This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/6Yaz7qIk9ypgtGOB0Q9-XcSOAZE.roa File: 6Yaz7qIk9ypgtGOB0Q9-XcSOAZE.roa (raw, json) Hash identifier: qU0XOf7YigdPVnIfF1J7JtsuRC2jMiFg1/aun3pCmRQ= Subject key identifier: E9:86:B3:EE:A2:24:F7:2A:60:B4:63:81:D1:0F:7E:5D:C4:8E:01:91 Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Certificate serial: 019ABAD5F64D6325E47C551BB0C084CDFA7D Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/6Yaz7qIk9ypgtGOB0Q9-XcSOAZE.roa Signing time: Tue 25 Nov 2025 11:46:15 +0000 ROA not before: Tue 25 Nov 2025 11:46:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202736 IP address blocks: 45.156.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Nov 2025 11:46:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ba:d5:f6:4d:63:25:e4:7c:55:1b:b0:c0:84:cd:fa:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Validity Not Before: Nov 25 11:46:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e986b3eea224f72a60b46381d10f7e5dc48e0191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:68:9f:c3:cc:ab:1d:5c:92:d4:e3:10:63:34: 7c:e5:cf:35:c3:0b:ce:b0:c7:77:b9:fa:90:a8:fc: 52:46:46:c5:fa:c8:cb:de:40:f9:37:c1:4f:34:76: 36:c4:a1:3d:4d:42:7b:8d:8f:7f:41:8d:8e:1b:8e: 99:a4:ed:80:64:15:e9:a5:07:05:05:3a:6d:53:67: bb:a6:a1:cd:1b:13:ca:30:2f:31:23:37:54:b7:da: 42:bc:05:9a:f4:38:72:f0:82:5c:5d:b7:ed:d3:ff: 3b:70:7f:d3:44:74:cb:9b:3a:da:07:59:d0:31:cf: 1e:80:57:4a:86:1a:3f:87:3c:48:33:51:a3:da:2a: 89:bd:32:52:0d:2f:41:ba:93:85:c3:4f:36:a5:8e: 96:40:e2:c1:34:69:f6:c5:89:1e:22:69:a7:92:7e: b4:91:29:96:c6:d8:9c:6c:d8:cb:83:26:3c:5e:f8: d5:bf:34:a3:f6:4d:1d:41:26:e8:5d:bb:27:36:2f: 7d:8c:42:93:01:2f:a2:39:03:f6:2c:74:b6:a6:a5: cc:0f:4f:be:c8:4f:79:72:ed:ce:81:cc:5e:0f:86: 0a:a1:08:39:15:37:99:d5:5d:8a:fa:be:ae:6e:e2: 0f:06:a9:12:e2:53:93:76:f4:34:2c:5d:9a:50:fe: 6e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:86:B3:EE:A2:24:F7:2A:60:B4:63:81:D1:0F:7E:5D:C4:8E:01:91 X509v3 Authority Key Identifier: keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/6Yaz7qIk9ypgtGOB0Q9-XcSOAZE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.156.147.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:ed:5f:f7:c8:15:cc:8b:80:de:f0:04:78:cc:6a:d6:ee:67: f4:76:e7:e2:75:b8:c5:7c:88:67:ba:a4:21:aa:b1:54:94:85: 45:bb:9b:16:b1:fb:66:14:e5:44:38:c5:8a:4e:2f:84:69:03: 47:da:bb:23:8a:37:5f:74:03:fb:32:fa:4c:e4:d9:a4:be:a4: 0f:df:45:15:2c:88:02:c7:db:73:6b:06:ef:0d:ab:80:bb:7b: 8a:34:25:cd:e8:04:8f:57:94:22:b5:c3:de:c8:41:80:b6:34: a1:17:e7:90:e6:fd:5e:82:1d:b3:27:da:e7:07:e7:a4:7b:b7: 5b:11:a6:1e:db:0f:fa:80:25:cb:e1:42:df:49:57:f4:29:05: 95:cd:0f:4e:1a:b2:c0:60:cb:07:3c:7c:f9:70:55:6a:5a:21: ed:a7:c4:c0:d3:c3:06:04:40:22:71:64:44:33:e2:89:ec:7f: 1c:20:0d:2e:0f:3a:39:af:d7:98:9f:92:04:b9:e7:7a:ba:36: 9d:ec:2c:8d:95:37:53:7c:e3:0f:94:b8:d9:d0:3e:d4:0b:c5: 28:f6:e9:8b:5f:19:07:6e:90:c0:5d:26:03:74:28:44:88:1a: 0f:1b:50:04:29:59:ab:09:1b:87:c4:d1:98:35:20:55:7c:6a: 52:69:91:40 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq61fZNYyXkfFUbsMCEzfp9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhN2YwMzZlMjU5MjM5MWZiNDVhM2RkMzNjYWYwYjA3OTU2 OTczY2YwHhcNMjUxMTI1MTE0NjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTg2YjNlZWEyMjRmNzJhNjBiNDYzODFkMTBmN2U1ZGM0OGUwMTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmifw8yrHVyS1OMQYzR85c81wwvO sMd3ufqQqPxSRkbF+sjL3kD5N8FPNHY2xKE9TUJ7jY9/QY2OG46ZpO2AZBXppQcF BTptU2e7pqHNGxPKMC8xIzdUt9pCvAWa9Dhy8IJcXbft0/87cH/TRHTLmzraB1nQ Mc8egFdKhho/hzxIM1Gj2iqJvTJSDS9BupOFw082pY6WQOLBNGn2xYkeImmnkn60 kSmWxticbNjLgyY8XvjVvzSj9k0dQSboXbsnNi99jEKTAS+iOQP2LHS2pqXMD0++ yE95cu3OgcxeD4YKoQg5FTeZ1V2K+r6ubuIPBqkS4lOTdvQ0LF2aUP5uNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOmGs+6iJPcqYLRjgdEPfl3EjgGRMB8GA1UdIwQY MBaAFBp/A24lkjkftFo90zyvCweVaXPPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2It MzQwZDYyNWM2ZGJhLzEvNllhejdxSWs5eXBndEdPQjBROS1YY1NPQVpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2ItMzQwZDYyNWM2ZGJh LzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZyTMA0G CSqGSIb3DQEBCwUAA4IBAQAO7V/3yBXMi4De8AR4zGrW7mf0dufidbjFfIhnuqQh qrFUlIVFu5sWsftmFOVEOMWKTi+EaQNH2rsjijdfdAP7MvpM5NmkvqQP30UVLIgC x9tzawbvDauAu3uKNCXN6ASPV5QitcPeyEGAtjShF+eQ5v1egh2zJ9rnB+eke7db EaYe2w/6gCXL4ULfSVf0KQWVzQ9OGrLAYMsHPHz5cFVqWiHtp8TA08MGBEAicWRE M+KJ7H8cIA0uDzo5r9eYn5IEued6ujad7CyNlTdTfOMPlLjZ0D7UC8Uo9umLXxkH bpDAXSYDdChEiBoPG1AEKVmrCRuHxNGYNSBVfGpSaZFA -----END CERTIFICATE-----Generated at Tue Nov 25 17:41:12 2025 by rpki-client