This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/6fDAz4UFcIjJUNJfBauQnIUtFJQ.roa File: 6fDAz4UFcIjJUNJfBauQnIUtFJQ.roa (raw, json) Hash identifier: 32SPWBtR5ifRYzi3R6/09Z2DiSWDuRPZa68/1wX0JGw= Subject key identifier: E9:F0:C0:CF:85:05:70:88:C9:50:D2:5F:05:AB:90:9C:85:2D:14:94 Certificate issuer: /CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb Certificate serial: 019B7C11D03C9C2F27661D744C91756F532A Authority key identifier: 99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/6fDAz4UFcIjJUNJfBauQnIUtFJQ.roa Signing time: Fri 02 Jan 2026 00:18:20 +0000 ROA not before: Fri 02 Jan 2026 00:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212097 IP address blocks: 45.81.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:d0:3c:9c:2f:27:66:1d:74:4c:91:75:6f:53:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb Validity Not Before: Jan 2 00:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e9f0c0cf85057088c950d25f05ab909c852d1494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ca:30:c1:39:d0:6f:b0:bd:cf:f3:2e:64:50: af:17:ec:f2:23:b4:36:9d:68:c9:f0:c4:03:73:d2: cf:69:eb:9e:1e:ec:70:1e:67:38:99:e9:37:71:13: 34:a9:18:11:d6:72:97:89:54:9c:08:39:aa:cb:56: 40:a0:8c:11:c8:bf:cd:4f:6e:f8:46:6e:b5:ab:57: 9d:c4:e9:24:fe:24:71:75:27:43:03:90:8f:97:50: 71:31:47:84:05:0e:d8:6f:4a:d9:e8:d9:27:60:29: c2:1f:41:09:18:46:3d:5e:08:29:98:2f:fd:8f:c7: 2f:ab:6b:4f:12:56:61:ab:8f:28:b3:fb:9d:99:f4: ab:e6:28:cb:5d:f4:2e:f2:9e:db:db:9f:a3:7b:c5: 17:96:6a:45:82:ff:6e:f1:fc:30:46:13:b3:4d:7f: a3:52:c0:7c:b1:d5:a2:d4:0d:6a:5a:71:87:82:3f: 60:f8:25:ba:44:e5:f5:72:4b:8c:da:f7:ad:24:ff: d7:90:ab:41:e2:4a:16:e9:dc:db:16:44:43:98:d7: cc:8e:22:a9:0c:3b:aa:dc:a8:d9:fb:3d:c0:a4:7b: 01:df:62:26:2d:bf:a3:18:81:36:38:bb:f5:82:91: f3:ff:8b:b4:17:c4:6c:be:c3:07:69:6f:2f:bd:5d: c6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:F0:C0:CF:85:05:70:88:C9:50:D2:5F:05:AB:90:9C:85:2D:14:94 X509v3 Authority Key Identifier: keyid:99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/6fDAz4UFcIjJUNJfBauQnIUtFJQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.88.0/22 Signature Algorithm: sha256WithRSAEncryption 71:f9:cc:18:8d:9e:38:b7:5b:43:a6:c5:fe:28:e1:fd:94:63: 18:15:48:f2:f9:95:7c:69:fa:49:d4:ad:39:fd:c1:05:bb:d7: 5e:eb:92:2c:26:29:3e:b0:b3:7e:2c:f5:b3:4a:1a:c9:c0:2c: 48:f6:6f:0a:ec:a0:1d:25:c9:21:9b:c7:37:d3:88:02:d7:e8: 71:28:3f:0d:c9:e9:2e:c8:54:db:6c:9e:22:ff:6d:4f:bd:a4: 36:fc:8d:09:97:f4:90:88:5c:ed:0a:ac:1c:e1:af:15:9b:8d: e0:a6:b4:45:cd:93:81:4b:62:c7:65:7c:b5:27:e8:17:e4:56: c9:f3:d8:f7:0f:0e:a4:e2:b6:de:21:ae:47:b7:2d:e4:8d:73: 2e:08:d7:98:69:29:5f:b2:8e:8d:07:8b:68:78:59:b6:d8:af: ba:41:9e:9a:d9:fe:bc:30:d3:65:53:b7:b3:03:09:11:ea:d9: 2a:8e:23:0d:80:d7:95:57:d1:b2:08:62:52:3b:d2:4a:5d:a3: 2e:f6:de:a0:69:94:8e:93:76:03:5a:05:08:1c:d7:98:a9:a8: 63:98:a5:62:2b:9f:5b:18:a5:9c:0c:51:aa:db:65:ff:24:b1: a5:52:de:93:46:a6:73:f5:0d:65:37:95:4b:56:a3:a7:55:b7: 45:05:d8:68 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EdA8nC8nZh10TJF1b1MqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5YTYyZDMwNzNhODJkYTg2NTQyYWNmYzM2ZjZmY2I5ZTY2 YTA1YmIwHhcNMjYwMTAyMDAxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOWYwYzBjZjg1MDU3MDg4Yzk1MGQyNWYwNWFiOTA5Yzg1MmQxNDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMowwTnQb7C9z/MuZFCvF+zyI7Q2 nWjJ8MQDc9LPaeueHuxwHmc4mek3cRM0qRgR1nKXiVScCDmqy1ZAoIwRyL/NT274 Rm61q1edxOkk/iRxdSdDA5CPl1BxMUeEBQ7Yb0rZ6NknYCnCH0EJGEY9XggpmC/9 j8cvq2tPElZhq48os/udmfSr5ijLXfQu8p7b25+je8UXlmpFgv9u8fwwRhOzTX+j UsB8sdWi1A1qWnGHgj9g+CW6ROX1ckuM2vetJP/XkKtB4koW6dzbFkRDmNfMjiKp DDuq3KjZ+z3ApHsB32ImLb+jGIE2OLv1gpHz/4u0F8RsvsMHaW8vvV3GRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOnwwM+FBXCIyVDSXwWrkJyFLRSUMB8GA1UdIwQY MBaAFJmmLTBzqC2oZUKs/Db2/LnmagW7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWFZdE1IT29MYWhsUXF6OE52Yjh1ZVpxQmJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83OTViYWYtNTA4Yi00NzdkLTg5MjYt MmQ5NTM2MDBmZjM3LzEvNmZEQXo0VUZjSWpKVU5KZkJhdVFuSVV0RkpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83OTViYWYtNTA4Yi00NzdkLTg5MjYtMmQ5NTM2MDBmZjM3 LzEvbWFZdE1IT29MYWhsUXF6OE52Yjh1ZVpxQmJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVFYMA0G CSqGSIb3DQEBCwUAA4IBAQBx+cwYjZ44t1tDpsX+KOH9lGMYFUjy+ZV8afpJ1K05 /cEFu9de65IsJik+sLN+LPWzShrJwCxI9m8K7KAdJckhm8c304gC1+hxKD8Nyeku yFTbbJ4i/21PvaQ2/I0Jl/SQiFztCqwc4a8Vm43gprRFzZOBS2LHZXy1J+gX5FbJ 89j3Dw6k4rbeIa5Hty3kjXMuCNeYaSlfso6NB4toeFm22K+6QZ6a2f68MNNlU7ez AwkR6tkqjiMNgNeVV9GyCGJSO9JKXaMu9t6gaZSOk3YDWgUIHNeYqahjmKViK59b GKWcDFGq22X/JLGlUt6TRqZz9Q1lN5VLVqOnVbdFBdho -----END CERTIFICATE-----Generated at Sun Jan 25 19:37:25 2026 by rpki-client