This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/6iXU8EKk2ZvUEM-SfuUbb38nhQg.roa File: 6iXU8EKk2ZvUEM-SfuUbb38nhQg.roa (raw, json) Hash identifier: 5E//lm7xuj1KLaKmwKuy2vDVf/O+b6mxnpSRAQt5Fb0= Subject key identifier: EA:25:D4:F0:42:A4:D9:9B:D4:10:CF:92:7E:E5:1B:6F:7F:27:85:08 Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055 Certificate serial: 019B9E5C66D0601A4D02E853D6E57A426FDD Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/6iXU8EKk2ZvUEM-SfuUbb38nhQg.roa Signing time: Thu 08 Jan 2026 16:06:54 +0000 ROA not before: Thu 08 Jan 2026 16:06:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 45.153.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9e:5c:66:d0:60:1a:4d:02:e8:53:d6:e5:7a:42:6f:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055 Validity Not Before: Jan 8 16:06:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea25d4f042a4d99bd410cf927ee51b6f7f278508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cf:d6:12:d9:cf:06:65:75:b1:c2:bf:21:da: f1:63:62:87:36:3d:a3:d0:c4:fc:9a:aa:13:4c:c5: 5e:d7:48:19:8a:20:31:f3:66:89:4d:71:a0:64:f1: 7f:a5:1e:87:eb:7f:76:cc:c4:67:91:e7:12:e7:b5: 47:2b:71:39:50:73:ad:30:f0:f5:bd:45:a3:f1:8c: 4e:22:7a:17:61:6e:9c:88:60:50:da:50:38:de:95: 23:d6:ac:cd:8a:77:d0:8c:5b:4e:43:e4:71:7a:2e: 6f:1d:9b:36:58:ef:44:89:d7:7f:b2:8f:4f:ad:af: 85:d0:41:6f:6c:9d:2c:3b:47:d4:5b:bd:d1:74:b6: 5b:c2:ea:b4:9e:24:16:62:a4:bf:05:13:f8:20:e6: 7f:00:08:ae:be:5a:49:2a:e3:c3:fb:e3:4c:f8:cf: 76:c8:81:cb:e6:ca:e4:67:32:c4:74:77:0f:a2:2a: 3e:b1:31:20:9a:32:89:ad:60:ce:f4:55:86:8e:f2: 58:f1:e6:97:02:56:f5:a5:29:8f:32:6c:d4:05:f6: d7:33:7f:86:9c:80:0b:14:d7:a4:1f:b4:d0:39:fb: 34:2d:16:9c:6a:1d:b9:78:c3:5b:36:0f:bd:db:1d: 01:df:70:c1:6b:5d:52:b1:7f:17:55:9d:14:01:1d: 67:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:25:D4:F0:42:A4:D9:9B:D4:10:CF:92:7E:E5:1B:6F:7F:27:85:08 X509v3 Authority Key Identifier: keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/6iXU8EKk2ZvUEM-SfuUbb38nhQg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.153.166.0/24 Signature Algorithm: sha256WithRSAEncryption 95:89:8a:47:02:c8:10:61:59:d0:79:ac:07:c7:6b:dd:e4:45: ae:0d:9a:5a:cc:ca:cb:ef:94:36:d1:05:09:0e:26:cc:52:59: 9c:9e:c8:5b:5c:a8:64:cc:1f:7d:64:c6:f4:1b:e7:6b:ff:5a: a3:a5:26:bc:01:61:82:79:2f:16:ad:4b:da:a9:f1:bc:ef:39: d3:01:84:e5:8c:9f:3f:c0:75:23:f7:d8:dd:45:b0:f3:ea:c8: b1:0f:91:5f:c5:8d:b9:33:ae:b3:20:ea:f5:09:2f:6d:61:9d: 32:e8:ec:67:88:45:01:10:85:a0:e7:b3:7f:35:4f:00:3e:11: 15:93:d1:90:5b:b4:87:4e:58:34:bb:5f:ff:b5:f9:e4:9e:f6: 7b:73:8f:88:60:19:de:c0:85:1d:dd:a3:da:d9:88:6d:9c:51: 65:bb:ca:f4:88:d1:df:f2:10:99:61:df:a1:11:75:39:fb:27: 03:7f:b0:50:75:87:54:d5:48:b5:91:af:e0:e6:3e:78:2c:a5: f4:67:c7:f1:cf:f5:e2:88:31:c2:42:20:f6:bf:dd:d4:2d:6e: e9:bd:56:3c:fc:21:b0:0d:34:ce:31:15:7d:46:5d:7b:92:e6: 1c:52:9b:1a:c9:96:a8:81:22:25:ec:fd:2f:bf:cc:1c:95:15: 78:7c:59:f3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZueXGbQYBpNAuhT1uV6Qm/dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZDk4YzJjNTRiMGNiZWExMzRlMjdhOTgxY2ZkZGU3MzIz NmUwNTUwHhcNMjYwMTA4MTYwNjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTI1ZDRmMDQyYTRkOTliZDQxMGNmOTI3ZWU1MWI2ZjdmMjc4NTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxs/WEtnPBmV1scK/IdrxY2KHNj2j 0MT8mqoTTMVe10gZiiAx82aJTXGgZPF/pR6H6392zMRnkecS57VHK3E5UHOtMPD1 vUWj8YxOInoXYW6ciGBQ2lA43pUj1qzNinfQjFtOQ+Rxei5vHZs2WO9Eidd/so9P ra+F0EFvbJ0sO0fUW73RdLZbwuq0niQWYqS/BRP4IOZ/AAiuvlpJKuPD++NM+M92 yIHL5srkZzLEdHcPoio+sTEgmjKJrWDO9FWGjvJY8eaXAlb1pSmPMmzUBfbXM3+G nIALFNekH7TQOfs0LRacah25eMNbNg+92x0B33DBa11SsX8XVZ0UAR1nJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOol1PBCpNmb1BDPkn7lG29/J4UIMB8GA1UdIwQY MBaAFGzZjCxUsMvqE04nqYHP3ecyNuBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWIt ZDM3ZGY2MzRhOTI5LzEvNmlYVThFS2syWnZVRU0tU2Z1VWJiMzhuaFFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWItZDM3ZGY2MzRhOTI5 LzEvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZmmMA0G CSqGSIb3DQEBCwUAA4IBAQCViYpHAsgQYVnQeawHx2vd5EWuDZpazMrL75Q20QUJ DibMUlmcnshbXKhkzB99ZMb0G+dr/1qjpSa8AWGCeS8WrUvaqfG87znTAYTljJ8/ wHUj99jdRbDz6sixD5FfxY25M66zIOr1CS9tYZ0y6OxniEUBEIWg57N/NU8APhEV k9GQW7SHTlg0u1//tfnknvZ7c4+IYBnewIUd3aPa2YhtnFFlu8r0iNHf8hCZYd+h EXU5+ycDf7BQdYdU1Ui1ka/g5j54LKX0Z8fxz/XiiDHCQiD2v93ULW7pvVY8/CGw DTTOMRV9Rl17kuYcUpsayZaogSIl7P0vv8wclRV4fFnz -----END CERTIFICATE-----Generated at Sun Jan 25 13:05:56 2026 by rpki-client