This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/6ZzDjxgNYdOCdszBPZyujZWdIQU.roa File: 6ZzDjxgNYdOCdszBPZyujZWdIQU.roa (raw, json) Hash identifier: 9UI3twwOpxPDECF8g7XXCOiJN8BzbbKSShDSCVBs94A= Subject key identifier: E9:9C:C3:8F:18:0D:61:D3:82:76:CC:C1:3D:9C:AE:8D:95:9D:21:05 Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Certificate serial: 019B7DCA845DE7A5DDA49D3C1DA3AA79FA6B Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/6ZzDjxgNYdOCdszBPZyujZWdIQU.roa Signing time: Fri 02 Jan 2026 08:19:42 +0000 ROA not before: Fri 02 Jan 2026 08:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 152700 IP address blocks: 45.157.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:84:5d:e7:a5:dd:a4:9d:3c:1d:a3:aa:79:fa:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Validity Not Before: Jan 2 08:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e99cc38f180d61d38276ccc13d9cae8d959d2105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e2:77:a8:cd:36:18:2a:1f:f3:f6:ca:7c:e0: 03:4c:67:36:d8:a9:06:0c:0b:e6:2f:0d:3d:6b:90: 90:4a:06:75:46:92:7d:9e:b6:23:5d:03:f5:3a:0a: 23:74:27:60:2d:3b:70:7b:9a:19:83:60:91:72:5a: a6:24:fa:8b:f6:15:e9:66:f8:e8:89:bb:15:b5:5f: ec:b4:3c:af:e0:33:cc:ca:79:35:29:b6:05:17:58: e9:62:90:71:84:eb:c5:a2:3a:9b:5a:dd:50:fa:26: 2d:c3:76:9b:88:99:c2:5c:b0:d8:6d:90:bb:ea:e2: fa:07:18:3f:ba:9d:78:18:62:92:63:1a:71:9e:03: e8:64:53:51:fd:81:f5:5f:d6:be:08:d0:db:56:8a: 05:3b:c6:86:b5:04:10:fd:44:8e:9c:95:93:69:32: a7:06:1d:73:01:45:5c:7e:1b:96:c4:e2:11:b2:26: f6:92:da:ae:f1:ce:85:0c:fd:22:c2:43:22:fe:fc: 45:fc:4a:e0:7b:3e:2c:98:e7:bc:98:1e:6a:12:85: c3:2f:13:2a:ce:e3:44:e1:46:05:88:fe:f4:9f:57: 0d:dd:6e:aa:be:19:2b:b5:91:d5:cd:cc:c4:83:b8: 47:fa:ed:fc:e5:fa:61:cd:51:07:5c:6e:ef:36:37: 4d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:9C:C3:8F:18:0D:61:D3:82:76:CC:C1:3D:9C:AE:8D:95:9D:21:05 X509v3 Authority Key Identifier: keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/6ZzDjxgNYdOCdszBPZyujZWdIQU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.157.137.0/24 Signature Algorithm: sha256WithRSAEncryption 11:c6:fa:0a:81:70:e1:e3:4a:a5:07:7a:26:2c:8a:5e:08:d6: ef:cb:d7:02:b8:2b:6b:4f:83:7f:14:04:84:0d:46:c8:51:96: 09:de:fa:ea:1f:f7:63:ae:1e:68:7a:b7:dd:3a:af:ae:79:51: 83:ad:a4:c6:ae:1a:a2:da:9b:1a:16:60:d0:86:78:0b:9d:c5: bf:94:33:53:4e:88:f6:06:4f:bc:9d:ea:6a:bb:b3:8c:4d:a2: d9:90:7a:c1:04:58:b3:a1:73:0d:0e:2d:d3:ee:5b:8d:ae:3b: cf:af:72:a7:33:1e:15:b3:75:de:5b:e3:e6:d7:e7:78:7c:6c: a5:2e:75:84:5b:bb:98:21:8f:b9:31:52:66:c5:3d:c7:09:b5: dc:a9:6d:8a:cf:ed:2a:e1:57:8b:fa:51:d9:1b:f4:7c:1c:2f: c5:72:22:01:b1:eb:4c:01:4e:6f:f7:86:5e:1f:4d:ba:cb:59: 3d:93:45:dd:a0:7b:75:dc:42:bb:e1:d0:57:c1:e8:55:d2:36: 6c:2a:9c:a1:1a:c0:94:22:b4:04:2b:cc:98:9b:eb:d6:04:d4: 48:29:96:8b:2d:0f:7f:f8:f7:5d:14:26:7f:5f:fe:3c:a5:8e: fe:34:32:42:94:c8:a8:68:88:70:13:37:0f:90:c9:d9:5c:26: a4:4a:24:9e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yoRd56XdpJ08HaOqefprMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2FkNzc1NDc5NWRkZDYwNWYyODgzOGJiN2NjMzU5ZGY3 YTI2NmEwHhcNMjYwMTAyMDgxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTljYzM4ZjE4MGQ2MWQzODI3NmNjYzEzZDljYWU4ZDk1OWQyMTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOJ3qM02GCof8/bKfOADTGc22KkG DAvmLw09a5CQSgZ1RpJ9nrYjXQP1OgojdCdgLTtwe5oZg2CRclqmJPqL9hXpZvjo ibsVtV/stDyv4DPMynk1KbYFF1jpYpBxhOvFojqbWt1Q+iYtw3abiJnCXLDYbZC7 6uL6Bxg/up14GGKSYxpxngPoZFNR/YH1X9a+CNDbVooFO8aGtQQQ/USOnJWTaTKn Bh1zAUVcfhuWxOIRsib2ktqu8c6FDP0iwkMi/vxF/Ergez4smOe8mB5qEoXDLxMq zuNE4UYFiP70n1cN3W6qvhkrtZHVzczEg7hH+u385fphzVEHXG7vNjdNCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOmcw48YDWHTgnbMwT2cro2VnSEFMB8GA1UdIwQY MBaAFBx613VHld3WBfKIOLt8w1nfeiZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgt YWRhNWMyMGUzZjdiLzEvNlp6RGp4Z05ZZE9DZHN6QlBaeXVqWldkSVFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgtYWRhNWMyMGUzZjdi LzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ2JMA0G CSqGSIb3DQEBCwUAA4IBAQARxvoKgXDh40qlB3omLIpeCNbvy9cCuCtrT4N/FASE DUbIUZYJ3vrqH/djrh5oerfdOq+ueVGDraTGrhqi2psaFmDQhngLncW/lDNTToj2 Bk+8nepqu7OMTaLZkHrBBFizoXMNDi3T7luNrjvPr3KnMx4Vs3XeW+Pm1+d4fGyl LnWEW7uYIY+5MVJmxT3HCbXcqW2Kz+0q4VeL+lHZG/R8HC/FciIBsetMAU5v94Ze H026y1k9k0XdoHt13EK74dBXwehV0jZsKpyhGsCUIrQEK8yYm+vWBNRIKZaLLQ9/ +PddFCZ/X/48pY7+NDJClMioaIhwEzcPkMnZXCakSiSe -----END CERTIFICATE-----Generated at Wed Jan 21 18:22:11 2026 by rpki-client