This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/G6NThMBREhLa53fkZ6P5ulaKQSs.roa File: G6NThMBREhLa53fkZ6P5ulaKQSs.roa (raw, json) Hash identifier: nq58Q0f4P6XNFgEzUDpyUxQlJR4ZSwEA+qGwg8fqrzI= Subject key identifier: 1B:A3:53:84:C0:51:12:12:DA:E7:77:E4:67:A3:F9:BA:56:8A:41:2B Certificate issuer: /CN=661691ca9c58d0859b6b870230b0f581be66a58a Certificate serial: 019B0CED30833CF28315A66127C4CBD332B6 Authority key identifier: 66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/G6NThMBREhLa53fkZ6P5ulaKQSs.roa Signing time: Thu 11 Dec 2025 10:20:29 +0000 ROA not before: Thu 11 Dec 2025 10:20:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 46873 IP address blocks: 45.84.193.0/24 maxlen: 24 45.84.194.0/24 maxlen: 24 45.84.195.0/24 maxlen: 24 45.153.108.0/24 maxlen: 24 45.153.109.0/24 maxlen: 24 45.153.110.0/24 maxlen: 24 45.153.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:ed:30:83:3c:f2:83:15:a6:61:27:c4:cb:d3:32:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=661691ca9c58d0859b6b870230b0f581be66a58a Validity Not Before: Dec 11 10:20:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1ba35384c0511212dae777e467a3f9ba568a412b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9d:bf:4c:7f:1f:64:c3:93:93:66:c2:e1:90: f9:fc:90:ed:e9:b9:cc:89:ed:a7:cc:cd:7c:e8:07: 0f:0d:1a:74:bd:55:8c:03:84:40:8d:e1:54:09:1f: 07:ef:36:17:af:ea:03:c5:df:d3:5e:44:dc:ce:d9: 0a:b8:03:c6:32:b2:e9:c6:65:6b:11:10:24:a3:c3: 8e:93:c0:e7:f6:dc:55:e5:51:58:8c:44:69:e1:4f: 0d:32:9b:60:83:40:cf:b3:bb:60:64:d9:1d:4d:f1: be:2d:51:1d:17:b0:9b:70:48:e8:93:a9:f3:74:ef: 8f:90:17:89:3a:ba:bd:18:e8:ff:44:d2:1b:7e:44: 4c:86:ec:c2:2d:2b:87:f3:9c:a9:c1:46:90:5a:73: 6f:fe:96:8c:f7:57:fe:c5:b2:c7:ba:82:6c:50:db: 8b:d7:98:32:3f:76:95:2c:9e:1e:3a:23:3a:10:8e: 35:01:cc:45:89:c1:1c:62:c3:92:95:8d:e8:49:b9: 82:07:6b:bc:d5:d7:39:d3:40:28:e4:7a:f4:a5:32: b0:08:fa:62:08:66:bf:d8:23:36:c0:a0:74:46:1a: 97:5b:46:aa:a2:ab:19:23:c1:c9:0b:c7:6e:2b:da: 42:fe:80:f3:0e:8f:62:0f:07:4c:06:80:82:42:c4: 54:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A3:53:84:C0:51:12:12:DA:E7:77:E4:67:A3:F9:BA:56:8A:41:2B X509v3 Authority Key Identifier: keyid:66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/G6NThMBREhLa53fkZ6P5ulaKQSs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.84.193.0-45.84.195.255 45.153.108.0/22 Signature Algorithm: sha256WithRSAEncryption 94:e7:da:26:3e:d2:7d:2a:7f:ee:17:7c:9d:8a:4d:48:1a:c1: cc:2b:42:95:58:76:43:8d:da:49:e9:26:f4:03:94:e9:7b:4f: 86:9b:4a:c9:04:09:a8:54:03:5b:61:34:35:ea:d8:ed:24:26: de:59:67:02:a4:47:8b:90:9e:62:b7:0f:38:ac:40:0e:e6:7f: b0:3d:40:bd:f8:63:59:a2:f1:1f:30:14:65:86:c1:9b:e5:fd: 99:1a:c2:a4:21:d6:a1:dd:77:c5:ec:38:76:c0:81:18:e7:e2: 76:bd:ae:4b:42:9d:9d:16:27:3d:fb:89:5f:45:02:ed:c4:af: 58:03:2b:de:b8:7a:60:da:91:fb:a6:e4:ca:2c:9b:92:ea:81: 75:5b:af:03:4a:07:13:b0:44:fa:b6:a9:5d:c1:15:1e:49:88: 78:38:11:25:55:f2:ba:58:15:f6:6b:24:73:65:de:4d:e1:23: 1d:e3:4d:45:45:b4:07:d3:57:82:8c:28:1b:d4:bb:5b:ed:38: 8f:a3:28:7e:59:dc:be:ee:b4:66:4f:1d:20:33:1e:0c:c3:b9: 23:44:7d:bf:fd:b4:a5:f1:d1:a6:e9:28:a2:aa:40:29:4d:9f: 5e:08:f3:14:f5:30:39:23:b6:be:bf:a6:17:97:42:60:ba:9d: 66:e8:27:71 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZsM7TCDPPKDFaZhJ8TL0zK2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2MTY5MWNhOWM1OGQwODU5YjZiODcwMjMwYjBmNTgxYmU2 NmE1OGEwHhcNMjUxMjExMTAyMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmEzNTM4NGMwNTExMjEyZGFlNzc3ZTQ2N2EzZjliYTU2OGE0MTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwp2/TH8fZMOTk2bC4ZD5/JDt6bnM ie2nzM186AcPDRp0vVWMA4RAjeFUCR8H7zYXr+oDxd/TXkTcztkKuAPGMrLpxmVr ERAko8OOk8Dn9txV5VFYjERp4U8NMptgg0DPs7tgZNkdTfG+LVEdF7CbcEjok6nz dO+PkBeJOrq9GOj/RNIbfkRMhuzCLSuH85ypwUaQWnNv/paM91f+xbLHuoJsUNuL 15gyP3aVLJ4eOiM6EI41AcxFicEcYsOSlY3oSbmCB2u81dc500Ao5Hr0pTKwCPpi CGa/2CM2wKB0RhqXW0aqoqsZI8HJC8duK9pC/oDzDo9iDwdMBoCCQsRUqQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFBujU4TAURIS2ud35Gej+bpWikErMB8GA1UdIwQY MBaAFGYWkcqcWNCFm2uHAjCw9YG+ZqWKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmhhUnlweFkwSVdiYTRjQ01MRDFnYjVtcFlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS84ZjAyNTktOWJjOC00ZmRjLTkyNmQt MWE4MGRhZmZkNzk2LzEvRzZOVGhNQlJFaExhNTNma1o2UDV1bGFLUVNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS84ZjAyNTktOWJjOC00ZmRjLTkyNmQtMWE4MGRhZmZkNzk2 LzEvWmhhUnlweFkwSVdiYTRjQ01MRDFnYjVtcFlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAAtVMED BAItVMADBAItmWwwDQYJKoZIhvcNAQELBQADggEBAJTn2iY+0n0qf+4XfJ2KTUga wcwrQpVYdkON2knpJvQDlOl7T4abSskECahUA1thNDXq2O0kJt5ZZwKkR4uQnmK3 DzisQA7mf7A9QL34Y1mi8R8wFGWGwZvl/ZkawqQh1qHdd8XsOHbAgRjn4na9rktC nZ0WJz37iV9FAu3Er1gDK964emDakfum5Mosm5LqgXVbrwNKBxOwRPq2qV3BFR5J iHg4ESVV8rpYFfZrJHNl3k3hIx3jTUVFtAfTV4KMKBvUu1vtOI+jKH5Z3L7utGZP HSAzHgzDuSNEfb/9tKXx0abpKKKqQClNn14I8xT1MDkjtr6/pheXQmC6nWboJ3E= -----END CERTIFICATE-----Generated at Sun Dec 14 21:34:28 2025 by rpki-client