This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/V6Z6Goo5TXBDLwqz844lmCz1Yxo.roa File: V6Z6Goo5TXBDLwqz844lmCz1Yxo.roa (raw, json) Hash identifier: dZrqBBdSf/D7f7K3sMbhBK+TSGUDYD/ticT8Ua3xnyQ= Subject key identifier: 57:A6:7A:1A:8A:39:4D:70:43:2F:0A:B3:F3:8E:25:98:2C:F5:63:1A Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B7DCB665BB888970B0D8D55BCF3F78FBF Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/V6Z6Goo5TXBDLwqz844lmCz1Yxo.roa Signing time: Fri 02 Jan 2026 08:20:40 +0000 ROA not before: Fri 02 Jan 2026 08:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48433 IP address blocks: 45.151.28.0/24 maxlen: 24 185.201.29.0/24 maxlen: 24 185.201.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:66:5b:b8:88:97:0b:0d:8d:55:bc:f3:f7:8f:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 2 08:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=57a67a1a8a394d70432f0ab3f38e25982cf5631a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:03:78:f6:be:c6:b2:9d:85:51:1e:e5:a9:73: 1a:d2:59:7e:42:1d:e2:81:bc:a1:71:e7:e6:be:80: 3e:ce:29:5d:19:79:fe:57:bd:57:ca:ae:3c:95:60: e9:1f:6b:3a:25:fb:b9:96:66:77:64:43:ba:f3:7a: 61:ca:c5:13:32:e3:cf:d6:91:63:df:d5:74:2c:db: 4b:48:d5:25:a2:ca:f6:07:c6:4d:73:51:29:a3:8f: 30:20:5e:1c:a7:e2:92:06:aa:6d:81:8a:02:82:66: e0:69:fc:ef:10:75:f1:cb:10:53:e4:30:92:94:71: ac:2d:d2:83:cf:12:08:c4:46:1e:17:81:22:ef:fe: b4:b8:20:40:e6:67:c8:a5:75:4f:51:12:45:44:f5: 72:8d:b7:10:1f:01:ac:aa:04:19:6c:a3:41:5a:95: a7:29:c8:fa:e2:50:48:cd:9f:ef:69:2b:c8:e4:3b: 0d:14:ed:59:23:02:ed:b8:d9:45:d3:bf:65:37:5b: e5:cf:49:16:3b:73:f2:fd:4f:fc:0e:15:c2:3f:0a: 5c:c7:7b:2e:4b:2c:b4:e8:66:70:94:19:08:22:ec: ad:b1:5f:07:40:05:a6:44:df:aa:86:18:0f:7e:4d: 32:f7:b7:f6:c0:6d:d1:17:54:e0:37:e1:1c:34:83: 2e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:A6:7A:1A:8A:39:4D:70:43:2F:0A:B3:F3:8E:25:98:2C:F5:63:1A X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/V6Z6Goo5TXBDLwqz844lmCz1Yxo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.151.28.0/24 185.201.29.0-185.201.30.255 Signature Algorithm: sha256WithRSAEncryption 69:72:27:2b:dc:84:38:08:a7:a3:9f:d2:62:a8:5e:26:d9:b2: c1:d9:b5:44:7f:a9:1d:ca:d3:39:a9:e5:70:e6:10:85:c8:47: 7c:10:bb:bd:56:7b:c5:a7:a0:ee:e8:8e:74:a6:2e:cf:66:bb: e4:2d:58:80:3e:ed:6f:f0:91:e1:49:29:23:23:b9:5b:5c:61: 3a:57:f8:b6:21:67:a2:d5:5b:2a:17:8e:c0:b8:72:bc:15:57: 96:00:65:55:11:e0:03:64:e8:7c:c1:bf:b1:7e:c6:29:ef:81: 55:6a:01:c4:72:ca:71:66:a4:02:7a:31:6c:2a:7c:26:ee:a3: 7a:a6:ad:de:7f:7d:9e:19:ba:8b:6d:6d:66:77:da:a2:d2:24: 73:a7:97:00:49:8f:70:0b:08:b8:33:14:83:e3:c6:cd:49:a9: 50:54:dc:a8:39:78:e5:0b:b1:6a:da:93:e7:e5:1b:fb:1d:d0: ba:ea:9c:68:75:12:bb:1f:9e:88:cb:e7:fa:e4:d7:81:47:32: 84:47:51:8b:05:a1:14:8a:6e:24:0a:60:02:4e:55:56:82:ff: 96:e3:bd:9c:f4:8e:0c:79:bd:af:a2:8e:36:25:07:fd:29:3a: 1c:9b:dc:94:c0:11:2e:0b:48:dc:fd:f0:0f:5f:b4:23:05:75: 30:82:81:56 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt9y2ZbuIiXCw2NVbzz94+/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTAyMDgyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1N2E2N2ExYThhMzk0ZDcwNDMyZjBhYjNmMzhlMjU5ODJjZjU2MzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9AN49r7Gsp2FUR7lqXMa0ll+Qh3i gbyhcefmvoA+zildGXn+V71Xyq48lWDpH2s6Jfu5lmZ3ZEO683physUTMuPP1pFj 39V0LNtLSNUlosr2B8ZNc1Epo48wIF4cp+KSBqptgYoCgmbgafzvEHXxyxBT5DCS lHGsLdKDzxIIxEYeF4Ei7/60uCBA5mfIpXVPURJFRPVyjbcQHwGsqgQZbKNBWpWn Kcj64lBIzZ/vaSvI5DsNFO1ZIwLtuNlF079lN1vlz0kWO3Py/U/8DhXCPwpcx3su Syy06GZwlBkIIuytsV8HQAWmRN+qhhgPfk0y97f2wG3RF1TgN+EcNIMuqQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFFemehqKOU1wQy8Ks/OOJZgs9WMaMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvVjZaNkdvbzVUWEJETHdxejg0NGxtQ3oxWXhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQALZccMAwD BAC5yR0DBAC5yR4wDQYJKoZIhvcNAQELBQADggEBAGlyJyvchDgIp6Of0mKoXibZ ssHZtUR/qR3K0zmp5XDmEIXIR3wQu71We8WnoO7ojnSmLs9mu+QtWIA+7W/wkeFJ KSMjuVtcYTpX+LYhZ6LVWyoXjsC4crwVV5YAZVUR4ANk6HzBv7F+xinvgVVqAcRy ynFmpAJ6MWwqfCbuo3qmrd5/fZ4ZuottbWZ32qLSJHOnlwBJj3ALCLgzFIPjxs1J qVBU3Kg5eOULsWrak+flG/sd0LrqnGh1ErsfnojL5/rk14FHMoRHUYsFoRSKbiQK YAJOVVaC/5bjvZz0jgx5va+ijjYlB/0pOhyb3JTAES4LSNz98A9ftCMFdTCCgVY= -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:48 2026 by rpki-client