This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/X6N22azmZ7YvfwKicSHtrRRzv2A.roa File: X6N22azmZ7YvfwKicSHtrRRzv2A.roa (raw, json) Hash identifier: nYHkLqVvvIjj1RReDJNi6r7lmu+SNXIeDPrdh2zqSZA= Subject key identifier: 5F:A3:76:D9:AC:E6:67:B6:2F:7F:02:A2:71:21:ED:AD:14:73:BF:60 Certificate issuer: /CN=a83f1debd5d4784843faa288b2e01c88506c1cc9 Certificate serial: 019B7F148D1A5EAC871AA384E96AFB83D731 Authority key identifier: A8:3F:1D:EB:D5:D4:78:48:43:FA:A2:88:B2:E0:1C:88:50:6C:1C:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD8d69XUeEhD-qKIsuAciFBsHMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/X6N22azmZ7YvfwKicSHtrRRzv2A.roa Signing time: Fri 02 Jan 2026 14:20:11 +0000 ROA not before: Fri 02 Jan 2026 14:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35009 IP address blocks: 45.82.180.0/24 maxlen: 24 45.82.181.0/24 maxlen: 24 45.82.182.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft rsync://rpki.ripe.net/repository/DEFAULT/qD8d69XUeEhD-qKIsuAciFBsHMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:8d:1a:5e:ac:87:1a:a3:84:e9:6a:fb:83:d7:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83f1debd5d4784843faa288b2e01c88506c1cc9 Validity Not Before: Jan 2 14:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5fa376d9ace667b62f7f02a27121edad1473bf60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:12:06:30:03:14:23:37:b8:c4:23:5f:73:0c: e1:d4:63:f5:41:2f:61:97:19:19:40:2f:53:ff:34: 3d:44:de:36:81:25:12:28:37:6b:a1:b8:9f:a3:7e: 9c:79:0b:74:61:c6:39:a7:68:3f:2b:aa:1e:14:ad: 0f:93:27:45:2d:28:c0:3a:d1:2d:c4:96:08:23:57: 5d:c1:d7:be:31:c8:f7:6c:0a:7c:82:b3:3a:ea:02: 32:8d:97:e8:e6:7e:13:10:0b:27:6a:3f:54:83:2d: 20:2a:1c:f2:4a:f4:26:4b:c7:95:e1:5b:95:53:0a: da:e7:c6:8b:fb:e0:19:48:ad:80:2d:10:ff:dd:05: 41:d5:11:ea:7f:a2:7f:94:28:c3:9e:c9:fa:81:ab: 5f:30:24:76:af:84:be:bd:6e:8f:53:92:dc:74:a0: c8:d9:fe:71:a4:49:82:e6:41:eb:6d:a6:c7:9a:6d: a1:12:c9:75:a0:b6:94:97:85:ee:33:87:23:40:94: 36:f6:78:8c:dd:6c:f2:df:7b:d9:72:c6:26:72:0a: 83:b6:ff:bc:c6:9d:b7:50:c4:a6:ab:13:db:5c:18: c4:ef:e3:46:14:44:a0:f6:e3:64:17:50:16:07:0e: 92:71:71:da:0e:60:a8:fe:e7:e9:94:07:ba:66:cf: 29:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:A3:76:D9:AC:E6:67:B6:2F:7F:02:A2:71:21:ED:AD:14:73:BF:60 X509v3 Authority Key Identifier: keyid:A8:3F:1D:EB:D5:D4:78:48:43:FA:A2:88:B2:E0:1C:88:50:6C:1C:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD8d69XUeEhD-qKIsuAciFBsHMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/X6N22azmZ7YvfwKicSHtrRRzv2A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.82.180.0/22 Signature Algorithm: sha256WithRSAEncryption a8:8e:2a:c1:1d:e1:35:ab:56:22:ea:cc:b5:87:52:a7:c2:ec: 9f:5c:52:73:ff:80:4b:a1:6e:7f:38:74:a7:0f:d2:83:50:de: 9e:0e:90:96:e5:19:da:df:2b:d8:94:d7:ae:f4:fe:16:ee:dc: b6:5a:5b:20:b9:d7:c5:d2:07:18:dd:cd:c0:6b:77:b1:ab:2a: 24:ee:09:c3:f9:57:6a:65:80:e8:bd:b1:72:3d:40:0c:9b:15: ba:cb:64:d1:32:78:40:4c:6e:a5:27:d1:53:2a:77:c1:bb:fa: 03:9b:4f:0c:03:f0:03:0a:c0:f3:79:c1:c4:31:73:25:a1:61: a7:20:1c:ae:f4:0b:0a:f9:05:e7:51:97:c5:10:9b:81:e4:e8: 5f:22:e5:b0:5f:b8:3a:c9:4b:34:af:7e:3a:f7:25:89:32:a8: a8:39:d7:80:2f:75:e8:d4:42:e3:d5:ac:b0:a9:85:b6:b7:a4: d7:b8:53:58:83:77:7c:e4:66:09:69:8a:21:4f:85:26:f8:b7: 94:66:a6:bf:65:36:31:b4:d5:f6:81:6a:db:1f:ce:df:cd:c6: ad:a1:89:84:18:cb:77:64:96:f0:7c:de:73:4d:f4:36:96:b2: 53:aa:9f:0e:7c:c5:df:15:5b:f9:1b:fe:a3:c7:04:a3:12:ec: 62:df:7e:a6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FI0aXqyHGqOE6Wr7g9cxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4M2YxZGViZDVkNDc4NDg0M2ZhYTI4OGIyZTAxYzg4NTA2 YzFjYzkwHhcNMjYwMTAyMTQyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmEzNzZkOWFjZTY2N2I2MmY3ZjAyYTI3MTIxZWRhZDE0NzNiZjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBIGMAMUIze4xCNfcwzh1GP1QS9h lxkZQC9T/zQ9RN42gSUSKDdrobifo36ceQt0YcY5p2g/K6oeFK0PkydFLSjAOtEt xJYII1ddwde+Mcj3bAp8grM66gIyjZfo5n4TEAsnaj9Ugy0gKhzySvQmS8eV4VuV Uwra58aL++AZSK2ALRD/3QVB1RHqf6J/lCjDnsn6gatfMCR2r4S+vW6PU5LcdKDI 2f5xpEmC5kHrbabHmm2hEsl1oLaUl4XuM4cjQJQ29niM3Wzy33vZcsYmcgqDtv+8 xp23UMSmqxPbXBjE7+NGFESg9uNkF1AWBw6ScXHaDmCo/ufplAe6Zs8pXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF+jdtms5me2L38ConEh7a0Uc79gMB8GA1UdIwQY MBaAFKg/HevV1HhIQ/qiiLLgHIhQbBzJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUQ4ZDY5WFVlRWhELXFLSXN1QWNpRkJzSE1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8zOTNhMGYtZTQ1Ni00NmUyLWE3NTQt ZTQ2YzEzYjFjNzZkLzEvWDZOMjJhem1aN1l2ZndLaWNTSHRyUlJ6djJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8zOTNhMGYtZTQ1Ni00NmUyLWE3NTQtZTQ2YzEzYjFjNzZk LzEvcUQ4ZDY5WFVlRWhELXFLSXN1QWNpRkJzSE1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVK0MA0G CSqGSIb3DQEBCwUAA4IBAQCojirBHeE1q1Yi6sy1h1KnwuyfXFJz/4BLoW5/OHSn D9KDUN6eDpCW5Rna3yvYlNeu9P4W7ty2WlsgudfF0gcY3c3Aa3exqyok7gnD+Vdq ZYDovbFyPUAMmxW6y2TRMnhATG6lJ9FTKnfBu/oDm08MA/ADCsDzecHEMXMloWGn IByu9AsK+QXnUZfFEJuB5OhfIuWwX7g6yUs0r3469yWJMqioOdeAL3Xo1ELj1ayw qYW2t6TXuFNYg3d85GYJaYohT4Um+LeUZqa/ZTYxtNX2gWrbH87fzcatoYmEGMt3 ZJbwfN5zTfQ2lrJTqp8OfMXfFVv5G/6jxwSjEuxi336m -----END CERTIFICATE-----Generated at Mon Feb 9 23:42:04 2026 by rpki-client