This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/e6PpS1e5NlOWchpSmQTjpUAhjek.roa File: e6PpS1e5NlOWchpSmQTjpUAhjek.roa (raw, json) Hash identifier: VTTrgOOXJ+TNjub4/DbQZh7PcZakQyvp5nrmcjU97tg= Subject key identifier: 7B:A3:E9:4B:57:B9:36:53:96:72:1A:52:99:04:E3:A5:40:21:8D:E9 Certificate issuer: /CN=df8f961c6efbb7f9ce74217b1d5dbb54e981c6f2 Certificate serial: 019B7F13A7F5DF6BEE2675662CA8B4860DA0 Authority key identifier: DF:8F:96:1C:6E:FB:B7:F9:CE:74:21:7B:1D:5D:BB:54:E9:81:C6:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/e6PpS1e5NlOWchpSmQTjpUAhjek.roa Signing time: Fri 02 Jan 2026 14:19:13 +0000 ROA not before: Fri 02 Jan 2026 14:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207990 IP address blocks: 45.9.48.0/22 maxlen: 32 45.67.132.0/22 maxlen: 32 46.232.208.0/23 maxlen: 32 185.246.172.0/22 maxlen: 32 2a09:77c0::/30 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:a7:f5:df:6b:ee:26:75:66:2c:a8:b4:86:0d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df8f961c6efbb7f9ce74217b1d5dbb54e981c6f2 Validity Not Before: Jan 2 14:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ba3e94b57b9365396721a529904e3a540218de9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8d:14:6f:cb:fb:1b:53:65:51:c3:fa:09:1f: 7d:90:c1:2e:98:4f:6e:3e:8a:a6:9e:44:af:ba:42: 6c:37:b0:47:e6:e2:f6:49:c6:b1:dd:11:c9:78:1e: 37:38:34:12:6a:f3:d8:6e:71:d7:e7:54:a8:33:6c: 11:c4:85:12:7e:52:5f:26:9e:79:e0:b6:12:45:f3: 29:94:a9:2f:1c:08:a7:00:4c:c9:03:a1:db:8e:f3: 14:a0:2c:6b:a2:e9:21:90:f8:3d:05:0b:d0:05:bb: 0c:93:0d:30:e8:f1:20:9b:02:d1:d6:11:11:e9:2d: 91:c9:ba:ea:6c:38:9f:cd:34:7c:00:64:a5:f3:31: 35:54:c1:59:87:0e:10:5d:55:b1:99:ad:96:2e:17: 0f:1d:7e:dc:9b:7f:55:ea:73:06:81:35:d3:2b:bd: 40:70:4e:93:a1:72:43:60:56:4c:15:a8:46:d1:5d: 41:6b:34:a4:ec:12:5f:5f:a5:d8:e0:be:1e:44:e9: d3:c6:7d:21:a7:b8:91:05:ea:a0:27:6c:f5:c7:cb: d9:2b:c4:a2:34:cd:1b:6c:9a:eb:ad:3a:ee:fa:59: 7c:d8:0a:f0:12:05:db:e5:fd:69:f0:45:cf:20:51: 64:95:ac:40:c3:c7:a1:70:0c:ea:84:75:37:68:23: 0f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:A3:E9:4B:57:B9:36:53:96:72:1A:52:99:04:E3:A5:40:21:8D:E9 X509v3 Authority Key Identifier: keyid:DF:8F:96:1C:6E:FB:B7:F9:CE:74:21:7B:1D:5D:BB:54:E9:81:C6:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/e6PpS1e5NlOWchpSmQTjpUAhjek.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.9.48.0/22 45.67.132.0/22 46.232.208.0/23 185.246.172.0/22 IPv6: 2a09:77c0::/30 Signature Algorithm: sha256WithRSAEncryption 24:44:ac:01:15:b6:29:65:e5:88:d5:02:9f:82:81:fd:a8:a4: 79:f3:37:7f:e6:63:28:da:81:d0:eb:c2:8e:3c:ab:e8:6a:36: 30:5c:bb:5c:ec:87:72:7f:26:26:4c:f5:d7:0c:20:7e:aa:b6: 55:7d:07:d6:4f:24:f6:c4:03:65:7f:4c:82:7d:69:6e:93:34: 16:eb:97:c4:f3:37:b5:10:51:1f:f5:d4:dd:26:62:ea:c9:00: 8f:87:4d:88:41:b4:4b:d8:bf:5b:28:97:e6:ca:04:85:db:f2: 78:ef:f5:85:80:73:82:98:74:24:74:1b:a9:50:73:88:c3:72: 0c:71:cf:d1:66:6f:eb:24:5f:70:80:86:42:51:a9:8b:00:ea: da:86:06:99:9f:8a:66:b0:86:c0:e9:7f:69:c8:e7:4c:4e:55: 27:e2:49:21:f7:67:4c:50:cc:bf:34:0d:02:b3:e8:2d:c1:7e: 58:1d:c0:6d:9c:46:bf:f1:34:8b:d7:9b:2d:fb:b7:89:0d:ed: 21:5e:7b:41:b8:5b:8b:ef:8b:8c:94:7c:b4:82:d8:38:0e:7d: ab:e8:d3:cf:82:4d:1f:65:e5:f3:5d:af:6d:04:1f:b0:24:59: c8:1f:19:7d:c2:1c:5a:da:e0:c6:72:07:15:7a:20:eb:91:01: d1:e3:bf:69 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt/E6f132vuJnVmLKi0hg2gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmOGY5NjFjNmVmYmI3ZjljZTc0MjE3YjFkNWRiYjU0ZTk4 MWM2ZjIwHhcNMjYwMTAyMTQxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YmEzZTk0YjU3YjkzNjUzOTY3MjFhNTI5OTA0ZTNhNTQwMjE4ZGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk40Ub8v7G1NlUcP6CR99kMEumE9u PoqmnkSvukJsN7BH5uL2Scax3RHJeB43ODQSavPYbnHX51SoM2wRxIUSflJfJp55 4LYSRfMplKkvHAinAEzJA6HbjvMUoCxroukhkPg9BQvQBbsMkw0w6PEgmwLR1hER 6S2RybrqbDifzTR8AGSl8zE1VMFZhw4QXVWxma2WLhcPHX7cm39V6nMGgTXTK71A cE6ToXJDYFZMFahG0V1BazSk7BJfX6XY4L4eROnTxn0hp7iRBeqgJ2z1x8vZK8Si NM0bbJrrrTru+ll82ArwEgXb5f1p8EXPIFFklaxAw8ehcAzqhHU3aCMPhwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFHuj6UtXuTZTlnIaUpkE46VAIY3pMB8GA1UdIwQY MBaAFN+Plhxu+7f5znQhex1du1TpgcbyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzQtV0hHNzd0X25PZENGN0hWMjdWT21CeHZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi85MGU3MGYtODVkYy00NGE5LWJiMjMt MjdmMmJjMTYyYTA3LzEvZTZQcFMxZTVObE9XY2hwU21RVGpwVUFoamVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi85MGU3MGYtODVkYy00NGE5LWJiMjMtMjdmMmJjMTYyYTA3 LzEvMzQtV0hHNzd0X25PZENGN0hWMjdWT21CeHZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCLQkwAwQC LUOEAwQBLujQAwQCufasMA0EAgACMAcDBQIqCXfAMA0GCSqGSIb3DQEBCwUAA4IB AQAkRKwBFbYpZeWI1QKfgoH9qKR58zd/5mMo2oHQ68KOPKvoajYwXLtc7IdyfyYm TPXXDCB+qrZVfQfWTyT2xANlf0yCfWlukzQW65fE8ze1EFEf9dTdJmLqyQCPh02I QbRL2L9bKJfmygSF2/J47/WFgHOCmHQkdBupUHOIw3IMcc/RZm/rJF9wgIZCUamL AOrahgaZn4pmsIbA6X9pyOdMTlUn4kkh92dMUMy/NA0Cs+gtwX5YHcBtnEa/8TSL 15st+7eJDe0hXntBuFuL74uMlHy0gtg4Dn2r6NPPgk0fZeXzXa9tBB+wJFnIHxl9 whxa2uDGcgcVeiDrkQHR479p -----END CERTIFICATE-----Generated at Sun Jan 25 19:59:13 2026 by rpki-client