This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/6vmZH2KtgWjTyM5bVcpuqKirK_8.roa File: 6vmZH2KtgWjTyM5bVcpuqKirK_8.roa (raw, json) Hash identifier: ULk92FFsLP/VSKMgl8LE3w74IX6qvGIbFw4gFoPPsD4= Subject key identifier: EA:F9:99:1F:62:AD:81:68:D3:C8:CE:5B:55:CA:6E:A8:A8:AB:2B:FF Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56 Certificate serial: 019B7C80723D8985824859E00A9A100B55ED Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/6vmZH2KtgWjTyM5bVcpuqKirK_8.roa Signing time: Fri 02 Jan 2026 02:19:11 +0000 ROA not before: Fri 02 Jan 2026 02:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215360 IP address blocks: 90.156.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:72:3d:89:85:82:48:59:e0:0a:9a:10:0b:55:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56 Validity Not Before: Jan 2 02:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eaf9991f62ad8168d3c8ce5b55ca6ea8a8ab2bff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d6:1f:49:86:ce:64:c6:e7:19:66:b9:5a:fe: 4e:13:63:9a:6b:1c:9f:b1:bc:58:51:1f:f8:e8:49: 94:85:84:f2:34:38:ad:ba:ff:ca:71:f5:34:02:04: 94:c4:2a:80:c1:13:b5:78:59:af:40:c8:04:f1:cc: 3f:40:3f:4f:db:f8:67:a8:20:60:7d:aa:52:64:f4: dc:58:36:9f:b9:f9:8b:f5:43:6e:5d:dc:94:39:e4: 86:28:00:bc:aa:c6:03:14:78:23:80:eb:95:c5:83: 33:b1:f8:7f:54:ea:f7:5e:c0:ed:a3:89:42:fc:a4: b4:a1:23:c6:28:cc:cf:e3:f2:81:df:b7:c9:5c:83: c9:25:a8:c1:9d:e1:9c:38:ce:e1:90:03:d8:79:10: b5:62:64:da:19:9b:34:93:4d:c1:07:0a:cc:47:96: 4c:fc:29:0b:0d:c3:f8:5e:a8:cf:d3:1d:37:40:42: 3c:76:26:65:97:b8:ba:7a:c4:04:93:3e:a9:c9:3f: 4d:48:bc:ff:23:15:e7:fc:41:25:42:16:f4:f1:30: a6:49:c4:ff:15:a0:69:56:26:43:ad:d8:de:6b:f0: f4:d9:01:07:25:c2:ba:97:94:0c:94:72:f9:7b:62: b3:e5:c1:56:f3:22:3e:f8:f1:f2:58:11:d0:eb:3e: f2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:F9:99:1F:62:AD:81:68:D3:C8:CE:5B:55:CA:6E:A8:A8:AB:2B:FF X509v3 Authority Key Identifier: keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/6vmZH2KtgWjTyM5bVcpuqKirK_8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 90.156.147.0/24 Signature Algorithm: sha256WithRSAEncryption 48:a7:92:90:41:69:2b:2c:3a:4c:b4:95:7c:de:8f:09:83:72: 5d:80:1a:61:e5:27:71:2d:5d:84:55:96:68:5f:18:19:87:54: 45:bf:8a:44:88:62:11:13:9e:7e:82:e1:29:e8:81:f4:2e:bc: 4b:a7:99:64:1a:78:6f:1c:9d:1c:06:74:1a:fd:10:9f:bf:4f: 33:e2:54:cb:57:c1:9d:5a:d6:fb:e2:2f:9a:db:f0:e2:a8:05: 59:9c:94:3a:d5:96:09:34:0d:53:5d:fb:33:fb:43:f1:82:75: 89:22:23:c2:2c:91:af:1c:18:20:53:b2:8e:d5:59:e8:2a:1d: 57:94:e3:b3:59:28:b3:e9:84:f0:98:6d:65:b0:19:ce:23:78: cb:bc:9e:50:64:af:01:68:d8:cf:37:88:0c:12:f0:71:77:2b: 00:96:37:5d:bb:fd:70:1a:d0:15:f1:5f:01:22:a9:7a:e2:e9: 13:23:c6:ad:37:fa:82:b0:b7:c4:99:05:95:1c:79:33:ec:6f: 26:86:ef:0c:77:6d:e2:d4:1b:48:43:fc:5a:c9:8c:c4:e3:33: 94:d6:8e:2f:0e:dd:dc:46:e9:07:36:22:26:cf:ba:9a:b4:fb: b9:8c:35:5f:48:5d:53:1d:90:c4:62:01:a3:f6:0f:fd:92:0a: bf:39:ee:ee -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gHI9iYWCSFngCpoQC1XtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0 ZjVlNTYwHhcNMjYwMTAyMDIxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWY5OTkxZjYyYWQ4MTY4ZDNjOGNlNWI1NWNhNmVhOGE4YWIyYmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09YfSYbOZMbnGWa5Wv5OE2Oaaxyf sbxYUR/46EmUhYTyNDituv/KcfU0AgSUxCqAwRO1eFmvQMgE8cw/QD9P2/hnqCBg fapSZPTcWDafufmL9UNuXdyUOeSGKAC8qsYDFHgjgOuVxYMzsfh/VOr3XsDto4lC /KS0oSPGKMzP4/KB37fJXIPJJajBneGcOM7hkAPYeRC1YmTaGZs0k03BBwrMR5ZM /CkLDcP4XqjP0x03QEI8diZll7i6esQEkz6pyT9NSLz/IxXn/EElQhb08TCmScT/ FaBpViZDrdjea/D02QEHJcK6l5QMlHL5e2Kz5cFW8yI++PHyWBHQ6z7yJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOr5mR9irYFo08jOW1XKbqioqyv/MB8GA1UdIwQY MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt YmE5OGYxMTIyMTIxLzEvNnZtWkgyS3RnV2pUeU01YlZjcHVxS2lyS184LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWpyTMA0G CSqGSIb3DQEBCwUAA4IBAQBIp5KQQWkrLDpMtJV83o8Jg3JdgBph5SdxLV2EVZZo XxgZh1RFv4pEiGIRE55+guEp6IH0LrxLp5lkGnhvHJ0cBnQa/RCfv08z4lTLV8Gd Wtb74i+a2/DiqAVZnJQ61ZYJNA1TXfsz+0PxgnWJIiPCLJGvHBggU7KO1VnoKh1X lOOzWSiz6YTwmG1lsBnOI3jLvJ5QZK8BaNjPN4gMEvBxdysAljddu/1wGtAV8V8B Iql64ukTI8atN/qCsLfEmQWVHHkz7G8mhu8Md23i1BtIQ/xayYzE4zOU1o4vDt3c RukHNiImz7qatPu5jDVfSF1THZDEYgGj9g/9kgq/Oe7u -----END CERTIFICATE-----Generated at Sat Jan 10 03:55:21 2026 by rpki-client