This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/berRgK4Y3-2UZXk5RakNfq4t1EU.roa File: berRgK4Y3-2UZXk5RakNfq4t1EU.roa (raw, json) Hash identifier: Lq8XIpyCy5oj/4jktVNEgduU7Q4CJV9eJo0dOubBcDk= Subject key identifier: 6D:EA:D1:80:AE:18:DF:ED:94:65:79:39:45:A9:0D:7E:AE:2D:D4:45 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019AA583979F90DC427DA3D9A6F4F7BFADF6 Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/berRgK4Y3-2UZXk5RakNfq4t1EU.roa Signing time: Fri 21 Nov 2025 08:24:16 +0000 ROA not before: Fri 21 Nov 2025 08:24:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9304 IP address blocks: 79.175.118.0/24 maxlen: 24 109.121.39.0/24 maxlen: 24 178.253.227.0/24 maxlen: 24 188.255.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 21:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a5:83:97:9f:90:dc:42:7d:a3:d9:a6:f4:f7:bf:ad:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Nov 21 08:24:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6dead180ae18dfed9465793945a90d7eae2dd445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:74:3b:9b:61:ef:7f:65:3a:a6:1b:6e:84:8c: 42:8f:22:04:5c:b2:38:e6:ec:24:02:21:e4:3e:1a: d2:d2:f8:7e:3f:66:94:b5:e4:54:63:17:8d:47:33: c2:f2:d2:1c:c3:8b:4a:e5:6a:c0:1b:6a:8f:0b:f1: b8:17:cd:ec:81:54:b7:3a:8e:db:d8:83:30:5a:75: 69:c6:d4:59:6b:06:6d:17:92:26:7e:58:64:a1:e5: 7b:3a:68:45:3e:96:c4:4d:3d:89:ab:93:0e:53:7f: 1a:d9:29:f0:90:dd:10:48:95:cd:76:43:57:68:bc: 69:10:12:23:64:4d:09:e0:9d:2e:75:d1:17:b0:1a: 4e:05:cc:49:6b:ff:8b:2a:8e:85:b1:0f:3b:77:73: 01:57:6f:0c:27:1e:dc:39:2d:34:fb:27:f5:fe:4f: 52:6e:59:e8:da:a5:27:d1:d9:01:e2:16:7c:cf:a5: e4:1c:55:12:b9:5a:bc:ba:f1:ed:d7:88:ce:3c:95: 61:63:b7:70:82:c6:76:cc:a4:3c:3f:ee:1e:ef:55: 11:5b:34:84:48:4c:e4:b8:7a:96:e7:ea:35:d0:e1: 11:7a:90:59:9c:37:27:c4:96:f9:d6:aa:28:75:3c: 8e:bd:df:fd:02:34:76:94:7a:e1:5c:8c:2d:ee:8e: 80:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:EA:D1:80:AE:18:DF:ED:94:65:79:39:45:A9:0D:7E:AE:2D:D4:45 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/berRgK4Y3-2UZXk5RakNfq4t1EU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.175.118.0/24 109.121.39.0/24 178.253.227.0/24 188.255.227.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:e4:4f:4c:0c:e8:4a:92:70:07:b1:7c:e5:43:16:ce:bb:b0: b9:f5:3f:96:44:f3:6a:3d:8d:94:b9:53:45:5a:d4:7d:84:28: e9:cf:90:f3:c5:3b:b8:3b:91:f5:ef:25:f1:1c:46:01:aa:14: 8e:cb:1b:40:04:d8:34:fc:1e:8f:c7:05:eb:74:6c:33:d9:4c: df:27:5d:99:09:15:ef:cd:56:f4:0b:5a:2d:b0:85:e3:19:d4: 77:96:09:e2:6c:5f:53:fa:1f:5c:e5:94:4b:a1:18:5b:dc:d3: a5:92:d1:01:57:8b:17:48:f8:3c:14:c0:e5:8e:52:e0:79:f6: 14:09:e0:24:db:30:dc:3f:37:7c:5a:ef:b0:5f:9d:9c:d7:45: 6c:08:07:ae:d0:79:4a:3a:99:02:83:06:31:9d:19:51:60:96: 17:d2:5b:97:c5:72:b8:29:2e:1b:63:bc:fe:53:e1:8c:33:a2: 03:4a:33:0e:82:df:f7:3f:64:40:50:e0:f6:e8:00:ed:d1:e0: 14:57:2e:1e:88:67:49:b6:65:7c:88:ac:41:2d:77:18:2a:52: dc:50:21:d5:ef:3b:c6:a8:53:68:ba:0e:98:01:89:74:c6:3d: 93:b6:7f:ff:cf:9e:64:09:a4:46:97:11:75:3f:b1:ba:8a:f9: 02:20:a2:72 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZqlg5efkNxCfaPZpvT3v632MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjUxMTIxMDgyNDE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGVhZDE4MGFlMThkZmVkOTQ2NTc5Mzk0NWE5MGQ3ZWFlMmRkNDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHQ7m2Hvf2U6phtuhIxCjyIEXLI4 5uwkAiHkPhrS0vh+P2aUteRUYxeNRzPC8tIcw4tK5WrAG2qPC/G4F83sgVS3Oo7b 2IMwWnVpxtRZawZtF5ImflhkoeV7OmhFPpbETT2Jq5MOU38a2SnwkN0QSJXNdkNX aLxpEBIjZE0J4J0uddEXsBpOBcxJa/+LKo6FsQ87d3MBV28MJx7cOS00+yf1/k9S blno2qUn0dkB4hZ8z6XkHFUSuVq8uvHt14jOPJVhY7dwgsZ2zKQ8P+4e71URWzSE SEzkuHqW5+o10OERepBZnDcnxJb51qoodTyOvd/9AjR2lHrhXIwt7o6AdQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFG3q0YCuGN/tlGV5OUWpDX6uLdRFMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvYmVyUmdLNFkzLTJVWlhrNVJha05mcTR0MUVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAT692AwQA bXknAwQAsv3jAwQAvP/jMA0GCSqGSIb3DQEBCwUAA4IBAQAv5E9MDOhKknAHsXzl QxbOu7C59T+WRPNqPY2UuVNFWtR9hCjpz5DzxTu4O5H17yXxHEYBqhSOyxtABNg0 /B6PxwXrdGwz2UzfJ12ZCRXvzVb0C1otsIXjGdR3lgnibF9T+h9c5ZRLoRhb3NOl ktEBV4sXSPg8FMDljlLgefYUCeAk2zDcPzd8Wu+wX52c10VsCAeu0HlKOpkCgwYx nRlRYJYX0luXxXK4KS4bY7z+U+GMM6IDSjMOgt/3P2RAUOD26ADt0eAUVy4eiGdJ tmV8iKxBLXcYKlLcUCHV7zvGqFNoug6YAYl0xj2Ttn//z55kCaRGlxF1P7G6ivkC IKJy -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:43 2025 by rpki-client