This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/6hi5SBPtuCCc_Ra34G-rijGpoCE.roa File: 6hi5SBPtuCCc_Ra34G-rijGpoCE.roa (raw, json) Hash identifier: /JJ4SHMG/BtsEG8R3qP/R1q0vHL7SIp89pxXLWjsFg8= Subject key identifier: EA:18:B9:48:13:ED:B8:20:9C:FD:16:B7:E0:6F:AB:8A:31:A9:A0:21 Certificate issuer: /CN=9ae7d661afca3d3370b8e634494d5246b83d585f Certificate serial: 019B7B3640C06A925A33018CE5086C05970B Authority key identifier: 9A:E7:D6:61:AF:CA:3D:33:70:B8:E6:34:49:4D:52:46:B8:3D:58:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mufWYa_KPTNwuOY0SU1SRrg9WF8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/6hi5SBPtuCCc_Ra34G-rijGpoCE.roa Signing time: Thu 01 Jan 2026 20:18:31 +0000 ROA not before: Thu 01 Jan 2026 20:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62320 IP address blocks: 89.45.84.0/22 maxlen: 24 185.39.228.0/22 maxlen: 24 2a01:4aa0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.mft rsync://rpki.ripe.net/repository/DEFAULT/mufWYa_KPTNwuOY0SU1SRrg9WF8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:40:c0:6a:92:5a:33:01:8c:e5:08:6c:05:97:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ae7d661afca3d3370b8e634494d5246b83d585f Validity Not Before: Jan 1 20:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea18b94813edb8209cfd16b7e06fab8a31a9a021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:09:b9:c8:44:09:ce:73:5f:62:10:16:d1:0c: 7f:41:6c:88:5b:06:cc:7c:7a:70:5f:59:81:16:72: 48:92:2a:f6:1f:8a:f6:01:23:69:85:99:34:0c:bc: 29:12:66:28:c0:e0:55:eb:e2:bd:0d:29:6f:e3:4a: 80:95:27:f5:84:a7:bb:42:b2:49:14:aa:a2:85:1f: de:93:25:76:08:2d:2e:4c:42:da:71:19:1f:45:15: 75:5b:ab:96:58:2b:bf:b4:0f:ea:20:aa:c7:7a:aa: 89:32:02:74:f8:e7:98:19:4e:2a:df:81:75:8b:7e: 0b:4a:7c:93:79:a3:d7:9d:68:95:7c:b4:18:47:2b: aa:0e:60:89:5c:08:b3:f5:8d:50:26:e4:95:7b:2c: 29:7a:0a:ff:c5:59:0f:34:95:cd:bc:9a:f4:df:92: 60:5e:7e:fe:b2:9d:26:2e:f7:e2:66:5b:70:09:d3: e4:09:a7:6b:18:35:5b:eb:e2:f5:7d:97:91:8e:4a: 9a:76:c0:8e:db:98:93:80:42:af:cd:ff:24:ed:66: 19:00:22:90:d9:3b:93:79:d0:43:ec:5f:c0:e0:4b: db:66:83:1a:0e:50:a9:f6:a0:63:b5:96:e2:4e:d1: db:ff:8d:84:15:80:d0:04:b0:d3:2b:7a:54:99:5e: 06:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:18:B9:48:13:ED:B8:20:9C:FD:16:B7:E0:6F:AB:8A:31:A9:A0:21 X509v3 Authority Key Identifier: keyid:9A:E7:D6:61:AF:CA:3D:33:70:B8:E6:34:49:4D:52:46:B8:3D:58:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mufWYa_KPTNwuOY0SU1SRrg9WF8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/6hi5SBPtuCCc_Ra34G-rijGpoCE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.45.84.0/22 185.39.228.0/22 IPv6: 2a01:4aa0::/32 Signature Algorithm: sha256WithRSAEncryption 2e:68:7f:60:b9:c1:d0:e5:e5:f9:d0:7a:53:fe:e6:9d:ac:31: ea:34:31:03:08:6a:c5:d2:71:fa:2f:e7:6f:3f:82:01:39:50: 9d:91:d5:d7:bd:03:8c:d9:7e:60:fa:ae:34:d5:6c:d1:3f:16: 3d:28:64:8e:5e:af:8f:45:20:ff:f2:ca:d6:f9:7a:da:ba:36: db:52:9b:c7:19:b9:4d:05:50:39:b4:43:ff:fa:f4:78:4e:9e: 9f:31:a9:2e:d2:d5:1c:5c:f3:7d:21:96:76:7e:b3:a4:4b:5f: 94:52:2d:4f:44:06:a3:34:4f:f1:be:c5:b4:de:ea:f1:e3:65: e0:44:a5:31:73:95:f7:28:14:82:bf:b7:3e:10:e5:df:86:7f: 97:b6:4d:eb:1e:1f:94:62:9e:db:2e:b3:0b:8e:fa:15:21:ba: 28:73:3c:df:85:53:cc:0f:8a:42:f1:5b:d1:4f:05:dd:da:4a: c9:a9:55:5d:71:1b:3f:c8:e6:46:b3:18:fd:4e:7f:71:76:27: 2e:ec:1a:c0:a7:c6:06:62:b7:6e:09:ba:45:a9:7e:6d:ac:a8: e2:be:23:ee:46:77:e3:13:bc:4a:1b:81:87:c6:31:6a:3b:04: 40:a7:8c:68:40:aa:f7:0f:73:58:a7:bf:bc:2d:9f:33:c4:de: ef:bb:a8:2e -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7NkDAapJaMwGM5QhsBZcLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZTdkNjYxYWZjYTNkMzM3MGI4ZTYzNDQ5NGQ1MjQ2Yjgz ZDU4NWYwHhcNMjYwMTAxMjAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTE4Yjk0ODEzZWRiODIwOWNmZDE2YjdlMDZmYWI4YTMxYTlhMDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAm5yEQJznNfYhAW0Qx/QWyIWwbM fHpwX1mBFnJIkir2H4r2ASNphZk0DLwpEmYowOBV6+K9DSlv40qAlSf1hKe7QrJJ FKqihR/ekyV2CC0uTELacRkfRRV1W6uWWCu/tA/qIKrHeqqJMgJ0+OeYGU4q34F1 i34LSnyTeaPXnWiVfLQYRyuqDmCJXAiz9Y1QJuSVeywpegr/xVkPNJXNvJr035Jg Xn7+sp0mLvfiZltwCdPkCadrGDVb6+L1fZeRjkqadsCO25iTgEKvzf8k7WYZACKQ 2TuTedBD7F/A4EvbZoMaDlCp9qBjtZbiTtHb/42EFYDQBLDTK3pUmV4GhQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFOoYuUgT7bggnP0Wt+Bvq4oxqaAhMB8GA1UdIwQY MBaAFJrn1mGvyj0zcLjmNElNUka4PVhfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXVmV1lhX0tQVE53dU9ZMFNVMVNScmc5V0Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9lNDcwNWMtZTZkYS00MjJlLTg1OWMt M2I2OGE0OWRjMDQyLzEvNmhpNVNCUHR1Q0NjX1JhMzRHLXJpakdwb0NFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9lNDcwNWMtZTZkYS00MjJlLTg1OWMtM2I2OGE0OWRjMDQy LzEvbXVmV1lhX0tQVE53dU9ZMFNVMVNScmc5V0Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCWS1UAwQC uSfkMA0EAgACMAcDBQAqAUqgMA0GCSqGSIb3DQEBCwUAA4IBAQAuaH9gucHQ5eX5 0HpT/uadrDHqNDEDCGrF0nH6L+dvP4IBOVCdkdXXvQOM2X5g+q401WzRPxY9KGSO Xq+PRSD/8srW+XraujbbUpvHGblNBVA5tEP/+vR4Tp6fMaku0tUcXPN9IZZ2frOk S1+UUi1PRAajNE/xvsW03urx42XgRKUxc5X3KBSCv7c+EOXfhn+Xtk3rHh+UYp7b LrMLjvoVIbooczzfhVPMD4pC8VvRTwXd2krJqVVdcRs/yOZGsxj9Tn9xdicu7BrA p8YGYrduCbpFqX5trKjiviPuRnfjE7xKG4GHxjFqOwRAp4xoQKr3D3NYp7+8LZ8z xN7vu6gu -----END CERTIFICATE-----Generated at Tue Feb 10 01:13:11 2026 by rpki-client