This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/K6IIfeYnJcau7XFah26WtRrWoX4.roa File: K6IIfeYnJcau7XFah26WtRrWoX4.roa (raw, json) Hash identifier: kAmjx0E3nDeIJhDMXwZG/0loikW8ryL2ZHfuoiau2sI= Subject key identifier: 2B:A2:08:7D:E6:27:25:C6:AE:ED:71:5A:87:6E:96:B5:1A:D6:A1:7E Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Certificate serial: 019B775944546EE70A3CC9451B1DEF0C4ECA Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/K6IIfeYnJcau7XFah26WtRrWoX4.roa Signing time: Thu 01 Jan 2026 02:18:17 +0000 ROA not before: Thu 01 Jan 2026 02:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212822 IP address blocks: 45.95.34.0/24 maxlen: 24 185.216.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:44:54:6e:e7:0a:3c:c9:45:1b:1d:ef:0c:4e:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Validity Not Before: Jan 1 02:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ba2087de62725c6aeed715a876e96b51ad6a17e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c8:c3:9d:b1:9a:95:b6:9f:78:0b:07:27:de: 75:63:b8:5a:57:7e:2b:1c:41:a5:c4:7d:8a:28:28: 5e:06:fe:d7:e1:51:e0:1a:93:00:4f:d7:85:8b:80: 98:cf:54:87:f6:56:b2:5c:83:ba:67:69:94:1b:ad: cd:cb:48:a5:0d:e3:c2:a2:9b:61:3b:5f:d2:93:83: 66:30:d3:27:cb:1d:8b:b2:96:e4:5f:f5:74:de:e7: 68:cf:b3:a7:91:f3:15:64:46:e3:34:b6:4a:82:7e: 4c:ca:43:2f:43:b8:db:e8:a9:ee:b8:22:fc:ae:59: 29:07:1b:94:ce:bd:e5:97:7d:a6:f7:04:53:7f:04: 9d:3a:57:ca:69:ec:c2:1e:91:e4:ec:40:71:85:59: b2:6d:3c:55:f0:bc:46:2e:62:55:a9:c2:94:db:be: 71:8a:83:f4:b3:de:04:32:d1:64:1a:9e:a0:b2:95: 26:9e:8a:90:92:8d:51:c7:3a:47:2b:f8:cb:83:04: e3:ec:12:51:76:c7:49:a9:36:cb:63:bf:49:53:cc: 06:da:e8:3a:f9:51:21:da:06:d0:42:0c:e2:0c:2f: 4a:8c:2c:34:a0:bb:aa:9e:71:ac:6a:6b:06:90:24: 6a:8c:58:66:84:fc:5c:3d:11:dd:df:43:da:e7:05: 0b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:A2:08:7D:E6:27:25:C6:AE:ED:71:5A:87:6E:96:B5:1A:D6:A1:7E X509v3 Authority Key Identifier: keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/K6IIfeYnJcau7XFah26WtRrWoX4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.95.34.0/24 185.216.210.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:61:f6:83:ed:0a:14:43:3a:0c:f7:cb:e3:4a:48:48:0e:7b: 57:2c:f1:ed:35:98:bd:c0:91:66:1a:77:fd:a0:6b:ce:66:e6: 68:a2:58:43:e4:1f:db:99:6c:85:9e:af:3d:1f:61:6a:1f:c7: c9:42:1c:98:31:d9:b2:6d:f6:81:d6:02:be:3f:22:d0:94:f5: f7:24:9c:52:fb:7f:fa:cf:33:53:f0:6d:4b:3d:6c:c4:27:e9: b4:d1:bb:a6:53:c6:67:4d:8c:96:11:b1:12:a9:7e:10:75:57: c3:5b:9c:24:17:33:8e:69:c4:43:35:79:de:e0:18:39:f2:57: 81:7c:d5:4b:cd:c0:24:05:ea:9b:d1:02:9a:68:cb:30:9d:d5: ed:fe:f2:25:43:eb:d3:d5:b1:19:56:ef:5c:be:54:73:6c:f0: ec:d7:48:0c:f1:a4:52:6a:c0:51:6e:a6:ee:73:15:62:6e:76: b9:f9:0c:a5:42:76:11:17:e2:1a:48:90:17:35:c0:cc:86:66: 51:94:de:ed:41:aa:7f:cf:99:9d:ed:1e:27:d3:41:36:8d:ea: c1:5a:a0:a0:71:5d:20:01:08:91:5c:d4:85:c7:17:1b:47:a3: 83:8e:f7:b0:60:b9:6f:e4:7a:92:42:c8:88:95:aa:7f:85:a6: cf:14:0b:b1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WURUbucKPMlFGx3vDE7KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyNTRhOWYzYTI2NjUxM2RkYzY5MzVkOGJlMDIyZTdlNTIz MGVhMTAwHhcNMjYwMTAxMDIxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYmEyMDg3ZGU2MjcyNWM2YWVlZDcxNWE4NzZlOTZiNTFhZDZhMTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8jDnbGalbafeAsHJ951Y7haV34r HEGlxH2KKCheBv7X4VHgGpMAT9eFi4CYz1SH9layXIO6Z2mUG63Ny0ilDePCopth O1/Sk4NmMNMnyx2LspbkX/V03udoz7OnkfMVZEbjNLZKgn5MykMvQ7jb6KnuuCL8 rlkpBxuUzr3ll32m9wRTfwSdOlfKaezCHpHk7EBxhVmybTxV8LxGLmJVqcKU275x ioP0s94EMtFkGp6gspUmnoqQko1RxzpHK/jLgwTj7BJRdsdJqTbLY79JU8wG2ug6 +VEh2gbQQgziDC9KjCw0oLuqnnGsamsGkCRqjFhmhPxcPRHd30Pa5wULqQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCuiCH3mJyXGru1xWodulrUa1qF+MB8GA1UdIwQY MBaAFKJUqfOiZlE93Gk12L4CLn5SMOoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTkt YWRkZjBlMTg0OWViLzEvSzZJSWZlWW5KY2F1N1hGYWgyNld0UnJXb1g0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTktYWRkZjBlMTg0OWVi LzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALV8iAwQA udjSMA0GCSqGSIb3DQEBCwUAA4IBAQBaYfaD7QoUQzoM98vjSkhIDntXLPHtNZi9 wJFmGnf9oGvOZuZoolhD5B/bmWyFnq89H2FqH8fJQhyYMdmybfaB1gK+PyLQlPX3 JJxS+3/6zzNT8G1LPWzEJ+m00bumU8ZnTYyWEbESqX4QdVfDW5wkFzOOacRDNXne 4Bg58leBfNVLzcAkBeqb0QKaaMswndXt/vIlQ+vT1bEZVu9cvlRzbPDs10gM8aRS asBRbqbucxVibna5+QylQnYRF+IaSJAXNcDMhmZRlN7tQap/z5md7R4n00E2jerB WqCgcV0gAQiRXNSFxxcbR6ODjvewYLlv5HqSQsiIlap/habPFAux -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:08 2026 by rpki-client