This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/X6aOcNp7OaJ0X_ZT-du_LuU0TCE.roa File: X6aOcNp7OaJ0X_ZT-du_LuU0TCE.roa (raw, json) Hash identifier: r5fWgTPjjmB31St0AmzLTssy0JP6/zDB0uGldcQoQt0= Subject key identifier: 5F:A6:8E:70:DA:7B:39:A2:74:5F:F6:53:F9:DB:BF:2E:E5:34:4C:21 Certificate issuer: /CN=66759f7a8f90672ea8353af4d11d6ac5e9fd8206 Certificate serial: 019B7F155AA553F6936DA469A14D37BBAE30 Authority key identifier: 66:75:9F:7A:8F:90:67:2E:A8:35:3A:F4:D1:1D:6A:C5:E9:FD:82:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/X6aOcNp7OaJ0X_ZT-du_LuU0TCE.roa Signing time: Fri 02 Jan 2026 14:21:04 +0000 ROA not before: Fri 02 Jan 2026 14:21:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 18013 IP address blocks: 45.149.16.0/24 maxlen: 24 45.149.17.0/24 maxlen: 24 45.149.18.0/24 maxlen: 24 45.149.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:5a:a5:53:f6:93:6d:a4:69:a1:4d:37:bb:ae:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66759f7a8f90672ea8353af4d11d6ac5e9fd8206 Validity Not Before: Jan 2 14:21:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5fa68e70da7b39a2745ff653f9dbbf2ee5344c21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6c:48:2b:6b:aa:1c:c1:d9:0b:63:3f:91:ba: 37:91:9f:34:04:72:31:6d:bb:2b:b8:1c:7b:45:fc: 38:ab:1a:b9:b4:75:9d:83:1f:dc:6e:6f:72:99:2d: 28:5b:e9:70:33:5c:97:81:c5:5e:4c:8e:c5:80:21: 34:09:54:c6:7f:b5:5c:47:09:8c:68:e6:cb:81:c8: 80:4d:a2:18:01:a4:0e:bb:fc:13:b8:45:2c:e7:dd: 9c:7e:6d:5f:be:a0:5d:28:35:2c:c5:19:61:05:c2: e2:74:df:c7:a8:e8:48:3c:97:5d:2c:78:7b:fc:9d: 43:c3:ad:5b:bb:7a:f6:ca:1a:52:c7:9a:9a:89:66: 50:d5:ba:a3:3d:7d:17:cd:e3:69:7d:15:f8:23:df: 20:f8:34:f5:8a:45:11:63:41:a6:bc:45:92:1e:5b: 3c:7d:fc:2d:48:2a:d5:96:ab:61:4f:0b:52:38:91: 3b:9e:ff:b9:c5:05:b7:e1:87:b6:dc:3b:ab:ce:3c: a6:2f:88:52:2d:f1:2e:c2:50:5e:61:99:3c:ac:1f: 75:d5:14:83:a6:51:09:6f:f9:d6:21:94:83:29:27: d5:84:e3:ad:a1:e4:9b:5b:a7:d1:25:5f:7d:20:9e: 30:e8:16:4d:c2:dd:63:82:74:c4:a3:7c:65:cb:4b: c4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:A6:8E:70:DA:7B:39:A2:74:5F:F6:53:F9:DB:BF:2E:E5:34:4C:21 X509v3 Authority Key Identifier: keyid:66:75:9F:7A:8F:90:67:2E:A8:35:3A:F4:D1:1D:6A:C5:E9:FD:82:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/X6aOcNp7OaJ0X_ZT-du_LuU0TCE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.16.0/22 Signature Algorithm: sha256WithRSAEncryption 85:03:66:98:47:0e:08:99:17:d3:b9:40:58:ec:92:35:4e:a7: 5d:e0:c1:a8:9c:36:81:b3:11:5b:42:4c:ca:46:3f:23:dd:29: e3:38:bc:7e:28:8a:48:2b:70:a5:94:40:0c:d2:62:66:fc:eb: 2e:54:8b:5f:11:8d:13:81:17:15:f4:a6:7a:6e:e6:cf:3f:d2: 63:a1:59:b6:83:fd:d3:51:31:6c:f4:20:f1:3a:6c:37:2c:1c: 81:9c:49:23:a6:fe:09:09:4b:ff:99:aa:30:21:ee:3f:49:cc: ac:1f:ad:62:69:fa:7d:57:6d:af:45:a8:d3:f2:d6:8a:37:c2: 3a:20:f4:0c:04:6f:ac:ab:64:af:7f:6e:95:75:d1:be:25:27: d1:5a:2d:a0:0e:d9:9d:e4:60:d7:8b:6b:d0:f5:b4:e7:66:5f: 6c:95:15:69:3c:56:f4:14:ce:36:36:e1:bf:15:4e:30:a3:6c: d2:4a:f8:dd:40:4a:52:bf:0f:8b:4a:48:03:df:26:9b:48:00: 5f:29:62:65:2a:f5:bd:e9:2f:6a:9b:f6:77:8f:9c:1c:0f:68: 76:06:8b:88:59:7f:2d:2b:17:7f:e8:c5:7c:99:90:4e:89:a1: 9c:ab:51:a1:ea:0a:ce:57:8e:f3:f6:42:16:48:93:9e:9e:aa: 64:1e:ee:c3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FVqlU/aTbaRpoU03u64wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NzU5ZjdhOGY5MDY3MmVhODM1M2FmNGQxMWQ2YWM1ZTlm ZDgyMDYwHhcNMjYwMTAyMTQyMTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmE2OGU3MGRhN2IzOWEyNzQ1ZmY2NTNmOWRiYmYyZWU1MzQ0YzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2xIK2uqHMHZC2M/kbo3kZ80BHIx bbsruBx7Rfw4qxq5tHWdgx/cbm9ymS0oW+lwM1yXgcVeTI7FgCE0CVTGf7VcRwmM aObLgciATaIYAaQOu/wTuEUs592cfm1fvqBdKDUsxRlhBcLidN/HqOhIPJddLHh7 /J1Dw61bu3r2yhpSx5qaiWZQ1bqjPX0XzeNpfRX4I98g+DT1ikURY0GmvEWSHls8 ffwtSCrVlqthTwtSOJE7nv+5xQW34Ye23DurzjymL4hSLfEuwlBeYZk8rB911RSD plEJb/nWIZSDKSfVhOOtoeSbW6fRJV99IJ4w6BZNwt1jgnTEo3xly0vEkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF+mjnDaezmidF/2U/nbvy7lNEwhMB8GA1UdIwQY MBaAFGZ1n3qPkGcuqDU69NEdasXp/YIGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm5XZmVvLVFaeTZvTlRyMDBSMXF4ZW45Z2dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8xNzhiMDItOTQ4Yy00NjI0LTk3Yjgt ZTRlMTdlNGI1MTgwLzEvWDZhT2NOcDdPYUowWF9aVC1kdV9MdVUwVENFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8xNzhiMDItOTQ4Yy00NjI0LTk3YjgtZTRlMTdlNGI1MTgw LzEvWm5XZmVvLVFaeTZvTlRyMDBSMXF4ZW45Z2dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZUQMA0G CSqGSIb3DQEBCwUAA4IBAQCFA2aYRw4ImRfTuUBY7JI1Tqdd4MGonDaBsxFbQkzK Rj8j3SnjOLx+KIpIK3CllEAM0mJm/OsuVItfEY0TgRcV9KZ6bubPP9JjoVm2g/3T UTFs9CDxOmw3LByBnEkjpv4JCUv/maowIe4/ScysH61iafp9V22vRajT8taKN8I6 IPQMBG+sq2Svf26VddG+JSfRWi2gDtmd5GDXi2vQ9bTnZl9slRVpPFb0FM42NuG/ FU4wo2zSSvjdQEpSvw+LSkgD3yabSABfKWJlKvW96S9qm/Z3j5wcD2h2BouIWX8t Kxd/6MV8mZBOiaGcq1Gh6grOV47z9kIWSJOenqpkHu7D -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:18 2026 by rpki-client