This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/6Vq6nX6qZxxpHxLNn7nD2R9p3vg.roa File: 6Vq6nX6qZxxpHxLNn7nD2R9p3vg.roa (raw, json) Hash identifier: cCFRmS9OiVLkCF1BaRT3CqFY4I6S01WCAYWaFPvUJRM= Subject key identifier: E9:5A:BA:9D:7E:AA:67:1C:69:1F:12:CD:9F:B9:C3:D9:1F:69:DE:F8 Certificate issuer: /CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091 Certificate serial: 019B78A29E7493E5802B126D842AEDDF3D3A Authority key identifier: 22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/6Vq6nX6qZxxpHxLNn7nD2R9p3vg.roa Signing time: Thu 01 Jan 2026 08:18:01 +0000 ROA not before: Thu 01 Jan 2026 08:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13135 IP address blocks: 45.66.88.0/22 maxlen: 22 2a09:6640::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 11:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:9e:74:93:e5:80:2b:12:6d:84:2a:ed:df:3d:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091 Validity Not Before: Jan 1 08:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e95aba9d7eaa671c691f12cd9fb9c3d91f69def8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:20:04:78:9c:3c:07:98:48:69:0b:77:6f:15: d4:63:31:7b:ea:ab:1a:45:9d:fa:6e:e4:36:d5:15: 72:4d:4e:f0:0e:a1:19:78:46:69:39:bb:10:be:e4: 69:af:f5:22:90:65:c2:24:4f:03:13:af:d1:13:2d: 7e:47:a6:37:df:6c:44:52:52:bc:8d:c2:88:49:a5: 2e:8f:93:a1:b1:87:11:f7:6f:40:7d:7d:88:c9:99: 3b:21:e3:02:b5:3f:00:ce:b8:97:2e:07:ad:f1:32: 6b:3f:a9:8d:a5:61:ee:95:97:26:6e:1f:ae:f2:29: 3e:b6:58:c2:fa:6b:00:05:4d:1d:6d:c9:55:1a:71: 6b:2e:72:20:28:09:c1:0a:f8:f0:ef:68:bc:8a:6f: cf:9f:57:d7:a2:03:e6:09:e3:b5:49:a5:02:3c:c6: 17:b3:54:60:19:35:24:85:1b:ab:ff:cc:c2:5b:a2: 8d:b3:0d:5e:8f:bc:7d:b2:66:52:31:1d:36:50:d7: de:fa:07:dc:e9:ca:78:ff:26:f5:6a:e0:77:d9:ae: ee:f4:d7:20:bd:d1:3c:76:98:48:d4:cc:8a:6a:fb: 50:e4:19:bc:0f:f8:34:9a:7b:d2:44:f4:21:f0:31: df:02:db:31:c5:0d:6a:57:a1:2d:86:c9:ac:fb:54: f6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:5A:BA:9D:7E:AA:67:1C:69:1F:12:CD:9F:B9:C3:D9:1F:69:DE:F8 X509v3 Authority Key Identifier: keyid:22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/6Vq6nX6qZxxpHxLNn7nD2R9p3vg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.88.0/22 IPv6: 2a09:6640::/29 Signature Algorithm: sha256WithRSAEncryption 5b:92:43:81:91:df:4d:78:97:40:40:e0:a3:0e:59:66:3c:ae: 59:9c:a9:73:c6:56:d6:8e:95:82:54:40:b1:04:3a:ee:ab:f9: b3:1c:09:79:b3:e0:44:a2:36:b0:ff:74:e3:b3:be:02:51:e7: 4b:df:29:d2:d5:41:a6:46:40:0a:49:f0:f4:41:fd:69:c4:c5: 79:4a:23:00:ce:f8:93:fe:77:ad:03:78:9f:e8:f8:e6:42:06: 5d:05:27:dd:f7:52:58:a6:08:5d:0a:85:00:17:47:c4:01:01: 09:9e:11:f0:be:f9:4b:62:1a:0a:fb:eb:ef:ad:fd:45:6c:63: 82:a9:a4:42:6b:5c:3b:48:ce:b5:5f:4f:e5:b6:80:b0:00:b7: ee:b1:ff:e9:85:3e:06:b7:e3:c6:aa:dd:b4:2d:4b:2f:ff:4e: 99:f8:c3:68:77:90:24:8d:b8:51:d8:da:62:c7:62:db:84:8b: d5:e4:99:49:40:89:aa:4c:8d:22:84:18:cc:a9:70:72:38:e6: a9:13:0d:cf:99:9e:64:cd:15:9d:f8:48:b7:6e:fd:2f:ee:a6: 83:73:89:bf:19:14:95:4f:9d:b3:c1:fc:92:db:63:0e:25:54: 00:1b:5a:71:82:e0:8f:31:18:15:cb:9d:91:32:fa:b2:58:1a: 2d:93:85:8f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4op50k+WAKxJthCrt3z06MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMGFiMGQ3YWUwMWM3YmE3ZGE2OWQ3MWE5MTQ3MmIzOTBj ZDcwOTEwHhcNMjYwMTAxMDgxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTVhYmE5ZDdlYWE2NzFjNjkxZjEyY2Q5ZmI5YzNkOTFmNjlkZWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCAEeJw8B5hIaQt3bxXUYzF76qsa RZ36buQ21RVyTU7wDqEZeEZpObsQvuRpr/UikGXCJE8DE6/REy1+R6Y332xEUlK8 jcKISaUuj5OhsYcR929AfX2IyZk7IeMCtT8AzriXLget8TJrP6mNpWHulZcmbh+u 8ik+tljC+msABU0dbclVGnFrLnIgKAnBCvjw72i8im/Pn1fXogPmCeO1SaUCPMYX s1RgGTUkhRur/8zCW6KNsw1ej7x9smZSMR02UNfe+gfc6cp4/yb1auB32a7u9Ncg vdE8dphI1MyKavtQ5Bm8D/g0mnvSRPQh8DHfAtsxxQ1qV6Ethsms+1T28QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOlaup1+qmccaR8SzZ+5w9kfad74MB8GA1UdIwQY MBaAFCIKsNeuAce6faadcakUcrOQzXCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWdxdzE2NEJ4N3A5cHAxeHFSUnlzNUROY0pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9mMDQ2NTgtZmFkNy00MjNjLWJiNDIt ODJmYTNkMjYwODY5LzEvNlZxNm5YNnFaeHhwSHhMTm43bkQyUjlwM3ZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9mMDQ2NTgtZmFkNy00MjNjLWJiNDItODJmYTNkMjYwODY5 LzEvSWdxdzE2NEJ4N3A5cHAxeHFSUnlzNUROY0pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLUJYMA0E AgACMAcDBQMqCWZAMA0GCSqGSIb3DQEBCwUAA4IBAQBbkkOBkd9NeJdAQOCjDllm PK5ZnKlzxlbWjpWCVECxBDruq/mzHAl5s+BEojaw/3Tjs74CUedL3ynS1UGmRkAK SfD0Qf1pxMV5SiMAzviT/netA3if6PjmQgZdBSfd91JYpghdCoUAF0fEAQEJnhHw vvlLYhoK++vvrf1FbGOCqaRCa1w7SM61X0/ltoCwALfusf/phT4Gt+PGqt20LUsv /06Z+MNod5AkjbhR2Npix2LbhIvV5JlJQImqTI0ihBjMqXByOOapEw3PmZ5kzRWd +Ei3bv0v7qaDc4m/GRSVT52zwfyS22MOJVQAG1pxguCPMRgVy52RMvqyWBotk4WP -----END CERTIFICATE-----Generated at Mon Jan 26 21:06:19 2026 by rpki-client