This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/REMrVft6-3BwYQLK6fqYfOn2QWw.roa File: REMrVft6-3BwYQLK6fqYfOn2QWw.roa (raw, json) Hash identifier: GZrljwugshzBvr1+cT1OWZSlqZAHUQOjzX24grxVfmI= Subject key identifier: 44:43:2B:55:FB:7A:FB:70:70:61:02:CA:E9:FA:98:7C:E9:F6:41:6C Certificate issuer: /CN=6fa86d1c1676a59a46acf37336192e985cff0e5b Certificate serial: 019B77593CBB0268D590060B2B63621D5079 Authority key identifier: 6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/REMrVft6-3BwYQLK6fqYfOn2QWw.roa Signing time: Thu 01 Jan 2026 02:18:15 +0000 ROA not before: Thu 01 Jan 2026 02:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200187 IP address blocks: 45.14.173.0/24 maxlen: 24 80.94.82.0/24 maxlen: 24 80.94.83.0/24 maxlen: 24 185.35.144.0/22 maxlen: 22 2a04:4fe0::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.mft rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:3c:bb:02:68:d5:90:06:0b:2b:63:62:1d:50:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fa86d1c1676a59a46acf37336192e985cff0e5b Validity Not Before: Jan 1 02:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44432b55fb7afb70706102cae9fa987ce9f6416c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d5:68:a8:04:46:51:db:cc:44:c9:9f:2d:48: f8:9f:3f:21:79:8f:c1:72:16:e6:0c:a8:14:e0:17: af:e4:fa:78:63:5c:f3:3e:c6:53:83:8e:c8:61:11: 03:10:1d:98:c7:10:96:a9:4b:06:3c:33:89:70:8c: 79:65:d9:35:6a:10:7a:31:a1:90:88:de:62:fd:60: 02:6d:f7:a8:22:9e:d3:fb:b5:7c:7a:fd:3f:ad:75: 56:01:4f:de:f9:87:78:b7:be:21:6a:14:32:a1:50: 30:80:e5:80:11:20:56:0e:df:fc:8b:67:c5:21:e5: cd:a6:7c:36:59:4b:60:fa:42:ed:69:7b:4a:19:03: 1a:ec:fa:d3:d8:35:10:ee:c6:04:47:16:53:6a:c1: 3d:1b:e8:d6:9d:8c:f4:a9:06:3f:80:be:39:9a:4f: d1:de:1f:c7:b0:69:c7:a4:4f:f8:f4:e4:8f:30:53: 08:52:5b:de:e1:81:4d:4b:db:64:d6:4d:1f:c9:bf: 5a:11:d4:0f:9c:5e:37:39:14:be:17:83:bc:46:8c: b8:c1:ce:1b:2f:24:be:21:5e:f7:f9:f4:fc:f4:fd: 48:8a:3d:80:c8:55:75:6e:0e:a9:a0:1c:cf:95:14: 6c:4f:8e:c3:e4:e9:f0:7d:49:f7:ae:76:c0:5b:56: 4f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:43:2B:55:FB:7A:FB:70:70:61:02:CA:E9:FA:98:7C:E9:F6:41:6C X509v3 Authority Key Identifier: keyid:6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/REMrVft6-3BwYQLK6fqYfOn2QWw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.14.173.0/24 80.94.82.0/23 185.35.144.0/22 IPv6: 2a04:4fe0::/30 Signature Algorithm: sha256WithRSAEncryption 36:83:0d:2f:79:57:1c:ee:05:96:97:c5:a2:02:8c:40:2c:ed: 0e:2e:a1:b0:1d:d3:94:e5:de:65:45:a6:94:e1:e2:2c:c4:1d: d0:f3:36:48:f8:91:a3:d2:bb:79:0d:86:8d:6f:5c:0d:91:52: 3a:c3:cc:75:1d:02:be:22:a2:62:c4:70:0f:43:a7:dd:d5:fa: 72:44:04:57:bb:56:be:9d:3e:fc:23:94:cc:d3:e3:0f:90:31: 53:a6:4f:8a:5b:62:be:a6:5a:00:fa:61:84:8c:a3:15:d6:ef: 9d:8a:b4:80:b6:f1:8b:b5:0f:07:4c:9f:09:18:ff:d8:e5:4e: 2e:5a:2e:cd:dd:d8:b3:25:31:d1:f2:50:89:dd:ea:f0:2c:bd: 92:91:e3:9d:f3:e4:d9:e2:5f:96:d3:94:46:cd:a0:7e:ce:3d: f2:cf:5c:ba:44:fd:72:78:37:07:63:eb:7a:71:1a:28:12:3a: fb:0f:7a:8c:1d:f1:22:51:87:aa:41:60:eb:80:26:f5:2a:3d: 16:85:fc:44:8a:50:0e:a0:2e:a3:81:79:98:55:ea:14:02:2d: cb:40:40:e9:36:6f:f3:78:1b:d4:ad:67:8a:14:ff:fb:6b:0f: d7:6a:64:59:fe:4a:8c:e8:fb:ee:8d:e6:0f:1c:7a:6f:04:e7: 4c:2e:e0:72 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt3WTy7AmjVkAYLK2NiHVB5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYTg2ZDFjMTY3NmE1OWE0NmFjZjM3MzM2MTkyZTk4NWNm ZjBlNWIwHhcNMjYwMTAxMDIxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDQzMmI1NWZiN2FmYjcwNzA2MTAyY2FlOWZhOTg3Y2U5ZjY0MTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNVoqARGUdvMRMmfLUj4nz8heY/B chbmDKgU4Bev5Pp4Y1zzPsZTg47IYREDEB2YxxCWqUsGPDOJcIx5Zdk1ahB6MaGQ iN5i/WACbfeoIp7T+7V8ev0/rXVWAU/e+Yd4t74hahQyoVAwgOWAESBWDt/8i2fF IeXNpnw2WUtg+kLtaXtKGQMa7PrT2DUQ7sYERxZTasE9G+jWnYz0qQY/gL45mk/R 3h/HsGnHpE/49OSPMFMIUlve4YFNS9tk1k0fyb9aEdQPnF43ORS+F4O8Roy4wc4b LyS+IV73+fT89P1Iij2AyFV1bg6poBzPlRRsT47D5OnwfUn3rnbAW1ZPNwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFERDK1X7evtwcGECyun6mHzp9kFsMB8GA1UdIwQY MBaAFG+obRwWdqWaRqzzczYZLphc/w5bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjZodEhCWjJwWnBHclBOek5oa3VtRnpfRGxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hZmUzNzMtZTViYy00MDEwLThhZDYt NmFhYjJiMWI5MjJjLzEvUkVNclZmdDYtM0J3WVFMSzZmcVlmT24yUVd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9hZmUzNzMtZTViYy00MDEwLThhZDYtNmFhYjJiMWI5MjJj LzEvYjZodEhCWjJwWnBHclBOek5oa3VtRnpfRGxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQALQ6tAwQB UF5SAwQCuSOQMA0EAgACMAcDBQIqBE/gMA0GCSqGSIb3DQEBCwUAA4IBAQA2gw0v eVcc7gWWl8WiAoxALO0OLqGwHdOU5d5lRaaU4eIsxB3Q8zZI+JGj0rt5DYaNb1wN kVI6w8x1HQK+IqJixHAPQ6fd1fpyRARXu1a+nT78I5TM0+MPkDFTpk+KW2K+ploA +mGEjKMV1u+dirSAtvGLtQ8HTJ8JGP/Y5U4uWi7N3dizJTHR8lCJ3erwLL2SkeOd 8+TZ4l+W05RGzaB+zj3yz1y6RP1yeDcHY+t6cRooEjr7D3qMHfEiUYeqQWDrgCb1 Kj0WhfxEilAOoC6jgXmYVeoUAi3LQEDpNm/zeBvUrWeKFP/7aw/XamRZ/kqM6Pvu jeYPHHpvBOdMLuBy -----END CERTIFICATE-----Generated at Sun Jan 25 15:28:59 2026 by rpki-client