This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/t6bgWVBAMnQHsK5r2oTi3Pvzdkc.roa File: t6bgWVBAMnQHsK5r2oTi3Pvzdkc.roa (raw, json) Hash identifier: npSTfZdobLVhOzYXz8kfeVJLC+pGSFhlOf01bVaK1r4= Subject key identifier: B7:A6:E0:59:50:40:32:74:07:B0:AE:6B:DA:84:E2:DC:FB:F3:76:47 Certificate issuer: /CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97 Certificate serial: 019B79ED09EFEC516ADA91137D1BC3AB7C73 Authority key identifier: BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/t6bgWVBAMnQHsK5r2oTi3Pvzdkc.roa Signing time: Thu 01 Jan 2026 14:18:56 +0000 ROA not before: Thu 01 Jan 2026 14:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400866 IP address blocks: 45.87.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:09:ef:ec:51:6a:da:91:13:7d:1b:c3:ab:7c:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97 Validity Not Before: Jan 1 14:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7a6e0595040327407b0ae6bda84e2dcfbf37647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8c:10:ef:79:9c:59:67:b2:f9:f6:f2:31:a4: b5:db:e2:11:f3:a8:30:08:86:77:85:dc:b1:a8:5c: 5d:de:37:cf:bb:9a:b1:c1:dd:f3:79:6b:0b:f9:a2: 5f:80:7d:15:93:3f:7a:c7:f9:ae:a0:3f:ca:4a:86: 03:8a:4c:15:0c:bd:e9:09:e1:0c:95:c2:1b:5b:6b: 3e:26:82:cb:b8:4d:21:41:a3:48:e4:12:14:9e:87: 3f:98:fc:a1:22:1a:4a:eb:f6:df:fb:eb:50:a0:ed: 33:f2:e2:e3:93:b4:a6:ca:1d:52:f6:e0:17:1b:b5: ee:63:4c:51:ab:85:83:8f:fb:77:a9:ff:3d:67:40: f5:e1:1f:a4:ff:80:cb:d6:88:02:2a:d3:30:b7:86: 8f:9b:ee:8d:26:6d:83:2a:75:ee:27:b6:9d:61:63: 0c:cd:62:bf:94:e8:bc:35:ec:ae:dd:d8:76:f7:74: f1:b4:4a:7f:52:89:d4:05:92:80:2e:43:f6:62:f8: d1:5c:cb:70:a1:df:9f:e0:9c:5e:37:e2:95:e5:e3: 05:98:a7:a5:73:db:d5:90:f5:53:63:29:3b:f7:50: 4c:16:f1:1e:78:56:21:e4:6f:40:41:75:1c:c1:c0: 17:80:e9:b4:8c:a9:66:87:ab:95:db:0c:c7:98:05: e8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A6:E0:59:50:40:32:74:07:B0:AE:6B:DA:84:E2:DC:FB:F3:76:47 X509v3 Authority Key Identifier: keyid:BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/t6bgWVBAMnQHsK5r2oTi3Pvzdkc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.87.100.0/24 Signature Algorithm: sha256WithRSAEncryption 19:46:05:2e:28:b5:20:cb:ba:9c:00:2f:fc:48:ec:eb:5a:c9: 81:4a:1c:1e:21:24:ad:11:e0:c0:5c:65:7e:2f:09:a3:51:c8: b2:c5:22:e6:93:1b:5c:a2:9a:99:e1:be:d5:49:7c:69:ea:2b: 6d:1a:9b:72:22:12:c8:61:f2:c9:2a:9c:88:94:f1:6a:74:c9: 19:af:60:1d:fc:b9:84:17:b4:38:e5:87:33:7c:fe:86:4e:ce: e1:96:d9:f4:43:55:48:11:11:33:ad:5a:30:57:67:01:c2:dc: 65:4e:03:6c:52:79:cb:d1:d0:ea:98:52:b5:98:51:3d:3b:5f: fe:b1:fd:7d:a1:2e:cb:89:8c:0a:a3:07:dd:c5:7e:52:78:da: e1:64:51:16:ee:56:8a:22:8f:77:45:99:ce:0a:d0:9c:0d:86: 01:52:76:cd:b5:2a:31:14:cf:ef:cf:e0:be:54:b3:4d:7a:03: 31:bd:9c:91:dd:35:7b:ab:64:c8:a1:ab:0b:36:c0:db:e6:00: e5:e1:c1:57:5a:dd:8d:9e:bd:ea:4b:6f:df:db:ff:ae:12:8d: 1b:f0:71:3e:1c:da:28:c6:25:d9:e3:32:06:57:b1:af:53:04: e9:b9:6c:17:5c:f1:62:6f:32:b4:26:31:8a:03:df:ae:e3:7c: 1d:aa:e2:81 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Qnv7FFq2pETfRvDq3xzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNDFhZGRjOWE0ZWVhMjQ2ZDQyZjk4YzdjNzJiMzBiNjhk NjdhOTcwHhcNMjYwMTAxMTQxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2E2ZTA1OTUwNDAzMjc0MDdiMGFlNmJkYTg0ZTJkY2ZiZjM3NjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIwQ73mcWWey+fbyMaS12+IR86gw CIZ3hdyxqFxd3jfPu5qxwd3zeWsL+aJfgH0Vkz96x/muoD/KSoYDikwVDL3pCeEM lcIbW2s+JoLLuE0hQaNI5BIUnoc/mPyhIhpK6/bf++tQoO0z8uLjk7Smyh1S9uAX G7XuY0xRq4WDj/t3qf89Z0D14R+k/4DL1ogCKtMwt4aPm+6NJm2DKnXuJ7adYWMM zWK/lOi8Neyu3dh293TxtEp/UonUBZKALkP2YvjRXMtwod+f4JxeN+KV5eMFmKel c9vVkPVTYyk791BMFvEeeFYh5G9AQXUcwcAXgOm0jKlmh6uV2wzHmAXojQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLem4FlQQDJ0B7Cua9qE4tz783ZHMB8GA1UdIwQY MBaAFL9BrdyaTuokbUL5jHxyswto1nqXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjBHdDNKcE82aVJ0UXZtTWZIS3pDMmpXZXBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83MGZjYjMtODMwMi00MWU0LTgzNmEt ZWVhZDUwOGJlNGVlLzEvdDZiZ1dWQkFNblFIc0s1cjJvVGkzUHZ6ZGtjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS83MGZjYjMtODMwMi00MWU0LTgzNmEtZWVhZDUwOGJlNGVl LzEvdjBHdDNKcE82aVJ0UXZtTWZIS3pDMmpXZXBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVdkMA0G CSqGSIb3DQEBCwUAA4IBAQAZRgUuKLUgy7qcAC/8SOzrWsmBShweISStEeDAXGV+ LwmjUciyxSLmkxtcopqZ4b7VSXxp6ittGptyIhLIYfLJKpyIlPFqdMkZr2Ad/LmE F7Q45YczfP6GTs7hltn0Q1VIEREzrVowV2cBwtxlTgNsUnnL0dDqmFK1mFE9O1/+ sf19oS7LiYwKowfdxX5SeNrhZFEW7laKIo93RZnOCtCcDYYBUnbNtSoxFM/vz+C+ VLNNegMxvZyR3TV7q2TIoasLNsDb5gDl4cFXWt2Nnr3qS2/f2/+uEo0b8HE+HNoo xiXZ4zIGV7GvUwTpuWwXXPFibzK0JjGKA9+u43wdquKB -----END CERTIFICATE-----Generated at Tue Jan 20 11:55:10 2026 by rpki-client