This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/w6-yoWhkYNbyEBACmmC18dzQRR4.roa File: w6-yoWhkYNbyEBACmmC18dzQRR4.roa (raw, json) Hash identifier: 4tYPNLod9Y1xtIf5B095F1LjktxOFOhM924+rM7vzEg= Subject key identifier: C3:AF:B2:A1:68:64:60:D6:F2:10:10:02:9A:60:B5:F1:DC:D0:45:1E Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EA0A2C77434B27B113D5EB19C8938 Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/w6-yoWhkYNbyEBACmmC18dzQRR4.roa Signing time: Thu 01 Jan 2026 12:18:20 +0000 ROA not before: Thu 01 Jan 2026 12:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60021 IP address blocks: 45.9.8.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:a0:a2:c7:74:34:b2:7b:11:3d:5e:b1:9c:89:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3afb2a1686460d6f21010029a60b5f1dcd0451e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:26:75:04:62:95:1d:3c:8f:a2:70:b8:fa:be: 4e:54:0f:71:3c:b2:dc:67:ac:cf:7e:55:f2:4d:5a: 8a:34:1b:e8:f7:43:8e:9b:4a:0a:cd:ae:e0:9c:4b: 30:7d:b6:bc:b8:ba:ee:ff:1c:de:93:ec:bf:68:db: b6:95:5d:b5:45:37:5a:39:f5:00:d4:f5:c7:0e:79: 74:90:f6:72:ea:cc:17:5f:c4:ed:0f:c9:d0:c8:03: 0f:bf:05:b7:b1:b7:52:5d:0f:4c:14:22:ba:6c:b1: a8:1b:3a:65:51:0e:79:18:38:69:44:65:cc:ee:c6: 9c:86:ad:90:2a:68:ca:d9:75:ad:9c:30:c1:66:72: db:1e:78:18:81:c0:80:43:f5:5f:eb:db:dd:93:2d: 0b:23:d1:1d:93:2e:2f:bd:79:23:ff:14:d0:47:9d: de:04:96:0b:bc:69:ef:60:26:3a:b6:80:e6:c8:92: 9e:05:0a:7c:9f:3b:3e:33:92:9d:30:fd:a0:45:9d: 7e:70:e0:9f:b1:39:fa:e7:ee:11:d9:16:b9:ae:5d: 5c:5c:06:74:82:9f:19:f5:f5:85:20:aa:75:8a:99: 52:b0:9c:da:8d:7d:e6:a3:54:0d:72:30:da:3b:22: 55:8e:2d:37:a3:38:2e:16:ef:1d:c7:9e:29:29:c7: 45:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:AF:B2:A1:68:64:60:D6:F2:10:10:02:9A:60:B5:F1:DC:D0:45:1E X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/w6-yoWhkYNbyEBACmmC18dzQRR4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.9.8.0/23 Signature Algorithm: sha256WithRSAEncryption 5a:9e:0e:08:85:63:3a:a2:19:02:5d:a0:3a:bb:8d:c4:b7:6f: e1:c8:ab:01:3a:45:02:47:4b:e4:41:a4:66:55:2d:76:75:45: 12:8d:4b:05:7e:2a:a3:da:9c:9b:80:f3:1b:5d:4e:3a:95:aa: 3f:85:31:6c:e9:c0:9a:6e:c0:ae:68:67:25:85:f2:0f:53:76: 3c:62:69:72:6f:1d:89:c3:69:59:6e:33:76:5a:f3:27:82:6c: 6a:e8:ab:19:0d:b2:5e:c5:bb:06:12:ca:72:e1:cd:3f:ea:d5: 28:80:aa:13:e0:1b:1b:89:f7:d3:9c:2d:4e:c1:f5:50:56:d9: 43:b7:a6:2a:47:51:08:6a:38:78:bf:cb:b9:44:98:9b:ac:76: 2c:77:ad:d3:e9:5c:94:70:92:3b:6a:cb:ab:ed:e9:f0:9d:ad: 9a:db:95:a9:cc:89:e7:c1:aa:ff:bd:20:63:11:b6:19:9e:0a: 3b:f6:c3:8f:60:30:ce:78:43:1d:8d:21:6b:3d:cb:11:24:0a: 3a:d3:4d:40:b9:5c:fc:46:76:20:b6:df:32:00:91:97:aa:d0: b4:d7:8b:97:fd:59:f3:01:84:d1:32:58:f9:1b:14:9d:7c:12: 0c:73:7c:e6:c2:57:86:a4:d8:2b:05:46:ab:5d:67:45:6b:aa: 72:b0:25:43 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fqCix3Q0snsRPV6xnIk4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjM2FmYjJhMTY4NjQ2MGQ2ZjIxMDEwMDI5YTYwYjVmMWRjZDA0NTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SZ1BGKVHTyPonC4+r5OVA9xPLLc Z6zPflXyTVqKNBvo90OOm0oKza7gnEswfba8uLru/xzek+y/aNu2lV21RTdaOfUA 1PXHDnl0kPZy6swXX8TtD8nQyAMPvwW3sbdSXQ9MFCK6bLGoGzplUQ55GDhpRGXM 7sachq2QKmjK2XWtnDDBZnLbHngYgcCAQ/Vf69vdky0LI9Edky4vvXkj/xTQR53e BJYLvGnvYCY6toDmyJKeBQp8nzs+M5KdMP2gRZ1+cOCfsTn65+4R2Ra5rl1cXAZ0 gp8Z9fWFIKp1iplSsJzajX3mo1QNcjDaOyJVji03ozguFu8dx54pKcdFfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMOvsqFoZGDW8hAQAppgtfHc0EUeMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvdzYteW9XaGtZTmJ5RUJBQ21tQzE4ZHpRUlI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLQkIMA0G CSqGSIb3DQEBCwUAA4IBAQBang4IhWM6ohkCXaA6u43Et2/hyKsBOkUCR0vkQaRm VS12dUUSjUsFfiqj2pybgPMbXU46lao/hTFs6cCabsCuaGclhfIPU3Y8Ymlybx2J w2lZbjN2WvMngmxq6KsZDbJexbsGEspy4c0/6tUogKoT4BsbiffTnC1OwfVQVtlD t6YqR1EIajh4v8u5RJibrHYsd63T6VyUcJI7asur7enwna2a25WpzInnwar/vSBj EbYZngo79sOPYDDOeEMdjSFrPcsRJAo6001AuVz8RnYgtt8yAJGXqtC014uX/Vnz AYTRMlj5GxSdfBIMc3zmwleGpNgrBUarXWdFa6pysCVD -----END CERTIFICATE-----Generated at Tue Jan 6 21:30:58 2026 by rpki-client