This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/6aiY7xcGMBhwSg811tAap0q5YOE.roa File: 6aiY7xcGMBhwSg811tAap0q5YOE.roa (raw, json) Hash identifier: 5uK3tyYvucJWaPpSSYb7UKyYwuwhu+iE+thzsmoLCeU= Subject key identifier: E9:A8:98:EF:17:06:30:18:70:4A:0F:35:D6:D0:1A:A7:4A:B9:60:E1 Certificate issuer: /CN=bea649ef6030fc80848fdfe21d4321ac8011fd10 Certificate serial: 019B7F83308220B2C6F0E811532E93B732B6 Authority key identifier: BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/6aiY7xcGMBhwSg811tAap0q5YOE.roa Signing time: Fri 02 Jan 2026 16:21:02 +0000 ROA not before: Fri 02 Jan 2026 16:21:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209559 IP address blocks: 45.91.127.0/24 maxlen: 24 2a0e:f43:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 01:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:30:82:20:b2:c6:f0:e8:11:53:2e:93:b7:32:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bea649ef6030fc80848fdfe21d4321ac8011fd10 Validity Not Before: Jan 2 16:21:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e9a898ef17063018704a0f35d6d01aa74ab960e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:cb:3a:95:bf:10:f3:20:30:cd:82:d8:4c:08: 31:43:f6:ee:05:f1:90:fe:7a:00:66:84:20:8a:5f: 22:81:1c:86:0b:c5:e8:50:63:0d:de:92:9c:fa:1e: 1b:cb:c8:f6:61:d5:b9:60:84:d0:f3:28:a2:34:2e: 87:a6:22:01:1d:6f:6d:73:a5:4d:b4:1b:d1:f3:e4: 43:ff:63:e6:a7:92:9e:08:b5:4c:00:74:7e:fe:83: 86:6b:70:aa:6e:08:60:90:d1:b2:f8:f0:6b:b5:49: 14:e8:cc:29:35:15:25:5e:6f:a3:d4:43:14:62:57: f3:65:12:fe:18:ad:ed:c5:c3:e9:9a:ac:72:0b:7c: 5d:4b:99:16:42:57:e4:3d:73:51:a3:47:c7:97:d6: a8:ee:1d:a7:64:f0:8d:35:88:da:b0:13:54:50:ce: 9d:5a:a1:52:16:eb:eb:36:f0:21:3f:30:c2:63:98: 77:b3:b1:f3:a5:53:91:a2:12:e0:1e:51:7d:14:17: c9:f1:ea:27:02:5b:49:b0:73:26:5a:16:df:e6:d3: 7e:6e:d3:9f:f1:50:da:c4:75:5a:f3:6a:8a:95:ee: 80:18:54:03:e7:e8:27:d0:5d:9e:39:d5:18:d1:77: c6:83:8b:21:b3:b8:28:85:57:6c:e5:50:1d:06:49: 81:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:A8:98:EF:17:06:30:18:70:4A:0F:35:D6:D0:1A:A7:4A:B9:60:E1 X509v3 Authority Key Identifier: keyid:BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/6aiY7xcGMBhwSg811tAap0q5YOE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.127.0/24 IPv6: 2a0e:f43:2::/48 Signature Algorithm: sha256WithRSAEncryption 41:e8:52:ef:0a:59:bb:f3:b8:72:e9:45:a2:88:62:8a:27:96: a1:fb:83:93:d3:5c:8e:d5:05:0a:0a:b3:62:8c:41:ee:89:52: a1:d6:f7:fd:f1:a3:46:9f:d0:c4:a1:52:d4:58:de:56:92:a4: e3:61:65:73:b5:6d:e3:83:89:9a:82:8b:ca:87:29:67:44:47: 37:aa:a2:1e:69:50:ff:07:21:55:fb:39:23:35:7e:12:14:88: 32:3a:e0:d7:22:d0:28:cf:86:5d:75:74:58:7d:ba:0d:18:f0: 07:36:b0:9c:4d:2a:9d:71:3c:81:1b:6c:c2:31:bd:13:8e:f7: 9a:cb:4f:15:a4:b6:a0:32:5c:53:c1:73:7a:aa:c0:40:f6:8e: a4:29:e8:0c:ee:da:aa:66:2d:d9:df:ff:34:47:0e:fc:2a:73: ec:6f:87:34:45:97:4f:bd:d1:32:01:7d:15:07:3c:43:09:db: e5:c0:63:b9:98:b5:fe:f6:fa:60:59:5b:f0:e0:ad:c0:d3:a9: b1:d3:66:41:5f:de:63:20:63:d3:62:af:b8:68:de:55:9b:c3: 40:66:a8:85:bc:75:0b:f4:55:2d:db:ca:0a:59:2c:10:05:30: d4:50:aa:c0:96:81:5b:83:a8:4d:c5:59:92:f3:96:ff:33:a5: 7d:92:44:89 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/gzCCILLG8OgRUy6TtzK2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlYTY0OWVmNjAzMGZjODA4NDhmZGZlMjFkNDMyMWFjODAx MWZkMTAwHhcNMjYwMTAyMTYyMTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOWE4OThlZjE3MDYzMDE4NzA0YTBmMzVkNmQwMWFhNzRhYjk2MGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA78s6lb8Q8yAwzYLYTAgxQ/buBfGQ /noAZoQgil8igRyGC8XoUGMN3pKc+h4by8j2YdW5YITQ8yiiNC6HpiIBHW9tc6VN tBvR8+RD/2Pmp5KeCLVMAHR+/oOGa3CqbghgkNGy+PBrtUkU6MwpNRUlXm+j1EMU YlfzZRL+GK3txcPpmqxyC3xdS5kWQlfkPXNRo0fHl9ao7h2nZPCNNYjasBNUUM6d WqFSFuvrNvAhPzDCY5h3s7HzpVORohLgHlF9FBfJ8eonAltJsHMmWhbf5tN+btOf 8VDaxHVa82qKle6AGFQD5+gn0F2eOdUY0XfGg4shs7gohVds5VAdBkmBfwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFOmomO8XBjAYcEoPNdbQGqdKuWDhMB8GA1UdIwQY MBaAFL6mSe9gMPyAhI/f4h1DIayAEf0QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnFaSjcyQXdfSUNFajlfaUhVTWhySUFSX1JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xOTQ1NWItZDJjZi00ZTVmLWJmNTgt MjFkZjU1YmE5ZWJmLzEvNmFpWTd4Y0dNQmh3U2c4MTF0QWFwMHE1WU9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8xOTQ1NWItZDJjZi00ZTVmLWJmNTgtMjFkZjU1YmE5ZWJm LzEvdnFaSjcyQXdfSUNFajlfaUhVTWhySUFSX1JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALVt/MA8E AgACMAkDBwAqDg9DAAIwDQYJKoZIhvcNAQELBQADggEBAEHoUu8KWbvzuHLpRaKI YoonlqH7g5PTXI7VBQoKs2KMQe6JUqHW9/3xo0af0MShUtRY3laSpONhZXO1beOD iZqCi8qHKWdERzeqoh5pUP8HIVX7OSM1fhIUiDI64Nci0CjPhl11dFh9ug0Y8Ac2 sJxNKp1xPIEbbMIxvROO95rLTxWktqAyXFPBc3qqwED2jqQp6Azu2qpmLdnf/zRH Dvwqc+xvhzRFl0+90TIBfRUHPEMJ2+XAY7mYtf72+mBZW/DgrcDTqbHTZkFf3mMg Y9Nir7ho3lWbw0BmqIW8dQv0VS3bygpZLBAFMNRQqsCWgVuDqE3FWZLzlv8zpX2S RIk= -----END CERTIFICATE-----Generated at Wed Jan 21 10:35:11 2026 by rpki-client