This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/6wUOIPFBERkUTQmc4fru_-px0Tk.roa File: 6wUOIPFBERkUTQmc4fru_-px0Tk.roa (raw, json) Hash identifier: 7k1O0fB7z/MoZhbw4RMzyFvLT3i7T+rSfTUmJTBuUb0= Subject key identifier: EB:05:0E:20:F1:41:11:19:14:4D:09:9C:E1:FA:EE:FF:EA:71:D1:39 Certificate issuer: /CN=6832c32d2259013991260d530d9120031aaefcd0 Certificate serial: 019B7D5CED21023C63E3AC5ED94F7889267E Authority key identifier: 68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/6wUOIPFBERkUTQmc4fru_-px0Tk.roa Signing time: Fri 02 Jan 2026 06:20:00 +0000 ROA not before: Fri 02 Jan 2026 06:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 145.46.160.0/24 maxlen: 24 145.46.161.0/24 maxlen: 24 145.46.162.0/24 maxlen: 24 145.46.163.0/24 maxlen: 24 145.46.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ed:21:02:3c:63:e3:ac:5e:d9:4f:78:89:26:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6832c32d2259013991260d530d9120031aaefcd0 Validity Not Before: Jan 2 06:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb050e20f1411119144d099ce1faeeffea71d139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:02:5b:ea:79:1c:ca:cb:45:8c:5d:77:2b:e3: 9d:9f:4a:a7:f5:e9:e8:f4:03:d2:39:4e:ce:fd:ac: 94:de:36:79:00:16:71:f1:60:f0:63:8b:0e:3c:db: a1:83:f9:6c:f8:63:3d:4b:83:a4:d7:8d:24:f6:28: bd:d6:cc:ee:29:80:52:f5:c0:26:84:ac:e2:2a:13: 14:a1:f0:25:bf:b5:2b:2a:b6:84:63:7a:fb:7b:0d: 46:41:ed:3b:dd:19:fd:31:29:17:6f:4f:5d:fa:dd: e5:dd:ec:19:3b:0f:43:6f:d6:80:60:27:07:1d:f0: e4:3f:39:83:16:1e:ac:f5:c8:d5:77:18:7a:a0:82: 17:89:e8:9f:a5:61:4c:85:7b:98:70:e7:39:32:c1: 5f:fa:94:ec:a7:40:6f:8d:f1:ef:4c:47:5f:b5:98: e1:7a:f9:bb:8c:f1:db:74:32:2a:c4:e8:c8:1f:4a: fc:71:9a:d7:6a:7b:f5:d2:84:f5:7b:4b:6e:b6:90: 23:17:95:02:ea:7e:73:46:e5:01:16:49:f1:17:99: 30:82:26:53:7c:4f:c2:60:9c:d2:8d:d8:80:de:59: 59:61:c9:c2:69:9a:f2:c3:3e:1d:17:48:f4:23:60: 5f:12:90:85:cc:8c:ce:5e:23:62:49:6a:a3:98:ea: 96:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:05:0E:20:F1:41:11:19:14:4D:09:9C:E1:FA:EE:FF:EA:71:D1:39 X509v3 Authority Key Identifier: keyid:68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/6wUOIPFBERkUTQmc4fru_-px0Tk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.46.160.0-145.46.164.255 Signature Algorithm: sha256WithRSAEncryption a7:67:ee:42:d2:cb:cf:3c:c5:69:2a:f8:85:81:98:70:dc:04: dc:be:af:77:a4:a3:88:7f:b6:34:da:81:29:63:4c:dc:8a:d8: fa:b7:6f:77:a6:5f:d9:83:d8:23:59:0f:63:a0:c6:36:ae:17: 97:3b:2d:b9:27:e3:72:8e:6a:70:e9:0e:fb:7c:ab:67:46:1f: bb:4d:34:15:90:fd:0f:36:26:9c:f2:8f:69:f8:bb:51:49:14: 7c:19:f8:55:c8:af:d2:7d:89:96:e3:73:24:04:c5:00:f9:8d: 51:6b:58:4a:84:c7:14:a6:4b:23:9e:8f:5e:42:b9:af:40:3f: b3:81:85:f1:ff:e7:d9:db:79:69:7f:62:6b:40:42:a5:41:5f: 51:96:6b:a6:02:3a:1a:e3:fe:b5:e5:9a:9a:4b:78:e2:b7:fa: 01:0a:49:24:e0:69:96:bb:0f:a6:ed:9a:03:0e:27:53:82:5a: 52:2f:69:1f:25:c3:10:67:7b:6a:aa:9f:28:1d:47:27:35:54: ad:e5:b3:92:67:dd:ec:50:a7:9a:5a:93:2e:e8:eb:d6:85:7b: 14:eb:d8:ac:50:97:d9:ea:d6:69:1f:2e:39:98:4c:ff:f2:9f: e9:74:15:d6:db:3e:8f:19:3f:c9:07:0a:99:8e:79:2c:d1:40: 10:8d:09:14 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt9XO0hAjxj46xe2U94iSZ+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4MzJjMzJkMjI1OTAxMzk5MTI2MGQ1MzBkOTEyMDAzMWFh ZWZjZDAwHhcNMjYwMTAyMDYyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjA1MGUyMGYxNDExMTE5MTQ0ZDA5OWNlMWZhZWVmZmVhNzFkMTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgJb6nkcystFjF13K+Odn0qn9eno 9APSOU7O/ayU3jZ5ABZx8WDwY4sOPNuhg/ls+GM9S4Ok140k9ii91szuKYBS9cAm hKziKhMUofAlv7UrKraEY3r7ew1GQe073Rn9MSkXb09d+t3l3ewZOw9Db9aAYCcH HfDkPzmDFh6s9cjVdxh6oIIXieifpWFMhXuYcOc5MsFf+pTsp0BvjfHvTEdftZjh evm7jPHbdDIqxOjIH0r8cZrXanv10oT1e0tutpAjF5UC6n5zRuUBFknxF5kwgiZT fE/CYJzSjdiA3llZYcnCaZrywz4dF0j0I2BfEpCFzIzOXiNiSWqjmOqWVwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFOsFDiDxQREZFE0JnOH67v/qcdE5MB8GA1UdIwQY MBaAFGgywy0iWQE5kSYNUw2RIAMarvzQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYURMRExTSlpBVG1SSmcxVERaRWdBeHF1X05BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85NGI2NmUtM2UwZC00MzMyLWFiNGYt NzcwZjhlYWIyYWU3LzEvNndVT0lQRkJFUmtVVFFtYzRmcnVfLXB4MFRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85NGI2NmUtM2UwZC00MzMyLWFiNGYtNzcwZjhlYWIyYWU3 LzEvYURMRExTSlpBVG1SSmcxVERaRWdBeHF1X05BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAWRLqAD BACRLqQwDQYJKoZIhvcNAQELBQADggEBAKdn7kLSy888xWkq+IWBmHDcBNy+r3ek o4h/tjTagSljTNyK2Pq3b3emX9mD2CNZD2OgxjauF5c7Lbkn43KOanDpDvt8q2dG H7tNNBWQ/Q82Jpzyj2n4u1FJFHwZ+FXIr9J9iZbjcyQExQD5jVFrWEqExxSmSyOe j15Cua9AP7OBhfH/59nbeWl/YmtAQqVBX1GWa6YCOhrj/rXlmppLeOK3+gEKSSTg aZa7D6btmgMOJ1OCWlIvaR8lwxBne2qqnygdRyc1VK3ls5Jn3exQp5paky7o69aF exTr2KxQl9nq1mkfLjmYTP/yn+l0FdbbPo8ZP8kHCpmOeSzRQBCNCRQ= -----END CERTIFICATE-----Generated at Sun Jan 18 16:37:24 2026 by rpki-client