This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/6xrIMpIc9U5BKeSxntg8rfnLACs.roa File: 6xrIMpIc9U5BKeSxntg8rfnLACs.roa (raw, json) Hash identifier: TaCFDwqzBTyvLWbP4/zZeRLrQOfnD2vt/RoGozBvzEc= Subject key identifier: EB:1A:C8:32:92:1C:F5:4E:41:29:E4:B1:9E:D8:3C:AD:F9:CB:00:2B Certificate issuer: /CN=c4990ec20111f42fb62f39a81c7392a921955bf2 Certificate serial: 019B7D5C524A9DB90C270616E34FBCEF42DB Authority key identifier: C4:99:0E:C2:01:11:F4:2F:B6:2F:39:A8:1C:73:92:A9:21:95:5B:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJkOwgER9C-2LzmoHHOSqSGVW_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/6xrIMpIc9U5BKeSxntg8rfnLACs.roa Signing time: Fri 02 Jan 2026 06:19:20 +0000 ROA not before: Fri 02 Jan 2026 06:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199585 IP address blocks: 45.158.108.0/22 maxlen: 22 81.162.208.0/21 maxlen: 21 194.93.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/xJkOwgER9C-2LzmoHHOSqSGVW_I.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/xJkOwgER9C-2LzmoHHOSqSGVW_I.mft rsync://rpki.ripe.net/repository/DEFAULT/xJkOwgER9C-2LzmoHHOSqSGVW_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:52:4a:9d:b9:0c:27:06:16:e3:4f:bc:ef:42:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4990ec20111f42fb62f39a81c7392a921955bf2 Validity Not Before: Jan 2 06:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb1ac832921cf54e4129e4b19ed83cadf9cb002b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0a:30:a6:f5:5c:a2:c1:d1:35:57:ae:e6:40: ea:1d:12:e3:20:02:50:65:2e:d3:ba:46:01:aa:a9: 45:d5:2d:7b:44:3c:06:f6:97:da:03:e0:44:99:64: 19:73:fb:89:91:af:10:eb:36:64:a9:d3:dc:84:44: dd:ea:24:51:a3:7d:60:d6:4a:5f:51:44:fb:e5:c8: d0:dc:bc:e8:55:a0:de:cd:d8:45:e0:2a:62:6e:ca: 63:5a:01:3e:c5:7d:8e:13:dc:48:de:ee:8e:ce:99: 0b:cf:ae:5f:d5:ac:7a:03:d3:56:f9:3c:9b:c1:cf: f2:0c:6c:70:30:0d:13:07:d1:03:0f:23:0f:06:5e: fe:5f:a1:3f:db:06:10:ec:b3:90:74:73:9a:1d:3c: b7:df:c0:8d:ee:b0:56:1f:b9:70:b7:c1:0b:8d:35: 16:70:24:eb:3a:f2:c9:90:6b:7f:83:f9:a6:f4:c1: 2c:28:f4:79:d1:00:a6:d9:43:06:2f:53:d3:27:98: 84:70:27:96:3a:64:91:f4:96:f4:83:47:c0:51:8d: e3:43:12:24:4d:2c:24:8c:88:8c:f6:25:6a:54:f9: 5b:a6:5b:31:5b:b3:c0:0b:18:1d:92:db:1e:a7:9f: 84:e8:77:fd:88:94:d0:d5:b6:51:70:4f:45:32:69: 02:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:1A:C8:32:92:1C:F5:4E:41:29:E4:B1:9E:D8:3C:AD:F9:CB:00:2B X509v3 Authority Key Identifier: keyid:C4:99:0E:C2:01:11:F4:2F:B6:2F:39:A8:1C:73:92:A9:21:95:5B:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJkOwgER9C-2LzmoHHOSqSGVW_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/6xrIMpIc9U5BKeSxntg8rfnLACs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/xJkOwgER9C-2LzmoHHOSqSGVW_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.158.108.0/22 81.162.208.0/21 194.93.99.0/24 Signature Algorithm: sha256WithRSAEncryption 24:e3:c2:11:61:19:d1:c9:db:45:45:19:a6:7e:ed:73:14:d5: 71:d2:91:ae:72:3a:51:fa:75:b2:93:fc:00:47:c9:6e:3f:b1: 17:d2:1f:dd:08:9a:24:16:97:8e:8c:70:9a:ac:d0:92:d0:b5: ca:80:82:0e:4e:8d:2d:da:37:f5:56:25:4e:51:71:c1:49:f9: 01:25:fd:40:29:85:10:d0:61:a6:86:df:4b:eb:43:be:61:3d: 89:63:97:19:e3:2e:97:2d:38:69:0e:32:d5:98:50:d9:91:2d: df:fc:ca:a2:41:ae:ce:72:6f:9f:0c:32:86:ee:3c:f7:00:be: 83:de:b6:e3:55:d0:2d:30:ba:66:f1:1d:be:59:b2:cf:2d:6b: a8:06:4f:6b:39:3f:34:00:4c:d1:47:f9:17:53:c8:49:68:b9: e4:8c:27:18:2e:98:9b:33:f2:18:56:b1:2a:b0:b9:af:08:2f: 1b:dc:73:f6:5b:69:ff:4f:3d:c0:8b:44:0f:7e:51:00:33:b9: 8b:3b:a2:89:d5:ea:57:fb:66:5d:a1:f1:e5:03:5b:b4:60:cf: e0:2a:34:55:89:3c:6b:17:42:f3:46:38:ff:8f:12:cf:11:43: 27:57:78:7c:87:59:5d:c1:73:17:16:cc:e3:2f:df:5c:5f:2e: 41:4c:0f:2c -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XFJKnbkMJwYW40+870LbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0OTkwZWMyMDExMWY0MmZiNjJmMzlhODFjNzM5MmE5MjE5 NTViZjIwHhcNMjYwMTAyMDYxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjFhYzgzMjkyMWNmNTRlNDEyOWU0YjE5ZWQ4M2NhZGY5Y2IwMDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gowpvVcosHRNVeu5kDqHRLjIAJQ ZS7TukYBqqlF1S17RDwG9pfaA+BEmWQZc/uJka8Q6zZkqdPchETd6iRRo31g1kpf UUT75cjQ3LzoVaDezdhF4CpibspjWgE+xX2OE9xI3u6OzpkLz65f1ax6A9NW+Tyb wc/yDGxwMA0TB9EDDyMPBl7+X6E/2wYQ7LOQdHOaHTy338CN7rBWH7lwt8ELjTUW cCTrOvLJkGt/g/mm9MEsKPR50QCm2UMGL1PTJ5iEcCeWOmSR9Jb0g0fAUY3jQxIk TSwkjIiM9iVqVPlbplsxW7PACxgdktsep5+E6Hf9iJTQ1bZRcE9FMmkCjwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOsayDKSHPVOQSnksZ7YPK35ywArMB8GA1UdIwQY MBaAFMSZDsIBEfQvti85qBxzkqkhlVvyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEprT3dnRVI5Qy0yTHptb0hIT1NxU0dWV19JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS85YzdjZTQtMmNkNC00ODU0LTg4NDAt YjBmZTkyMjFlZmI3LzEvNnhySU1wSWM5VTVCS2VTeG50ZzhyZm5MQUNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS85YzdjZTQtMmNkNC00ODU0LTg4NDAtYjBmZTkyMjFlZmI3 LzEveEprT3dnRVI5Qy0yTHptb0hIT1NxU0dWV19JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLZ5sAwQD UaLQAwQAwl1jMA0GCSqGSIb3DQEBCwUAA4IBAQAk48IRYRnRydtFRRmmfu1zFNVx 0pGucjpR+nWyk/wAR8luP7EX0h/dCJokFpeOjHCarNCS0LXKgIIOTo0t2jf1ViVO UXHBSfkBJf1AKYUQ0GGmht9L60O+YT2JY5cZ4y6XLThpDjLVmFDZkS3f/MqiQa7O cm+fDDKG7jz3AL6D3rbjVdAtMLpm8R2+WbLPLWuoBk9rOT80AEzRR/kXU8hJaLnk jCcYLpibM/IYVrEqsLmvCC8b3HP2W2n/Tz3Ai0QPflEAM7mLO6KJ1epX+2ZdofHl A1u0YM/gKjRViTxrF0LzRjj/jxLPEUMnV3h8h1ldwXMXFszjL99cXy5BTA8s -----END CERTIFICATE-----Generated at Mon Feb 9 20:10:20 2026 by rpki-client