This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/_6J7AwPIqd15mIlwq2cJqNgjb0I.roa File: _6J7AwPIqd15mIlwq2cJqNgjb0I.roa (raw, json) Hash identifier: jxk3CJkvfpWrVN7KbiWix7L1eSxCaMfAPSl2gWvHW9o= Subject key identifier: FF:A2:7B:03:03:C8:A9:DD:79:98:89:70:AB:67:09:A8:D8:23:6F:42 Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Certificate serial: 019B7910EBD5749AED396C7C8C8A02114FC1 Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/_6J7AwPIqd15mIlwq2cJqNgjb0I.roa Signing time: Thu 01 Jan 2026 10:18:30 +0000 ROA not before: Thu 01 Jan 2026 10:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204592 IP address blocks: 45.155.122.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:eb:d5:74:9a:ed:39:6c:7c:8c:8a:02:11:4f:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Validity Not Before: Jan 1 10:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ffa27b0303c8a9dd79988970ab6709a8d8236f42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:20:92:20:ec:2c:17:3f:ce:85:38:2b:88:eb: 21:04:2f:07:a8:3f:3c:20:ec:d5:32:fb:57:73:13: f4:54:f0:ae:0a:86:15:a4:6f:06:d5:4a:d1:f8:8d: 90:2a:a3:a9:b9:32:f5:3c:56:17:8f:8f:75:f6:ad: 8e:66:07:86:35:40:02:81:a1:6e:a1:57:fa:05:4a: 82:83:fb:c8:74:eb:f0:a4:36:d4:03:a1:b4:9e:56: 3f:7f:01:6d:75:10:5e:93:e4:3c:fb:ef:9f:db:7b: 67:f5:84:bb:05:7a:21:3a:00:7d:00:18:7a:a9:b2: f7:e6:e6:3d:fe:39:5f:31:a8:3b:b9:ca:c5:f9:6a: 92:ea:ff:b2:a6:43:fe:05:fa:be:ba:8a:d6:74:ad: 5a:5e:a1:3d:44:c3:85:c1:a7:df:57:8d:36:36:2c: 74:22:f8:33:f2:a1:f5:cf:bd:39:99:72:aa:3b:11: 41:c0:6c:72:e5:63:c5:76:0d:10:e7:12:a3:01:e4: 5a:11:e1:dc:64:ae:cd:58:e0:aa:2a:97:e6:11:78: a3:e4:4d:d9:41:3d:96:1b:53:cf:84:05:c0:10:2f: 01:30:df:f4:87:d5:1a:b8:f1:f5:50:44:60:ba:18: 6f:46:c6:6a:9c:3b:d3:78:22:1a:3d:67:af:97:b6: e7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A2:7B:03:03:C8:A9:DD:79:98:89:70:AB:67:09:A8:D8:23:6F:42 X509v3 Authority Key Identifier: keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/_6J7AwPIqd15mIlwq2cJqNgjb0I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.122.0/23 Signature Algorithm: sha256WithRSAEncryption 98:c9:ec:93:4d:db:f5:e3:07:e0:1e:d6:2b:22:c2:2d:e2:c4: af:41:b5:55:75:81:d5:8d:62:e9:5b:03:0d:78:ce:52:01:15: 16:32:0a:fe:f1:e4:b0:08:44:39:f0:56:85:16:78:a4:e0:8c: d1:e9:9e:16:f4:83:b9:e4:7a:78:a2:73:e8:21:40:23:9d:fd: 8d:ae:33:16:65:8b:45:51:9f:e6:b8:ac:10:2a:ac:a2:e4:71: 2e:57:db:3b:0b:68:15:63:0b:74:7c:30:7d:92:04:88:a2:4c: a2:c1:f0:44:c2:7f:c0:f1:2f:30:55:45:e9:50:15:86:d6:15: 9e:8e:c2:1b:3f:b5:45:79:b4:5f:ed:4a:01:35:01:0e:69:78: 02:13:3d:e8:1b:86:cd:71:39:b0:32:c2:48:7e:56:13:d6:c0: 12:b4:09:64:c1:b1:ef:45:99:1e:fa:0a:ff:91:98:ec:b3:2b: 39:99:c9:ba:fb:df:a5:44:20:b4:8f:c9:1e:fd:ac:a7:53:1e: e8:9d:02:8a:c3:92:84:04:9a:8c:78:ca:d1:90:2f:77:d8:7c: 7d:42:7d:ea:35:14:57:a5:09:00:54:87:53:55:aa:02:32:a4: b6:4b:5b:74:10:32:a7:0f:71:91:05:b7:ad:0d:f6:46:a0:15: 9b:f0:7c:77 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EOvVdJrtOWx8jIoCEU/BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy NTFkYWQwHhcNMjYwMTAxMTAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmEyN2IwMzAzYzhhOWRkNzk5ODg5NzBhYjY3MDlhOGQ4MjM2ZjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCCSIOwsFz/OhTgriOshBC8HqD88 IOzVMvtXcxP0VPCuCoYVpG8G1UrR+I2QKqOpuTL1PFYXj4919q2OZgeGNUACgaFu oVf6BUqCg/vIdOvwpDbUA6G0nlY/fwFtdRBek+Q8+++f23tn9YS7BXohOgB9ABh6 qbL35uY9/jlfMag7ucrF+WqS6v+ypkP+Bfq+uorWdK1aXqE9RMOFwaffV402Nix0 Ivgz8qH1z705mXKqOxFBwGxy5WPFdg0Q5xKjAeRaEeHcZK7NWOCqKpfmEXij5E3Z QT2WG1PPhAXAEC8BMN/0h9UauPH1UERguhhvRsZqnDvTeCIaPWevl7bngwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP+iewMDyKndeZiJcKtnCajYI29CMB8GA1UdIwQY MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt YjdjNTc4Yjc0ZTM1LzEvXzZKN0F3UElxZDE1bUlsd3EyY0pxTmdqYjBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1 LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZt6MA0G CSqGSIb3DQEBCwUAA4IBAQCYyeyTTdv14wfgHtYrIsIt4sSvQbVVdYHVjWLpWwMN eM5SARUWMgr+8eSwCEQ58FaFFnik4IzR6Z4W9IO55Hp4onPoIUAjnf2NrjMWZYtF UZ/muKwQKqyi5HEuV9s7C2gVYwt0fDB9kgSIokyiwfBEwn/A8S8wVUXpUBWG1hWe jsIbP7VFebRf7UoBNQEOaXgCEz3oG4bNcTmwMsJIflYT1sAStAlkwbHvRZke+gr/ kZjssys5mcm6+9+lRCC0j8ke/aynUx7onQKKw5KEBJqMeMrRkC932Hx9Qn3qNRRX pQkAVIdTVaoCMqS2S1t0EDKnD3GRBbetDfZGoBWb8Hx3 -----END CERTIFICATE-----Generated at Sun Jan 25 10:31:27 2026 by rpki-client