This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/6lmykGrjWlxTI-Qm8cv1Wru-ZUM.roa File: 6lmykGrjWlxTI-Qm8cv1Wru-ZUM.roa (raw, json) Hash identifier: 3/8y+29k2Z9zB5VeslI5T+W11/MyhEBGlF4ugyZh+nA= Subject key identifier: EA:59:B2:90:6A:E3:5A:5C:53:23:E4:26:F1:CB:F5:5A:BB:BE:65:43 Certificate issuer: /CN=9338840926ac73ead5b6187919e88f10032299ca Certificate serial: 019B76EBA4EA320C8DDB17DED95E44656CCE Authority key identifier: 93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/6lmykGrjWlxTI-Qm8cv1Wru-ZUM.roa Signing time: Thu 01 Jan 2026 00:18:33 +0000 ROA not before: Thu 01 Jan 2026 00:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214470 IP address blocks: 45.148.73.0/24 maxlen: 24 2a0f:8c00::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.crl rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:a4:ea:32:0c:8d:db:17:de:d9:5e:44:65:6c:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9338840926ac73ead5b6187919e88f10032299ca Validity Not Before: Jan 1 00:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea59b2906ae35a5c5323e426f1cbf55abbbe6543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6d:20:a3:61:9a:df:8f:b0:00:84:82:c3:e6: d6:60:e6:d3:62:86:0d:48:30:26:ef:c8:9e:79:4b: 58:ef:c0:84:c8:33:ad:5b:18:8c:a6:6c:bc:8c:70: a8:d9:57:5a:03:f3:b5:5d:ca:5b:e3:a5:f6:29:e7: e6:af:bd:74:87:de:5d:30:89:22:c8:c6:c8:f4:d5: d5:aa:b6:1f:7c:7d:0a:42:11:60:f3:bc:e8:5e:f0: 24:42:03:1f:49:15:99:9d:48:81:12:1e:6c:3b:de: 59:69:d7:a6:49:71:de:b4:72:76:4b:4b:5a:6f:f9: 87:7f:b7:bd:e1:00:a6:e1:d2:9e:d9:5c:5a:f7:aa: e2:6a:de:a9:b8:d2:f6:0c:11:59:d3:01:89:dc:bc: 40:04:7f:8b:9b:85:25:77:4f:8c:07:c7:13:d8:76: 51:5d:1e:44:82:bb:93:f2:b0:36:5b:7c:64:60:0e: 21:0e:27:f7:f8:b8:d9:a5:60:de:30:15:60:4f:16: 4f:65:4e:82:ea:cd:fd:f1:51:a0:d2:6f:fa:36:a0: b8:7f:a7:b7:0c:bd:7f:7a:a5:32:90:b5:6b:30:3a: 80:18:eb:fa:4d:25:85:bb:7b:30:c7:dd:e0:76:e8: c9:35:02:a1:00:ad:12:61:cc:81:e7:02:5f:6b:f1: 1a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:59:B2:90:6A:E3:5A:5C:53:23:E4:26:F1:CB:F5:5A:BB:BE:65:43 X509v3 Authority Key Identifier: keyid:93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/6lmykGrjWlxTI-Qm8cv1Wru-ZUM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.148.73.0/24 IPv6: 2a0f:8c00::/33 Signature Algorithm: sha256WithRSAEncryption b2:c8:58:d1:73:40:d7:04:89:48:df:9b:7c:0b:90:4f:92:7c: 6a:7a:98:31:9f:fc:11:31:87:5d:1d:80:02:91:19:6a:f7:9b: 26:d3:13:68:df:69:cc:ad:88:69:3c:5d:35:b2:ad:ca:52:15: 36:2e:d5:54:62:f5:75:bf:8b:43:4c:fa:be:2d:4c:27:1e:95: e8:10:ad:53:c6:0b:f2:63:3b:bd:1f:7a:8b:d7:8d:ca:69:79: 1f:94:d1:6d:83:2a:80:60:27:e3:b3:a0:a4:e3:14:4d:41:e6: 97:5a:6c:de:d9:52:35:43:65:45:14:83:f7:29:5a:e4:b2:b9: 06:52:a4:15:7e:2a:b5:2f:f5:f4:41:8e:ab:59:b8:23:23:b1: 91:98:2f:d9:a4:d2:c9:7a:50:6f:c5:b7:d3:bc:48:80:e4:40: e3:56:ab:76:76:41:69:2c:73:10:34:93:52:fa:7c:f4:98:48: 7d:f8:64:b5:49:87:50:9b:e9:cc:e2:1d:c4:a6:b3:b3:d4:d1: 8d:8f:74:08:a2:ab:67:cd:d7:f8:c7:ab:4e:16:09:8d:a8:9c: 70:2e:3b:3c:f0:02:5f:89:f5:1d:77:6c:d7:47:ee:8b:7e:92: cf:3f:22:4e:c8:dc:31:23:28:b5:5e:c1:0a:c2:c7:f9:ed:ab: 65:7b:e4:80 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt266TqMgyN2xfe2V5EZWzOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMzg4NDA5MjZhYzczZWFkNWI2MTg3OTE5ZTg4ZjEwMDMy Mjk5Y2EwHhcNMjYwMTAxMDAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTU5YjI5MDZhZTM1YTVjNTMyM2U0MjZmMWNiZjU1YWJiYmU2NTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzW0go2Ga34+wAISCw+bWYObTYoYN SDAm78ieeUtY78CEyDOtWxiMpmy8jHCo2VdaA/O1Xcpb46X2Kefmr710h95dMIki yMbI9NXVqrYffH0KQhFg87zoXvAkQgMfSRWZnUiBEh5sO95ZademSXHetHJ2S0ta b/mHf7e94QCm4dKe2Vxa96riat6puNL2DBFZ0wGJ3LxABH+Lm4Uld0+MB8cT2HZR XR5EgruT8rA2W3xkYA4hDif3+LjZpWDeMBVgTxZPZU6C6s398VGg0m/6NqC4f6e3 DL1/eqUykLVrMDqAGOv6TSWFu3swx93gdujJNQKhAK0SYcyB5wJfa/Ea+QIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFOpZspBq41pcUyPkJvHL9Vq7vmVDMB8GA1UdIwQY MBaAFJM4hAkmrHPq1bYYeRnojxADIpnKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3ppRUNTYXNjLXJWdGhoNUdlaVBFQU1pbWNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8wYmQ0ZDMtZDQ2Yy00ODNmLTk1NmUt ZWE3YWU3MmJkMzJkLzEvNmxteWtHcmpXbHhUSS1RbThjdjFXcnUtWlVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8wYmQ0ZDMtZDQ2Yy00ODNmLTk1NmUtZWE3YWU3MmJkMzJk LzEva3ppRUNTYXNjLXJWdGhoNUdlaVBFQU1pbWNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQALZRJMA4E AgACMAgDBgcqD4wAADANBgkqhkiG9w0BAQsFAAOCAQEAsshY0XNA1wSJSN+bfAuQ T5J8anqYMZ/8ETGHXR2AApEZavebJtMTaN9pzK2IaTxdNbKtylIVNi7VVGL1db+L Q0z6vi1MJx6V6BCtU8YL8mM7vR96i9eNyml5H5TRbYMqgGAn47OgpOMUTUHml1ps 3tlSNUNlRRSD9yla5LK5BlKkFX4qtS/19EGOq1m4IyOxkZgv2aTSyXpQb8W307xI gORA41ardnZBaSxzEDSTUvp89JhIffhktUmHUJvpzOIdxKazs9TRjY90CKKrZ83X +MerThYJjaiccC47PPACX4n1HXds10fui36Szz8iTsjcMSMotV7BCsLH+e2rZXvk gA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:16:40 2026 by rpki-client