This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/IrTFZCuw5p6ZdIYNO2a-UHMLHhM.roa File: IrTFZCuw5p6ZdIYNO2a-UHMLHhM.roa (raw, json) Hash identifier: l+mbuP0TXEtn9J08ZdVAYIbrYENmo3YCuh8O+spVEC0= Subject key identifier: 22:B4:C5:64:2B:B0:E6:9E:99:74:86:0D:3B:66:BE:50:73:0B:1E:13 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019B07554FA881E3E37BFC81F5CDF3D8E9FB Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/IrTFZCuw5p6ZdIYNO2a-UHMLHhM.roa Signing time: Wed 10 Dec 2025 08:16:29 +0000 ROA not before: Wed 10 Dec 2025 08:16:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 216138 IP address blocks: 178.253.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 11:22:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:55:4f:a8:81:e3:e3:7b:fc:81:f5:cd:f3:d8:e9:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Dec 10 08:16:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=22b4c5642bb0e69e9974860d3b66be50730b1e13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:41:00:c5:1d:1a:49:7c:0c:02:9e:d9:56:94: bd:e2:1d:52:bc:75:d5:2a:70:04:be:35:37:66:86: 62:93:dd:fc:f0:54:b6:0b:34:8f:18:b4:48:90:5a: 4a:28:90:c5:7d:bb:e5:fc:36:29:56:87:17:6f:0f: 0e:fb:80:b6:70:6b:03:78:12:75:72:27:e5:41:de: b4:30:e8:f2:bc:21:ff:f9:af:c9:2d:85:2a:eb:9e: 98:80:dd:7f:3f:a1:56:f0:d9:0c:61:4e:a3:85:1e: 43:8a:ca:e0:56:39:e4:fe:fb:8f:5b:c6:01:e3:46: 7b:31:71:6f:0c:d5:1d:98:cd:60:5d:32:23:65:12: 28:70:de:7d:c5:2e:bd:b1:95:fe:1a:47:b9:e5:e7: b3:dd:b0:4b:d2:b2:d2:7e:ef:6d:9d:aa:a1:9f:96: f4:7c:52:dc:c6:a6:85:11:21:f3:87:92:60:63:84: 84:aa:df:aa:db:16:a1:b6:0d:21:db:3f:f4:2e:fe: 15:b5:5d:c1:e3:d6:cd:80:71:9c:cd:5c:96:af:40: 60:2b:ac:95:71:3c:07:ca:23:f9:ce:d5:dd:ca:d1: 59:9b:98:9c:11:8a:28:b1:da:bd:6f:65:6d:01:7f: eb:01:c6:65:64:0a:7d:44:4a:0b:1d:ee:20:9e:0f: db:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B4:C5:64:2B:B0:E6:9E:99:74:86:0D:3B:66:BE:50:73:0B:1E:13 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/IrTFZCuw5p6ZdIYNO2a-UHMLHhM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.253.205.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:ce:de:f7:35:de:9c:27:0b:22:73:fd:8a:c7:d0:57:12:2a: 51:14:db:b9:f3:f0:20:47:54:42:0c:ed:f2:6b:75:cb:8f:82: 43:40:35:54:15:0e:48:7a:88:85:8c:99:3b:79:3b:4d:8d:9f: 07:84:e2:1b:5d:d6:35:79:ec:c0:02:a1:40:02:40:ea:12:0f: ce:67:87:d9:55:6d:35:5c:c8:f7:46:1f:b6:32:f8:24:7e:70: e8:c3:f5:8e:4a:13:b8:11:59:00:e2:3c:f1:ef:7b:44:05:fd: dd:51:55:6b:d0:ca:85:1b:d8:58:a7:54:05:b1:59:61:3e:c3: 78:a4:ea:3a:f4:d1:9f:e3:a2:a1:90:2c:01:42:75:6d:4a:7f: 46:1c:19:e4:0b:5d:97:8b:c8:f3:22:83:cf:8f:23:06:98:aa: 2c:78:bc:9d:d6:3f:b4:c9:2b:6f:f0:9a:02:01:5a:cf:72:fc: c4:39:a7:95:ab:43:58:e2:dc:8c:56:51:81:61:b9:db:6f:d6: 46:20:0e:ea:e7:20:64:9e:9e:cb:37:19:48:fc:ed:5b:f6:5e: c5:ce:5f:ae:6a:4c:f1:18:b2:78:f5:52:01:80:43:86:82:36: 66:a6:a8:e5:bc:d5:c1:c8:cd:2e:75:8f:13:2f:31:de:96:24: 6e:99:dc:1e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsHVU+ogePje/yB9c3z2On7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjUxMjEwMDgxNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmI0YzU2NDJiYjBlNjllOTk3NDg2MGQzYjY2YmU1MDczMGIxZTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUEAxR0aSXwMAp7ZVpS94h1SvHXV KnAEvjU3ZoZik9388FS2CzSPGLRIkFpKKJDFfbvl/DYpVocXbw8O+4C2cGsDeBJ1 ciflQd60MOjyvCH/+a/JLYUq656YgN1/P6FW8NkMYU6jhR5DisrgVjnk/vuPW8YB 40Z7MXFvDNUdmM1gXTIjZRIocN59xS69sZX+Gke55eez3bBL0rLSfu9tnaqhn5b0 fFLcxqaFESHzh5JgY4SEqt+q2xahtg0h2z/0Lv4VtV3B49bNgHGczVyWr0BgK6yV cTwHyiP5ztXdytFZm5icEYoosdq9b2VtAX/rAcZlZAp9REoLHe4gng/b6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCK0xWQrsOaemXSGDTtmvlBzCx4TMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvSXJURlpDdXc1cDZaZElZTk8yYS1VSE1MSGhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsv3NMA0G CSqGSIb3DQEBCwUAA4IBAQCezt73Nd6cJwsic/2Kx9BXEipRFNu58/AgR1RCDO3y a3XLj4JDQDVUFQ5IeoiFjJk7eTtNjZ8HhOIbXdY1eezAAqFAAkDqEg/OZ4fZVW01 XMj3Rh+2MvgkfnDow/WOShO4EVkA4jzx73tEBf3dUVVr0MqFG9hYp1QFsVlhPsN4 pOo69NGf46KhkCwBQnVtSn9GHBnkC12Xi8jzIoPPjyMGmKoseLyd1j+0yStv8JoC AVrPcvzEOaeVq0NY4tyMVlGBYbnbb9ZGIA7q5yBknp7LNxlI/O1b9l7Fzl+uakzx GLJ49VIBgEOGgjZmpqjlvNXByM0udY8TLzHeliRumdwe -----END CERTIFICATE-----Generated at Fri Dec 19 19:42:26 2025 by rpki-client