This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/6tZKYli0xFjSrMTaPxgthKbfu_g.roa File: 6tZKYli0xFjSrMTaPxgthKbfu_g.roa (raw, json) Hash identifier: lqL9qb+FKGUxGrpBLb7Tf9OnZbQiDT4OvdfFGjgah0c= Subject key identifier: EA:D6:4A:62:58:B4:C4:58:D2:AC:C4:DA:3F:18:2D:84:A6:DF:BB:F8 Certificate issuer: /CN=00e2c33731adca57dcc33b2fb8233fc038b095e9 Certificate serial: 019B78A288C86E0CBFFFBEB1E5D4CD0761E9 Authority key identifier: 00:E2:C3:37:31:AD:CA:57:DC:C3:3B:2F:B8:23:3F:C0:38:B0:95:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/6tZKYli0xFjSrMTaPxgthKbfu_g.roa Signing time: Thu 01 Jan 2026 08:17:56 +0000 ROA not before: Thu 01 Jan 2026 08:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57648 IP address blocks: 45.156.160.0/24 maxlen: 24 45.156.161.0/24 maxlen: 24 45.156.162.0/24 maxlen: 24 45.156.163.0/24 maxlen: 24 2a0f:2580:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:88:c8:6e:0c:bf:ff:be:b1:e5:d4:cd:07:61:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00e2c33731adca57dcc33b2fb8233fc038b095e9 Validity Not Before: Jan 1 08:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ead64a6258b4c458d2acc4da3f182d84a6dfbbf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:35:63:06:73:94:b1:d7:47:76:ca:be:8b:6d: 3f:e9:68:f9:f2:8d:9a:8d:f7:c5:10:2c:06:f4:1b: 34:ab:e5:48:9d:e1:48:af:61:78:62:77:d6:e7:99: 5c:24:6b:28:b9:57:22:1f:96:75:88:ae:a4:a2:1b: ba:ea:b0:d1:94:d5:90:2d:e0:26:41:59:db:5a:2d: 54:ab:98:a7:94:38:7b:a2:f8:9c:0d:1e:f8:87:12: 3d:f2:27:4c:d5:62:e0:15:42:3a:09:3e:8f:cb:94: a6:66:78:97:0d:d5:3f:3d:14:87:88:fe:66:6f:64: ba:dd:5f:78:bd:cb:07:b4:69:02:22:17:64:2d:fc: 36:4a:d5:92:56:eb:eb:d1:46:71:e3:cb:d8:16:33: b2:4b:23:bd:d4:13:bc:56:20:69:3b:c3:05:ff:c2: 57:a3:97:9e:ae:7c:66:55:21:6b:86:20:10:fe:fe: d1:f5:1f:a6:e4:a2:ed:a0:10:c7:ce:48:73:a2:9c: 52:b9:8d:50:1d:2a:26:af:c1:72:28:dc:72:94:59: 1a:f9:0e:be:2a:5d:62:3c:a8:be:e6:70:67:ff:14: 3b:7d:a4:07:3a:b0:a5:7b:f1:66:a7:16:f8:c6:91: f5:10:4f:63:a3:9d:b2:ff:ce:47:fd:ab:fd:46:45: 49:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:D6:4A:62:58:B4:C4:58:D2:AC:C4:DA:3F:18:2D:84:A6:DF:BB:F8 X509v3 Authority Key Identifier: keyid:00:E2:C3:37:31:AD:CA:57:DC:C3:3B:2F:B8:23:3F:C0:38:B0:95:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/6tZKYli0xFjSrMTaPxgthKbfu_g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.156.160.0/22 IPv6: 2a0f:2580:1000::/48 Signature Algorithm: sha256WithRSAEncryption 47:ef:3d:4f:fb:15:e2:ac:73:82:db:5e:e8:7d:f3:0e:7e:41: 5b:df:66:29:c4:da:b7:de:74:89:12:82:2c:08:89:16:37:d7: b5:bf:c8:6e:03:2c:f0:d0:63:23:d6:3b:76:54:c8:04:41:78: 64:2b:43:c9:0a:ca:c6:79:e8:90:c5:19:48:45:7a:9d:b1:f1: 5f:82:a8:c9:38:f7:49:f9:ee:55:4e:75:7a:cd:26:27:67:0c: 42:fe:c3:8d:cf:6d:dc:11:70:ed:aa:5a:ec:be:e6:3e:00:ac: 5b:2f:65:94:41:a0:be:fb:e8:96:1d:6f:d3:75:a7:9d:49:33: 83:ee:03:ee:97:c5:55:82:00:a0:00:cb:87:a4:62:3b:cd:16: 54:30:7d:76:be:98:4a:45:60:bf:ac:24:d4:b8:0a:f0:01:d8: 98:3a:24:57:85:e2:90:55:f0:13:d9:01:c7:1b:5f:8c:24:ac: 71:1b:20:e4:b6:28:7d:84:41:27:4a:8c:1a:1d:d3:04:98:dd: 6a:12:d0:5e:cf:29:d4:f7:b0:12:9a:7c:18:ba:da:7f:28:3c: 53:e0:0a:9b:ce:eb:0d:38:c4:cf:6e:3b:1b:36:fe:16:9d:06: f7:b7:55:b9:71:0e:ae:a4:db:57:c2:10:26:94:c0:0f:55:dc: 59:c3:67:2c -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4oojIbgy//76x5dTNB2HpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwZTJjMzM3MzFhZGNhNTdkY2MzM2IyZmI4MjMzZmMwMzhi MDk1ZTkwHhcNMjYwMTAxMDgxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWQ2NGE2MjU4YjRjNDU4ZDJhY2M0ZGEzZjE4MmQ4NGE2ZGZiYmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjVjBnOUsddHdsq+i20/6Wj58o2a jffFECwG9Bs0q+VIneFIr2F4YnfW55lcJGsouVciH5Z1iK6kohu66rDRlNWQLeAm QVnbWi1Uq5inlDh7ovicDR74hxI98idM1WLgFUI6CT6Py5SmZniXDdU/PRSHiP5m b2S63V94vcsHtGkCIhdkLfw2StWSVuvr0UZx48vYFjOySyO91BO8ViBpO8MF/8JX o5eernxmVSFrhiAQ/v7R9R+m5KLtoBDHzkhzopxSuY1QHSomr8FyKNxylFka+Q6+ Kl1iPKi+5nBn/xQ7faQHOrCle/Fmpxb4xpH1EE9jo52y/85H/av9RkVJsQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFOrWSmJYtMRY0qzE2j8YLYSm37v4MB8GA1UdIwQY MBaAFADiwzcxrcpX3MM7L7gjP8A4sJXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQU9MRE56R3R5bGZjd3pzdnVDTV93RGl3bGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS85ZDVmZWItYmVkYS00MTQ3LTlkODMt YzlhZDM3Zjk0Y2Q3LzEvNnRaS1lsaTB4RmpTck1UYVB4Z3RoS2JmdV9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS85ZDVmZWItYmVkYS00MTQ3LTlkODMtYzlhZDM3Zjk0Y2Q3 LzEvQU9MRE56R3R5bGZjd3pzdnVDTV93RGl3bGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCLZygMA8E AgACMAkDBwAqDyWAEAAwDQYJKoZIhvcNAQELBQADggEBAEfvPU/7FeKsc4LbXuh9 8w5+QVvfZinE2rfedIkSgiwIiRY317W/yG4DLPDQYyPWO3ZUyARBeGQrQ8kKysZ5 6JDFGUhFep2x8V+CqMk490n57lVOdXrNJidnDEL+w43PbdwRcO2qWuy+5j4ArFsv ZZRBoL776JYdb9N1p51JM4PuA+6XxVWCAKAAy4ekYjvNFlQwfXa+mEpFYL+sJNS4 CvAB2Jg6JFeF4pBV8BPZAccbX4wkrHEbIOS2KH2EQSdKjBod0wSY3WoS0F7PKdT3 sBKafBi62n8oPFPgCpvO6w04xM9uOxs2/hadBve3VblxDq6k21fCECaUwA9V3FnD Zyw= -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:41 2026 by rpki-client