx1M.roa File: 5h6kFRQXVVJn7vc_7-eg5_4Zx1M.roa (raw, json) Hash identifier: 7n1WW6ereLymBeWVUlfPXwnYkLa0bK40qeD55u+vgDQ= Subject key identifier: E6:1E:A4:15:14:17:55:52:67:EE:F7:3F:EF:E7:A0:E7:FE:19:C7:53 Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e Certificate serial: 019BA4421B48E0C472787A78AFF475349E07 Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/5h6kFRQXVVJn7vc_7-eg5_4Zx1M.roa Signing time: Fri 09 Jan 2026 19:35:54 +0000 ROA not before: Fri 09 Jan 2026 19:35:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7843 IP address blocks: 45.14.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a4:42:1b:48:e0:c4:72:78:7a:78:af:f4:75:34:9e:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e Validity Not Before: Jan 9 19:35:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e61ea4151417555267eef73fefe7a0e7fe19c753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:28:ea:37:77:3a:3d:c7:74:e3:11:e5:80:d5: 2d:1f:06:f1:1d:fd:29:d7:be:3c:55:2f:d8:7d:70: 46:c2:80:bc:32:c4:dc:c7:af:8b:f2:38:7d:a5:54: 39:73:f0:c3:e6:ac:6c:48:81:f9:16:8d:5e:03:fe: e7:ef:b4:71:f7:e0:bc:1f:da:56:e8:0d:5a:1a:3e: 23:90:8f:e0:75:7a:c7:98:dc:a6:0f:2b:40:e1:2a: 5f:79:68:cb:74:6c:90:5e:25:50:df:45:35:23:cf: f0:ca:70:c3:9d:a9:91:b3:b1:90:20:e4:78:63:bd: 27:6a:2c:6b:14:5c:98:fa:41:a3:54:20:58:57:1b: 0d:67:37:f9:0c:dc:c2:d5:80:73:25:06:b7:9b:a5: 67:bc:d5:c6:54:d1:64:fe:b9:f6:b2:2e:1c:12:16: a4:7d:b3:ff:46:b6:ea:77:92:3c:44:41:bf:8e:f9: 6d:b9:ea:b6:ab:10:06:08:5d:23:77:27:5e:3a:ba: 53:ea:6c:28:9b:52:bf:1e:71:da:e0:5d:c5:02:61: d7:ec:f1:00:9a:ec:8a:1a:9a:b1:20:4a:c1:02:1b: a6:eb:bc:08:d8:73:5a:78:c4:1d:95:ad:de:df:c2: 14:cd:11:3a:e0:52:7e:ba:9b:7e:85:2a:0c:cf:36: c7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:1E:A4:15:14:17:55:52:67:EE:F7:3F:EF:E7:A0:E7:FE:19:C7:53 X509v3 Authority Key Identifier: keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/5h6kFRQXVVJn7vc_7-eg5_4Zx1M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.14.180.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:0d:18:51:15:53:9b:a1:30:71:d5:db:c9:24:6a:58:25:3e: ee:25:2a:d7:23:d5:e0:5d:d4:5b:16:aa:02:68:3c:95:da:76: 78:2c:42:2b:c1:1d:33:02:53:b5:91:03:ae:40:88:2d:03:43: ff:55:e4:d5:df:d6:a5:f3:4c:f6:04:99:63:13:6b:aa:15:34: f0:e0:f3:c5:5a:0d:81:5f:66:1c:ac:1f:23:b6:ed:33:0a:c5: 94:f9:28:cc:fe:36:bd:9c:d8:97:59:70:5f:02:77:4c:15:11: 3f:8d:08:99:5c:23:5c:34:92:3c:97:30:f7:cd:fc:db:f9:7a: 2c:e3:41:8c:1a:14:b3:b5:71:5b:8a:14:94:d7:3c:86:63:f5: 0c:36:5c:65:4b:36:47:35:57:b2:92:d0:fd:32:84:52:4a:bf: df:47:2b:87:5a:fc:6d:d1:27:fa:47:c4:05:8f:c6:fd:dd:59: 0b:d8:0d:22:b1:34:f3:cc:f1:d4:c7:8c:d1:c2:c2:a6:18:ea: 88:65:82:a1:a2:3c:34:c1:81:57:d8:e1:5e:eb:15:0f:03:2b: 3a:c4:b2:c5:a9:1f:73:95:8a:91:65:96:96:48:1e:ec:4f:68: 22:c1:94:5b:ea:b9:a4:31:48:65:dc:67:4f:e3:16:1f:2d:c2: 45:2d:3e:70 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZukQhtI4MRyeHp4r/R1NJ4HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmYzY5NjQ2NDU3YThiZjhlZjk1NjliOWI0MjdlOWYyYzQ2 MmU1NmUwHhcNMjYwMTA5MTkzNTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjFlYTQxNTE0MTc1NTUyNjdlZWY3M2ZlZmU3YTBlN2ZlMTljNzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyjqN3c6Pcd04xHlgNUtHwbxHf0p 1748VS/YfXBGwoC8MsTcx6+L8jh9pVQ5c/DD5qxsSIH5Fo1eA/7n77Rx9+C8H9pW 6A1aGj4jkI/gdXrHmNymDytA4SpfeWjLdGyQXiVQ30U1I8/wynDDnamRs7GQIOR4 Y70naixrFFyY+kGjVCBYVxsNZzf5DNzC1YBzJQa3m6VnvNXGVNFk/rn2si4cEhak fbP/Rrbqd5I8REG/jvltueq2qxAGCF0jdydeOrpT6mwom1K/HnHa4F3FAmHX7PEA muyKGpqxIErBAhum67wI2HNaeMQdla3e38IUzRE64FJ+upt+hSoMzzbHrQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOYepBUUF1VSZ+73P+/noOf+GcdTMB8GA1UdIwQY MBaAFI/GlkZFeov475VpubQn6fLEYuVuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTkt YjBiMzVhMzRlMzg4LzEvNWg2a0ZSUVhWVkpuN3ZjXzctZWc1XzRaeDFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTktYjBiMzVhMzRlMzg4 LzEvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQ60MA0G CSqGSIb3DQEBCwUAA4IBAQANDRhRFVOboTBx1dvJJGpYJT7uJSrXI9XgXdRbFqoC aDyV2nZ4LEIrwR0zAlO1kQOuQIgtA0P/VeTV39al80z2BJljE2uqFTTw4PPFWg2B X2YcrB8jtu0zCsWU+SjM/ja9nNiXWXBfAndMFRE/jQiZXCNcNJI8lzD3zfzb+Xos 40GMGhSztXFbihSU1zyGY/UMNlxlSzZHNVeyktD9MoRSSr/fRyuHWvxt0Sf6R8QF j8b93VkL2A0isTTzzPHUx4zRwsKmGOqIZYKhojw0wYFX2OFe6xUPAys6xLLFqR9z lYqRZZaWSB7sT2giwZRb6rmkMUhl3GdP4xYfLcJFLT5w -----END CERTIFICATE-----Generated at Sun Jan 25 16:53:49 2026 by rpki-client