This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/16cM0cS6yCbfMPBUYkXODTwVjQ0.roa File: 16cM0cS6yCbfMPBUYkXODTwVjQ0.roa (raw, json) Hash identifier: hI293Q1PmWaRkKSCpfgvZGtPSBxlBmgvnKLFc8DMKoc= Subject key identifier: D7:A7:0C:D1:C4:BA:C8:26:DF:30:F0:54:62:45:CE:0D:3C:15:8D:0D Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Certificate serial: 019B7AC8329234F532459D95BE971C33D9B7 Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/16cM0cS6yCbfMPBUYkXODTwVjQ0.roa Signing time: Thu 01 Jan 2026 18:18:19 +0000 ROA not before: Thu 01 Jan 2026 18:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213694 IP address blocks: 45.66.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:32:92:34:f5:32:45:9d:95:be:97:1c:33:d9:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Validity Not Before: Jan 1 18:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7a70cd1c4bac826df30f0546245ce0d3c158d0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:fa:62:7e:42:50:d7:4c:3b:04:f8:32:c7:13: c2:61:94:bd:26:11:da:22:f5:0b:03:de:94:13:7d: 98:fc:c0:e7:d1:ca:eb:57:3f:b8:a2:25:47:0a:3b: d0:2a:e5:0e:9c:9e:0a:81:b6:3b:af:03:12:66:52: a4:c3:0d:2c:a7:98:8e:fb:74:ed:ef:dd:a8:19:c3: 85:6b:94:ed:dd:8d:24:3e:10:fc:9a:4f:5a:06:fb: 4c:58:90:ea:38:48:05:ad:68:b0:4b:28:58:28:f2: 57:82:c9:ba:a1:b3:db:27:61:8e:94:45:fb:07:1e: a5:00:53:c0:21:17:8a:60:f3:56:68:7a:dd:65:6e: d5:cf:9c:dc:bc:fd:9f:be:53:52:82:c7:23:32:e3: 5c:da:a8:81:48:67:31:75:f4:79:98:66:af:fb:6a: a3:72:bb:71:3a:ab:48:8a:cc:4d:90:82:e0:7f:7b: 3f:3b:ed:62:98:e5:1c:ba:e6:bb:de:d0:c3:bd:60: a4:3d:ce:c3:fd:87:06:16:fb:4e:73:ce:db:9f:aa: 2a:6f:23:1d:8d:a1:c6:78:dd:0a:f0:d8:2a:1b:62: 53:a6:5f:ce:05:79:21:25:4b:14:20:3a:cc:d9:62: 47:77:e4:58:2e:6f:78:03:bf:2e:cc:15:32:70:b8: 6e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:A7:0C:D1:C4:BA:C8:26:DF:30:F0:54:62:45:CE:0D:3C:15:8D:0D X509v3 Authority Key Identifier: keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/16cM0cS6yCbfMPBUYkXODTwVjQ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.250.0/23 Signature Algorithm: sha256WithRSAEncryption 2d:33:02:1e:dc:6e:60:ea:de:4b:98:2e:09:86:86:68:5d:47: 9b:98:cd:65:4f:1a:e8:b0:ae:16:ac:0c:64:3b:4a:88:0d:49: f5:16:59:91:a7:06:4d:e1:09:78:e8:d5:9b:10:16:48:66:e0: d3:94:65:86:1f:3d:27:47:a5:f6:a8:e8:f7:24:0a:78:36:b3: 55:de:e3:dd:09:35:bc:c1:27:40:ca:c5:b8:14:ce:d0:f3:9b: 2b:4c:68:aa:95:ef:ba:70:93:7b:19:a0:3d:ac:f0:2a:82:f5: e8:db:19:ca:d4:05:3b:61:e7:09:be:31:7c:cb:f6:b2:d4:9c: ef:6c:75:2c:74:ee:1f:4d:32:6b:28:1b:57:05:06:76:1e:09: 7b:d1:dc:c7:b9:98:c4:77:c1:7e:d6:b1:a4:f3:d4:19:66:6f: 83:56:f4:1c:fd:98:ed:73:c1:96:52:6c:34:7b:93:c0:1a:28: b6:83:18:47:99:18:9d:ec:3b:2d:ef:10:88:bb:14:8a:2b:c8: 59:62:97:be:21:ec:22:f2:00:7c:53:bc:9c:23:34:cd:12:f7: 65:87:8c:b8:68:42:31:54:af:3c:19:c0:db:32:1c:c3:cd:30: ba:8f:c5:b9:95:d6:fb:80:27:47:4f:99:b9:fc:c7:bf:13:66: e4:6e:e1:e1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yDKSNPUyRZ2VvpccM9m3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMjBkZGQzOThkYWM4ZjYyY2MxMjUyNjMyNWYxODIxZmI3 MjRmNzUwHhcNMjYwMTAxMTgxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkN2E3MGNkMWM0YmFjODI2ZGYzMGYwNTQ2MjQ1Y2UwZDNjMTU4ZDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PpifkJQ10w7BPgyxxPCYZS9JhHa IvULA96UE32Y/MDn0crrVz+4oiVHCjvQKuUOnJ4KgbY7rwMSZlKkww0sp5iO+3Tt 792oGcOFa5Tt3Y0kPhD8mk9aBvtMWJDqOEgFrWiwSyhYKPJXgsm6obPbJ2GOlEX7 Bx6lAFPAIReKYPNWaHrdZW7Vz5zcvP2fvlNSgscjMuNc2qiBSGcxdfR5mGav+2qj crtxOqtIisxNkILgf3s/O+1imOUcuua73tDDvWCkPc7D/YcGFvtOc87bn6oqbyMd jaHGeN0K8NgqG2JTpl/OBXkhJUsUIDrM2WJHd+RYLm94A78uzBUycLhu5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNenDNHEusgm3zDwVGJFzg08FY0NMB8GA1UdIwQY MBaAFG0g3dOY2sj2LMElJjJfGCH7ck91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmIt MzZkZTY1NzIzMmJlLzEvMTZjTTBjUzZ5Q2JmTVBCVVlrWE9EVHdWalEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmItMzZkZTY1NzIzMmJl LzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLUL6MA0G CSqGSIb3DQEBCwUAA4IBAQAtMwIe3G5g6t5LmC4JhoZoXUebmM1lTxrosK4WrAxk O0qIDUn1FlmRpwZN4Ql46NWbEBZIZuDTlGWGHz0nR6X2qOj3JAp4NrNV3uPdCTW8 wSdAysW4FM7Q85srTGiqle+6cJN7GaA9rPAqgvXo2xnK1AU7YecJvjF8y/ay1Jzv bHUsdO4fTTJrKBtXBQZ2Hgl70dzHuZjEd8F+1rGk89QZZm+DVvQc/Zjtc8GWUmw0 e5PAGii2gxhHmRid7Dst7xCIuxSKK8hZYpe+Iewi8gB8U7ycIzTNEvdlh4y4aEIx VK88GcDbMhzDzTC6j8W5ldb7gCdHT5m5/Me/E2bkbuHh -----END CERTIFICATE-----Generated at Wed Jan 21 12:42:50 2026 by rpki-client