This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/D6BGr-5dJZvETpMbA__Q61SK3f4.roa File: D6BGr-5dJZvETpMbA__Q61SK3f4.roa (raw, json) Hash identifier: zOFmPuRjAmwk6FKGKP0FAzMgJQg9lT91lc24vYQHaUc= Subject key identifier: 0F:A0:46:AF:EE:5D:25:9B:C4:4E:93:1B:03:FF:D0:EB:54:8A:DD:FE Certificate issuer: /CN=9c1ee4d39cfaa1b3ac799c17f7882b8ce4e28120 Certificate serial: 019B79ED6366CEC5D35835A5610A4E935812 Authority key identifier: 9C:1E:E4:D3:9C:FA:A1:B3:AC:79:9C:17:F7:88:2B:8C:E4:E2:81:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nB7k05z6obOseZwX94grjOTigSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/D6BGr-5dJZvETpMbA__Q61SK3f4.roa Signing time: Thu 01 Jan 2026 14:19:19 +0000 ROA not before: Thu 01 Jan 2026 14:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208770 IP address blocks: 45.85.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.mft rsync://rpki.ripe.net/repository/DEFAULT/nB7k05z6obOseZwX94grjOTigSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:63:66:ce:c5:d3:58:35:a5:61:0a:4e:93:58:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c1ee4d39cfaa1b3ac799c17f7882b8ce4e28120 Validity Not Before: Jan 1 14:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0fa046afee5d259bc44e931b03ffd0eb548addfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fd:a7:90:87:a7:53:1f:39:8a:72:5d:71:fb: a3:1b:55:ce:4e:a7:62:59:94:df:c0:03:12:82:10: a2:10:10:9b:1b:41:55:aa:d2:b0:81:b6:54:6c:3f: d0:10:f8:41:ff:84:c7:05:ba:12:71:60:13:ca:11: be:bf:ae:bc:c2:16:dd:f0:fb:29:ec:3d:c8:42:2b: 22:54:ee:95:98:cf:85:77:20:77:ad:a4:5a:23:1e: 2c:87:66:0c:cc:79:ea:eb:ff:b4:ba:b6:88:49:ad: 43:2e:35:dd:d2:61:d6:6c:31:ea:13:99:1b:c9:3d: d6:b6:b8:91:b0:36:cc:52:ab:3b:03:0d:94:a2:cd: 6b:f5:4f:37:0e:37:5f:86:6e:b0:dd:a5:39:78:31: cd:42:84:70:2c:6b:a0:2b:4d:bf:45:b9:e2:09:ab: a5:af:0f:7e:99:33:8b:cb:da:8e:29:4e:92:ac:26: 70:bf:ba:1b:73:ed:5c:f5:95:91:d0:8b:31:b2:34: ea:80:e2:67:b5:26:62:75:4c:0f:ef:13:68:bf:84: e5:0f:04:da:ff:28:73:44:3d:13:ea:12:dc:b2:fa: 94:98:4f:44:e1:28:dd:80:c8:3d:8b:cf:1d:2f:70: 0d:fa:4c:cb:69:b3:f2:53:65:d3:63:48:00:fe:14: 34:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:A0:46:AF:EE:5D:25:9B:C4:4E:93:1B:03:FF:D0:EB:54:8A:DD:FE X509v3 Authority Key Identifier: keyid:9C:1E:E4:D3:9C:FA:A1:B3:AC:79:9C:17:F7:88:2B:8C:E4:E2:81:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nB7k05z6obOseZwX94grjOTigSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/D6BGr-5dJZvETpMbA__Q61SK3f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.196.0/22 Signature Algorithm: sha256WithRSAEncryption 09:76:e3:9f:87:59:f7:de:5f:ec:1c:3d:c6:8b:e4:18:0c:a6: d6:7a:1a:4e:c5:ea:78:c6:53:80:51:69:70:31:8e:39:2f:e0: 18:11:7b:26:06:93:57:8a:e9:18:2e:eb:d8:ea:e4:e8:5b:f9: 2d:55:8d:69:3f:1c:e4:2a:e8:24:ac:99:c6:f8:4c:83:7b:34: 71:17:ef:b1:41:dd:60:63:28:4d:e8:e0:fe:2a:18:ad:60:e9: e1:96:ac:10:97:45:0d:e7:48:23:a7:0a:af:98:41:c8:54:fe: 38:cd:0d:c7:52:1a:70:64:ee:02:f1:28:13:8f:35:8d:5c:63: 16:66:3f:1f:3a:4b:28:d6:86:cf:6c:a0:03:91:3f:7c:35:da: 9a:ad:44:8a:6e:92:b0:da:a2:30:e1:31:77:b6:84:ad:e6:26: db:ca:55:9e:b7:85:5c:17:21:ea:4d:43:fb:7a:e1:2a:4c:28: 03:be:dc:f2:de:14:38:2f:2c:4c:71:7c:7e:43:b3:46:dc:86: 6b:04:45:cb:d9:71:6e:2d:76:f4:cb:d2:af:bd:46:fe:22:4a: 49:0e:ac:f8:9f:3f:0b:fe:fe:83:f1:78:eb:76:de:fa:bb:41: 11:24:d3:25:14:02:b4:96:04:16:fb:bb:2d:cf:4c:eb:2f:c7: ea:52:c7:41 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57WNmzsXTWDWlYQpOk1gSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljMWVlNGQzOWNmYWExYjNhYzc5OWMxN2Y3ODgyYjhjZTRl MjgxMjAwHhcNMjYwMTAxMTQxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZmEwNDZhZmVlNWQyNTliYzQ0ZTkzMWIwM2ZmZDBlYjU0OGFkZGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArv2nkIenUx85inJdcfujG1XOTqdi WZTfwAMSghCiEBCbG0FVqtKwgbZUbD/QEPhB/4THBboScWATyhG+v668whbd8Psp 7D3IQisiVO6VmM+FdyB3raRaIx4sh2YMzHnq6/+0uraISa1DLjXd0mHWbDHqE5kb yT3WtriRsDbMUqs7Aw2Uos1r9U83Djdfhm6w3aU5eDHNQoRwLGugK02/RbniCaul rw9+mTOLy9qOKU6SrCZwv7obc+1c9ZWR0IsxsjTqgOJntSZidUwP7xNov4TlDwTa /yhzRD0T6hLcsvqUmE9E4SjdgMg9i88dL3AN+kzLabPyU2XTY0gA/hQ0+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA+gRq/uXSWbxE6TGwP/0OtUit3+MB8GA1UdIwQY MBaAFJwe5NOc+qGzrHmcF/eIK4zk4oEgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkI3azA1ejZvYk9zZVp3WDk0Z3JqT1RpZ1NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9iYjk3ZDktN2I4MS00NDlmLTkwNjAt YmQ0NjVjZTcxMWJiLzEvRDZCR3ItNWRKWnZFVHBNYkFfX1E2MVNLM2Y0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9iYjk3ZDktN2I4MS00NDlmLTkwNjAtYmQ0NjVjZTcxMWJi LzEvbkI3azA1ejZvYk9zZVp3WDk0Z3JqT1RpZ1NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVXEMA0G CSqGSIb3DQEBCwUAA4IBAQAJduOfh1n33l/sHD3Gi+QYDKbWehpOxep4xlOAUWlw MY45L+AYEXsmBpNXiukYLuvY6uToW/ktVY1pPxzkKugkrJnG+EyDezRxF++xQd1g YyhN6OD+KhitYOnhlqwQl0UN50gjpwqvmEHIVP44zQ3HUhpwZO4C8SgTjzWNXGMW Zj8fOkso1obPbKADkT98NdqarUSKbpKw2qIw4TF3toSt5ibbylWet4VcFyHqTUP7 euEqTCgDvtzy3hQ4LyxMcXx+Q7NG3IZrBEXL2XFuLXb0y9KvvUb+IkpJDqz4nz8L /v6D8Xjrdt76u0ERJNMlFAK0lgQW+7stz0zrL8fqUsdB -----END CERTIFICATE-----Generated at Mon Feb 9 18:22:30 2026 by rpki-client