This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6qMjXYGBK49Rr0BUm6yBaC_D-_I.roa File: 6qMjXYGBK49Rr0BUm6yBaC_D-_I.roa (raw, json) Hash identifier: 9tv/c0Acu5VGtsSdYIyQ5lx8tdeT7FqfdmrDsoEFnNI= Subject key identifier: EA:A3:23:5D:81:81:2B:8F:51:AF:40:54:9B:AC:81:68:2F:C3:FB:F2 Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Certificate serial: 019A8714CAF172C9EB904EAC8E1120B3B853 Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6qMjXYGBK49Rr0BUm6yBaC_D-_I.roa Signing time: Sat 15 Nov 2025 10:34:38 +0000 ROA not before: Sat 15 Nov 2025 10:34:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 20473 IP address blocks: 89.23.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 20:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:87:14:ca:f1:72:c9:eb:90:4e:ac:8e:11:20:b3:b8:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Validity Not Before: Nov 15 10:34:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=eaa3235d81812b8f51af40549bac81682fc3fbf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:68:ab:cb:3f:bd:55:79:16:b1:6f:cc:55:1a: a7:5e:7a:73:44:cb:6b:9d:05:2f:59:ee:a6:bb:8c: f3:66:85:b6:4e:4b:30:72:31:57:8c:85:c2:fa:73: e6:97:84:b8:58:77:e6:6f:2f:1a:0e:cb:20:9f:7b: 4e:09:3a:7f:54:ae:dd:60:4a:c1:13:d3:38:0b:d4: c8:b1:17:91:3e:f5:5f:0b:f1:1d:e8:21:b4:7e:35: cb:ce:13:be:51:65:08:d5:e3:3f:26:7b:f4:a3:b3: a8:c7:f8:0d:85:c2:ed:fe:37:b3:7a:e9:18:5c:2f: 57:44:4a:24:d7:30:8e:03:0d:48:4d:92:c6:35:ec: d1:1a:b8:7e:4c:11:f5:26:cd:7d:a4:65:6b:25:36: 94:24:a2:79:3e:90:60:1c:04:dc:0d:5c:f8:d9:cc: 98:7d:95:f9:04:f0:ee:43:68:85:14:5a:d5:7a:80: f2:9e:12:be:4a:08:12:59:a4:0f:4b:54:81:1f:90: 78:f9:72:cf:e2:ee:84:2e:e2:eb:7a:bf:85:fa:9b: 99:cc:0e:56:9f:7e:81:57:6b:46:de:84:16:54:43: da:dd:7f:24:a1:7f:b0:e2:e3:20:9d:f9:4b:fa:a3: 5d:cb:76:75:7b:00:0c:ee:32:5a:9c:87:f8:b7:cb: d5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:A3:23:5D:81:81:2B:8F:51:AF:40:54:9B:AC:81:68:2F:C3:FB:F2 X509v3 Authority Key Identifier: keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6qMjXYGBK49Rr0BUm6yBaC_D-_I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.23.82.0/24 Signature Algorithm: sha256WithRSAEncryption 02:d3:e7:26:34:0e:41:62:35:b1:92:73:32:ad:0b:2f:74:b1: 47:60:2c:58:e8:27:86:77:bd:bb:d6:97:04:3b:70:c8:a7:72: a2:4b:f5:f6:02:84:d2:fb:02:2f:6d:d1:e1:aa:22:2e:7f:28: a3:b5:61:06:4d:bf:7a:f6:0c:0c:3b:68:79:f1:2c:46:f6:9d: 15:a9:e0:83:8d:27:ff:1b:33:16:a7:ab:64:b5:0e:ba:2c:5a: 41:ca:2b:de:23:3e:77:7f:44:ee:b4:25:d9:40:b5:cd:68:f4: 2b:59:9b:de:83:60:d5:68:af:6d:4d:98:8e:e2:5c:f6:c6:f7: 99:6a:92:50:e0:26:cb:85:f9:d2:73:e7:7e:be:4e:8d:df:06: 49:24:4d:3d:91:aa:78:77:37:d6:f7:41:66:8b:37:a6:52:01: b0:41:aa:57:d1:1c:b1:f9:16:47:3b:e2:bd:88:6e:6f:23:6f: 86:cf:07:32:aa:07:84:75:b3:57:3b:2a:bd:cf:11:75:25:6e: 3f:68:03:86:dc:3e:65:b0:97:c5:7c:65:69:e4:26:40:9d:c7: f3:8f:fb:7c:00:c3:28:55:e4:8d:a6:dd:09:fc:c0:b2:a2:8e: 43:2e:be:5f:45:8a:43:8a:0c:28:5d:a0:23:cd:c7:72:59:fd: e5:ce:c5:92 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqHFMrxcsnrkE6sjhEgs7hTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NzEzZWYyNTI3N2UxM2RkNzNmNDQxOTZmZGE1Y2VjMGZk OWNlMTYwHhcNMjUxMTE1MTAzNDM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWEzMjM1ZDgxODEyYjhmNTFhZjQwNTQ5YmFjODE2ODJmYzNmYmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWiryz+9VXkWsW/MVRqnXnpzRMtr nQUvWe6mu4zzZoW2TkswcjFXjIXC+nPml4S4WHfmby8aDssgn3tOCTp/VK7dYErB E9M4C9TIsReRPvVfC/Ed6CG0fjXLzhO+UWUI1eM/Jnv0o7Oox/gNhcLt/jezeukY XC9XREok1zCOAw1ITZLGNezRGrh+TBH1Js19pGVrJTaUJKJ5PpBgHATcDVz42cyY fZX5BPDuQ2iFFFrVeoDynhK+SggSWaQPS1SBH5B4+XLP4u6ELuLrer+F+puZzA5W n36BV2tG3oQWVEPa3X8koX+w4uMgnflL+qNdy3Z1ewAM7jJanIf4t8vVHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOqjI12BgSuPUa9AVJusgWgvw/vyMB8GA1UdIwQY MBaAFOlxPvJSd+E91z9EGW/aXOwP2c4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEt MGY2NmMxODg3OTE2LzEvNnFNalhZR0JLNDlScjBCVW02eUJhQ19ELV9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEtMGY2NmMxODg3OTE2 LzEvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWRdSMA0G CSqGSIb3DQEBCwUAA4IBAQAC0+cmNA5BYjWxknMyrQsvdLFHYCxY6CeGd7271pcE O3DIp3KiS/X2AoTS+wIvbdHhqiIufyijtWEGTb969gwMO2h58SxG9p0VqeCDjSf/ GzMWp6tktQ66LFpByiveIz53f0TutCXZQLXNaPQrWZveg2DVaK9tTZiO4lz2xveZ apJQ4CbLhfnSc+d+vk6N3wZJJE09kap4dzfW90FmizemUgGwQapX0Ryx+RZHO+K9 iG5vI2+GzwcyqgeEdbNXOyq9zxF1JW4/aAOG3D5lsJfFfGVp5CZAncfzj/t8AMMo VeSNpt0J/MCyoo5DLr5fRYpDigwoXaAjzcdyWf3lzsWS -----END CERTIFICATE-----Generated at Fri Nov 28 05:01:31 2025 by rpki-client