This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/cueQ3N41Y5k_nsTx-6LxeD2eM0c.roa File: cueQ3N41Y5k_nsTx-6LxeD2eM0c.roa (raw, json) Hash identifier: gpEFzVlLsLQvrmBBS+sXMyg3ICaa8gOAvugiIVdabgE= Subject key identifier: 72:E7:90:DC:DE:35:63:99:3F:9E:C4:F1:FB:A2:F1:78:3D:9E:33:47 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019B649699A4FBD5D718952C895956CA5F8F Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/cueQ3N41Y5k_nsTx-6LxeD2eM0c.roa Signing time: Sun 28 Dec 2025 10:52:29 +0000 ROA not before: Sun 28 Dec 2025 10:52:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 81.18.48.0/24 maxlen: 24 81.18.63.0/24 maxlen: 24 109.121.42.0/24 maxlen: 24 109.121.47.0/24 maxlen: 24 178.219.6.0/24 maxlen: 24 178.253.229.0/24 maxlen: 24 185.47.91.0/24 maxlen: 24 188.255.198.0/24 maxlen: 24 212.69.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:64:96:99:a4:fb:d5:d7:18:95:2c:89:59:56:ca:5f:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Dec 28 10:52:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=72e790dcde3563993f9ec4f1fba2f1783d9e3347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:65:e7:fc:2a:f5:cc:85:84:30:18:d7:93:12: 9d:05:2b:df:13:3c:d1:f1:2c:11:c0:88:86:f1:e7: a5:f3:7b:51:3f:ee:7f:64:78:bc:9c:19:8a:b8:0c: 34:16:e1:64:db:45:21:43:ad:fe:82:a7:f4:11:bd: 63:b2:4a:28:26:97:75:84:b2:e5:67:13:ef:15:88: f9:02:02:16:22:9c:5c:55:7e:60:13:59:e0:1b:8f: 96:ed:f6:26:f9:f1:40:79:f7:41:24:24:c9:08:00: 08:1d:27:9a:21:0a:53:90:93:fb:4c:9f:d1:a1:66: 4d:c9:72:77:ee:2f:bf:f0:da:c5:c2:ab:0b:45:be: f3:28:a0:79:10:2e:85:50:0c:2d:98:fa:58:68:c8: a5:3a:92:cf:e4:87:e2:f1:25:8d:2f:7e:13:5e:4b: 12:b2:59:e0:ec:a6:6c:60:cf:75:03:a2:31:5b:e2: 89:2d:d9:81:f3:25:cc:ca:7b:92:6c:4e:b6:49:93: 16:35:d6:c9:77:8e:64:6b:1a:ce:4e:3a:ab:18:54: 6d:df:a5:71:22:b9:52:75:80:ab:f7:35:a3:c9:ad: ac:20:cc:76:8f:3d:60:71:6d:a5:4f:6d:81:89:bd: d5:99:5d:d7:88:ff:eb:e0:58:ee:99:18:41:67:ef: 6d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:E7:90:DC:DE:35:63:99:3F:9E:C4:F1:FB:A2:F1:78:3D:9E:33:47 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/cueQ3N41Y5k_nsTx-6LxeD2eM0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.18.48.0/24 81.18.63.0/24 109.121.42.0/24 109.121.47.0/24 178.219.6.0/24 178.253.229.0/24 185.47.91.0/24 188.255.198.0/24 212.69.11.0/24 Signature Algorithm: sha256WithRSAEncryption 80:9c:f1:d8:08:51:d7:c8:ea:6e:19:31:e8:3e:1e:d4:22:10: a9:7d:ea:fd:02:a8:a2:05:82:29:a8:06:3d:91:e5:82:91:ac: eb:43:30:fc:04:cd:19:95:8c:8c:03:78:92:f8:ff:1d:ba:9b: 46:f2:c4:dd:82:55:1e:98:c7:5a:f6:1e:3b:c1:82:b6:bd:3f: c0:2d:1f:24:98:17:d8:a8:1c:8d:38:10:8d:dc:f1:9f:45:ab: 55:d9:bb:14:6d:84:61:d9:7a:42:2a:91:a8:85:69:7b:57:62: 07:70:d1:47:51:11:ef:d8:59:63:78:7c:50:0c:6c:b7:7f:0e: e0:d8:21:29:bd:be:68:80:87:0a:ae:34:2c:1c:c4:0f:8b:5e: f3:c0:4d:97:4a:88:f0:16:9f:75:01:10:a9:2b:e7:5c:47:49: ed:51:95:b0:d3:bc:78:f6:de:06:5e:37:92:81:5e:60:23:d7: d3:ac:df:50:01:30:c2:8f:35:03:4b:82:48:35:98:40:db:91: 64:30:95:a7:2d:b0:81:dd:ef:2f:23:88:07:89:e9:c0:88:91: 64:71:f7:d2:76:3e:98:c9:32:77:63:0b:3b:12:0b:f7:3b:ee: c4:61:e4:3f:ab:6e:1a:50:af:a1:fb:c3:21:76:b8:32:80:49: e3:4b:17:e4 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZtklpmk+9XXGJUsiVlWyl+PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjUxMjI4MTA1MjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MmU3OTBkY2RlMzU2Mzk5M2Y5ZWM0ZjFmYmEyZjE3ODNkOWUzMzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WXn/Cr1zIWEMBjXkxKdBSvfEzzR 8SwRwIiG8eel83tRP+5/ZHi8nBmKuAw0FuFk20UhQ63+gqf0Eb1jskooJpd1hLLl ZxPvFYj5AgIWIpxcVX5gE1ngG4+W7fYm+fFAefdBJCTJCAAIHSeaIQpTkJP7TJ/R oWZNyXJ37i+/8NrFwqsLRb7zKKB5EC6FUAwtmPpYaMilOpLP5Ifi8SWNL34TXksS slng7KZsYM91A6IxW+KJLdmB8yXMynuSbE62SZMWNdbJd45kaxrOTjqrGFRt36Vx IrlSdYCr9zWjya2sIMx2jz1gcW2lT22Bib3VmV3XiP/r4FjumRhBZ+9tcwIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFHLnkNzeNWOZP57E8fui8Xg9njNHMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvY3VlUTNONDFZNWtfbnNUeC02THhlRDJlTTBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAURIwAwQA URI/AwQAbXkqAwQAbXkvAwQAstsGAwQAsv3lAwQAuS9bAwQAvP/GAwQA1EULMA0G CSqGSIb3DQEBCwUAA4IBAQCAnPHYCFHXyOpuGTHoPh7UIhCpfer9AqiiBYIpqAY9 keWCkazrQzD8BM0ZlYyMA3iS+P8duptG8sTdglUemMda9h47wYK2vT/ALR8kmBfY qByNOBCN3PGfRatV2bsUbYRh2XpCKpGohWl7V2IHcNFHURHv2FljeHxQDGy3fw7g 2CEpvb5ogIcKrjQsHMQPi17zwE2XSojwFp91ARCpK+dcR0ntUZWw07x49t4GXjeS gV5gI9fTrN9QATDCjzUDS4JINZhA25FkMJWnLbCB3e8vI4gHienAiJFkcffSdj6Y yTJ3Yws7Egv3O+7EYeQ/q24aUK+h+8MhdrgygEnjSxfk -----END CERTIFICATE-----Generated at Tue Dec 30 21:06:30 2025 by rpki-client