This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/r6xJZWjtrwNhQith6PiqNcETkoY.roa File: r6xJZWjtrwNhQith6PiqNcETkoY.roa (raw, json) Hash identifier: 5M8HMFCPR3icG0A/hOYTkDnAzNiqaffro245jnASAHc= Subject key identifier: AF:AC:49:65:68:ED:AF:03:61:42:2B:61:E8:F8:AA:35:C1:13:92:86 Certificate issuer: /CN=d914da56e1a934649da02964ac12eba34c5cb84f Certificate serial: 019B02FDDABC29FBD995C0A5372F65E33012 Authority key identifier: D9:14:DA:56:E1:A9:34:64:9D:A0:29:64:AC:12:EB:A3:4C:5C:B8:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2RTaVuGpNGSdoClkrBLro0xcuE8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/r6xJZWjtrwNhQith6PiqNcETkoY.roa Signing time: Tue 09 Dec 2025 12:02:29 +0000 ROA not before: Tue 09 Dec 2025 12:02:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212586 IP address blocks: 79.174.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.crl rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.mft rsync://rpki.ripe.net/repository/DEFAULT/2RTaVuGpNGSdoClkrBLro0xcuE8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 00:50:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:02:fd:da:bc:29:fb:d9:95:c0:a5:37:2f:65:e3:30:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d914da56e1a934649da02964ac12eba34c5cb84f Validity Not Before: Dec 9 12:02:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=afac496568edaf0361422b61e8f8aa35c1139286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b1:d4:5b:e6:11:14:b9:88:6b:61:68:48:68: 72:36:c0:b2:68:40:da:4c:08:89:c9:a9:bb:a1:b9: d7:44:8b:47:ca:ec:b3:8f:dc:42:93:7e:4e:71:59: f8:41:09:dd:df:e5:3d:2d:e0:ed:b8:de:35:f9:79: 0d:3c:8a:33:1f:64:d4:c4:3e:1e:0f:d1:23:f1:66: 43:3f:63:12:33:86:71:70:f4:64:b7:af:5d:9a:76: 95:ba:64:35:99:58:9e:e3:31:00:c3:31:52:93:93: a5:a9:29:2a:2f:7e:51:ec:76:73:89:75:29:52:9b: c8:1a:d4:9c:56:8f:d9:49:23:bb:45:51:14:63:90: 50:a7:2e:03:88:c5:55:a7:ab:00:75:d7:1e:45:01: 0d:a8:c2:13:e5:e7:ac:ae:64:69:e3:c9:23:91:f3: 7b:e9:30:bb:c6:e4:29:e3:c1:66:ec:29:a5:13:4d: 8c:99:f4:75:85:1c:60:92:b0:c6:37:c3:cb:fb:2c: ca:d7:3b:8b:32:c9:0d:54:32:f1:a0:81:33:f1:df: d6:75:8b:c2:22:13:03:42:54:9a:f2:96:7b:e4:5f: bd:be:4e:60:4f:9f:03:6a:41:26:37:82:5b:69:af: aa:78:2d:b1:10:43:8d:e5:9c:7e:39:46:e3:32:97: 1a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:AC:49:65:68:ED:AF:03:61:42:2B:61:E8:F8:AA:35:C1:13:92:86 X509v3 Authority Key Identifier: keyid:D9:14:DA:56:E1:A9:34:64:9D:A0:29:64:AC:12:EB:A3:4C:5C:B8:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2RTaVuGpNGSdoClkrBLro0xcuE8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/r6xJZWjtrwNhQith6PiqNcETkoY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.174.2.0/24 Signature Algorithm: sha256WithRSAEncryption b2:85:46:2d:ba:ee:96:ce:0c:b0:66:16:9e:45:e0:5e:93:28: 19:1e:d5:f9:9b:8a:c6:6e:58:56:85:ca:11:82:6f:e3:ec:78: 88:16:57:68:16:05:8e:76:0a:d8:ef:3c:79:55:a1:f5:8f:59: 9c:87:35:63:6d:52:fd:ae:fb:5a:be:26:af:a2:84:91:07:ca: d0:57:f7:64:e2:0e:9a:85:89:91:f5:4a:0f:dd:b3:25:cd:aa: 97:d1:b9:95:27:03:09:63:aa:f7:cd:69:06:43:ba:89:8a:36: f5:46:96:30:7b:87:cb:30:dc:e8:eb:ff:6d:9d:52:d6:98:98: 83:a3:b8:59:4d:de:04:53:e7:e9:71:c0:c5:14:67:e4:73:1a: 68:32:af:0c:39:1a:07:c6:4d:b3:a0:00:04:e0:2b:08:0c:97: 8d:e4:d6:5a:2e:91:a9:6b:a6:e2:5c:87:e6:f4:1e:a2:10:2d: d7:f3:1e:1e:14:ac:0e:79:a9:9a:31:51:55:65:cc:93:ba:52: 1f:f6:65:52:a5:b8:d4:f5:6f:bf:c8:ca:ad:83:07:8b:7b:5c: f1:50:e2:f3:d7:57:4c:4d:0f:df:d1:24:8a:86:23:34:6b:9e: 5a:88:c3:5c:b1:d9:66:0d:b3:87:1c:95:97:0f:48:56:d2:d2: 27:fe:71:bf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsC/dq8KfvZlcClNy9l4zASMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5MTRkYTU2ZTFhOTM0NjQ5ZGEwMjk2NGFjMTJlYmEzNGM1 Y2I4NGYwHhcNMjUxMjA5MTIwMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmFjNDk2NTY4ZWRhZjAzNjE0MjJiNjFlOGY4YWEzNWMxMTM5Mjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbHUW+YRFLmIa2FoSGhyNsCyaEDa TAiJyam7obnXRItHyuyzj9xCk35OcVn4QQnd3+U9LeDtuN41+XkNPIozH2TUxD4e D9Ej8WZDP2MSM4ZxcPRkt69dmnaVumQ1mVie4zEAwzFSk5OlqSkqL35R7HZziXUp UpvIGtScVo/ZSSO7RVEUY5BQpy4DiMVVp6sAddceRQENqMIT5eesrmRp48kjkfN7 6TC7xuQp48Fm7CmlE02MmfR1hRxgkrDGN8PL+yzK1zuLMskNVDLxoIEz8d/WdYvC IhMDQlSa8pZ75F+9vk5gT58DakEmN4Jbaa+qeC2xEEON5Zx+OUbjMpcaFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK+sSWVo7a8DYUIrYej4qjXBE5KGMB8GA1UdIwQY MBaAFNkU2lbhqTRknaApZKwS66NMXLhPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlJUYVZ1R3BOR1Nkb0Nsa3JCTHJvMHhjdUU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS83YTExYjUtYTQwNS00MWNiLTgxY2It ZjZiY2NmMWU1MzFmLzEvcjZ4SlpXanRyd05oUWl0aDZQaXFOY0VUa29ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS83YTExYjUtYTQwNS00MWNiLTgxY2ItZjZiY2NmMWU1MzFm LzEvMlJUYVZ1R3BOR1Nkb0Nsa3JCTHJvMHhjdUU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT64CMA0G CSqGSIb3DQEBCwUAA4IBAQCyhUYtuu6WzgywZhaeReBekygZHtX5m4rGblhWhcoR gm/j7HiIFldoFgWOdgrY7zx5VaH1j1mchzVjbVL9rvtaviavooSRB8rQV/dk4g6a hYmR9UoP3bMlzaqX0bmVJwMJY6r3zWkGQ7qJijb1RpYwe4fLMNzo6/9tnVLWmJiD o7hZTd4EU+fpccDFFGfkcxpoMq8MORoHxk2zoAAE4CsIDJeN5NZaLpGpa6biXIfm 9B6iEC3X8x4eFKwOeamaMVFVZcyTulIf9mVSpbjU9W+/yMqtgweLe1zxUOLz11dM TQ/f0SSKhiM0a55aiMNcsdlmDbOHHJWXD0hW0tIn/nG/ -----END CERTIFICATE-----Generated at Sat Dec 13 08:17:12 2025 by rpki-client