This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/ss6U1tNQdNHFW2wqOtGuWXdVM3M.roa File: ss6U1tNQdNHFW2wqOtGuWXdVM3M.roa (raw, json) Hash identifier: tSiTO6yDRAIQsy5WtIzLLZhVooXPe24VpQj0dC7vdzo= Subject key identifier: B2:CE:94:D6:D3:50:74:D1:C5:5B:6C:2A:3A:D1:AE:59:77:55:33:73 Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Certificate serial: 019B7E382C11C6A407EDD06FDC4CBCE9624E Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/ss6U1tNQdNHFW2wqOtGuWXdVM3M.roa Signing time: Fri 02 Jan 2026 10:19:29 +0000 ROA not before: Fri 02 Jan 2026 10:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63023 IP address blocks: 5.8.18.0/24 maxlen: 24 5.101.81.0/24 maxlen: 24 5.101.82.0/24 maxlen: 24 5.101.83.0/24 maxlen: 24 5.101.84.0/24 maxlen: 24 5.101.85.0/24 maxlen: 24 46.161.0.0/24 maxlen: 24 146.185.233.0/24 maxlen: 24 146.185.239.0/24 maxlen: 24 193.93.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:2c:11:c6:a4:07:ed:d0:6f:dc:4c:bc:e9:62:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Validity Not Before: Jan 2 10:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b2ce94d6d35074d1c55b6c2a3ad1ae5977553373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2f:e1:b6:63:7f:35:fb:61:25:be:78:b2:69: 7e:eb:0b:93:d3:90:67:5d:5e:a6:6d:e4:a9:82:5d: 29:6a:a1:80:77:f9:ae:45:27:62:ab:75:62:cc:55: e5:5c:81:c9:0e:76:7b:1d:83:01:0f:2e:e1:9c:15: 05:85:92:44:66:8b:e6:d9:94:cb:cc:dd:92:d5:75: c8:d7:33:45:3a:38:8d:02:e1:9b:25:f6:e0:6f:27: b5:1b:b8:d4:3d:bf:95:eb:ae:2d:29:69:3a:38:ed: 3e:15:a7:b8:17:c5:33:dc:3c:e6:5d:5c:ba:36:67: 03:c5:07:61:de:ad:ef:b7:4d:20:52:3b:8f:56:62: 0c:01:ea:c6:cc:a2:6f:f3:61:79:99:91:18:b5:07: 64:2f:97:2e:8a:cf:8e:86:c6:2f:09:11:49:a3:11: db:42:4e:18:73:92:fd:1f:77:2f:51:34:52:3e:b3: db:04:53:fb:5f:6f:99:ef:dc:d7:92:ee:2f:88:19: 4d:e1:9f:b7:18:f6:24:58:cd:9b:26:50:39:5c:3a: cf:25:3e:b7:53:c6:86:b7:dc:83:93:c5:56:e4:44: 40:4f:3a:fc:b7:b5:62:23:bf:f2:c5:97:f0:a1:7a: e3:4a:42:a7:b7:23:94:e7:31:05:99:13:87:a9:07: ef:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:CE:94:D6:D3:50:74:D1:C5:5B:6C:2A:3A:D1:AE:59:77:55:33:73 X509v3 Authority Key Identifier: keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/ss6U1tNQdNHFW2wqOtGuWXdVM3M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.8.18.0/24 5.101.81.0-5.101.85.255 46.161.0.0/24 146.185.233.0/24 146.185.239.0/24 193.93.192.0/24 Signature Algorithm: sha256WithRSAEncryption 98:3d:5c:1a:50:3f:65:0a:d0:b0:8e:8d:56:f5:81:e9:bf:f7: 50:73:f9:d9:74:22:c0:bd:6e:19:c3:55:f2:4e:98:3e:e9:44: f6:14:cb:1a:d8:41:59:c9:6e:52:19:5d:af:f1:c6:08:0f:5c: 2f:8e:71:e2:52:18:8e:a8:2b:9c:7b:ea:6e:23:ee:fe:73:fe: 2d:e2:12:1d:17:d0:51:98:39:36:1d:3a:e7:e8:95:26:ec:06: dc:57:3c:1f:29:3b:2d:90:47:b9:5e:9d:6a:6e:76:5c:80:52: 49:e4:04:a4:90:70:1d:fc:bd:4e:16:42:b0:fc:0e:23:a6:26: 12:ee:df:98:11:fd:53:92:4f:f6:7d:62:0e:74:a5:17:d3:28: 9b:43:2c:4d:47:c9:9a:03:d4:d4:04:0b:15:a0:4a:d3:fb:b9: d8:6a:f4:72:4d:41:98:cc:95:52:d4:6a:fa:16:b6:64:86:50: 50:95:d5:ef:d4:1c:ff:dd:7f:f6:2a:be:9f:27:24:89:24:ef: 73:ea:f9:2f:8f:b1:36:a0:4e:e9:43:c0:10:5e:83:ac:31:15: 35:6a:d4:cd:00:60:8f:9a:fd:d5:7d:51:47:d8:40:88:fc:38: b4:1f:3f:2d:c0:5b:c1:03:bf:d6:52:81:e4:a7:3f:a6:66:ec: bc:52:a9:4c -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt+OCwRxqQH7dBv3Ey86WJOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl Y2EwNzEwHhcNMjYwMTAyMTAxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMmNlOTRkNmQzNTA3NGQxYzU1YjZjMmEzYWQxYWU1OTc3NTUzMzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxS/htmN/NfthJb54sml+6wuT05Bn XV6mbeSpgl0paqGAd/muRSdiq3VizFXlXIHJDnZ7HYMBDy7hnBUFhZJEZovm2ZTL zN2S1XXI1zNFOjiNAuGbJfbgbye1G7jUPb+V664tKWk6OO0+Fae4F8Uz3DzmXVy6 NmcDxQdh3q3vt00gUjuPVmIMAerGzKJv82F5mZEYtQdkL5cuis+OhsYvCRFJoxHb Qk4Yc5L9H3cvUTRSPrPbBFP7X2+Z79zXku4viBlN4Z+3GPYkWM2bJlA5XDrPJT63 U8aGt9yDk8VW5ERATzr8t7ViI7/yxZfwoXrjSkKntyOU5zEFmROHqQfvowIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFLLOlNbTUHTRxVtsKjrRrll3VTNzMB8GA1UdIwQY MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt ODlkMDkyNDBjNDNiLzEvc3M2VTF0TlFkTkhGVzJ3cU90R3VXWGRWTTNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQABQgSMAwD BAAFZVEDBAEFZVQDBAAuoQADBACSuekDBACSue8DBADBXcAwDQYJKoZIhvcNAQEL BQADggEBAJg9XBpQP2UK0LCOjVb1gem/91Bz+dl0IsC9bhnDVfJOmD7pRPYUyxrY QVnJblIZXa/xxggPXC+OceJSGI6oK5x76m4j7v5z/i3iEh0X0FGYOTYdOufolSbs BtxXPB8pOy2QR7lenWpudlyAUknkBKSQcB38vU4WQrD8DiOmJhLu35gR/VOST/Z9 Yg50pRfTKJtDLE1HyZoD1NQECxWgStP7udhq9HJNQZjMlVLUavoWtmSGUFCV1e/U HP/df/Yqvp8nJIkk73Pq+S+PsTagTulDwBBeg6wxFTVq1M0AYI+a/dV9UUfYQIj8 OLQfPy3AW8EDv9ZSgeSnP6Zm7LxSqUw= -----END CERTIFICATE-----Generated at Mon Jan 19 18:02:46 2026 by rpki-client