This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/g6C-yiFY0y2tiDGm6X6C5giXzxg.roa File: g6C-yiFY0y2tiDGm6X6C5giXzxg.roa (raw, json) Hash identifier: r1yI2j4TsqcI6pkTa+z9HyIsh2P/SNDg9RsKOOa01VA= Subject key identifier: 83:A0:BE:CA:21:58:D3:2D:AD:88:31:A6:E9:7E:82:E6:08:97:CF:18 Certificate issuer: /CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Certificate serial: 019AE0B610E513F6923A8D61C2B41CF01016 Authority key identifier: 0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/g6C-yiFY0y2tiDGm6X6C5giXzxg.roa Signing time: Tue 02 Dec 2025 20:16:59 +0000 ROA not before: Tue 02 Dec 2025 20:16:59 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 3214 IP address blocks: 89.106.207.0/24 maxlen: 24 192.109.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e0:b6:10:e5:13:f6:92:3a:8d:61:c2:b4:1c:f0:10:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Validity Not Before: Dec 2 20:16:59 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=83a0beca2158d32dad8831a6e97e82e60897cf18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:36:48:3b:87:df:cf:6a:54:55:0c:45:ce:b5: 10:de:1d:f3:f2:ac:70:88:65:cf:fb:85:f2:2e:2e: ed:5a:e0:f4:5c:93:a2:8c:3e:2e:89:05:0a:a7:b1: dd:b2:65:b1:5b:d7:1b:95:eb:12:ff:7e:a3:67:87: 1f:0c:45:cb:0f:12:a1:4c:99:07:1e:ba:ee:6e:62: da:bb:35:36:c0:50:1e:9b:91:11:9b:43:14:02:fb: 35:87:98:2c:6a:db:ae:d1:4a:6a:5a:47:ad:cd:e9: 90:5b:dc:a8:ec:32:bf:d4:6a:5c:63:ec:46:02:27: ad:b2:df:39:4c:6b:3f:55:c5:61:6b:8d:74:f0:ec: c8:bc:21:5d:0e:d3:1a:52:91:72:b6:8c:fc:6c:ff: 55:a0:3f:21:37:2e:ef:cc:ed:cc:9f:e0:e1:88:dc: 2b:29:f0:71:5b:1b:19:94:b3:30:ec:ba:09:ad:81: 0f:b5:6c:37:c6:31:31:d5:aa:65:1c:4b:ec:c7:50: 62:27:4f:ac:ad:21:c6:fb:6f:e5:50:86:24:3f:be: ed:71:b0:11:29:8a:8c:92:96:0f:46:5c:84:cf:dc: be:83:99:31:ea:2f:4a:a6:8f:9c:c7:93:ab:e0:a3: 04:72:5a:59:89:d4:14:20:ac:ca:4f:53:e7:e0:7a: 32:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:A0:BE:CA:21:58:D3:2D:AD:88:31:A6:E9:7E:82:E6:08:97:CF:18 X509v3 Authority Key Identifier: keyid:0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/g6C-yiFY0y2tiDGm6X6C5giXzxg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.106.207.0/24 192.109.228.0/24 Signature Algorithm: sha256WithRSAEncryption 79:97:7f:66:2f:ba:2d:80:ae:55:60:90:90:21:72:29:59:7f: ac:af:a9:d0:f9:cf:9a:e2:8c:88:6a:a8:ab:97:62:97:66:29: 32:3d:65:0c:1d:b1:8f:e8:9f:40:dc:48:0c:77:d5:af:b2:9a: 63:a3:48:47:ee:f2:ac:97:c1:ad:e7:f0:64:a7:42:04:53:e8: 89:87:60:34:1b:21:a4:3f:03:7a:88:90:bb:e8:53:f6:e0:ca: af:83:09:71:96:70:dd:3c:59:06:33:1e:34:8d:ee:ec:d5:b4: 85:23:3b:a8:36:42:cf:eb:ba:45:22:c2:9f:a5:15:2a:85:7c: 94:33:3a:63:c1:4a:41:9d:14:32:ab:8f:4b:22:8f:b2:9d:14: ad:87:5a:9a:f9:90:fb:06:9f:2c:f7:2c:3e:9b:5d:c4:62:a8: 81:65:72:e0:78:b5:08:e1:87:89:85:c6:b0:cf:2a:e2:f6:8a: 39:fb:a2:be:4f:10:e2:af:a4:07:5d:b5:c1:fd:7e:7d:36:af: 3f:58:6a:38:aa:29:c1:95:d1:63:3e:38:29:cd:f5:38:c4:71: d3:35:bd:f4:1b:91:84:93:e2:6c:bd:1c:75:e8:d8:05:83:3f: f9:e1:4f:8c:28:e6:73:44:64:e4:d6:72:4b:0f:5b:27:23:b6: 35:4b:f3:e1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrgthDlE/aSOo1hwrQc8BAWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMTdiZjI0OThmMzY4MmQ3MTgzZTQ3Zjc1YjI4YWY0MWMy ODE1YjkwHhcNMjUxMjAyMjAxNjU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4M2EwYmVjYTIxNThkMzJkYWQ4ODMxYTZlOTdlODJlNjA4OTdjZjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jZIO4ffz2pUVQxFzrUQ3h3z8qxw iGXP+4XyLi7tWuD0XJOijD4uiQUKp7HdsmWxW9cblesS/36jZ4cfDEXLDxKhTJkH HrrubmLauzU2wFAem5ERm0MUAvs1h5gsatuu0UpqWketzemQW9yo7DK/1GpcY+xG Aietst85TGs/VcVha4108OzIvCFdDtMaUpFytoz8bP9VoD8hNy7vzO3Mn+DhiNwr KfBxWxsZlLMw7LoJrYEPtWw3xjEx1aplHEvsx1BiJ0+srSHG+2/lUIYkP77tcbAR KYqMkpYPRlyEz9y+g5kx6i9Kpo+cx5Or4KMEclpZidQUIKzKT1Pn4HoyDQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIOgvsohWNMtrYgxpul+guYIl88YMB8GA1UdIwQY MBaAFA8XvySY82gtcYPkf3WyivQcKBW5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMt YTQ5Y2JiODRmOTgyLzEvZzZDLXlpRlkweTJ0aURHbTZYNkM1Z2lYenhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMtYTQ5Y2JiODRmOTgy LzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWWrPAwQA wG3kMA0GCSqGSIb3DQEBCwUAA4IBAQB5l39mL7otgK5VYJCQIXIpWX+sr6nQ+c+a 4oyIaqirl2KXZikyPWUMHbGP6J9A3EgMd9Wvsppjo0hH7vKsl8Gt5/Bkp0IEU+iJ h2A0GyGkPwN6iJC76FP24MqvgwlxlnDdPFkGMx40je7s1bSFIzuoNkLP67pFIsKf pRUqhXyUMzpjwUpBnRQyq49LIo+ynRSth1qa+ZD7Bp8s9yw+m13EYqiBZXLgeLUI 4YeJhcawzyri9oo5+6K+TxDir6QHXbXB/X59Nq8/WGo4qinBldFjPjgpzfU4xHHT Nb30G5GEk+JsvRx16NgFgz/54U+MKOZzRGTk1nJLD1snI7Y1S/Ph -----END CERTIFICATE-----Generated at Wed Dec 3 13:08:58 2025 by rpki-client