This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/6U3cktBTA2LKvI3rkR7wZ9-IEto.roa File: 6U3cktBTA2LKvI3rkR7wZ9-IEto.roa (raw, json) Hash identifier: QUuRwmOYJ7KQ2lPavQRBUBr6+SgQ72KGV51XVYfgOr8= Subject key identifier: E9:4D:DC:92:D0:53:03:62:CA:BC:8D:EB:91:1E:F0:67:DF:88:12:DA Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1 Certificate serial: 019B7F15B909B96E45D6692447593E126C6A Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/6U3cktBTA2LKvI3rkR7wZ9-IEto.roa Signing time: Fri 02 Jan 2026 14:21:28 +0000 ROA not before: Fri 02 Jan 2026 14:21:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31418 IP address blocks: 81.45.20.0/24 maxlen: 24 81.45.21.0/24 maxlen: 24 81.45.22.0/24 maxlen: 24 81.45.23.0/24 maxlen: 24 195.53.128.0/24 maxlen: 24 195.53.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:b9:09:b9:6e:45:d6:69:24:47:59:3e:12:6c:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1 Validity Not Before: Jan 2 14:21:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e94ddc92d0530362cabc8deb911ef067df8812da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b7:d8:2b:05:87:e0:32:d4:fb:e3:d9:92:20: 7a:24:de:8f:f7:5a:ec:ea:ae:fa:6d:33:e4:2f:7e: 54:76:dd:f7:b7:55:28:32:3a:97:de:3e:7a:69:00: 87:9b:90:01:52:40:36:de:de:1a:e0:13:07:8b:04: c4:2f:1a:47:ad:3f:0c:9f:62:ef:e8:1c:28:34:06: 58:22:9b:7e:8d:a0:f5:32:69:a7:30:01:de:4a:48: bd:b9:c6:0f:67:99:a2:a9:97:eb:ea:0b:14:41:64: f7:1b:1e:79:70:6d:c1:6b:04:1b:10:84:00:2d:ef: 6c:4f:d6:5c:e5:37:9c:67:b0:3e:e3:88:fd:93:fe: a2:b6:0a:d2:ff:42:cf:b0:1a:68:c0:29:4a:f3:5e: e3:73:3b:2e:01:64:a0:52:73:77:3d:57:e4:25:ac: 8c:af:f4:05:54:8b:6c:7c:73:ac:4b:44:10:3c:4d: fe:ea:49:e2:22:02:fc:af:ba:e9:41:95:60:0d:5b: 16:e0:af:2c:68:01:a6:a5:86:3c:74:94:a2:af:bf: b5:90:df:fc:f8:b3:dc:e8:33:cf:09:77:70:d6:77: fa:1c:af:cd:e9:f4:76:04:60:eb:99:92:4a:e8:6c: 93:54:9d:c0:d0:ff:ab:8f:cb:be:dd:d2:9e:f0:80: 6a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:4D:DC:92:D0:53:03:62:CA:BC:8D:EB:91:1E:F0:67:DF:88:12:DA X509v3 Authority Key Identifier: keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/6U3cktBTA2LKvI3rkR7wZ9-IEto.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.45.20.0/22 195.53.128.0/23 Signature Algorithm: sha256WithRSAEncryption 35:e6:f5:7c:22:c4:9e:f6:52:33:92:36:25:53:16:d1:e4:60: 27:03:8d:09:0e:4a:cf:bd:3d:67:7b:30:70:d3:02:68:3a:9a: 37:cf:a0:a0:26:f0:92:cd:ab:54:38:91:44:f4:51:93:d1:e2: 35:b5:f2:ad:51:d9:70:95:46:fa:ea:c2:73:f2:62:68:2a:2c: a8:cd:29:d1:fe:c2:11:9c:31:19:0b:2d:09:6d:0c:7e:18:64: 42:c5:b1:3a:59:fd:cd:1c:db:bf:d8:d1:c8:69:0d:31:df:c4: 56:c2:08:dd:ae:9e:11:1d:af:ae:32:a8:50:f6:8b:4c:f0:f2: 23:15:fd:0f:bd:e7:d9:b0:78:ca:d6:6f:8c:9a:91:bc:a2:1a: 0e:f8:0e:d4:40:68:5b:99:5c:10:ca:e2:10:51:7f:fd:1e:27: 5e:ec:0d:5f:16:69:b7:c4:b2:78:3a:0c:72:82:d8:8b:ba:54: 7d:b9:17:a2:16:a0:25:dc:80:59:82:6d:a4:01:2c:77:13:63: 23:38:23:d2:49:98:bf:ee:ee:ea:66:0c:aa:80:60:bd:32:63: 1c:48:ec:c2:0b:29:b6:28:42:66:18:e3:d3:0b:3a:13:68:2b: a3:ec:12:a1:fd:5c:8d:3c:3f:e5:89:91:bd:76:04:e0:35:49: 45:a0:6e:7b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FbkJuW5F1mkkR1k+EmxqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Y1ZmUyNzQwYTJiNmRlNGMzNzA5ZDI5NjQxMTViM2M5 NjdkYTEwHhcNMjYwMTAyMTQyMTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTRkZGM5MmQwNTMwMzYyY2FiYzhkZWI5MTFlZjA2N2RmODgxMmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrfYKwWH4DLU++PZkiB6JN6P91rs 6q76bTPkL35Udt33t1UoMjqX3j56aQCHm5ABUkA23t4a4BMHiwTELxpHrT8Mn2Lv 6BwoNAZYIpt+jaD1MmmnMAHeSki9ucYPZ5miqZfr6gsUQWT3Gx55cG3BawQbEIQA Le9sT9Zc5TecZ7A+44j9k/6itgrS/0LPsBpowClK817jczsuAWSgUnN3PVfkJayM r/QFVItsfHOsS0QQPE3+6kniIgL8r7rpQZVgDVsW4K8saAGmpYY8dJSir7+1kN/8 +LPc6DPPCXdw1nf6HK/N6fR2BGDrmZJK6GyTVJ3A0P+rj8u+3dKe8IBqJwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOlN3JLQUwNiyryN65Ee8GffiBLaMB8GA1UdIwQY MBaAFDB/X+J0Citt5MNwnSlkEVs8ln2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQt NGJhMmY4ZjFmODNiLzEvNlUzY2t0QlRBMkxLdkkzcmtSN3daOS1JRXRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQtNGJhMmY4ZjFmODNi LzEvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCUS0UAwQB wzWAMA0GCSqGSIb3DQEBCwUAA4IBAQA15vV8IsSe9lIzkjYlUxbR5GAnA40JDkrP vT1nezBw0wJoOpo3z6CgJvCSzatUOJFE9FGT0eI1tfKtUdlwlUb66sJz8mJoKiyo zSnR/sIRnDEZCy0JbQx+GGRCxbE6Wf3NHNu/2NHIaQ0x38RWwgjdrp4RHa+uMqhQ 9otM8PIjFf0PvefZsHjK1m+MmpG8ohoO+A7UQGhbmVwQyuIQUX/9Hide7A1fFmm3 xLJ4OgxygtiLulR9uReiFqAl3IBZgm2kASx3E2MjOCPSSZi/7u7qZgyqgGC9MmMc SOzCCym2KEJmGOPTCzoTaCuj7BKh/VyNPD/liZG9dgTgNUlFoG57 -----END CERTIFICATE-----Generated at Sun Jan 25 22:28:42 2026 by rpki-client