This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/bW01I_WsH-teQUBGCFJvPGXhqrI.roa File: bW01I_WsH-teQUBGCFJvPGXhqrI.roa (raw, json) Hash identifier: 28v+sIH0m9Zb7wNIUnBkENs9h7Iz2/gM6ZfNDpHszko= Subject key identifier: 6D:6D:35:23:F5:AC:1F:EB:5E:41:40:46:08:52:6F:3C:65:E1:AA:B2 Certificate issuer: /CN=ab975db4378dfca7c2953b86d3b18dc8b218ec6b Certificate serial: 019B783448FFACBE4666A4610BD87270EE7D Authority key identifier: AB:97:5D:B4:37:8D:FC:A7:C2:95:3B:86:D3:B1:8D:C8:B2:18:EC:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5ddtDeN_KfClTuG07GNyLIY7Gs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/bW01I_WsH-teQUBGCFJvPGXhqrI.roa Signing time: Thu 01 Jan 2026 06:17:31 +0000 ROA not before: Thu 01 Jan 2026 06:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208283 IP address blocks: 45.144.6.0/23 maxlen: 23 2a0e:e744::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.mft rsync://rpki.ripe.net/repository/DEFAULT/q5ddtDeN_KfClTuG07GNyLIY7Gs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:48:ff:ac:be:46:66:a4:61:0b:d8:72:70:ee:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab975db4378dfca7c2953b86d3b18dc8b218ec6b Validity Not Before: Jan 1 06:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d6d3523f5ac1feb5e41404608526f3c65e1aab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:66:e5:46:66:d8:9c:84:8a:4e:4f:0a:c9:f6: 1a:8d:d7:3e:45:59:76:86:6c:54:44:89:b2:aa:26: 10:89:9e:38:74:9d:e7:b9:57:ca:9b:ef:7d:e8:eb: bc:b8:4f:d4:ae:72:a1:43:f0:81:10:1b:2b:71:60: 51:51:6d:eb:8a:7a:2c:c7:06:0c:17:b2:68:b8:f7: ce:a6:12:06:24:1a:3b:89:98:4f:a3:55:42:97:d5: 08:ca:a8:65:df:1e:d1:40:76:6f:8e:63:35:97:2a: 56:50:ca:36:8a:95:6d:ca:67:fe:66:1b:46:a8:41: 2b:7a:e3:89:b5:fd:49:0c:82:03:a0:e7:dc:7d:0e: c3:fe:64:2b:90:5f:d1:33:5f:71:a4:ee:8c:3f:30: 5c:9a:34:c4:c5:96:d0:17:77:48:54:f1:92:f9:4a: bb:4e:2b:b6:42:5c:36:90:58:f4:98:91:67:04:fd: f4:f9:f9:54:ab:ce:82:4f:7d:c3:8f:3f:da:f0:b9: 55:74:46:f4:f4:8d:dc:f9:c0:5c:af:12:7a:33:d3: 52:26:9f:be:51:fb:4a:08:b8:19:3b:eb:96:98:2e: cf:a2:c3:ca:2a:11:98:66:ad:d4:38:0e:b2:ea:61: 54:7a:f0:22:43:9b:c1:ae:e4:f5:e2:30:3b:f6:e3: e9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:6D:35:23:F5:AC:1F:EB:5E:41:40:46:08:52:6F:3C:65:E1:AA:B2 X509v3 Authority Key Identifier: keyid:AB:97:5D:B4:37:8D:FC:A7:C2:95:3B:86:D3:B1:8D:C8:B2:18:EC:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5ddtDeN_KfClTuG07GNyLIY7Gs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/bW01I_WsH-teQUBGCFJvPGXhqrI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.144.6.0/23 IPv6: 2a0e:e744::/30 Signature Algorithm: sha256WithRSAEncryption 1d:e4:4c:c4:bc:10:55:dd:a4:39:01:04:1c:ec:36:04:96:49: 5d:8c:a3:b6:ca:18:3a:29:05:53:8e:f1:92:5f:47:28:7a:14: eb:60:b1:22:46:0c:ff:bd:d2:af:77:31:cf:9a:8d:9d:6d:94: c3:34:c0:85:3f:c1:13:55:eb:a0:4f:d8:4c:a8:bf:15:d9:d5: b6:0b:2b:28:c7:58:88:30:38:69:a0:84:ce:29:a3:87:3b:91: 41:d3:f6:81:b5:b1:67:06:35:b5:ed:9c:e1:0c:d6:3d:ac:f3: 7b:93:34:70:1a:fe:0d:90:ac:68:5b:e2:e9:ec:20:65:5f:00: 0f:de:99:b2:50:5a:85:f3:6a:4f:98:70:41:02:63:7a:c6:91: db:cd:56:8d:dd:18:d4:29:96:6d:80:d6:ef:c6:c2:26:fa:23: 89:dc:56:bb:73:1c:3c:8b:19:db:31:fa:2b:29:51:44:d3:f7: 19:5c:db:a8:4d:f8:35:02:5f:a2:bf:a7:a3:f4:7c:c4:09:44: 4d:1e:0a:58:20:5c:2b:1a:dd:45:26:a1:60:ec:ea:02:0d:ec: 08:97:d4:7f:43:63:0c:46:e4:e2:1f:3c:39:27:7b:6c:60:04: 58:d3:26:fd:b3:27:ec:75:0f:79:1c:34:f4:1f:39:09:18:93: 23:f3:8b:4a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NEj/rL5GZqRhC9hycO59MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiOTc1ZGI0Mzc4ZGZjYTdjMjk1M2I4NmQzYjE4ZGM4YjIx OGVjNmIwHhcNMjYwMTAxMDYxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDZkMzUyM2Y1YWMxZmViNWU0MTQwNDYwODUyNmYzYzY1ZTFhYWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmblRmbYnISKTk8KyfYajdc+RVl2 hmxURImyqiYQiZ44dJ3nuVfKm+996Ou8uE/UrnKhQ/CBEBsrcWBRUW3rinosxwYM F7JouPfOphIGJBo7iZhPo1VCl9UIyqhl3x7RQHZvjmM1lypWUMo2ipVtymf+ZhtG qEEreuOJtf1JDIIDoOfcfQ7D/mQrkF/RM19xpO6MPzBcmjTExZbQF3dIVPGS+Uq7 Tiu2Qlw2kFj0mJFnBP30+flUq86CT33Djz/a8LlVdEb09I3c+cBcrxJ6M9NSJp++ UftKCLgZO+uWmC7PosPKKhGYZq3UOA6y6mFUevAiQ5vBruT14jA79uPpHQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFG1tNSP1rB/rXkFARghSbzxl4aqyMB8GA1UdIwQY MBaAFKuXXbQ3jfynwpU7htOxjciyGOxrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTVkZHREZU5fS2ZDbFR1RzA3R055TElZN0dzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8xYzg2MDUtMTYzZS00MjQ1LWFmMTIt Y2RiZDU1NmUxNzQ5LzEvYlcwMUlfV3NILXRlUVVCR0NGSnZQR1hocXJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy8xYzg2MDUtMTYzZS00MjQ1LWFmMTItY2RiZDU1NmUxNzQ5 LzEvcTVkZHREZU5fS2ZDbFR1RzA3R055TElZN0dzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBLZAGMA0E AgACMAcDBQIqDudEMA0GCSqGSIb3DQEBCwUAA4IBAQAd5EzEvBBV3aQ5AQQc7DYE lkldjKO2yhg6KQVTjvGSX0coehTrYLEiRgz/vdKvdzHPmo2dbZTDNMCFP8ETVeug T9hMqL8V2dW2Cysox1iIMDhpoITOKaOHO5FB0/aBtbFnBjW17ZzhDNY9rPN7kzRw Gv4NkKxoW+Lp7CBlXwAP3pmyUFqF82pPmHBBAmN6xpHbzVaN3RjUKZZtgNbvxsIm +iOJ3Fa7cxw8ixnbMforKVFE0/cZXNuoTfg1Al+iv6ej9HzECURNHgpYIFwrGt1F JqFg7OoCDewIl9R/Q2MMRuTiHzw5J3tsYARY0yb9syfsdQ95HDT0HzkJGJMj84tK -----END CERTIFICATE-----Generated at Mon Feb 9 23:55:36 2026 by rpki-client