This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/sixxThEQTX1zUHOzyF4MB92-RaY.roa File: sixxThEQTX1zUHOzyF4MB92-RaY.roa (raw, json) Hash identifier: secsUzL3O2X6Ac6rYvaZ+cU3vmetNixtbbwwWKOjrmw= Subject key identifier: B2:2C:71:4E:11:10:4D:7D:73:50:73:B3:C8:5E:0C:07:DD:BE:45:A6 Certificate issuer: /CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759 Certificate serial: 019B77C73B1F8B76E89266BA33D4B20FA127 Authority key identifier: AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/sixxThEQTX1zUHOzyF4MB92-RaY.roa Signing time: Thu 01 Jan 2026 04:18:24 +0000 ROA not before: Thu 01 Jan 2026 04:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212384 IP address blocks: 45.91.32.0/24 maxlen: 24 45.91.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 07:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:3b:1f:8b:76:e8:92:66:ba:33:d4:b2:0f:a1:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759 Validity Not Before: Jan 1 04:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b22c714e11104d7d735073b3c85e0c07ddbe45a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:56:e0:f2:f9:a7:77:70:2f:67:e7:cc:58:91: 75:76:3f:67:f0:b9:68:45:b7:e8:b0:ce:be:20:25: 84:22:e0:36:9f:44:52:58:56:b0:9e:cf:c7:fc:2c: 73:e6:91:b8:93:d5:5b:c0:1e:32:00:a6:0b:61:f9: eb:20:52:c5:62:d8:08:ba:26:67:ec:31:93:11:cf: 2c:56:6d:95:c8:cd:0c:28:c3:84:85:fc:b3:2e:70: 8c:e6:0e:15:3f:84:0a:22:b4:1f:db:7c:4f:4f:9b: 5b:fe:11:d8:eb:14:05:76:b9:c9:22:12:cb:f5:10: 34:94:2d:18:3d:27:94:42:a6:04:b3:35:eb:c3:3e: fd:2c:ea:9d:6b:27:dd:4c:92:6d:80:f5:95:8d:76: ef:b0:c3:7d:52:56:28:37:45:ad:ec:7f:f5:a3:d5: 19:eb:58:4c:82:16:17:a5:8d:d6:bd:0a:03:01:64: 52:90:e8:93:a3:31:3d:c2:16:9e:20:76:89:1b:c9: 71:26:52:fa:d5:b2:0f:b5:12:84:c5:34:c8:65:d5: cc:04:2f:d6:61:c5:00:48:63:2e:75:08:06:25:fb: f8:13:f8:2d:4b:7b:7b:2a:24:8a:6d:84:39:bc:09: fd:e5:cc:59:37:13:47:e1:23:a6:e9:80:be:46:95: bd:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:2C:71:4E:11:10:4D:7D:73:50:73:B3:C8:5E:0C:07:DD:BE:45:A6 X509v3 Authority Key Identifier: keyid:AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/sixxThEQTX1zUHOzyF4MB92-RaY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.32.0/24 45.91.34.0/24 Signature Algorithm: sha256WithRSAEncryption 80:5d:66:c3:cb:d6:6e:99:4f:f8:58:3e:0a:7f:33:b5:5a:fa: 14:ec:86:e7:4a:37:82:1a:09:74:f9:2a:15:31:26:f9:75:70: 69:d5:cb:6b:cc:ca:12:40:04:02:e2:f6:cd:97:6b:cc:9c:83: b6:f0:7b:ae:eb:15:4b:a9:5f:5d:03:55:77:16:34:44:f9:11: 47:16:03:b1:be:f6:db:ae:71:f3:ef:7a:ac:3b:65:75:6b:f8: 88:98:9b:29:03:c0:d2:c5:9e:79:fb:ea:ab:b2:7c:ec:62:56: 6f:49:9a:ff:eb:6a:64:16:89:2d:2a:0c:77:2f:9d:34:60:65: 6c:2b:07:6d:f4:54:da:37:1a:6c:18:f1:2f:3c:b1:ff:14:2c: fd:cd:da:e4:ba:df:d5:f2:d8:c2:ff:09:c0:be:4f:8b:d5:57: a9:68:20:d2:b2:15:d1:64:d6:3e:b0:76:fb:af:93:59:6f:3c: d3:e4:90:38:06:d8:01:18:e6:e0:6c:ad:92:9e:3c:94:78:12: b6:74:52:22:33:6c:f3:b9:c7:88:97:c9:50:a4:42:7b:c8:e4: ac:26:fc:b3:1d:36:6e:e2:9b:b8:22:1b:a0:11:0a:24:1c:df: 4a:84:1c:26:d0:ac:a8:38:fb:00:86:d9:3e:aa:eb:b6:34:72: 49:46:ed:13 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xzsfi3bokma6M9SyD6EnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkNWMyZTc0YzZkNDZjYzczYzk4YTRjMTYwODdhOGEzYjNh NmY3NTkwHhcNMjYwMTAxMDQxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjJjNzE0ZTExMTA0ZDdkNzM1MDczYjNjODVlMGMwN2RkYmU0NWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlbg8vmnd3AvZ+fMWJF1dj9n8Llo RbfosM6+ICWEIuA2n0RSWFawns/H/Cxz5pG4k9VbwB4yAKYLYfnrIFLFYtgIuiZn 7DGTEc8sVm2VyM0MKMOEhfyzLnCM5g4VP4QKIrQf23xPT5tb/hHY6xQFdrnJIhLL 9RA0lC0YPSeUQqYEszXrwz79LOqdayfdTJJtgPWVjXbvsMN9UlYoN0Wt7H/1o9UZ 61hMghYXpY3WvQoDAWRSkOiTozE9whaeIHaJG8lxJlL61bIPtRKExTTIZdXMBC/W YcUASGMudQgGJfv4E/gtS3t7KiSKbYQ5vAn95cxZNxNH4SOm6YC+RpW91QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLIscU4REE19c1Bzs8heDAfdvkWmMB8GA1UdIwQY MBaAFK1cLnTG1GzHPJikwWCHqKOzpvdZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclZ3dWRNYlViTWM4bUtUQllJZW9vN09tOTFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC81ZGEzNzUtOTlhOS00MzI5LTlkMjkt Y2VjODkzMWNlNjMxLzEvc2l4eFRoRVFUWDF6VUhPenlGNE1COTItUmFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC81ZGEzNzUtOTlhOS00MzI5LTlkMjktY2VjODkzMWNlNjMx LzEvclZ3dWRNYlViTWM4bUtUQllJZW9vN09tOTFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVsgAwQA LVsiMA0GCSqGSIb3DQEBCwUAA4IBAQCAXWbDy9ZumU/4WD4KfzO1WvoU7IbnSjeC Ggl0+SoVMSb5dXBp1ctrzMoSQAQC4vbNl2vMnIO28Huu6xVLqV9dA1V3FjRE+RFH FgOxvvbbrnHz73qsO2V1a/iImJspA8DSxZ55++qrsnzsYlZvSZr/62pkFoktKgx3 L500YGVsKwdt9FTaNxpsGPEvPLH/FCz9zdrkut/V8tjC/wnAvk+L1VepaCDSshXR ZNY+sHb7r5NZbzzT5JA4BtgBGObgbK2SnjyUeBK2dFIiM2zzuceIl8lQpEJ7yOSs JvyzHTZu4pu4IhugEQokHN9KhBwm0KyoOPsAhtk+quu2NHJJRu0T -----END CERTIFICATE-----Generated at Fri Jan 2 14:43:17 2026 by rpki-client