This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/xuh6sRkHSsQPLZas7QrHkiH1T2k.roa File: xuh6sRkHSsQPLZas7QrHkiH1T2k.roa (raw, json) Hash identifier: /cp/uJIEUnczl8mvWtL8aIuZWLWYTpcWWurRsAFLXiA= Subject key identifier: C6:E8:7A:B1:19:07:4A:C4:0F:2D:96:AC:ED:0A:C7:92:21:F5:4F:69 Certificate issuer: /CN=bea649ef6030fc80848fdfe21d4321ac8011fd10 Certificate serial: 019B7F83301D5888B29E3293EB270976829A Authority key identifier: BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/xuh6sRkHSsQPLZas7QrHkiH1T2k.roa Signing time: Fri 02 Jan 2026 16:21:02 +0000 ROA not before: Fri 02 Jan 2026 16:21:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208627 IP address blocks: 45.91.126.0/24 maxlen: 24 2a0e:f42::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 01:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:30:1d:58:88:b2:9e:32:93:eb:27:09:76:82:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bea649ef6030fc80848fdfe21d4321ac8011fd10 Validity Not Before: Jan 2 16:21:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6e87ab119074ac40f2d96aced0ac79221f54f69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:80:23:92:d7:1c:4f:fe:b1:6d:de:08:e5:f5: 8c:55:e8:84:89:93:4f:ba:57:0e:e7:c6:fe:43:c5: d0:10:f2:e9:ba:dd:b9:8b:d8:94:3d:ea:68:34:55: 2a:26:05:48:5c:42:51:5a:aa:48:58:a3:14:fd:4b: f6:72:4f:7a:f9:09:8c:af:a9:2f:b8:f2:6c:d9:c1: e2:2b:ab:8a:46:d1:40:22:a3:73:12:7c:ee:53:cd: 5a:5e:cd:8a:72:fa:ec:f5:6b:22:cd:61:05:f4:a3: 96:3f:fd:40:26:a9:74:17:bc:8c:84:34:db:26:44: 52:2f:c8:a7:1c:57:23:32:68:01:f0:77:95:d3:58: a8:96:d7:85:ba:8c:0b:2b:74:74:05:6c:c7:64:08: 51:d9:0b:67:35:f1:72:9c:2f:d1:bc:80:fc:f3:3a: db:96:82:44:c1:a3:05:02:34:f9:6d:10:a0:a1:ba: 4a:07:58:4f:2e:cc:5b:6e:f3:83:c5:7c:e8:d2:28: 3f:c6:72:23:ed:49:53:eb:d4:e4:f6:46:dd:f6:22: 5e:72:f0:a9:d9:50:ee:21:62:9f:ce:c2:f0:eb:81: 29:85:74:b6:c5:b9:54:5b:ea:82:a8:0f:c6:52:28: 51:ac:ef:a2:48:d9:02:2b:74:52:39:2b:6e:71:11: f0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E8:7A:B1:19:07:4A:C4:0F:2D:96:AC:ED:0A:C7:92:21:F5:4F:69 X509v3 Authority Key Identifier: keyid:BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/xuh6sRkHSsQPLZas7QrHkiH1T2k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.126.0/24 IPv6: 2a0e:f42::/32 Signature Algorithm: sha256WithRSAEncryption ac:a1:c3:31:7f:90:0b:b0:7f:2f:e2:ec:4b:f3:81:0a:21:bb: c6:96:5a:9b:83:1e:d3:23:18:e3:ff:d9:05:ed:e8:3f:11:59: 5a:2a:f8:4c:85:15:ec:19:ce:8f:40:7d:27:b2:19:11:7c:45: ef:00:68:03:ad:62:ad:1e:04:3c:24:fd:0b:65:37:47:f8:0b: 11:51:7f:42:45:45:9b:c7:13:23:20:4d:7c:e9:d6:5c:8f:5f: d0:e9:99:8c:76:19:39:85:aa:cd:6d:5b:d2:34:af:ab:a7:ae: 8c:26:68:64:ac:9c:51:09:85:b9:b2:76:60:7c:fb:58:54:e0: 22:7a:87:0a:9f:ec:33:0e:3b:5c:ba:4d:6b:21:f3:11:ce:68: 15:57:bc:60:81:57:b0:88:7e:9f:65:b2:a9:c5:36:87:25:93: db:2c:8f:ba:c6:14:5d:3b:89:c3:c6:97:7b:d2:22:f0:d1:37: ec:4d:65:6f:39:fd:7f:d3:22:dd:e8:f0:3e:ec:9e:00:c2:e7: 28:b7:bf:d4:74:12:d3:ad:82:e6:4e:f2:f9:3c:f6:ad:a6:5e: 94:41:4e:69:94:dc:b5:b3:e2:8e:df:bd:53:cb:f0:13:76:f8: 28:d3:1b:00:c9:69:16:ee:d1:ca:54:cd:4d:2d:02:6a:9f:63: 13:17:f5:d0 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/gzAdWIiynjKT6ycJdoKaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlYTY0OWVmNjAzMGZjODA4NDhmZGZlMjFkNDMyMWFjODAx MWZkMTAwHhcNMjYwMTAyMTYyMTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmU4N2FiMTE5MDc0YWM0MGYyZDk2YWNlZDBhYzc5MjIxZjU0ZjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oAjktccT/6xbd4I5fWMVeiEiZNP ulcO58b+Q8XQEPLput25i9iUPepoNFUqJgVIXEJRWqpIWKMU/Uv2ck96+QmMr6kv uPJs2cHiK6uKRtFAIqNzEnzuU81aXs2Kcvrs9WsizWEF9KOWP/1AJql0F7yMhDTb JkRSL8inHFcjMmgB8HeV01iolteFuowLK3R0BWzHZAhR2QtnNfFynC/RvID88zrb loJEwaMFAjT5bRCgobpKB1hPLsxbbvODxXzo0ig/xnIj7UlT69Tk9kbd9iJecvCp 2VDuIWKfzsLw64EphXS2xblUW+qCqA/GUihRrO+iSNkCK3RSOStucRHwnQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMboerEZB0rEDy2WrO0Kx5Ih9U9pMB8GA1UdIwQY MBaAFL6mSe9gMPyAhI/f4h1DIayAEf0QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnFaSjcyQXdfSUNFajlfaUhVTWhySUFSX1JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xOTQ1NWItZDJjZi00ZTVmLWJmNTgt MjFkZjU1YmE5ZWJmLzEveHVoNnNSa0hTc1FQTFphczdRckhraUgxVDJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8xOTQ1NWItZDJjZi00ZTVmLWJmNTgtMjFkZjU1YmE5ZWJm LzEvdnFaSjcyQXdfSUNFajlfaUhVTWhySUFSX1JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALVt+MA0E AgACMAcDBQAqDg9CMA0GCSqGSIb3DQEBCwUAA4IBAQCsocMxf5ALsH8v4uxL84EK IbvGllqbgx7TIxjj/9kF7eg/EVlaKvhMhRXsGc6PQH0nshkRfEXvAGgDrWKtHgQ8 JP0LZTdH+AsRUX9CRUWbxxMjIE186dZcj1/Q6ZmMdhk5harNbVvSNK+rp66MJmhk rJxRCYW5snZgfPtYVOAieocKn+wzDjtcuk1rIfMRzmgVV7xggVewiH6fZbKpxTaH JZPbLI+6xhRdO4nDxpd70iLw0TfsTWVvOf1/0yLd6PA+7J4Awucot7/UdBLTrYLm TvL5PPatpl6UQU5plNy1s+KO371Ty/ATdvgo0xsAyWkW7tHKVM1NLQJqn2MTF/XQ -----END CERTIFICATE-----Generated at Wed Jan 21 10:34:29 2026 by rpki-client