This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/6wbmuyzQTlEMVcCNEt94Ytwh5B4.roa File: 6wbmuyzQTlEMVcCNEt94Ytwh5B4.roa (raw, json) Hash identifier: PnJoMCRg40MuZsT7+Fw5OTXBvqQLFkm5aYCcz/8c7Zc= Subject key identifier: EB:06:E6:BB:2C:D0:4E:51:0C:55:C0:8D:12:DF:78:62:DC:21:E4:1E Certificate issuer: /CN=989badfd2a17fca3b935a368e2e03ad56d6e3b62 Certificate serial: 019B791129169ACC5BB14AB10D3158818375 Authority key identifier: 98:9B:AD:FD:2A:17:FC:A3:B9:35:A3:68:E2:E0:3A:D5:6D:6E:3B:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJut_SoX_KO5NaNo4uA61W1uO2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/6wbmuyzQTlEMVcCNEt94Ytwh5B4.roa Signing time: Thu 01 Jan 2026 10:18:46 +0000 ROA not before: Thu 01 Jan 2026 10:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48518 IP address blocks: 45.129.108.0/22 maxlen: 24 176.74.32.0/21 maxlen: 24 194.177.8.0/22 maxlen: 24 2a00:eb80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.mft rsync://rpki.ripe.net/repository/DEFAULT/mJut_SoX_KO5NaNo4uA61W1uO2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:29:16:9a:cc:5b:b1:4a:b1:0d:31:58:81:83:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989badfd2a17fca3b935a368e2e03ad56d6e3b62 Validity Not Before: Jan 1 10:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb06e6bb2cd04e510c55c08d12df7862dc21e41e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:15:bb:b7:04:84:52:bf:16:05:97:a0:e0:f6: 47:dc:67:56:71:78:a4:fd:da:5b:c8:cc:77:bc:b4: 3c:e3:23:fe:1d:ac:d3:b8:72:99:c0:32:c8:c2:4a: 9d:c2:e0:1b:4c:f4:84:ee:ea:dc:df:f9:03:8d:d6: 28:03:a3:4e:57:5a:27:a9:b9:8f:72:b7:dd:51:28: 07:7c:64:29:e0:44:7c:9f:5f:6c:13:1a:e3:37:fe: cc:16:92:ab:6e:4d:ef:c0:1f:53:47:41:8f:9c:0c: ad:b3:70:73:01:9a:f1:d8:b6:c4:c6:24:e8:28:bf: 52:f2:e1:84:2a:44:4d:bd:fa:b9:43:b1:f8:63:1b: fa:be:dc:92:13:96:e6:a6:c0:c0:f6:25:7a:1e:8b: f6:d0:73:1c:eb:25:2d:8b:c5:32:b3:cc:da:a9:b7: 71:20:50:21:27:95:d2:a5:1f:f6:d0:38:a9:6d:77: 7e:8c:38:2a:34:ec:bb:f4:93:a3:58:b0:88:be:ec: 9c:8e:a7:92:ab:d7:37:0c:2d:cc:f4:e7:67:09:48: ed:47:1c:b7:44:55:88:17:7c:fd:04:da:81:0b:1b: 50:30:4e:56:ba:0a:1e:ea:0a:19:d4:d4:e8:1d:23: 24:76:6d:46:80:3c:2f:fe:77:c2:8c:75:90:65:38: 89:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:06:E6:BB:2C:D0:4E:51:0C:55:C0:8D:12:DF:78:62:DC:21:E4:1E X509v3 Authority Key Identifier: keyid:98:9B:AD:FD:2A:17:FC:A3:B9:35:A3:68:E2:E0:3A:D5:6D:6E:3B:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJut_SoX_KO5NaNo4uA61W1uO2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/6wbmuyzQTlEMVcCNEt94Ytwh5B4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.108.0/22 176.74.32.0/21 194.177.8.0/22 IPv6: 2a00:eb80::/32 Signature Algorithm: sha256WithRSAEncryption 03:90:7b:0f:21:aa:3c:dd:0c:d3:92:fc:db:a6:b3:c9:87:41: 42:d0:c6:56:90:d2:1f:a5:66:b6:3c:ee:3e:0f:61:41:81:1d: d6:ce:e4:25:44:1e:b2:14:c3:28:57:41:fa:e2:d0:ae:8c:45: e0:6b:2a:d6:ed:25:4c:3c:0e:b1:26:83:35:87:7a:54:d2:71: 8f:49:ef:94:9b:be:85:a9:c2:ab:5e:d5:e4:29:f0:35:7d:a5: 90:dd:aa:e4:a4:66:18:15:a0:8c:02:d1:24:df:4d:bb:8e:17: 3d:4f:3e:1c:bf:c6:2f:44:f8:7a:b4:fa:c6:51:ea:5b:36:4d: dc:b4:d7:9f:97:c2:56:89:9f:1e:9a:af:c5:a8:ac:7e:83:4f: 39:e4:a8:c4:41:91:55:94:d5:f2:41:43:d7:a8:95:4f:05:dd: db:73:bc:93:5d:68:f6:26:98:d4:ac:ae:61:54:49:8c:fd:65: b1:58:a6:16:21:e4:f1:3c:36:83:d1:e5:b0:3c:fd:07:52:b3: f4:76:b4:2b:91:97:a8:12:66:61:00:8c:a1:6f:d1:54:75:ae: 2e:98:12:e5:4e:02:66:7f:11:79:45:c9:cf:b0:53:ef:75:c7: ff:64:7d:2f:74:fb:83:f9:15:cc:d1:4a:73:83:56:98:4a:ea: 65:1e:f8:ce -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt5ESkWmsxbsUqxDTFYgYN1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4OWJhZGZkMmExN2ZjYTNiOTM1YTM2OGUyZTAzYWQ1NmQ2 ZTNiNjIwHhcNMjYwMTAxMTAxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjA2ZTZiYjJjZDA0ZTUxMGM1NWMwOGQxMmRmNzg2MmRjMjFlNDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhW7twSEUr8WBZeg4PZH3GdWcXik /dpbyMx3vLQ84yP+HazTuHKZwDLIwkqdwuAbTPSE7urc3/kDjdYoA6NOV1onqbmP crfdUSgHfGQp4ER8n19sExrjN/7MFpKrbk3vwB9TR0GPnAyts3BzAZrx2LbExiTo KL9S8uGEKkRNvfq5Q7H4Yxv6vtySE5bmpsDA9iV6Hov20HMc6yUti8Uys8zaqbdx IFAhJ5XSpR/20DipbXd+jDgqNOy79JOjWLCIvuycjqeSq9c3DC3M9OdnCUjtRxy3 RFWIF3z9BNqBCxtQME5Wugoe6goZ1NToHSMkdm1GgDwv/nfCjHWQZTiJhQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFOsG5rss0E5RDFXAjRLfeGLcIeQeMB8GA1UdIwQY MBaAFJibrf0qF/yjuTWjaOLgOtVtbjtiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUp1dF9Tb1hfS081TmFObzR1QTYxVzF1TzJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS82ODgwMDctMmIyNC00NGI5LTgwZjQt YTYyODUwZmVlYmI1LzEvNndibXV5elFUbEVNVmNDTkV0OTRZdHdoNUI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS82ODgwMDctMmIyNC00NGI5LTgwZjQtYTYyODUwZmVlYmI1 LzEvbUp1dF9Tb1hfS081TmFObzR1QTYxVzF1TzJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCLYFsAwQD sEogAwQCwrEIMA0EAgACMAcDBQAqAOuAMA0GCSqGSIb3DQEBCwUAA4IBAQADkHsP Iao83QzTkvzbprPJh0FC0MZWkNIfpWa2PO4+D2FBgR3WzuQlRB6yFMMoV0H64tCu jEXgayrW7SVMPA6xJoM1h3pU0nGPSe+Um76FqcKrXtXkKfA1faWQ3arkpGYYFaCM AtEk3027jhc9Tz4cv8YvRPh6tPrGUepbNk3ctNefl8JWiZ8emq/FqKx+g0855KjE QZFVlNXyQUPXqJVPBd3bc7yTXWj2JpjUrK5hVEmM/WWxWKYWIeTxPDaD0eWwPP0H UrP0drQrkZeoEmZhAIyhb9FUda4umBLlTgJmfxF5RcnPsFPvdcf/ZH0vdPuD+RXM 0Upzg1aYSuplHvjO -----END CERTIFICATE-----Generated at Thu Jan 29 16:32:08 2026 by rpki-client