This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/4K6BvTiMAIEOiTtR2Ca7Dc4cIH4.roa File: 4K6BvTiMAIEOiTtR2Ca7Dc4cIH4.roa (raw, json) Hash identifier: MHAWhrg0ApNqJ4NcLLSk8Lu+ujo8Efa4wgXL5CJxuhU= Subject key identifier: E0:AE:81:BD:38:8C:00:81:0E:89:3B:51:D8:26:BB:0D:CE:1C:20:7E Certificate issuer: /CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc Certificate serial: 019B31F3A535760120C716C9406794FBDE67 Authority key identifier: AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/4K6BvTiMAIEOiTtR2Ca7Dc4cIH4.roa Signing time: Thu 18 Dec 2025 14:53:29 +0000 ROA not before: Thu 18 Dec 2025 14:53:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 200873 IP address blocks: 37.221.99.0/24 maxlen: 24 185.67.236.0/23 maxlen: 23 185.67.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:f3:a5:35:76:01:20:c7:16:c9:40:67:94:fb:de:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc Validity Not Before: Dec 18 14:53:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e0ae81bd388c00810e893b51d826bb0dce1c207e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:11:55:ca:97:ea:9d:5d:44:63:02:1d:7a:47: d7:5d:a2:60:c5:d1:c4:cb:2a:b4:cb:43:92:21:22: 9f:af:4d:51:97:a6:02:e0:3b:37:a6:55:5e:99:f0: 3d:6c:88:6e:8b:86:7d:58:9c:e4:43:47:b3:dd:17: af:85:88:38:e4:9b:ac:f6:ba:a2:e4:09:37:ee:58: 5f:e5:be:17:f4:aa:3e:6f:f0:e3:40:2a:64:17:0b: d9:d1:3e:8b:3c:20:d5:2b:9d:f5:5c:8c:0d:20:d0: 28:1e:8e:ee:6a:19:5b:29:f1:e3:bc:ea:12:af:b9: 1b:29:1c:b1:8e:9f:16:92:a1:d3:91:09:6a:38:a4: ac:dd:71:88:34:db:5f:69:38:98:38:b7:3e:5c:2b: ee:13:71:e1:80:43:94:c3:51:ba:c6:c5:37:4a:e5: 79:3d:0b:73:d0:26:a9:ff:f5:5a:28:d5:5c:92:9e: 41:c8:b4:ab:34:c9:62:77:08:d4:47:ea:8b:c6:02: 94:fb:a7:3d:ae:3a:93:39:ac:9d:94:ef:04:c7:bb: 81:e5:16:f1:06:b1:76:95:a2:bc:30:f5:97:02:24: 08:d2:fe:98:af:fa:e6:31:ea:81:72:21:96:f4:87: f4:69:2e:aa:e0:a3:77:4f:c3:34:6d:46:27:52:c8: 63:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:AE:81:BD:38:8C:00:81:0E:89:3B:51:D8:26:BB:0D:CE:1C:20:7E X509v3 Authority Key Identifier: keyid:AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/4K6BvTiMAIEOiTtR2Ca7Dc4cIH4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.221.99.0/24 185.67.236.0-185.67.238.255 Signature Algorithm: sha256WithRSAEncryption 28:c8:7e:bf:75:f9:d8:c4:e9:3c:ab:5c:33:7c:cd:5d:1d:48: c8:05:cf:28:af:4e:54:fe:60:0f:11:02:90:7c:c1:b9:c3:54: 45:b8:4d:fd:49:67:d2:f4:43:54:7a:80:26:43:28:f6:32:0c: b4:ef:68:73:9c:de:01:c7:48:71:72:35:1f:b9:d4:a3:d4:ad: f2:c9:c7:7e:93:a7:b4:5b:b4:94:21:8b:b7:fa:f7:1a:f8:2c: 9b:6d:5e:87:ac:ee:46:03:b1:60:b5:33:62:34:27:d5:0c:f0: 6a:3b:80:b5:11:a9:e4:af:81:95:82:0d:aa:97:c5:57:91:5f: cb:ae:df:b3:1e:95:39:d9:98:24:35:00:31:c6:9f:a5:3f:05: e0:bb:0c:9e:e6:23:77:24:a4:33:b9:89:d9:69:ea:72:cd:c4: 9d:72:ec:6f:43:57:b4:1a:e3:90:cb:c0:c9:d3:c7:3c:25:5c: f6:d8:a9:c6:b2:50:ec:20:af:a1:fd:86:10:4e:fb:64:6e:28: e6:53:07:34:4c:cc:4b:4b:c7:2f:f5:84:4e:87:88:3c:39:03: 2f:99:93:79:a5:c8:3d:e3:18:97:1d:75:d0:95:36:f8:95:90: c7:34:f7:72:91:6b:bd:b5:ab:5f:c5:14:0d:ce:b3:ed:31:1d: 52:8a:86:61 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZsx86U1dgEgxxbJQGeU+95nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjN2NjMzM0ZjUxZDJiNmViNGUyN2Q2ZDU2YjliY2UzZTg1 NTYwY2MwHhcNMjUxMjE4MTQ1MzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGFlODFiZDM4OGMwMDgxMGU4OTNiNTFkODI2YmIwZGNlMWMyMDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxFVypfqnV1EYwIdekfXXaJgxdHE yyq0y0OSISKfr01Rl6YC4Ds3plVemfA9bIhui4Z9WJzkQ0ez3RevhYg45Jus9rqi 5Ak37lhf5b4X9Ko+b/DjQCpkFwvZ0T6LPCDVK531XIwNINAoHo7uahlbKfHjvOoS r7kbKRyxjp8WkqHTkQlqOKSs3XGINNtfaTiYOLc+XCvuE3HhgEOUw1G6xsU3SuV5 PQtz0Cap//VaKNVckp5ByLSrNMlidwjUR+qLxgKU+6c9rjqTOaydlO8Ex7uB5Rbx BrF2laK8MPWXAiQI0v6Yr/rmMeqBciGW9If0aS6q4KN3T8M0bUYnUshjJQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFOCugb04jACBDok7Udgmuw3OHCB+MB8GA1UdIwQY MBaAFKx8wzT1HStutOJ9bVa5vOPoVWDMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kZDU1ZTgtZmViZC00OWQwLWE1YTct MWNmMTViMmJhN2JlLzEvNEs2QnZUaU1BSUVPaVR0UjJDYTdEYzRjSUg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9kZDU1ZTgtZmViZC00OWQwLWE1YTctMWNmMTViMmJhN2Jl LzEvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAJd1jMAwD BAK5Q+wDBAC5Q+4wDQYJKoZIhvcNAQELBQADggEBACjIfr91+djE6TyrXDN8zV0d SMgFzyivTlT+YA8RApB8wbnDVEW4Tf1JZ9L0Q1R6gCZDKPYyDLTvaHOc3gHHSHFy NR+51KPUrfLJx36Tp7RbtJQhi7f69xr4LJttXoes7kYDsWC1M2I0J9UM8Go7gLUR qeSvgZWCDaqXxVeRX8uu37MelTnZmCQ1ADHGn6U/BeC7DJ7mI3ckpDO5idlp6nLN xJ1y7G9DV7Qa45DLwMnTxzwlXPbYqcayUOwgr6H9hhBO+2RuKOZTBzRMzEtLxy/1 hE6HiDw5Ay+Zk3mlyD3jGJcdddCVNviVkMc093KRa721q1/FFA3Os+0xHVKKhmE= -----END CERTIFICATE-----Generated at Fri Dec 19 07:14:10 2025 by rpki-client