This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/cV6HlXd9VLe--dSuiSOFXK3TxRM.roa File: cV6HlXd9VLe--dSuiSOFXK3TxRM.roa (raw, json) Hash identifier: cKnEl0wq7eLVeKPF83FlArGfxSvAPlhsKghSnnUyAeI= Subject key identifier: 71:5E:87:95:77:7D:54:B7:BE:F9:D4:AE:89:23:85:5C:AD:D3:C5:13 Certificate issuer: /CN=e88c04771e2bfac8f60f1b4c9cbd093aafea974e Certificate serial: 019B7FF1DC016D12ABE2A2EE92582F4B0EDF Authority key identifier: E8:8C:04:77:1E:2B:FA:C8:F6:0F:1B:4C:9C:BD:09:3A:AF:EA:97:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/cV6HlXd9VLe--dSuiSOFXK3TxRM.roa Signing time: Fri 02 Jan 2026 18:21:55 +0000 ROA not before: Fri 02 Jan 2026 18:21:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200222 IP address blocks: 45.129.104.0/24 maxlen: 24 45.129.107.0/24 maxlen: 24 2a0e:47c7:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.mft rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:dc:01:6d:12:ab:e2:a2:ee:92:58:2f:4b:0e:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e88c04771e2bfac8f60f1b4c9cbd093aafea974e Validity Not Before: Jan 2 18:21:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=715e8795777d54b7bef9d4ae8923855cadd3c513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ca:e4:49:45:6b:dd:14:7f:e7:8a:74:78:ae: ec:e7:94:16:0c:19:9b:d8:70:f5:e9:0e:43:74:3e: 3d:5d:d0:07:24:93:af:5d:c1:3b:d1:1c:3f:64:3a: 56:26:52:b0:aa:ee:3d:15:3e:c1:7a:28:f7:09:64: 47:0e:bc:e3:99:f6:bb:8a:75:6c:2e:ec:87:43:b1: 91:4a:4c:95:3b:e8:53:67:39:2d:c0:e2:ec:95:dc: aa:d5:93:d0:d9:1f:be:55:5c:23:73:3d:ea:be:33: 7e:65:8f:34:96:f1:15:a4:fe:ef:71:ab:64:8b:0d: a9:55:19:ae:74:b9:89:f5:e6:59:1e:9b:55:18:40: 8e:b3:b9:5d:e3:80:70:82:d2:ed:6f:4e:72:2f:d4: 8c:b4:69:b4:3e:03:1c:f2:83:0e:2c:3b:58:92:ba: e3:58:2b:e4:7b:4c:d2:12:b8:e7:26:91:56:7e:e2: ff:3f:22:91:f4:a8:35:89:4d:3f:4e:69:3d:e2:e8: 58:8f:55:38:3d:35:46:84:13:4d:ad:41:2c:c5:a4: 12:ef:5d:d9:10:cf:ef:1b:e3:36:91:df:fe:1f:9b: 1e:db:d5:5f:c6:07:b6:a5:9d:b1:e1:63:05:9e:c5: ed:00:36:32:f0:9b:1e:6b:08:62:32:63:70:09:92: 42:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:5E:87:95:77:7D:54:B7:BE:F9:D4:AE:89:23:85:5C:AD:D3:C5:13 X509v3 Authority Key Identifier: keyid:E8:8C:04:77:1E:2B:FA:C8:F6:0F:1B:4C:9C:BD:09:3A:AF:EA:97:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/cV6HlXd9VLe--dSuiSOFXK3TxRM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.104.0/24 45.129.107.0/24 IPv6: 2a0e:47c7:1000::/48 Signature Algorithm: sha256WithRSAEncryption 4e:14:f3:8b:bf:94:59:15:e9:bc:d5:e2:5b:02:c0:bb:c1:3c: 4d:e1:d7:b4:50:34:c2:1e:a0:6e:1b:7d:11:9e:05:e0:77:cd: f5:98:3d:2d:f0:16:88:36:11:c9:ea:8f:5a:e8:72:eb:dc:1f: 75:45:9a:67:ee:3d:92:12:71:fb:5b:66:c6:8a:ae:31:be:b7: 3f:47:5b:65:df:b5:89:f6:52:a6:c5:92:cf:33:cc:60:6b:d0: d0:4f:88:3a:c0:10:db:4a:1a:66:a1:bf:67:ed:db:7f:f0:c5: a7:23:3d:63:f5:5e:e3:2c:53:66:ad:2b:07:a0:c0:d8:fe:11: 26:5b:6c:49:04:a4:e2:13:52:32:21:c6:25:18:22:33:ac:cb: f3:98:c5:af:fe:18:a0:59:d9:78:a0:00:94:a0:ef:9d:84:05: aa:51:52:dd:26:8d:9f:fe:87:50:06:4f:74:ef:68:c2:ae:02: 71:0a:45:d7:70:fa:26:65:cc:80:c5:e3:62:51:36:85:51:6a: f7:0b:97:fa:12:fd:12:9c:48:bc:ca:8d:5c:1b:96:ed:92:9a: 47:de:75:cc:f8:0c:75:62:13:8f:14:e8:0a:98:e3:53:0b:23: 09:ba:3d:d1:b6:53:4f:f8:6d:2d:70:93:93:7a:52:84:85:ec: c4:84:6e:43 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt/8dwBbRKr4qLuklgvSw7fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4OGMwNDc3MWUyYmZhYzhmNjBmMWI0YzljYmQwOTNhYWZl YTk3NGUwHhcNMjYwMTAyMTgyMTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTVlODc5NTc3N2Q1NGI3YmVmOWQ0YWU4OTIzODU1Y2FkZDNjNTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28rkSUVr3RR/54p0eK7s55QWDBmb 2HD16Q5DdD49XdAHJJOvXcE70Rw/ZDpWJlKwqu49FT7Beij3CWRHDrzjmfa7inVs LuyHQ7GRSkyVO+hTZzktwOLsldyq1ZPQ2R++VVwjcz3qvjN+ZY80lvEVpP7vcatk iw2pVRmudLmJ9eZZHptVGECOs7ld44BwgtLtb05yL9SMtGm0PgMc8oMOLDtYkrrj WCvke0zSErjnJpFWfuL/PyKR9Kg1iU0/Tmk94uhYj1U4PTVGhBNNrUEsxaQS713Z EM/vG+M2kd/+H5se29Vfxge2pZ2x4WMFnsXtADYy8JseawhiMmNwCZJCTQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFHFeh5V3fVS3vvnUrokjhVyt08UTMB8GA1UdIwQY MBaAFOiMBHceK/rI9g8bTJy9CTqv6pdOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkl3RWR4NHItc2oyRHh0TW5MMEpPcV9xbDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8yYWU3YzMtOThhNS00Y2RhLTliYWUt YmE2NDVmMTk5MTVhLzEvY1Y2SGxYZDlWTGUtLWRTdWlTT0ZYSzNUeFJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi8yYWU3YzMtOThhNS00Y2RhLTliYWUtYmE2NDVmMTk5MTVh LzEvNkl3RWR4NHItc2oyRHh0TW5MMEpPcV9xbDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQALYFoAwQA LYFrMA8EAgACMAkDBwAqDkfHEAAwDQYJKoZIhvcNAQELBQADggEBAE4U84u/lFkV 6bzV4lsCwLvBPE3h17RQNMIeoG4bfRGeBeB3zfWYPS3wFog2Ecnqj1rocuvcH3VF mmfuPZIScftbZsaKrjG+tz9HW2XftYn2UqbFks8zzGBr0NBPiDrAENtKGmahv2ft 23/wxacjPWP1XuMsU2atKwegwNj+ESZbbEkEpOITUjIhxiUYIjOsy/OYxa/+GKBZ 2XigAJSg752EBapRUt0mjZ/+h1AGT3TvaMKuAnEKRddw+iZlzIDF42JRNoVRavcL l/oS/RKcSLzKjVwblu2Smkfedcz4DHViE48U6AqY41MLIwm6PdG2U0/4bS1wk5N6 UoSF7MSEbkM= -----END CERTIFICATE-----Generated at Tue Jan 27 01:13:57 2026 by rpki-client