This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/A6U93TPy254S5BjM4H7y1qRp4dY.roa File: A6U93TPy254S5BjM4H7y1qRp4dY.roa (raw, json) Hash identifier: AobGsfJ1WuRAdN8W9Nmg4b8l6RkF6PoSoTCjgklNWCg= Subject key identifier: 03:A5:3D:DD:33:F2:DB:9E:12:E4:18:CC:E0:7E:F2:D6:A4:69:E1:D6 Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c Certificate serial: 019B7C7F47FFDB18FA9F4DDD2F1BD0C18515 Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/A6U93TPy254S5BjM4H7y1qRp4dY.roa Signing time: Fri 02 Jan 2026 02:17:54 +0000 ROA not before: Fri 02 Jan 2026 02:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 46105 IP address blocks: 45.85.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:47:ff:db:18:fa:9f:4d:dd:2f:1b:d0:c1:85:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c Validity Not Before: Jan 2 02:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03a53ddd33f2db9e12e418cce07ef2d6a469e1d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:5e:24:36:53:f8:38:c0:f2:ef:ce:7c:bd:d8: 9d:53:e8:c7:4d:66:b8:6d:50:d0:93:2d:e8:67:23: cd:93:83:fa:23:ea:14:f4:70:39:ab:e9:9b:6c:87: be:71:e4:a0:82:18:bc:9d:b7:e5:0e:30:ce:99:34: 71:be:bd:82:88:02:0d:9b:15:4d:c5:ab:b9:ab:7e: a8:5c:69:75:37:32:93:9c:be:6e:39:bc:f6:1f:96: ed:bf:8e:b8:38:10:52:80:b8:c0:e6:e6:45:23:92: 19:61:71:54:e3:3f:b9:2d:c8:04:12:5b:37:29:4b: ee:06:8a:54:a2:60:0d:cd:97:9c:82:a5:fa:67:f2: 37:b8:c4:24:f6:26:5a:d4:ca:70:17:8f:db:ea:5a: c4:5a:9b:5b:60:c3:58:0c:44:50:c8:f2:61:28:73: 74:6f:b1:d6:67:dc:88:1b:b0:b2:49:31:97:b1:3c: a3:9f:39:1c:6e:7a:bc:5b:ac:1c:42:10:92:cb:59: 2c:22:f0:6b:be:c5:29:e4:b6:18:6a:03:3e:fd:15: 25:01:02:c6:c1:72:a1:27:8f:09:a1:44:7c:6a:c7: b2:2d:70:6a:33:b7:40:b1:5d:68:37:5e:cf:7a:60: 9e:be:6e:c1:02:e9:2e:75:92:44:9d:48:9d:c4:7d: 57:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:A5:3D:DD:33:F2:DB:9E:12:E4:18:CC:E0:7E:F2:D6:A4:69:E1:D6 X509v3 Authority Key Identifier: keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/A6U93TPy254S5BjM4H7y1qRp4dY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.15.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:cb:a9:87:6b:4c:fc:1e:6b:cd:2c:f0:d8:da:d7:15:8f:13: a5:58:9e:98:2c:4d:aa:c2:ba:da:65:0b:d7:9e:5b:05:dc:d6: 27:13:b3:a5:3f:42:ca:bb:02:c9:0a:dc:a3:04:0f:17:aa:9d: 9c:d9:0c:80:7f:e8:0e:2b:2c:27:49:e7:a4:2a:c8:b4:ec:1f: c4:c0:f1:2a:a0:08:bd:27:b1:8a:65:4d:f3:93:b0:4b:82:ec: 2f:bf:83:ed:b8:1b:b3:f1:26:37:53:bb:16:e4:74:58:1b:e5: 24:e9:c3:be:bf:fa:4a:77:8e:a6:44:e4:e9:20:6f:b0:ce:fa: 9b:e2:6d:b2:d0:d0:91:ab:9d:24:54:d3:64:e0:df:af:8f:77: 38:77:68:47:cc:6a:9d:79:24:04:d7:d8:73:e7:4f:20:4e:d8: 32:96:27:63:6a:a6:0c:85:d8:4f:51:24:40:3a:c8:79:4e:12: 75:13:7e:5e:f9:b4:2a:d3:81:dc:64:4b:c9:c4:81:ab:33:bd: 83:0d:b6:95:5b:fa:5f:89:3c:09:d8:25:34:e8:26:b0:db:bb: 20:a2:3a:46:e1:82:a5:c2:23:09:b0:b1:eb:50:e9:90:e6:40: a9:c5:f3:9c:5a:e4:87:75:42:fd:37:22:ed:35:1a:76:bb:c8: 04:cc:81:b9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f0f/2xj6n03dLxvQwYUVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZmM4ODdjOTc3MzkzNTc1ZGU2MjU3ZTc1ZmE5OWNkZTIw MzdjNmMwHhcNMjYwMTAyMDIxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwM2E1M2RkZDMzZjJkYjllMTJlNDE4Y2NlMDdlZjJkNmE0NjllMWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjl4kNlP4OMDy7858vdidU+jHTWa4 bVDQky3oZyPNk4P6I+oU9HA5q+mbbIe+ceSgghi8nbflDjDOmTRxvr2CiAINmxVN xau5q36oXGl1NzKTnL5uObz2H5btv464OBBSgLjA5uZFI5IZYXFU4z+5LcgEEls3 KUvuBopUomANzZecgqX6Z/I3uMQk9iZa1MpwF4/b6lrEWptbYMNYDERQyPJhKHN0 b7HWZ9yIG7CySTGXsTyjnzkcbnq8W6wcQhCSy1ksIvBrvsUp5LYYagM+/RUlAQLG wXKhJ48JoUR8aseyLXBqM7dAsV1oN17PemCevm7BAukudZJEnUidxH1XfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAOlPd0z8tueEuQYzOB+8takaeHWMB8GA1UdIwQY MBaAFET8iHyXc5NXXeYlfnX6mc3iA3xsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlB5SWZKZHprMWRkNWlWLWRmcVp6ZUlEZkd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9mMDdjNjYtNDczZC00MzVhLWI2OTMt YzM2OWMxZDRjMzM3LzEvQTZVOTNUUHkyNTRTNUJqTTRIN3kxcVJwNGRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9mMDdjNjYtNDczZC00MzVhLWI2OTMtYzM2OWMxZDRjMzM3 LzEvUlB5SWZKZHprMWRkNWlWLWRmcVp6ZUlEZkd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVUPMA0G CSqGSIb3DQEBCwUAA4IBAQBsy6mHa0z8HmvNLPDY2tcVjxOlWJ6YLE2qwrraZQvX nlsF3NYnE7OlP0LKuwLJCtyjBA8Xqp2c2QyAf+gOKywnSeekKsi07B/EwPEqoAi9 J7GKZU3zk7BLguwvv4PtuBuz8SY3U7sW5HRYG+Uk6cO+v/pKd46mROTpIG+wzvqb 4m2y0NCRq50kVNNk4N+vj3c4d2hHzGqdeSQE19hz508gTtgylidjaqYMhdhPUSRA Osh5ThJ1E35e+bQq04HcZEvJxIGrM72DDbaVW/pfiTwJ2CU06Caw27sgojpG4YKl wiMJsLHrUOmQ5kCpxfOcWuSHdUL9NyLtNRp2u8gEzIG5 -----END CERTIFICATE-----Generated at Sun Jan 11 17:05:26 2026 by rpki-client