This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/e6DifeT6RtDWYOqt7WpZKVdgD4s.roa File: e6DifeT6RtDWYOqt7WpZKVdgD4s.roa (raw, json) Hash identifier: i9svsXFfDpE9QAUeELGmU1bul00M5b1EL+ypKkGNAdY= Subject key identifier: 7B:A0:E2:7D:E4:FA:46:D0:D6:60:EA:AD:ED:6A:59:29:57:60:0F:8B Certificate issuer: /CN=1954e32570bbfb9af11c2381e81c797c2f40087c Certificate serial: 019B7CED23349F68225BA561D7129144BB18 Authority key identifier: 19:54:E3:25:70:BB:FB:9A:F1:1C:23:81:E8:1C:79:7C:2F:40:08:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/e6DifeT6RtDWYOqt7WpZKVdgD4s.roa Signing time: Fri 02 Jan 2026 04:17:54 +0000 ROA not before: Fri 02 Jan 2026 04:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 144.2.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.mft rsync://rpki.ripe.net/repository/DEFAULT/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:23:34:9f:68:22:5b:a5:61:d7:12:91:44:bb:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1954e32570bbfb9af11c2381e81c797c2f40087c Validity Not Before: Jan 2 04:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ba0e27de4fa46d0d660eaaded6a592957600f8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:80:9d:f6:c4:9b:ec:c3:88:18:bc:b2:b2:6c: fe:a2:31:2a:c8:bf:b2:6b:fa:29:3a:e2:0f:99:3d: 14:d5:97:27:0a:57:b6:38:58:a2:3a:87:d2:10:e9: 51:b6:c1:bb:0f:83:8c:c0:78:0e:19:7e:25:a2:e1: 12:e3:3e:18:df:53:23:81:0c:89:07:ea:5d:79:4d: 0a:72:07:1d:e6:1a:85:11:19:cd:6f:a6:16:a5:9b: c9:f7:2f:75:95:59:84:82:ac:da:6c:d2:85:a4:01: 4d:a2:9d:6f:4e:07:41:dd:81:0b:f1:4c:b7:fd:c4: 1e:f9:40:21:b8:41:ef:b0:fc:9f:94:8d:18:cc:06: 51:cd:b0:28:5e:2a:cb:24:f2:66:ca:4b:09:cf:94: 09:79:d8:d8:7b:18:0c:0f:2b:6a:01:e6:8f:ed:67: a0:09:78:16:4c:e7:97:21:59:b0:30:36:36:5a:91: a5:32:8f:2b:cf:90:37:68:7f:3c:d3:f2:08:81:4d: 7d:60:86:46:fa:e9:60:84:de:b5:4e:bc:7c:58:e6: 58:41:15:be:75:1a:ab:58:6a:06:07:50:28:6d:46: 4d:2a:f9:37:e0:be:fc:20:29:c7:f9:ba:b4:1b:8b: 6f:fd:e0:8a:73:6e:72:4a:a4:f0:c0:12:b6:43:13: e0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:A0:E2:7D:E4:FA:46:D0:D6:60:EA:AD:ED:6A:59:29:57:60:0F:8B X509v3 Authority Key Identifier: keyid:19:54:E3:25:70:BB:FB:9A:F1:1C:23:81:E8:1C:79:7C:2F:40:08:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/e6DifeT6RtDWYOqt7WpZKVdgD4s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.2.170.0/24 Signature Algorithm: sha256WithRSAEncryption 73:ca:8f:d5:e9:6b:85:93:fc:f9:4a:df:44:f8:e7:59:a4:47: d7:c7:a7:38:13:b6:46:e6:f7:eb:65:e4:9e:9b:67:07:c3:18: ac:87:fb:cd:b0:26:07:69:26:f8:be:b6:31:da:f8:44:c9:d1: 4b:d9:21:e5:97:8b:0c:3b:e4:6e:59:f1:4f:0e:4e:60:d2:06: 64:63:46:2c:41:2c:c6:6d:ad:c6:dc:fc:63:12:74:6e:2b:e1: 9b:cd:cf:53:ad:ec:8c:ac:96:02:6f:58:db:3b:7d:a2:66:79: 3a:1a:28:22:a3:15:f6:8f:7d:d6:14:6f:72:89:0f:03:12:42: 8a:c9:92:95:9a:da:76:bd:aa:9b:78:3e:39:ed:22:7b:b3:35: aa:ca:d4:c7:67:57:2a:e9:3c:44:a3:52:8d:91:5d:4e:64:c9: 77:22:1b:fa:15:e5:d2:60:04:ff:a7:07:1b:c2:9b:be:8d:2e: b9:cf:41:12:94:25:38:07:5b:f8:98:f6:a4:cf:1a:09:fb:ae: 35:23:87:f5:c6:56:cb:bd:d0:ce:48:73:ee:90:1d:3c:95:39: 43:bb:42:de:43:e1:ba:80:5b:a7:c1:eb:41:6b:59:93:c3:2e: 55:0e:1b:5d:9c:80:e9:cf:92:61:97:d1:a0:9d:e5:e9:17:7b: 31:61:5e:50 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87SM0n2giW6Vh1xKRRLsYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NTRlMzI1NzBiYmZiOWFmMTFjMjM4MWU4MWM3OTdjMmY0 MDA4N2MwHhcNMjYwMTAyMDQxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YmEwZTI3ZGU0ZmE0NmQwZDY2MGVhYWRlZDZhNTkyOTU3NjAwZjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6YCd9sSb7MOIGLyysmz+ojEqyL+y a/opOuIPmT0U1ZcnCle2OFiiOofSEOlRtsG7D4OMwHgOGX4louES4z4Y31MjgQyJ B+pdeU0Kcgcd5hqFERnNb6YWpZvJ9y91lVmEgqzabNKFpAFNop1vTgdB3YEL8Uy3 /cQe+UAhuEHvsPyflI0YzAZRzbAoXirLJPJmyksJz5QJedjYexgMDytqAeaP7Weg CXgWTOeXIVmwMDY2WpGlMo8rz5A3aH880/IIgU19YIZG+ulghN61Trx8WOZYQRW+ dRqrWGoGB1AobUZNKvk34L78ICnH+bq0G4tv/eCKc25ySqTwwBK2QxPg6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHug4n3k+kbQ1mDqre1qWSlXYA+LMB8GA1UdIwQY MBaAFBlU4yVwu/ua8RwjgegceXwvQAh8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1ZUakpYQzctNXJ4SENPQjZCeDVmQzlBQ0h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC81YzdjN2QtNGQyZS00ODNjLTg5Y2Qt MjY4MTZjYTkyY2EwLzEvZTZEaWZlVDZSdERXWU9xdDdXcFpLVmRnRDRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC81YzdjN2QtNGQyZS00ODNjLTg5Y2QtMjY4MTZjYTkyY2Ew LzEvR1ZUakpYQzctNXJ4SENPQjZCeDVmQzlBQ0h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkAKqMA0G CSqGSIb3DQEBCwUAA4IBAQBzyo/V6WuFk/z5St9E+OdZpEfXx6c4E7ZG5vfrZeSe m2cHwxish/vNsCYHaSb4vrYx2vhEydFL2SHll4sMO+RuWfFPDk5g0gZkY0YsQSzG ba3G3PxjEnRuK+Gbzc9TreyMrJYCb1jbO32iZnk6GigioxX2j33WFG9yiQ8DEkKK yZKVmtp2vaqbeD457SJ7szWqytTHZ1cq6TxEo1KNkV1OZMl3Ihv6FeXSYAT/pwcb wpu+jS65z0ESlCU4B1v4mPakzxoJ+641I4f1xlbLvdDOSHPukB08lTlDu0LeQ+G6 gFunwetBa1mTwy5VDhtdnIDpz5Jhl9GgneXpF3sxYV5Q -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:42 2026 by rpki-client