This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/6p0Coa8WgXiwwxdUvsd1X8Ybt58.roa File: 6p0Coa8WgXiwwxdUvsd1X8Ybt58.roa (raw, json) Hash identifier: 3Cayb9jMUgKGM8WDjcto+qSMUyrZE7ZyZEp5pOroe+w= Subject key identifier: EA:9D:02:A1:AF:16:81:78:B0:C3:17:54:BE:C7:75:5F:C6:1B:B7:9F Certificate issuer: /CN=19610d638e2a2f95a3d90e4cff9959a859fac4f0 Certificate serial: 019B7BA3D47E153DC5BA3116E7C16D7F96C3 Authority key identifier: 19:61:0D:63:8E:2A:2F:95:A3:D9:0E:4C:FF:99:59:A8:59:FA:C4:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWENY44qL5Wj2Q5M_5lZqFn6xPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/6p0Coa8WgXiwwxdUvsd1X8Ybt58.roa Signing time: Thu 01 Jan 2026 22:18:12 +0000 ROA not before: Thu 01 Jan 2026 22:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 45.144.204.0/24 maxlen: 24 45.144.205.0/24 maxlen: 24 45.144.206.0/24 maxlen: 24 45.144.207.0/24 maxlen: 24 45.152.156.0/24 maxlen: 24 45.152.157.0/24 maxlen: 24 45.152.158.0/24 maxlen: 24 45.152.159.0/24 maxlen: 24 185.158.252.0/24 maxlen: 24 185.158.253.0/24 maxlen: 24 185.158.254.0/24 maxlen: 24 185.158.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.mft rsync://rpki.ripe.net/repository/DEFAULT/GWENY44qL5Wj2Q5M_5lZqFn6xPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 13:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:d4:7e:15:3d:c5:ba:31:16:e7:c1:6d:7f:96:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19610d638e2a2f95a3d90e4cff9959a859fac4f0 Validity Not Before: Jan 1 22:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea9d02a1af168178b0c31754bec7755fc61bb79f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:31:5c:a3:9b:ed:84:33:a3:7f:1c:32:0c:71: 99:3b:d9:fb:c1:89:3e:a2:c1:d4:65:33:57:63:d0: b1:11:76:49:2d:24:45:cd:5d:3c:5c:4c:79:22:fb: 1d:b6:3a:8f:f1:04:71:ce:95:de:43:02:e5:f3:9d: 25:c0:56:4e:06:fd:c7:ad:55:cb:d9:5a:e5:bf:02: 71:e9:64:5f:0e:c6:b9:e9:3c:c6:bd:fe:de:c2:f1: 94:7a:c1:a4:b2:b3:49:62:6e:7d:7e:90:14:4e:96: 87:7f:1a:e8:1d:9f:8e:c9:ac:53:89:b0:a9:49:80: 29:85:4c:6c:2a:a5:99:1c:4b:f1:83:84:60:e7:40: c5:df:c2:06:7c:4f:c3:0c:86:29:1f:bb:8b:25:02: 46:af:47:ee:e7:ef:88:b5:16:12:90:61:44:e0:de: 14:3e:f2:6c:d9:39:5c:11:87:4b:9f:7f:a9:79:23: d6:5f:37:2e:2c:4e:93:d5:e8:c0:98:79:03:6a:d6: 1e:56:e4:a3:72:63:bd:0d:76:a3:84:41:bc:fd:d6: 6f:09:08:d3:50:65:d1:65:c9:89:a5:a7:66:20:44: ad:4f:b3:d4:4b:f8:53:f8:f5:ac:64:d1:c0:6b:a1: bb:7b:30:6d:88:9a:0e:3d:0e:9d:6c:a6:ab:06:3d: 91:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:9D:02:A1:AF:16:81:78:B0:C3:17:54:BE:C7:75:5F:C6:1B:B7:9F X509v3 Authority Key Identifier: keyid:19:61:0D:63:8E:2A:2F:95:A3:D9:0E:4C:FF:99:59:A8:59:FA:C4:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWENY44qL5Wj2Q5M_5lZqFn6xPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/6p0Coa8WgXiwwxdUvsd1X8Ybt58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.144.204.0/22 45.152.156.0/22 185.158.252.0/22 Signature Algorithm: sha256WithRSAEncryption a7:6b:bb:68:18:60:9f:e4:27:0d:69:33:f5:2e:29:68:36:83: 21:22:14:93:2a:a7:96:d8:06:57:92:92:39:fa:34:83:de:7e: 68:90:fd:4e:f9:ae:b9:88:c8:be:66:67:8b:b9:5d:0c:f4:26: 95:5a:d2:23:9b:c7:8f:14:9f:12:00:81:c2:08:8d:df:65:4b: 56:c8:38:e1:bc:30:85:3a:df:8c:2c:a6:22:e8:94:14:b4:68: 4f:ba:38:cb:27:93:3e:2d:f2:53:86:35:a3:1b:99:89:fe:d3: 23:85:da:3c:d4:be:ab:9d:1c:60:7d:99:71:34:86:14:9b:10: 15:c8:08:7f:ea:ba:27:97:ae:3d:23:b6:18:7e:18:50:62:a1: ee:49:10:39:43:cf:14:6f:92:20:12:1d:7b:de:0d:d7:85:3e: 31:1d:8c:83:78:87:62:f5:6d:ad:0e:64:03:4d:48:86:85:10: 12:e5:54:61:4f:ec:56:0e:72:8b:a4:99:ac:33:be:d7:8b:0d: 80:af:18:9a:c7:ba:4f:19:6b:e7:ca:4a:b0:4b:52:ea:de:89: af:45:1f:26:40:00:ef:fc:ea:7e:27:12:89:56:52:2d:ea:38: b1:84:b9:70:b0:b8:da:20:03:ee:f7:6b:86:18:7c:99:5d:49: ca:ea:2c:b0 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7o9R+FT3FujEW58Ftf5bDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NjEwZDYzOGUyYTJmOTVhM2Q5MGU0Y2ZmOTk1OWE4NTlm YWM0ZjAwHhcNMjYwMTAxMjIxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTlkMDJhMWFmMTY4MTc4YjBjMzE3NTRiZWM3NzU1ZmM2MWJiNzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDFco5vthDOjfxwyDHGZO9n7wYk+ osHUZTNXY9CxEXZJLSRFzV08XEx5IvsdtjqP8QRxzpXeQwLl850lwFZOBv3HrVXL 2VrlvwJx6WRfDsa56TzGvf7ewvGUesGksrNJYm59fpAUTpaHfxroHZ+OyaxTibCp SYAphUxsKqWZHEvxg4Rg50DF38IGfE/DDIYpH7uLJQJGr0fu5++ItRYSkGFE4N4U PvJs2TlcEYdLn3+peSPWXzcuLE6T1ejAmHkDatYeVuSjcmO9DXajhEG8/dZvCQjT UGXRZcmJpadmIEStT7PUS/hT+PWsZNHAa6G7ezBtiJoOPQ6dbKarBj2R0wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOqdAqGvFoF4sMMXVL7HdV/GG7efMB8GA1UdIwQY MBaAFBlhDWOOKi+Vo9kOTP+ZWahZ+sTwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1dFTlk0NHFMNVdqMlE1TV81bFpxRm42eFBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9hZTE4YWEtN2MxNS00Nzc1LThmYzUt NzcyZGNkM2FmNWY2LzEvNnAwQ29hOFdnWGl3d3hkVXZzZDFYOFlidDU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9hZTE4YWEtN2MxNS00Nzc1LThmYzUtNzcyZGNkM2FmNWY2 LzEvR1dFTlk0NHFMNVdqMlE1TV81bFpxRm42eFBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLZDMAwQC LZicAwQCuZ78MA0GCSqGSIb3DQEBCwUAA4IBAQCna7toGGCf5CcNaTP1LiloNoMh IhSTKqeW2AZXkpI5+jSD3n5okP1O+a65iMi+ZmeLuV0M9CaVWtIjm8ePFJ8SAIHC CI3fZUtWyDjhvDCFOt+MLKYi6JQUtGhPujjLJ5M+LfJThjWjG5mJ/tMjhdo81L6r nRxgfZlxNIYUmxAVyAh/6ronl649I7YYfhhQYqHuSRA5Q88Ub5IgEh173g3XhT4x HYyDeIdi9W2tDmQDTUiGhRAS5VRhT+xWDnKLpJmsM77Xiw2Arxiax7pPGWvnykqw S1Lq3omvRR8mQADv/Op+JxKJVlIt6jixhLlwsLjaIAPu92uGGHyZXUnK6iyw -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:33 2026 by rpki-client