This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/tPefU0s5JWS-GwxuGYkWVr1R9EY.roa File: tPefU0s5JWS-GwxuGYkWVr1R9EY.roa (raw, json) Hash identifier: rPOxfcwdSw3acy+hgzTKa3QcAYlRDAhIxoaqGNxcfGw= Subject key identifier: B4:F7:9F:53:4B:39:25:64:BE:1B:0C:6E:19:89:16:56:BD:51:F4:46 Certificate issuer: /CN=6fa86d1c1676a59a46acf37336192e985cff0e5b Certificate serial: 019B9E4F9609089294B74D9092ED53385EA5 Authority key identifier: 6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/tPefU0s5JWS-GwxuGYkWVr1R9EY.roa Signing time: Thu 08 Jan 2026 15:52:54 +0000 ROA not before: Thu 08 Jan 2026 15:52:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209242 IP address blocks: 45.80.109.0/24 maxlen: 24 45.80.111.0/24 maxlen: 24 188.244.122.0/24 maxlen: 24 193.9.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.mft rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9e:4f:96:09:08:92:94:b7:4d:90:92:ed:53:38:5e:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fa86d1c1676a59a46acf37336192e985cff0e5b Validity Not Before: Jan 8 15:52:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4f79f534b392564be1b0c6e19891656bd51f446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e2:a3:c2:34:aa:a5:0c:b7:3e:48:cd:8a:75: 56:ba:0b:bc:21:8e:79:58:96:dd:07:4a:33:c8:5b: bc:f8:ca:1f:db:de:c3:90:a4:de:8d:2e:f0:e6:85: a6:7c:a6:23:94:db:f7:b8:f3:00:50:1a:9b:e7:8c: 56:e4:08:5f:2e:a0:16:22:3e:ef:de:c2:c3:71:60: e1:d9:c3:16:d9:8c:ed:d6:a6:e2:e2:e7:ac:42:cf: 06:eb:16:f4:26:02:d7:19:0f:06:14:d5:18:26:a7: 7a:dc:66:04:9d:b9:c1:9c:71:b3:b5:0c:9e:ad:3f: 76:70:35:8c:b0:b6:ea:10:96:f7:ce:d2:3f:f4:a1: d1:23:8d:c5:ec:01:0b:75:22:27:d8:bd:d4:d3:17: a1:81:c4:88:0c:e1:83:26:96:d7:64:35:ce:66:88: 17:b6:70:3c:5f:d0:80:fe:40:11:db:34:1d:23:49: d5:37:ee:00:28:26:8e:da:5f:a6:5f:a9:1e:61:be: 2c:43:ea:e6:42:d3:18:30:5b:c6:d1:d9:21:df:62: a0:b0:b2:10:05:a9:6e:1e:10:c6:78:e1:aa:f3:35: 42:94:30:c2:d0:c7:26:6e:07:6b:47:02:46:2b:8f: 78:e5:d4:30:f1:38:7c:96:22:64:96:d4:f5:01:2a: ad:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:F7:9F:53:4B:39:25:64:BE:1B:0C:6E:19:89:16:56:BD:51:F4:46 X509v3 Authority Key Identifier: keyid:6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/tPefU0s5JWS-GwxuGYkWVr1R9EY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.80.109.0/24 45.80.111.0/24 188.244.122.0/24 193.9.49.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:fe:e3:05:db:34:f3:c5:ef:1b:8a:5f:f9:57:a5:67:eb:fc: c8:9a:fc:8f:6c:4d:6a:40:68:1e:16:06:ee:48:a0:03:b7:ad: c6:f5:17:ec:8f:59:cd:c4:a3:e5:32:14:5d:cc:f7:05:5b:da: 56:29:73:e5:ff:d5:da:36:2b:0c:01:51:27:3b:9a:75:85:d6: f4:39:a4:80:55:22:76:eb:ca:f0:98:e4:f6:f1:fe:f1:ab:6d: 59:d6:3b:9e:cf:c1:30:c2:80:61:c6:a3:46:16:24:2f:1c:16: 64:7e:27:c8:dc:dc:65:f2:d7:9a:9d:28:f1:d1:9d:86:51:7c: 73:82:41:67:c8:7d:50:02:4e:ad:d3:54:9e:b5:1f:26:14:8b: 44:e9:4d:45:f3:61:b0:7c:0b:24:02:b9:61:4b:bd:d9:3b:39: 05:c3:68:93:81:aa:97:8f:7f:6b:1b:17:3b:e6:e1:53:11:0d: 9f:85:a2:82:48:7f:12:ce:95:08:da:23:3b:4d:ee:d9:6d:57: ae:34:5e:60:2e:f0:4f:44:63:13:52:a1:bd:bf:1c:ef:32:7a: e3:91:0c:81:9a:51:fc:ff:ae:f2:3a:cc:2e:9b:50:d8:09:27: 1f:3b:66:11:8a:8f:db:5c:94:38:7e:da:9d:47:bd:3c:11:a2: a0:2f:63:ca -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZueT5YJCJKUt02Qku1TOF6lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYTg2ZDFjMTY3NmE1OWE0NmFjZjM3MzM2MTkyZTk4NWNm ZjBlNWIwHhcNMjYwMTA4MTU1MjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGY3OWY1MzRiMzkyNTY0YmUxYjBjNmUxOTg5MTY1NmJkNTFmNDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreKjwjSqpQy3PkjNinVWugu8IY55 WJbdB0ozyFu8+Mof297DkKTejS7w5oWmfKYjlNv3uPMAUBqb54xW5AhfLqAWIj7v 3sLDcWDh2cMW2Yzt1qbi4uesQs8G6xb0JgLXGQ8GFNUYJqd63GYEnbnBnHGztQye rT92cDWMsLbqEJb3ztI/9KHRI43F7AELdSIn2L3U0xehgcSIDOGDJpbXZDXOZogX tnA8X9CA/kAR2zQdI0nVN+4AKCaO2l+mX6keYb4sQ+rmQtMYMFvG0dkh32KgsLIQ BaluHhDGeOGq8zVClDDC0McmbgdrRwJGK4945dQw8Th8liJkltT1ASqtRwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFLT3n1NLOSVkvhsMbhmJFla9UfRGMB8GA1UdIwQY MBaAFG+obRwWdqWaRqzzczYZLphc/w5bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjZodEhCWjJwWnBHclBOek5oa3VtRnpfRGxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hZmUzNzMtZTViYy00MDEwLThhZDYt NmFhYjJiMWI5MjJjLzEvdFBlZlUwczVKV1MtR3d4dUdZa1dWcjFSOUVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9hZmUzNzMtZTViYy00MDEwLThhZDYtNmFhYjJiMWI5MjJj LzEvYjZodEhCWjJwWnBHclBOek5oa3VtRnpfRGxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALVBtAwQA LVBvAwQAvPR6AwQAwQkxMA0GCSqGSIb3DQEBCwUAA4IBAQCa/uMF2zTzxe8bil/5 V6Vn6/zImvyPbE1qQGgeFgbuSKADt63G9Rfsj1nNxKPlMhRdzPcFW9pWKXPl/9Xa NisMAVEnO5p1hdb0OaSAVSJ268rwmOT28f7xq21Z1juez8EwwoBhxqNGFiQvHBZk fifI3Nxl8teanSjx0Z2GUXxzgkFnyH1QAk6t01SetR8mFItE6U1F82GwfAskArlh S73ZOzkFw2iTgaqXj39rGxc75uFTEQ2fhaKCSH8SzpUI2iM7Te7ZbVeuNF5gLvBP RGMTUqG9vxzvMnrjkQyBmlH8/67yOswum1DYCScfO2YRio/bXJQ4ftqdR708EaKg L2PK -----END CERTIFICATE-----Generated at Sun Jan 25 12:03:29 2026 by rpki-client