This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/dCC6snPiHlYjC1vabuiYF6tPKGg.roa File: dCC6snPiHlYjC1vabuiYF6tPKGg.roa (raw, json) Hash identifier: tNg6JKDmFjnhc25HWSYTUlB99R9oi7iEOMfOHvuuaoc= Subject key identifier: 74:20:BA:B2:73:E2:1E:56:23:0B:5B:DA:6E:E8:98:17:AB:4F:28:68 Certificate issuer: /CN=1372e0c2b83dd5109013c7f1c0bb9716d3618dd2 Certificate serial: 019B7B3584E9AAE99E07F1D1229A2A527BB5 Authority key identifier: 13:72:E0:C2:B8:3D:D5:10:90:13:C7:F1:C0:BB:97:16:D3:61:8D:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/dCC6snPiHlYjC1vabuiYF6tPKGg.roa Signing time: Thu 01 Jan 2026 20:17:43 +0000 ROA not before: Thu 01 Jan 2026 20:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 45.146.123.0/24 maxlen: 24 92.118.46.0/24 maxlen: 24 92.118.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.crl rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 23:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:84:e9:aa:e9:9e:07:f1:d1:22:9a:2a:52:7b:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1372e0c2b83dd5109013c7f1c0bb9716d3618dd2 Validity Not Before: Jan 1 20:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7420bab273e21e56230b5bda6ee89817ab4f2868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a8:1c:b1:7a:3a:1e:a0:8c:95:c3:3a:45:4b: 15:91:b2:55:01:34:bf:8b:b8:1c:b9:bb:c2:37:b2: 8c:04:62:0a:6a:76:ad:70:35:44:b7:aa:c1:bf:50: cd:76:86:de:a5:84:58:35:a3:74:9d:6a:a8:81:db: 0c:b3:ef:a9:91:44:69:31:a8:d4:f0:3b:47:ad:51: 8a:78:00:ea:73:d6:3b:0a:ee:a7:2d:cd:0f:bf:94: 03:c6:69:29:21:5d:e7:67:76:85:d3:53:30:f5:46: 1d:a7:d5:6a:86:1f:67:6d:de:aa:79:49:eb:04:a8: 38:29:6a:45:f8:f5:43:55:8c:00:f7:a6:d5:e1:09: 01:b7:33:87:09:e0:d5:58:57:8c:a4:54:07:87:cf: 15:43:ae:40:ac:f8:e4:fe:f0:29:bb:e7:74:fc:78: d7:be:36:b0:9e:af:32:71:ff:6e:02:52:85:28:b6: 83:8c:02:c9:7a:6c:52:7c:81:7d:74:ab:63:ad:d0: 81:0a:0d:80:14:53:7d:79:93:98:33:72:d2:ec:24: 08:55:a2:e0:49:65:03:11:7c:b9:30:c2:9e:ba:10: 0c:91:15:0f:ab:22:30:38:f5:38:85:33:06:d8:c6: 28:9d:aa:55:0c:4f:1e:2c:28:9b:1e:40:eb:16:af: 3c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:20:BA:B2:73:E2:1E:56:23:0B:5B:DA:6E:E8:98:17:AB:4F:28:68 X509v3 Authority Key Identifier: keyid:13:72:E0:C2:B8:3D:D5:10:90:13:C7:F1:C0:BB:97:16:D3:61:8D:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/dCC6snPiHlYjC1vabuiYF6tPKGg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.146.123.0/24 92.118.46.0/23 Signature Algorithm: sha256WithRSAEncryption a8:9b:9f:3a:83:5a:23:0d:a9:fd:c8:01:61:63:53:1c:8f:af: da:17:83:79:bb:51:b0:13:e7:55:c1:cd:13:75:f9:b4:ff:35: ba:23:a0:ff:e0:d8:d5:a8:70:20:b2:ed:df:2c:2e:60:5c:a8: 3b:b9:c4:c2:ad:49:d1:11:a7:a4:a1:dc:b9:32:7c:30:ad:e1: 2b:c9:71:13:48:a4:5c:a9:9e:cd:40:13:4f:52:26:bb:3f:4c: bf:65:ab:53:3e:5f:9a:8b:74:26:a0:18:8a:73:8f:8f:03:f5: cb:7b:29:20:54:52:24:b2:0b:57:b3:6f:86:b9:ec:41:c4:10: 9a:20:a8:1f:e2:67:dc:50:8e:ac:a7:9c:ef:9c:ec:c8:ef:52: ab:46:8b:de:36:c9:cc:80:ad:c1:d7:be:bd:43:dd:da:19:ce: c6:48:7f:1f:a3:b6:62:ac:d6:89:2d:84:a4:33:69:3e:4c:77: f5:e7:4a:7e:35:fe:d8:7a:10:c8:06:fd:b5:13:98:5e:7f:46: cb:6a:7c:8e:78:36:19:0f:b7:c0:37:60:ef:e0:35:74:e5:43: 63:1e:88:b1:06:e7:2e:80:06:b8:91:95:62:b3:7f:76:e3:60: 31:f2:5b:2d:37:21:d6:f1:47:02:ca:68:61:16:8a:20:b3:5b: af:88:e0:5d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NYTpqumeB/HRIpoqUnu1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzNzJlMGMyYjgzZGQ1MTA5MDEzYzdmMWMwYmI5NzE2ZDM2 MThkZDIwHhcNMjYwMTAxMjAxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDIwYmFiMjczZTIxZTU2MjMwYjViZGE2ZWU4OTgxN2FiNGYyODY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6gcsXo6HqCMlcM6RUsVkbJVATS/ i7gcubvCN7KMBGIKanatcDVEt6rBv1DNdobepYRYNaN0nWqogdsMs++pkURpMajU 8DtHrVGKeADqc9Y7Cu6nLc0Pv5QDxmkpIV3nZ3aF01Mw9UYdp9Vqhh9nbd6qeUnr BKg4KWpF+PVDVYwA96bV4QkBtzOHCeDVWFeMpFQHh88VQ65ArPjk/vApu+d0/HjX vjawnq8ycf9uAlKFKLaDjALJemxSfIF9dKtjrdCBCg2AFFN9eZOYM3LS7CQIVaLg SWUDEXy5MMKeuhAMkRUPqyIwOPU4hTMG2MYonapVDE8eLCibHkDrFq88bwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHQgurJz4h5WIwtb2m7omBerTyhoMB8GA1UdIwQY MBaAFBNy4MK4PdUQkBPH8cC7lxbTYY3SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTNMZ3dyZzkxUkNRRThmeHdMdVhGdE5oamRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8yMjFmZDYtZTRmNi00M2UzLTk0NmQt ZGQxZWM1N2Q3ZTc0LzEvZENDNnNuUGlIbFlqQzF2YWJ1aVlGNnRQS0dnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS8yMjFmZDYtZTRmNi00M2UzLTk0NmQtZGQxZWM1N2Q3ZTc0 LzEvRTNMZ3dyZzkxUkNRRThmeHdMdVhGdE5oamRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZJ7AwQB XHYuMA0GCSqGSIb3DQEBCwUAA4IBAQCom586g1ojDan9yAFhY1Mcj6/aF4N5u1Gw E+dVwc0Tdfm0/zW6I6D/4NjVqHAgsu3fLC5gXKg7ucTCrUnREaekody5MnwwreEr yXETSKRcqZ7NQBNPUia7P0y/ZatTPl+ai3QmoBiKc4+PA/XLeykgVFIksgtXs2+G uexBxBCaIKgf4mfcUI6sp5zvnOzI71KrRoveNsnMgK3B1769Q93aGc7GSH8fo7Zi rNaJLYSkM2k+THf150p+Nf7YehDIBv21E5hef0bLanyOeDYZD7fAN2Dv4DV05UNj HoixBucugAa4kZVis39242Ax8lstNyHW8UcCymhhFoogs1uviOBd -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:54 2026 by rpki-client