This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/6wXcfaNHNIKPsPI9yxLfZE8Q_jQ.roa File: 6wXcfaNHNIKPsPI9yxLfZE8Q_jQ.roa (raw, json) Hash identifier: ECXhCTN51hl1ngcmROyprePwXkJAyAbxEBIgymRFGBA= Subject key identifier: EB:05:DC:7D:A3:47:34:82:8F:B0:F2:3D:CB:12:DF:64:4F:10:FE:34 Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Certificate serial: 019B77C75600D872DFBBB4C60534325F97DD Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/6wXcfaNHNIKPsPI9yxLfZE8Q_jQ.roa Signing time: Thu 01 Jan 2026 04:18:31 +0000 ROA not before: Thu 01 Jan 2026 04:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204986 IP address blocks: 46.32.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:56:00:d8:72:df:bb:b4:c6:05:34:32:5f:97:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Validity Not Before: Jan 1 04:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb05dc7da34734828fb0f23dcb12df644f10fe34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f0:0b:8f:6f:21:65:bc:b4:c1:7f:c2:ff:e4: bc:c7:e3:04:1d:f8:dd:ea:05:2f:b7:e1:43:a6:9a: 9b:ee:86:37:f7:ea:9f:0e:6b:65:07:d5:4c:45:5b: 3e:b5:be:65:8a:07:5f:96:fa:6b:8a:58:2e:ef:fa: c8:ef:e1:d6:d6:82:f4:a5:83:ae:01:6c:a9:1d:cf: c1:9d:6c:4a:a5:1d:ef:48:94:ec:39:63:6a:1f:07: bb:e6:c4:48:05:f3:7e:05:e3:72:df:f8:21:72:62: fc:23:24:58:94:b5:af:02:c8:2d:4b:88:3b:3f:e0: 4d:ac:3e:d7:d4:2b:91:db:d2:a4:1b:f0:38:20:d7: d0:8e:f6:a7:1d:17:46:8c:87:63:f5:d6:7c:bb:dd: f1:6b:06:81:99:1c:3a:3d:e1:a9:c3:f1:85:59:8c: 25:c2:8e:10:0e:37:84:b3:6f:10:94:be:66:05:f9: 70:a4:48:24:e5:17:bb:35:cc:aa:d3:4f:03:01:9a: e4:85:74:cc:cf:c1:ad:0f:58:32:7e:66:5b:7c:58: 7e:f2:ac:34:7e:94:96:8f:41:57:e4:cf:11:a5:f0: d2:a3:69:f2:b6:3c:05:f0:83:2e:53:c1:93:70:a1: b7:d2:0f:64:30:94:99:e1:df:df:7b:24:03:ef:11: c0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:05:DC:7D:A3:47:34:82:8F:B0:F2:3D:CB:12:DF:64:4F:10:FE:34 X509v3 Authority Key Identifier: keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/6wXcfaNHNIKPsPI9yxLfZE8Q_jQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.32.179.0/24 Signature Algorithm: sha256WithRSAEncryption 51:81:ff:b4:95:1b:2d:2b:39:61:f5:24:13:60:31:08:c6:41: 32:d4:ba:d3:97:36:48:ac:7a:07:29:36:f2:20:a1:b7:a6:e5: 19:ce:2b:a0:86:26:10:53:38:c5:3c:e6:03:cb:5a:f1:33:18: 97:fd:48:b3:ac:a3:43:c3:e4:62:55:88:1d:97:3a:e0:e5:03: 7e:74:2b:32:7b:09:51:96:18:b4:a8:e7:25:d7:e9:03:00:03: f1:e6:75:00:92:9c:35:bf:9e:bf:e9:b4:de:e5:ab:1c:01:d3: f8:bf:68:32:19:da:44:0c:4c:08:59:59:8c:08:8b:65:85:34: da:b0:2c:3c:3f:0c:32:d3:54:8a:cd:bc:c7:9d:04:d5:3c:09: 36:2e:5e:94:a7:b7:1d:86:31:ec:7f:c0:09:7e:4e:af:be:89: 93:34:a5:62:e8:cd:c8:36:13:f8:32:68:6a:8b:e1:08:3b:00: 2e:02:e5:1a:9c:cd:ef:70:de:98:d4:24:2f:73:4f:98:86:ee: 88:87:34:9d:d2:c3:4e:a5:82:27:38:96:a1:81:16:14:c9:de: 46:a7:38:8e:48:c0:0e:a3:50:65:8e:25:e0:04:5e:a6:d2:7b: d2:24:c6:d2:cc:f1:b8:7c:e4:7f:0a:b8:01:a2:19:79:a4:8a: e0:b8:e0:25 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x1YA2HLfu7TGBTQyX5fdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzN2VlMWVjZWQxOWY4YTBhM2E2MzViZmFhMjY0MjkzZTM0 Mzc3OTUwHhcNMjYwMTAxMDQxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjA1ZGM3ZGEzNDczNDgyOGZiMGYyM2RjYjEyZGY2NDRmMTBmZTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfALj28hZby0wX/C/+S8x+MEHfjd 6gUvt+FDppqb7oY39+qfDmtlB9VMRVs+tb5ligdflvprilgu7/rI7+HW1oL0pYOu AWypHc/BnWxKpR3vSJTsOWNqHwe75sRIBfN+BeNy3/ghcmL8IyRYlLWvAsgtS4g7 P+BNrD7X1CuR29KkG/A4INfQjvanHRdGjIdj9dZ8u93xawaBmRw6PeGpw/GFWYwl wo4QDjeEs28QlL5mBflwpEgk5Re7Ncyq008DAZrkhXTMz8GtD1gyfmZbfFh+8qw0 fpSWj0FX5M8RpfDSo2nytjwF8IMuU8GTcKG30g9kMJSZ4d/feyQD7xHAAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOsF3H2jRzSCj7DyPcsS32RPEP40MB8GA1UdIwQY MBaAFON+4eztGfigo6Y1v6omQpPjQ3eVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMt MzZlMzQ0YWJjOWQzLzEvNndYY2ZhTkhOSUtQc1BJOXl4TGZaRThRX2pRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMtMzZlMzQ0YWJjOWQz LzEvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiCzMA0G CSqGSIb3DQEBCwUAA4IBAQBRgf+0lRstKzlh9SQTYDEIxkEy1LrTlzZIrHoHKTby IKG3puUZziughiYQUzjFPOYDy1rxMxiX/UizrKNDw+RiVYgdlzrg5QN+dCsyewlR lhi0qOcl1+kDAAPx5nUAkpw1v56/6bTe5ascAdP4v2gyGdpEDEwIWVmMCItlhTTa sCw8Pwwy01SKzbzHnQTVPAk2Ll6Up7cdhjHsf8AJfk6vvomTNKVi6M3INhP4Mmhq i+EIOwAuAuUanM3vcN6Y1CQvc0+Yhu6IhzSd0sNOpYInOJahgRYUyd5GpziOSMAO o1BljiXgBF6m0nvSJMbSzPG4fOR/CrgBohl5pIrguOAl -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:02 2026 by rpki-client