This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/m6rJiLleGqSjvebHYwPobhqpRnI.roa File: m6rJiLleGqSjvebHYwPobhqpRnI.roa (raw, json) Hash identifier: ShgXTWxethW6+KMOzI+kaz0tURD514B5b269VfuNT/4= Subject key identifier: 9B:AA:C9:88:B9:5E:1A:A4:A3:BD:E6:C7:63:03:E8:6E:1A:A9:46:72 Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f Certificate serial: 019B7A5AA3404E3544B778EAFC38884D0104 Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/m6rJiLleGqSjvebHYwPobhqpRnI.roa Signing time: Thu 01 Jan 2026 16:18:39 +0000 ROA not before: Thu 01 Jan 2026 16:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211440 IP address blocks: 45.156.58.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:a3:40:4e:35:44:b7:78:ea:fc:38:88:4d:01:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f Validity Not Before: Jan 1 16:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9baac988b95e1aa4a3bde6c76303e86e1aa94672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:db:46:23:ea:81:7e:87:03:48:fc:60:a1:10: 3c:e9:22:05:eb:bc:ac:49:2c:69:25:eb:bc:17:3c: d3:b2:d1:f5:fd:5f:95:74:7c:cb:f2:15:9a:43:b0: cb:91:cd:54:d4:0b:86:3a:9f:08:14:4a:c3:2d:ad: 6b:e2:34:09:8c:48:de:3b:82:87:85:8e:ef:ad:a2: dc:8c:87:f9:de:64:10:01:2b:91:37:93:2d:24:08: 7e:af:f4:a7:b2:b9:c9:44:d8:c3:8a:97:7d:11:01: ef:a6:ab:99:94:ab:cb:4c:84:13:91:78:25:c9:22: 92:92:e4:e2:f7:02:b2:13:13:15:8c:06:f2:14:d2: b8:9e:97:ff:f3:fb:66:20:6f:7f:23:51:b7:32:b3: 0b:50:c1:c6:3c:da:b4:8a:7d:fa:5c:54:37:83:7e: 03:06:4e:95:bd:ab:c8:f2:90:4e:c9:12:5a:24:f3: 31:43:4b:27:aa:d8:85:73:29:98:62:92:ac:3c:af: 9d:83:34:c7:e9:ac:1a:78:4b:f2:5c:e0:ba:b2:e1: de:2d:6c:3d:fd:3c:40:ba:b0:86:83:1c:97:c2:61: 3c:47:f9:2c:3a:25:47:95:ce:1d:1a:3a:36:e9:c6: 5a:5b:e3:bd:58:58:17:af:a0:b8:7c:d2:14:bf:9e: e3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:AA:C9:88:B9:5E:1A:A4:A3:BD:E6:C7:63:03:E8:6E:1A:A9:46:72 X509v3 Authority Key Identifier: keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/m6rJiLleGqSjvebHYwPobhqpRnI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.156.58.0/23 Signature Algorithm: sha256WithRSAEncryption 47:27:77:3e:84:7a:0f:af:ea:24:4b:1e:18:af:f9:0b:00:f1: 1f:68:b8:44:b4:72:c6:c3:b0:4f:7d:cf:f5:72:fa:17:2b:fb: 19:f4:36:40:7d:da:1c:01:39:6f:86:93:c3:56:16:0f:00:27: a1:7d:77:3c:ba:e1:74:76:70:cf:df:30:b6:ac:1d:4f:4c:aa: a4:d6:78:0c:19:b4:15:06:77:dd:b1:11:0f:98:af:7f:c0:f4: 15:5c:5d:ce:65:a5:68:e6:86:38:b3:b5:fc:64:53:b3:e5:5a: 36:32:71:c4:f7:d8:1a:99:0a:f5:c3:5b:66:7d:97:e5:02:21: c9:df:75:db:b2:a8:96:1e:f0:9f:51:0d:a7:87:4a:db:72:9c: 9f:70:2e:e3:6c:9c:c9:2b:cc:eb:bc:ee:3e:0c:6a:1d:81:f1: 35:b3:77:00:07:1a:8d:e5:a0:96:39:e0:2f:67:16:8f:6f:6e: 73:29:7c:57:82:cd:60:63:65:e0:2d:84:18:d3:39:9a:27:d8: 2a:14:c9:1f:ac:ec:c1:a2:fe:8d:61:1b:be:bc:f3:0e:7e:11: d9:59:44:37:2c:48:aa:6c:99:27:2f:b2:41:f9:5a:68:e8:bb: f3:40:26:c8:1e:0b:00:c8:80:13:89:5b:df:56:16:cc:15:0b: f6:c6:40:ae -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WqNATjVEt3jq/DiITQEEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm MzBjOWYwHhcNMjYwMTAxMTYxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmFhYzk4OGI5NWUxYWE0YTNiZGU2Yzc2MzAzZTg2ZTFhYTk0NjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNtGI+qBfocDSPxgoRA86SIF67ys SSxpJeu8FzzTstH1/V+VdHzL8hWaQ7DLkc1U1AuGOp8IFErDLa1r4jQJjEjeO4KH hY7vraLcjIf53mQQASuRN5MtJAh+r/SnsrnJRNjDipd9EQHvpquZlKvLTIQTkXgl ySKSkuTi9wKyExMVjAbyFNK4npf/8/tmIG9/I1G3MrMLUMHGPNq0in36XFQ3g34D Bk6VvavI8pBOyRJaJPMxQ0snqtiFcymYYpKsPK+dgzTH6awaeEvyXOC6suHeLWw9 /TxAurCGgxyXwmE8R/ksOiVHlc4dGjo26cZaW+O9WFgXr6C4fNIUv57jjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJuqyYi5Xhqko73mx2MD6G4aqUZyMB8GA1UdIwQY MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt MDhkMTI3MGMyZTcxLzEvbTZySmlMbGVHcVNqdmViSFl3UG9iaHFwUm5JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZw6MA0G CSqGSIb3DQEBCwUAA4IBAQBHJ3c+hHoPr+okSx4Yr/kLAPEfaLhEtHLGw7BPfc/1 cvoXK/sZ9DZAfdocATlvhpPDVhYPACehfXc8uuF0dnDP3zC2rB1PTKqk1ngMGbQV BnfdsREPmK9/wPQVXF3OZaVo5oY4s7X8ZFOz5Vo2MnHE99gamQr1w1tmfZflAiHJ 33XbsqiWHvCfUQ2nh0rbcpyfcC7jbJzJK8zrvO4+DGodgfE1s3cABxqN5aCWOeAv ZxaPb25zKXxXgs1gY2XgLYQY0zmaJ9gqFMkfrOzBov6NYRu+vPMOfhHZWUQ3LEiq bJknL7JB+Vpo6LvzQCbIHgsAyIATiVvfVhbMFQv2xkCu -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:17 2026 by rpki-client