This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/I6B11vAuliEHXkaj56Cx_nMNtzM.roa File: I6B11vAuliEHXkaj56Cx_nMNtzM.roa (raw, json) Hash identifier: zwWKRvjHFcgx4AfaFVQj5qA+i2zTNLuDDbo0ohM5s9o= Subject key identifier: 23:A0:75:D6:F0:2E:96:21:07:5E:46:A3:E7:A0:B1:FE:73:0D:B7:33 Certificate issuer: /CN=0c477abf0a27ede886fbc42413d7a89c226b11fa Certificate serial: 019B7C12B29DF6ABE3BA6F8CFDE064B66642 Authority key identifier: 0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/I6B11vAuliEHXkaj56Cx_nMNtzM.roa Signing time: Fri 02 Jan 2026 00:19:18 +0000 ROA not before: Fri 02 Jan 2026 00:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60241 IP address blocks: 45.87.208.0/22 maxlen: 22 2a06:bc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:b2:9d:f6:ab:e3:ba:6f:8c:fd:e0:64:b6:66:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c477abf0a27ede886fbc42413d7a89c226b11fa Validity Not Before: Jan 2 00:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=23a075d6f02e9621075e46a3e7a0b1fe730db733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:fa:21:34:2d:6a:bd:06:ae:2d:22:9a:77:80: 62:6b:40:4e:cb:d9:72:57:8c:e7:14:b1:ad:52:67: 11:9b:51:01:80:a1:21:35:e5:0f:21:98:4b:e0:80: 4f:5f:59:06:c7:50:56:f8:07:09:c7:e4:94:05:6c: 4b:cc:23:44:f3:89:1a:49:2b:f7:55:71:34:2d:0b: 42:1e:1d:20:41:fd:1d:e0:6f:9b:d0:76:1e:3e:18: ca:15:9d:68:68:1e:f0:ac:1f:ca:11:ea:35:1b:43: 69:0f:d3:3b:41:44:51:9c:d2:6d:b4:6c:74:a0:6f: cc:8e:b8:ca:4d:2c:3a:73:12:c1:17:2c:1c:83:b1: e3:03:58:46:9f:b8:97:db:71:a0:67:1b:9f:49:3a: b3:fb:be:fa:6e:dc:ed:a7:fb:e7:3b:90:f6:67:88: c8:a9:28:2d:c3:25:4b:b3:f9:7d:34:69:e7:f4:36: 47:13:36:d9:7b:1f:56:4d:2d:a2:ed:96:22:2e:12: 8e:05:67:0d:9d:a9:eb:30:7c:0b:82:eb:01:93:60: 97:ef:17:fe:58:43:a0:26:f1:4d:bd:9f:dd:70:2b: f7:ea:68:c0:54:be:a5:89:d3:a7:4c:33:10:e9:ef: 41:3a:49:42:3b:13:dc:3a:80:ba:19:b6:23:d8:07: 61:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:A0:75:D6:F0:2E:96:21:07:5E:46:A3:E7:A0:B1:FE:73:0D:B7:33 X509v3 Authority Key Identifier: keyid:0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/I6B11vAuliEHXkaj56Cx_nMNtzM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.87.208.0/22 IPv6: 2a06:bc0::/29 Signature Algorithm: sha256WithRSAEncryption 3a:7c:96:ad:41:28:b2:3a:81:8a:85:13:29:2d:79:e4:47:3c: 94:a5:fe:b6:d3:be:66:bb:ad:06:a8:dc:dc:48:74:d0:a9:a9: 73:f0:f6:6f:8d:73:1e:98:fe:42:09:aa:a3:cf:b5:3f:9b:0a: 07:21:a2:ed:48:3c:60:d0:7a:46:0f:b0:16:43:5a:45:ec:bd: 8f:06:9e:fc:c2:bf:a6:57:cd:9f:33:a1:ec:94:44:3a:c5:1e: c1:ad:5e:8a:c3:ef:86:1f:24:47:fa:6b:4f:38:6e:66:4f:01: 3f:fd:6c:fb:f6:48:b5:e6:90:9f:7b:36:3f:89:63:2d:09:62: 59:e6:de:ba:b8:ce:2c:35:4a:5d:bd:27:81:e4:fa:b8:0f:88: 10:44:b8:83:c8:2f:d2:00:2d:2f:84:b2:d4:d5:e4:9d:6b:c2: 49:9c:ab:2f:ed:20:d7:6c:b4:54:67:66:33:c5:bb:fe:1d:e2: 0d:33:1d:00:c1:ce:59:8a:22:a2:74:66:17:a6:ff:c7:9a:fb: 58:28:30:62:88:b4:f4:13:11:6b:98:ac:c9:16:df:10:60:28: 4e:1e:f0:aa:87:ed:ff:c5:af:54:6c:74:06:aa:e8:56:19:4f: 26:50:17:ff:95:d7:c6:5b:cd:ad:f3:72:f9:67:93:f4:49:97: 37:26:7c:f1 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8ErKd9qvjum+M/eBktmZCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNDc3YWJmMGEyN2VkZTg4NmZiYzQyNDEzZDdhODljMjI2 YjExZmEwHhcNMjYwMTAyMDAxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyM2EwNzVkNmYwMmU5NjIxMDc1ZTQ2YTNlN2EwYjFmZTczMGRiNzMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifohNC1qvQauLSKad4Bia0BOy9ly V4znFLGtUmcRm1EBgKEhNeUPIZhL4IBPX1kGx1BW+AcJx+SUBWxLzCNE84kaSSv3 VXE0LQtCHh0gQf0d4G+b0HYePhjKFZ1oaB7wrB/KEeo1G0NpD9M7QURRnNJttGx0 oG/MjrjKTSw6cxLBFywcg7HjA1hGn7iX23GgZxufSTqz+776btztp/vnO5D2Z4jI qSgtwyVLs/l9NGnn9DZHEzbZex9WTS2i7ZYiLhKOBWcNnanrMHwLgusBk2CX7xf+ WEOgJvFNvZ/dcCv36mjAVL6lidOnTDMQ6e9BOklCOxPcOoC6GbYj2AdhYQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCOgddbwLpYhB15Go+egsf5zDbczMB8GA1UdIwQY MBaAFAxHer8KJ+3ohvvEJBPXqJwiaxH6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREVkNnZ3b243ZWlHLThRa0U5ZW9uQ0pyRWZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC81NTZkM2QtMDQyMi00NjEyLWEyMTct MThmNGY2NmE1MGEwLzEvSTZCMTF2QXVsaUVIWGthajU2Q3hfbk1OdHpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC81NTZkM2QtMDQyMi00NjEyLWEyMTctMThmNGY2NmE1MGEw LzEvREVkNnZ3b243ZWlHLThRa0U5ZW9uQ0pyRWZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLVfQMA0E AgACMAcDBQMqBgvAMA0GCSqGSIb3DQEBCwUAA4IBAQA6fJatQSiyOoGKhRMpLXnk RzyUpf62075mu60GqNzcSHTQqalz8PZvjXMemP5CCaqjz7U/mwoHIaLtSDxg0HpG D7AWQ1pF7L2PBp78wr+mV82fM6HslEQ6xR7BrV6Kw++GHyRH+mtPOG5mTwE//Wz7 9ki15pCfezY/iWMtCWJZ5t66uM4sNUpdvSeB5Pq4D4gQRLiDyC/SAC0vhLLU1eSd a8JJnKsv7SDXbLRUZ2Yzxbv+HeINMx0Awc5ZiiKidGYXpv/HmvtYKDBiiLT0ExFr mKzJFt8QYChOHvCqh+3/xa9UbHQGquhWGU8mUBf/ldfGW82t83L5Z5P0SZc3Jnzx -----END CERTIFICATE-----Generated at Mon Jan 26 05:55:39 2026 by rpki-client