This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/6gGzUBWZ-hvpmLNqRser9XZMZlQ.roa File: 6gGzUBWZ-hvpmLNqRser9XZMZlQ.roa (raw, json) Hash identifier: ICqX4miPSw4hNqiwS359s8cPNVPBnabE937wRzB8wpk= Subject key identifier: EA:01:B3:50:15:99:FA:1B:E9:98:B3:6A:46:C7:AB:F5:76:4C:66:54 Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819 Certificate serial: 019B7A5B0A0F37F55A633FA80956E03A6C67 Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/6gGzUBWZ-hvpmLNqRser9XZMZlQ.roa Signing time: Thu 01 Jan 2026 16:19:05 +0000 ROA not before: Thu 01 Jan 2026 16:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8932 IP address blocks: 46.36.124.0/22 maxlen: 24 46.162.220.0/22 maxlen: 24 185.48.240.0/22 maxlen: 24 2a00:cc40:1::/48 maxlen: 48 2a00:cc40:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:0a:0f:37:f5:5a:63:3f:a8:09:56:e0:3a:6c:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819 Validity Not Before: Jan 1 16:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea01b3501599fa1be998b36a46c7abf5764c6654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:27:15:55:53:c8:01:3d:b4:21:4d:e1:14:8f: 2a:44:6d:5d:dd:b2:8a:31:6a:89:43:57:b9:55:ca: 28:bf:f1:43:0b:92:fa:6a:41:90:0a:b4:8e:06:57: ec:c5:90:37:e6:94:5b:91:35:db:79:aa:fc:fc:cb: c8:a2:64:18:2c:2e:c3:1b:19:91:27:c2:82:a8:be: 1f:81:f6:99:4c:2b:2e:85:b7:c0:cc:97:bf:3c:bf: e8:9e:53:39:85:f4:fd:9e:2d:17:be:6c:c7:74:f5: 08:32:9c:b3:1e:5e:76:b9:f8:3c:1f:02:f1:88:d7: 29:fa:6d:fd:89:ee:26:80:55:3f:b8:f3:54:9f:6d: d0:75:d0:93:2a:a9:cf:00:2f:05:10:80:86:f9:65: 4d:f2:ac:5c:56:70:41:d8:b8:1a:1c:02:0d:cc:2f: 63:ea:da:b5:5f:6b:e6:45:d0:98:0a:05:80:11:e1: 4f:7f:37:8a:98:fb:e0:27:48:0a:01:4e:30:65:d0: a1:9a:f8:c0:47:29:73:75:56:dd:2c:1c:99:4c:b5: 3f:68:88:0e:72:61:22:04:fb:3f:c4:54:0e:32:70: 39:2d:ef:96:94:cf:54:fb:e5:50:37:92:0e:91:20: 82:ad:da:22:57:58:c6:dc:db:dc:9c:56:27:ec:bf: 59:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:01:B3:50:15:99:FA:1B:E9:98:B3:6A:46:C7:AB:F5:76:4C:66:54 X509v3 Authority Key Identifier: keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/6gGzUBWZ-hvpmLNqRser9XZMZlQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.36.124.0/22 46.162.220.0/22 185.48.240.0/22 IPv6: 2a00:cc40:1::-2a00:cc40:2:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 2d:b5:6b:70:91:d0:a0:82:b7:0f:d7:3b:b6:95:cc:f3:a0:2a: bb:ad:1f:ba:a0:e1:c2:d7:93:ad:33:a0:80:f0:ee:d5:a0:c0: 8b:1c:75:f5:32:47:5e:a0:26:89:7d:cc:fd:1c:63:2a:e8:70: 7c:27:26:ca:d9:6d:ed:90:80:4e:1d:be:13:cb:67:d9:2e:bf: 71:fe:ef:03:31:3f:c3:80:ae:0f:44:94:a2:7e:22:56:ac:fb: fe:bc:ea:4c:e8:89:62:a4:a2:d3:4a:ae:d3:58:8d:14:fe:8f: 18:c3:d8:89:7f:5e:3c:ae:37:6d:2d:79:03:13:99:bd:4c:0a: a5:a9:5b:b3:39:cb:24:0b:57:a9:57:da:a4:0a:7a:95:7d:10: bc:90:31:44:d6:76:c8:6a:d2:49:01:45:e1:97:cd:65:1d:5a: 55:a6:6c:bb:32:ed:63:13:1c:a7:26:26:9c:f2:a0:88:7d:55: 84:90:ce:0a:17:1d:ed:13:37:d5:28:14:28:24:7b:91:71:10: 03:5d:97:cc:c8:b8:95:e3:a4:05:e5:30:26:96:25:a4:fc:9e: f8:4b:0a:fc:ba:f8:8c:f1:45:cc:26:ee:d6:6c:97:8f:6d:08: 04:5a:2c:fc:38:d5:cb:fa:14:b9:7d:d7:f1:ad:2b:6b:60:eb: 7c:36:32:6f -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgISAZt6WwoPN/VaYz+oCVbgOmxnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjOTBjMzU2ZTI4NjRmNDM4OTQ4NTc0NDM1NTVkOGI1YzAz NTI4MTkwHhcNMjYwMTAxMTYxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTAxYjM1MDE1OTlmYTFiZTk5OGIzNmE0NmM3YWJmNTc2NGM2NjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCcVVVPIAT20IU3hFI8qRG1d3bKK MWqJQ1e5Vcoov/FDC5L6akGQCrSOBlfsxZA35pRbkTXbear8/MvIomQYLC7DGxmR J8KCqL4fgfaZTCsuhbfAzJe/PL/onlM5hfT9ni0XvmzHdPUIMpyzHl52ufg8HwLx iNcp+m39ie4mgFU/uPNUn23QddCTKqnPAC8FEICG+WVN8qxcVnBB2LgaHAINzC9j 6tq1X2vmRdCYCgWAEeFPfzeKmPvgJ0gKAU4wZdChmvjARylzdVbdLByZTLU/aIgO cmEiBPs/xFQOMnA5Le+WlM9U++VQN5IOkSCCrdoiV1jG3NvcnFYn7L9ZIQIDAQAB o4ICMTCCAi0wHQYDVR0OBBYEFOoBs1AVmfob6ZizakbHq/V2TGZUMB8GA1UdIwQY MBaAFAyQw1bihk9DiUhXRDVV2LXANSgZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDct ZTM3OTlhZGU5ZGZlLzEvNmdHelVCV1otaHZwbUxOcVJzZXI5WFpNWmxRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDctZTM3OTlhZGU5ZGZl LzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAYBAIAATASAwQCLiR8AwQC LqLcAwQCuTDwMBoEAgACMBQwEgMHACoAzEAAAQMHACoAzEAAAjANBgkqhkiG9w0B AQsFAAOCAQEALbVrcJHQoIK3D9c7tpXM86Aqu60fuqDhwteTrTOggPDu1aDAixx1 9TJHXqAmiX3M/RxjKuhwfCcmytlt7ZCATh2+E8tn2S6/cf7vAzE/w4CuD0SUon4i Vqz7/rzqTOiJYqSi00qu01iNFP6PGMPYiX9ePK43bS15AxOZvUwKpalbsznLJAtX qVfapAp6lX0QvJAxRNZ2yGrSSQFF4ZfNZR1aVaZsuzLtYxMcpyYmnPKgiH1VhJDO Chcd7RM31SgUKCR7kXEQA12XzMi4leOkBeUwJpYlpPye+EsK/Lr4jPFFzCbu1myX j20IBFos/DjVy/oUuX3X8a0ra2DrfDYybw== -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:20 2026 by rpki-client