This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/C6kRyI7R7lHtPjbhjmcAKjLw-Qw.roa File: C6kRyI7R7lHtPjbhjmcAKjLw-Qw.roa (raw, json) Hash identifier: +Wk4JPzgnBegoiHnqhUiaz2JR3IHy/RXKblqIyQbSDI= Subject key identifier: 0B:A9:11:C8:8E:D1:EE:51:ED:3E:36:E1:8E:67:00:2A:32:F0:F9:0C Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C13A95651DC8B374B5D465C9C299537 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/C6kRyI7R7lHtPjbhjmcAKjLw-Qw.roa Signing time: Fri 02 Jan 2026 00:20:21 +0000 ROA not before: Fri 02 Jan 2026 00:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400040 IP address blocks: 45.8.20.0/24 maxlen: 24 185.194.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:a9:56:51:dc:8b:37:4b:5d:46:5c:9c:29:95:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ba911c88ed1ee51ed3e36e18e67002a32f0f90c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a4:78:c9:05:24:75:c3:bc:31:3d:d8:58:9e: ad:7d:b9:98:f9:51:d5:15:46:d9:45:79:82:82:a8: 8b:08:ed:81:41:e3:cf:2c:35:8d:b1:d8:b4:ae:98: 23:1c:d3:89:30:89:5b:5a:7f:14:d1:3d:d6:c4:56: 67:67:b9:5c:29:4a:6b:1e:1f:ce:1b:51:2c:10:f3: ac:fb:7f:58:e9:5c:5f:de:99:c2:76:4c:0b:56:9f: cc:cd:11:40:2f:33:eb:4e:4a:40:c1:c9:8d:ed:39: d9:6f:fc:0d:47:0c:d0:54:17:c1:58:9a:25:44:a3: e9:da:d5:9d:99:b0:d8:cc:bc:f7:9c:83:df:68:bb: 1c:5f:65:5c:e3:2c:f2:79:ea:f7:92:48:9f:03:63: 82:1a:53:d5:b5:85:66:15:54:4c:ea:f0:22:a0:48: 25:c6:58:82:ca:ff:45:5b:fd:e7:e8:9c:23:95:77: 9d:83:c5:a6:3b:28:fc:3e:fa:9f:d0:f9:a1:45:0c: 41:de:de:86:f0:53:fa:1c:2b:18:4f:fd:83:bf:00: 28:3c:f9:b1:fc:86:42:4c:3d:b7:0d:2f:d8:d8:ff: ff:d7:73:1e:f6:f5:6e:3b:2a:ff:a6:3c:f1:54:f0: 70:7f:93:ce:6d:5e:94:95:d8:67:0e:ea:47:2b:79: b3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:A9:11:C8:8E:D1:EE:51:ED:3E:36:E1:8E:67:00:2A:32:F0:F9:0C X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/C6kRyI7R7lHtPjbhjmcAKjLw-Qw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.20.0/24 185.194.28.0/24 Signature Algorithm: sha256WithRSAEncryption 80:ae:5d:80:d2:80:ae:b7:ce:d8:95:06:00:84:f3:e3:fd:d5: cd:96:96:6c:25:9d:e2:67:3c:f6:f9:53:1a:f7:60:7e:d7:a1: 3d:93:9e:73:c7:09:24:b0:b2:5d:cd:23:bc:39:63:8b:07:1e: 23:42:71:3a:aa:36:3e:72:50:61:5a:5b:bc:e4:8b:c7:9b:9b: 06:f1:1b:31:8f:9e:53:69:01:d3:c9:04:a0:3a:57:85:48:b2: d2:4d:4b:97:db:22:db:dc:88:0a:6d:cc:29:e0:54:ef:a8:3e: ae:24:c8:a0:19:05:31:d3:af:a0:ac:fa:22:b4:cf:f9:a1:fa: 2b:7b:2c:5d:77:bd:0f:3a:66:53:22:02:22:12:27:03:98:0b: a9:7c:4a:41:01:83:15:e1:a8:4e:0d:02:8f:c5:1f:2a:d1:fe: 4b:6a:ab:92:44:ed:e8:9a:4d:84:40:ab:0f:a0:c3:5c:c2:a1: 69:50:44:a7:62:0a:87:ce:f1:4a:23:0b:7f:05:d3:85:6b:62: 3e:fc:b9:93:1a:53:89:05:69:b0:dd:60:8d:ca:59:8b:31:0a: e0:0c:fe:45:0b:53:eb:4b:17:ad:c3:05:ca:90:aa:b4:f6:fb: 62:56:25:30:4e:f4:44:4c:52:c6:36:60:2a:f5:f8:44:18:13: e8:8f:61:ab -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8E6lWUdyLN0tdRlycKZU3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYmE5MTFjODhlZDFlZTUxZWQzZTM2ZTE4ZTY3MDAyYTMyZjBmOTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaR4yQUkdcO8MT3YWJ6tfbmY+VHV FUbZRXmCgqiLCO2BQePPLDWNsdi0rpgjHNOJMIlbWn8U0T3WxFZnZ7lcKUprHh/O G1EsEPOs+39Y6Vxf3pnCdkwLVp/MzRFALzPrTkpAwcmN7TnZb/wNRwzQVBfBWJol RKPp2tWdmbDYzLz3nIPfaLscX2Vc4yzyeer3kkifA2OCGlPVtYVmFVRM6vAioEgl xliCyv9FW/3n6JwjlXedg8WmOyj8Pvqf0PmhRQxB3t6G8FP6HCsYT/2DvwAoPPmx /IZCTD23DS/Y2P//13Me9vVuOyr/pjzxVPBwf5PObV6UldhnDupHK3mzXwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAupEciO0e5R7T424Y5nACoy8PkMMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvQzZrUnlJN1I3bEh0UGpiaGptY0FLakx3LVF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALQgUAwQA ucIcMA0GCSqGSIb3DQEBCwUAA4IBAQCArl2A0oCut87YlQYAhPPj/dXNlpZsJZ3i Zzz2+VMa92B+16E9k55zxwkksLJdzSO8OWOLBx4jQnE6qjY+clBhWlu85IvHm5sG 8Rsxj55TaQHTyQSgOleFSLLSTUuX2yLb3IgKbcwp4FTvqD6uJMigGQUx06+grPoi tM/5oforeyxdd70POmZTIgIiEicDmAupfEpBAYMV4ahODQKPxR8q0f5LaquSRO3o mk2EQKsPoMNcwqFpUESnYgqHzvFKIwt/BdOFa2I+/LmTGlOJBWmw3WCNylmLMQrg DP5FC1PrSxetwwXKkKq09vtiViUwTvRETFLGNmAq9fhEGBPoj2Gr -----END CERTIFICATE-----Generated at Sun Jan 25 10:14:36 2026 by rpki-client