This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/6gy9ic0JHyKNMeOj6vnfnWQN3SM.roa File: 6gy9ic0JHyKNMeOj6vnfnWQN3SM.roa (raw, json) Hash identifier: 7Tyj4JshIbYP3V9AawiQ2X+dktavULDW7Khh9vcmSus= Subject key identifier: EA:0C:BD:89:CD:09:1F:22:8D:31:E3:A3:EA:F9:DF:9D:64:0D:DD:23 Certificate issuer: /CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e Certificate serial: 019B7CED0A309EEA17ED189387EA2A240F7D Authority key identifier: F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/6gy9ic0JHyKNMeOj6vnfnWQN3SM.roa Signing time: Fri 02 Jan 2026 04:17:47 +0000 ROA not before: Fri 02 Jan 2026 04:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15763 IP address blocks: 45.82.172.0/24 maxlen: 24 45.82.173.0/24 maxlen: 24 45.82.174.0/24 maxlen: 24 45.82.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:0a:30:9e:ea:17:ed:18:93:87:ea:2a:24:0f:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e Validity Not Before: Jan 2 04:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea0cbd89cd091f228d31e3a3eaf9df9d640ddd23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b9:71:41:b2:57:ed:fc:a4:95:90:ba:53:d5: 03:dc:57:94:1c:67:01:3c:3d:8e:17:1a:26:16:71: 1b:c1:2c:d7:ac:3e:50:83:50:ea:62:70:93:f4:d1: 2c:e2:b4:c1:95:a2:bb:ae:fa:b9:5a:7a:c6:e6:2a: 9b:12:f0:ed:ba:4d:19:85:43:19:e2:7f:56:05:e8: db:d3:59:ea:b1:c4:77:cb:53:22:68:6a:5a:87:c2: ac:ba:e5:fb:7e:d6:2a:8a:8b:4a:d8:db:f7:9d:21: 78:2c:8c:8d:36:c0:38:9b:89:3b:24:4a:fc:4c:8c: ec:94:9c:05:c2:55:2a:d0:1d:4f:4c:5b:22:5b:9a: c1:2b:df:ae:78:70:18:e5:fc:f3:6a:a1:61:3c:6c: c0:87:37:15:84:e3:01:8b:5e:73:49:fd:8c:45:6e: 60:5c:93:98:40:53:5f:04:df:37:32:a1:eb:3b:26: ce:cd:d0:7b:a8:aa:03:1f:7d:a6:8c:17:04:30:59: fb:e0:c3:36:58:38:1f:73:44:66:63:6b:eb:05:78: a5:30:a0:9a:28:81:cc:f6:6f:0a:aa:d7:69:42:56: 8a:40:bc:dd:13:ac:c6:9b:d9:7b:dd:3c:00:28:4e: cd:bd:3e:44:2c:3e:2c:93:62:a8:87:9a:1f:f5:e0: d9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:0C:BD:89:CD:09:1F:22:8D:31:E3:A3:EA:F9:DF:9D:64:0D:DD:23 X509v3 Authority Key Identifier: keyid:F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/6gy9ic0JHyKNMeOj6vnfnWQN3SM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.82.172.0/22 Signature Algorithm: sha256WithRSAEncryption 4f:26:83:bc:59:da:be:f7:88:0f:57:48:ee:43:bb:78:ab:64: 05:63:02:1c:95:5b:47:42:8d:d4:c1:15:4f:00:86:af:2a:26: 4e:b3:ac:1b:31:b1:7d:f1:2f:e2:36:1d:d6:c2:d4:ce:28:95: af:df:a1:53:05:46:da:1b:bb:60:01:73:25:af:85:c5:44:eb: 6d:9f:08:b6:36:57:d0:f2:91:3b:7f:95:7d:1e:55:d0:b8:4b: 96:ff:95:b0:cc:99:21:20:5d:4b:8e:5c:bb:c0:cb:92:98:63: 1e:78:d8:4d:dd:ab:a5:dc:74:ac:19:5f:3e:af:31:2c:e3:98: ec:11:cf:d8:9b:9c:ab:d0:8b:cd:1f:f6:0d:80:8c:b3:db:05: a3:b4:35:ba:8d:6e:4e:f2:29:3f:4b:a9:69:4c:e3:7d:7e:4b: bb:9a:73:8a:a5:85:ef:08:be:96:62:bb:8f:c5:21:94:36:bb: 4f:ef:9d:38:a8:1e:ad:19:3f:6d:2a:69:09:fd:6a:f7:59:e7: cd:83:e1:fe:54:5b:24:b8:b8:f0:03:f8:3a:e6:24:fb:16:5c: 26:67:3c:be:11:8a:55:63:e5:df:65:88:e2:5d:3b:a1:4d:24: 7c:cc:62:ea:7c:40:8a:ad:b3:69:cb:77:80:9f:75:08:6c:d5: 57:06:a8:9c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87QownuoX7RiTh+oqJA99MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyZmU2ZjJhOTM3ODM4ZGYyYjE1ZGExNzQzYmNkOWZiMGUy OWNmMmUwHhcNMjYwMTAyMDQxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTBjYmQ4OWNkMDkxZjIyOGQzMWUzYTNlYWY5ZGY5ZDY0MGRkZDIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7lxQbJX7fyklZC6U9UD3FeUHGcB PD2OFxomFnEbwSzXrD5Qg1DqYnCT9NEs4rTBlaK7rvq5WnrG5iqbEvDtuk0ZhUMZ 4n9WBejb01nqscR3y1MiaGpah8KsuuX7ftYqiotK2Nv3nSF4LIyNNsA4m4k7JEr8 TIzslJwFwlUq0B1PTFsiW5rBK9+ueHAY5fzzaqFhPGzAhzcVhOMBi15zSf2MRW5g XJOYQFNfBN83MqHrOybOzdB7qKoDH32mjBcEMFn74MM2WDgfc0RmY2vrBXilMKCa KIHM9m8KqtdpQlaKQLzdE6zGm9l73TwAKE7NvT5ELD4sk2Koh5of9eDZXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOoMvYnNCR8ijTHjo+r5351kDd0jMB8GA1UdIwQY MBaAFPL+byqTeDjfKxXaF0O82fsOKc8uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHY1dktwTjRPTjhyRmRvWFE3elotdzRwenk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8yYWI3ODUtMmY4Ni00ODllLWFjMWMt YjcyNTU3NjY4YjAxLzEvNmd5OWljMEpIeUtOTWVPajZ2bmZuV1FOM1NNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8yYWI3ODUtMmY4Ni00ODllLWFjMWMtYjcyNTU3NjY4YjAx LzEvOHY1dktwTjRPTjhyRmRvWFE3elotdzRwenk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVKsMA0G CSqGSIb3DQEBCwUAA4IBAQBPJoO8Wdq+94gPV0juQ7t4q2QFYwIclVtHQo3UwRVP AIavKiZOs6wbMbF98S/iNh3WwtTOKJWv36FTBUbaG7tgAXMlr4XFROttnwi2NlfQ 8pE7f5V9HlXQuEuW/5WwzJkhIF1Ljly7wMuSmGMeeNhN3aul3HSsGV8+rzEs45js Ec/Ym5yr0IvNH/YNgIyz2wWjtDW6jW5O8ik/S6lpTON9fku7mnOKpYXvCL6WYruP xSGUNrtP7504qB6tGT9tKmkJ/Wr3WefNg+H+VFskuLjwA/g65iT7FlwmZzy+EYpV Y+XfZYjiXTuhTSR8zGLqfECKrbNpy3eAn3UIbNVXBqic -----END CERTIFICATE-----Generated at Sun Jan 25 21:06:20 2026 by rpki-client