This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/6sDEpQA35ftQgC9cRb2aUxRe15M.roa File: 6sDEpQA35ftQgC9cRb2aUxRe15M.roa (raw, json) Hash identifier: 9RYUADj24edFkxjz1HOYfztJjRAg3gUE9hiqhdU7LFs= Subject key identifier: EA:C0:C4:A5:00:37:E5:FB:50:80:2F:5C:45:BD:9A:53:14:5E:D7:93 Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27 Certificate serial: 019B78A2E20B63CC7C37C2C1E40643E24CE0 Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/6sDEpQA35ftQgC9cRb2aUxRe15M.roa Signing time: Thu 01 Jan 2026 08:18:19 +0000 ROA not before: Thu 01 Jan 2026 08:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203144 IP address blocks: 45.15.209.0/24 maxlen: 24 45.86.190.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:e2:0b:63:cc:7c:37:c2:c1:e4:06:43:e2:4c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27 Validity Not Before: Jan 1 08:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eac0c4a50037e5fb50802f5c45bd9a53145ed793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:97:ec:c0:70:4d:c5:00:71:bb:3c:75:48:18: df:2e:5b:06:8b:c7:bf:05:6c:f3:b3:da:f8:da:d5: 79:26:3d:d3:80:d7:bb:38:48:be:67:0e:ca:4b:3b: 09:5e:fe:cf:08:37:3d:f1:a1:2b:8c:b1:e7:a9:fd: 9c:0c:a0:bb:07:cd:e2:f2:f9:31:e6:f7:c8:23:72: 22:b8:48:09:34:77:28:c2:41:e5:8d:ff:54:7f:f2: 6e:09:15:cb:96:4c:06:cf:96:5b:db:05:7f:9b:55: a4:7c:5c:77:66:5d:c0:ab:0a:6b:14:6d:fd:2c:79: 81:1f:b3:f8:f7:10:89:ee:80:dc:ed:8d:e7:bd:f4: c4:0d:93:24:2a:18:2c:88:06:91:ba:56:77:01:2e: d8:3a:75:a4:e6:7a:44:3e:7e:01:92:53:ee:2e:a4: ba:a9:f6:5c:62:ff:ff:ac:22:07:97:ff:2b:43:01: bf:69:03:c5:ef:16:65:7b:f2:50:59:5a:59:9a:f0: 7e:cf:52:69:56:06:b6:50:55:88:26:3b:00:f3:61: fb:d3:d8:ea:79:ab:9e:48:f8:1f:ea:c6:58:db:4d: d2:f2:5a:83:42:f8:dc:45:89:9d:cc:24:d5:d2:89: cc:5b:bc:f7:e1:ea:82:bb:c4:fb:e7:04:d8:c3:ba: d4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C0:C4:A5:00:37:E5:FB:50:80:2F:5C:45:BD:9A:53:14:5E:D7:93 X509v3 Authority Key Identifier: keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/6sDEpQA35ftQgC9cRb2aUxRe15M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.209.0/24 45.86.190.0/23 Signature Algorithm: sha256WithRSAEncryption 4b:16:2a:fd:0f:c3:72:a9:bb:44:74:42:0c:c5:30:fe:af:bb: 0e:60:82:f3:aa:dd:be:95:2b:c3:5f:96:34:c6:62:22:79:d2: d2:ac:26:fb:c2:05:22:70:88:2e:47:b9:09:7c:47:5a:bd:f0: a1:5a:4a:58:e0:b6:d7:4d:ea:a6:51:b1:9f:c5:eb:20:7f:8d: a9:30:39:ed:32:37:89:0c:f8:c5:c2:da:96:6a:e7:0a:0e:8c: 6e:2c:17:68:6e:5c:49:40:df:3b:e6:ff:23:88:56:a8:cc:01: 75:74:16:a0:b6:0d:c0:da:6c:b3:ef:b9:bb:7c:a3:d8:c1:78: 8f:c1:b9:98:6d:a0:3d:48:42:37:21:27:8b:6e:69:c9:18:62: 0d:d7:81:f0:90:d4:fa:82:f5:a9:fe:6c:0d:fc:11:2f:d1:5e: c2:cf:ad:86:f8:b7:15:14:ca:65:a2:eb:df:be:eb:8d:e5:51: 6e:0d:46:52:90:59:c7:75:c0:2f:c3:9d:bf:35:e8:84:6a:2d: 3e:d9:36:77:83:a0:05:c1:b8:d3:ee:63:66:93:dc:10:95:7f: a2:ef:54:36:36:a2:48:3b:84:ea:13:01:94:51:26:84:eb:6c: 7a:52:2c:c9:e5:e0:d8:35:b4:af:66:21:d6:c1:73:0b:c7:e5: 62:c8:14:61 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4ouILY8x8N8LB5AZD4kzgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NjhhMTk5MmJiODAzN2RkZTgxZDBjOGNkYzA2OTVmY2Vl MTdjMjcwHhcNMjYwMTAxMDgxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWMwYzRhNTAwMzdlNWZiNTA4MDJmNWM0NWJkOWE1MzE0NWVkNzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopfswHBNxQBxuzx1SBjfLlsGi8e/ BWzzs9r42tV5Jj3TgNe7OEi+Zw7KSzsJXv7PCDc98aErjLHnqf2cDKC7B83i8vkx 5vfII3IiuEgJNHcowkHljf9Uf/JuCRXLlkwGz5Zb2wV/m1WkfFx3Zl3AqwprFG39 LHmBH7P49xCJ7oDc7Y3nvfTEDZMkKhgsiAaRulZ3AS7YOnWk5npEPn4BklPuLqS6 qfZcYv//rCIHl/8rQwG/aQPF7xZle/JQWVpZmvB+z1JpVga2UFWIJjsA82H709jq eaueSPgf6sZY203S8lqDQvjcRYmdzCTV0onMW7z34eqCu8T75wTYw7rUuwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOrAxKUAN+X7UIAvXEW9mlMUXteTMB8GA1UdIwQY MBaAFJhooZkruAN93oHQyM3AaV/O4XwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2It ZDc4ZDU2MzFkN2Y2LzEvNnNERXBRQTM1ZnRRZ0M5Y1JiMmFVeFJlMTVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2ItZDc4ZDU2MzFkN2Y2 LzEvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALQ/RAwQB LVa+MA0GCSqGSIb3DQEBCwUAA4IBAQBLFir9D8NyqbtEdEIMxTD+r7sOYILzqt2+ lSvDX5Y0xmIiedLSrCb7wgUicIguR7kJfEdavfChWkpY4LbXTeqmUbGfxesgf42p MDntMjeJDPjFwtqWaucKDoxuLBdoblxJQN875v8jiFaozAF1dBagtg3A2myz77m7 fKPYwXiPwbmYbaA9SEI3ISeLbmnJGGIN14HwkNT6gvWp/mwN/BEv0V7Cz62G+LcV FMplouvfvuuN5VFuDUZSkFnHdcAvw52/NeiEai0+2TZ3g6AFwbjT7mNmk9wQlX+i 71Q2NqJIO4TqEwGUUSaE62x6UizJ5eDYNbSvZiHWwXMLx+ViyBRh -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:07 2026 by rpki-client