This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/J0cmHYbPYOrhboraeomZGgoWy78.roa File: J0cmHYbPYOrhboraeomZGgoWy78.roa (raw, json) Hash identifier: gnLjZK1JnjiUbxeCCkBBV4T44nrxaSWiaNFrySbeF30= Subject key identifier: 27:47:26:1D:86:CF:60:EA:E1:6E:8A:DA:7A:89:99:1A:0A:16:CB:BF Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019AF3A0C0DD44201190579A8CE72D227CEB Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/J0cmHYbPYOrhboraeomZGgoWy78.roa Signing time: Sat 06 Dec 2025 12:26:29 +0000 ROA not before: Sat 06 Dec 2025 12:26:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 973 IP address blocks: 212.69.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:a0:c0:dd:44:20:11:90:57:9a:8c:e7:2d:22:7c:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Dec 6 12:26:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2747261d86cf60eae16e8ada7a89991a0a16cbbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:df:74:61:1a:e0:86:ee:d3:19:b1:5f:17:03: 20:25:a1:95:32:66:8b:41:8f:1e:05:3b:b1:3c:2b: 3d:af:3c:f0:b5:c5:c0:59:97:db:31:d5:2f:11:8d: 56:c2:1a:11:2c:0e:93:3a:3b:8d:f0:87:ff:00:03: 3f:7f:9e:8c:a8:ad:64:ea:a4:c7:25:bf:2c:37:d0: a8:6b:1c:5f:a1:4c:ab:58:54:79:85:ef:88:ba:95: a8:5e:6e:8f:c5:72:81:6a:46:34:c0:a1:c4:0f:93: 62:29:d2:f3:14:87:e4:b2:94:02:8e:38:cd:c8:7e: ef:eb:f2:07:39:0c:b7:33:b5:63:c6:d7:ed:13:bb: 10:49:82:e9:38:28:b7:92:88:46:0e:87:fd:69:46: 50:28:e9:bd:4e:3c:98:a2:97:af:6e:bf:e6:3c:28: 7b:ba:ee:1a:05:b9:1e:ed:ba:4c:e6:5c:dc:0f:9c: f4:2c:20:bb:5b:ad:aa:a5:3e:ca:99:16:46:78:7d: 03:5f:c2:75:b6:43:e0:06:c1:09:f9:e0:cf:68:bf: 90:a8:e2:8c:75:ef:85:93:00:4d:ce:1a:cd:3b:6a: 27:ba:13:22:6d:08:c7:30:7d:4b:06:ee:5e:b9:9d: d8:32:8e:70:80:28:8e:97:0e:5d:23:1c:4f:fa:23: 36:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:47:26:1D:86:CF:60:EA:E1:6E:8A:DA:7A:89:99:1A:0A:16:CB:BF X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/J0cmHYbPYOrhboraeomZGgoWy78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.69.31.0/24 Signature Algorithm: sha256WithRSAEncryption 85:c4:fc:d4:32:0f:59:aa:b4:4e:0e:24:6c:bc:55:f2:f7:07: 07:92:69:d6:8b:52:2c:eb:48:ba:f2:0c:2e:5b:72:9a:1a:7e: 2e:75:e8:28:2e:81:bd:58:4c:0e:a4:7f:9e:0a:7b:02:90:96: 64:c2:40:f9:01:0e:5e:2e:24:fd:3d:2e:58:d0:53:37:a2:2e: 6e:56:ef:43:95:07:e4:05:1f:65:f8:3c:71:df:e6:48:d0:06: 20:cf:5f:a6:e4:9b:0d:90:df:8d:f6:ee:08:71:97:41:a9:44: 90:f6:40:50:b7:dc:c4:33:20:65:29:48:64:67:09:8d:84:2c: e8:f5:0e:32:03:b3:8a:f9:57:b3:40:06:0f:0a:a3:e6:0c:68: ff:12:3e:61:03:90:b7:dd:25:17:c9:f7:db:6f:28:d9:65:19: 1c:5d:65:ad:2c:e6:b1:56:f8:6f:60:b6:2f:1c:20:27:44:bb: a5:5a:b5:f5:3f:5d:e8:c0:bd:dd:51:a6:26:41:65:a6:b1:80: 32:22:2c:67:a7:85:b3:b4:45:8d:35:db:b4:eb:5c:30:88:83: 23:96:cd:20:7b:44:36:c8:9f:df:93:b1:dc:e5:29:84:cd:6e: a6:05:52:f3:3c:c1:46:49:85:e4:c4:3c:25:12:6e:fa:60:b7: bd:41:eb:5c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrzoMDdRCARkFeajOctInzrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjUxMjA2MTIyNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzQ3MjYxZDg2Y2Y2MGVhZTE2ZThhZGE3YTg5OTkxYTBhMTZjYmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo990YRrghu7TGbFfFwMgJaGVMmaL QY8eBTuxPCs9rzzwtcXAWZfbMdUvEY1WwhoRLA6TOjuN8If/AAM/f56MqK1k6qTH Jb8sN9CoaxxfoUyrWFR5he+IupWoXm6PxXKBakY0wKHED5NiKdLzFIfkspQCjjjN yH7v6/IHOQy3M7VjxtftE7sQSYLpOCi3kohGDof9aUZQKOm9TjyYopevbr/mPCh7 uu4aBbke7bpM5lzcD5z0LCC7W62qpT7KmRZGeH0DX8J1tkPgBsEJ+eDPaL+QqOKM de+FkwBNzhrNO2onuhMibQjHMH1LBu5euZ3YMo5wgCiOlw5dIxxP+iM2VQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCdHJh2Gz2Dq4W6K2nqJmRoKFsu/MB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvSjBjbUhZYlBZT3JoYm9yYWVvbVpHZ29XeTc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1EUfMA0G CSqGSIb3DQEBCwUAA4IBAQCFxPzUMg9ZqrRODiRsvFXy9wcHkmnWi1Is60i68gwu W3KaGn4udegoLoG9WEwOpH+eCnsCkJZkwkD5AQ5eLiT9PS5Y0FM3oi5uVu9DlQfk BR9l+Dxx3+ZI0AYgz1+m5JsNkN+N9u4IcZdBqUSQ9kBQt9zEMyBlKUhkZwmNhCzo 9Q4yA7OK+VezQAYPCqPmDGj/Ej5hA5C33SUXyffbbyjZZRkcXWWtLOaxVvhvYLYv HCAnRLulWrX1P13owL3dUaYmQWWmsYAyIixnp4WztEWNNdu061wwiIMjls0ge0Q2 yJ/fk7Hc5SmEzW6mBVLzPMFGSYXkxDwlEm76YLe9Qetc -----END CERTIFICATE-----Generated at Wed Dec 10 10:53:26 2025 by rpki-client