This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/s6SWx8Eu4Zfr-CjdL7R_qnNxM0g.roa File: s6SWx8Eu4Zfr-CjdL7R_qnNxM0g.roa (raw, json) Hash identifier: xA2xiK6e6nR8yjPe33d7hlIqiWv9vdp8BBIGK5gzhn8= Subject key identifier: B3:A4:96:C7:C1:2E:E1:97:EB:F8:28:DD:2F:B4:7F:AA:73:71:33:48 Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e Certificate serial: 019AFF8221D99E12D0B61EF1BE9F5FDD1D0C Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/s6SWx8Eu4Zfr-CjdL7R_qnNxM0g.roa Signing time: Mon 08 Dec 2025 19:48:29 +0000 ROA not before: Mon 08 Dec 2025 19:48:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215376 IP address blocks: 77.221.134.0/24 maxlen: 24 77.221.146.0/24 maxlen: 24 109.120.136.0/24 maxlen: 24 176.98.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ff:82:21:d9:9e:12:d0:b6:1e:f1:be:9f:5f:dd:1d:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e Validity Not Before: Dec 8 19:48:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b3a496c7c12ee197ebf828dd2fb47faa73713348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:31:49:29:e0:8b:14:8c:61:11:f7:2a:00:6a: 6d:b7:29:da:2d:9f:a7:52:bd:13:e4:18:2e:af:3a: 9d:fc:89:75:a9:87:5c:38:0b:d8:5f:3f:50:a7:e4: b0:a6:c9:96:33:51:83:83:30:d9:3d:5e:85:f2:28: 86:6a:3d:6a:2d:f4:bf:c7:b6:45:9c:94:4f:4c:a9: a8:2f:53:cb:f6:65:02:ac:15:49:08:03:71:bc:32: 5a:7f:67:ca:e5:c6:fa:27:aa:62:cd:9e:4d:36:65: 2b:7a:ed:47:14:fb:03:75:b2:66:b2:19:1e:02:2c: c2:a2:c1:56:da:70:34:f3:28:d9:d8:66:67:b7:ee: 83:28:9a:33:68:ef:ec:c6:76:02:42:bd:e7:0a:e9: 01:d6:cf:47:0e:ab:d8:ab:45:a8:0a:ef:ab:23:d7: 53:11:d9:18:ce:3f:e5:9d:fc:0d:38:89:2e:9d:f1: 0f:d8:96:52:71:0c:03:f2:f5:25:65:9f:54:db:14: e7:dd:5d:56:6e:72:2d:8d:8b:4c:a2:12:01:d4:4c: e4:01:96:d9:88:ea:ee:f1:37:22:85:89:c3:ac:cb: d0:c5:99:40:29:9e:19:cb:3a:40:3c:d1:71:b7:4a: 18:1d:8a:c4:4b:ed:f1:15:b6:95:a4:c4:13:ce:7d: a1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A4:96:C7:C1:2E:E1:97:EB:F8:28:DD:2F:B4:7F:AA:73:71:33:48 X509v3 Authority Key Identifier: keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/s6SWx8Eu4Zfr-CjdL7R_qnNxM0g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.221.134.0/24 77.221.146.0/24 109.120.136.0/24 176.98.187.0/24 Signature Algorithm: sha256WithRSAEncryption ae:47:35:9a:32:1d:54:3d:da:02:1a:94:e0:3c:22:c3:73:c9: f5:bd:93:e6:02:cd:c7:d9:9d:10:8c:e9:7e:71:03:1d:a7:7c: 18:31:df:91:15:1e:b3:09:f0:2a:79:18:b4:39:37:08:b3:5c: 45:09:d3:61:d4:b1:35:6d:12:1e:3f:90:09:22:c0:76:46:1b: 1a:27:22:0e:f6:cb:fa:21:68:80:d3:10:f2:b5:35:68:0c:e3: 65:65:34:0b:c7:85:5a:94:89:98:a0:63:11:60:9a:d1:da:e3: d1:7f:58:23:b8:5f:1a:4b:64:6a:82:b2:78:d1:47:9e:40:2e: 35:6a:07:37:0f:8d:8f:dd:51:6d:5c:29:ac:4d:15:63:e0:96: 93:cb:4a:d6:16:5b:56:a2:a8:57:6d:97:3b:c5:37:bc:59:72: 4b:4f:8d:89:14:32:b0:91:73:be:4d:b8:7b:6f:52:cb:ee:ca: 36:3d:0f:ba:dd:98:57:56:4d:5f:f6:3a:c4:22:a2:b9:fd:81: da:15:ce:8b:36:cb:42:3d:45:0b:01:89:43:d2:4a:94:34:bb: c7:bc:49:82:0c:3e:28:9c:00:fd:82:f9:f5:24:ff:a4:34:da: 63:3a:e1:1c:24:21:3e:fc:a1:81:8a:74:9b:cc:d2:fe:42:74: a6:c6:c9:15 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZr/giHZnhLQth7xvp9f3R0MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMmMyMTlmM2MyOTdiNzc1ODgwYzNiNjUxYTIwMDNmOWJl NmRlNWUwHhcNMjUxMjA4MTk0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2E0OTZjN2MxMmVlMTk3ZWJmODI4ZGQyZmI0N2ZhYTczNzEzMzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DFJKeCLFIxhEfcqAGpttynaLZ+n Ur0T5Bgurzqd/Il1qYdcOAvYXz9Qp+SwpsmWM1GDgzDZPV6F8iiGaj1qLfS/x7ZF nJRPTKmoL1PL9mUCrBVJCANxvDJaf2fK5cb6J6pizZ5NNmUreu1HFPsDdbJmshke AizCosFW2nA08yjZ2GZnt+6DKJozaO/sxnYCQr3nCukB1s9HDqvYq0WoCu+rI9dT EdkYzj/lnfwNOIkunfEP2JZScQwD8vUlZZ9U2xTn3V1WbnItjYtMohIB1EzkAZbZ iOru8TcihYnDrMvQxZlAKZ4ZyzpAPNFxt0oYHYrES+3xFbaVpMQTzn2hOQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFLOklsfBLuGX6/go3S+0f6pzcTNIMB8GA1UdIwQY MBaAFBssIZ88KXt3WIDDtlGiAD+b5t5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEt OTJjODFmMjJlNzEyLzEvczZTV3g4RXU0WmZyLUNqZEw3Ul9xbk54TTBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEtOTJjODFmMjJlNzEy LzEvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQATd2GAwQA Td2SAwQAbXiIAwQAsGK7MA0GCSqGSIb3DQEBCwUAA4IBAQCuRzWaMh1UPdoCGpTg PCLDc8n1vZPmAs3H2Z0QjOl+cQMdp3wYMd+RFR6zCfAqeRi0OTcIs1xFCdNh1LE1 bRIeP5AJIsB2RhsaJyIO9sv6IWiA0xDytTVoDONlZTQLx4ValImYoGMRYJrR2uPR f1gjuF8aS2RqgrJ40UeeQC41agc3D42P3VFtXCmsTRVj4JaTy0rWFltWoqhXbZc7 xTe8WXJLT42JFDKwkXO+Tbh7b1LL7so2PQ+63ZhXVk1f9jrEIqK5/YHaFc6LNstC PUULAYlD0kqUNLvHvEmCDD4onAD9gvn1JP+kNNpjOuEcJCE+/KGBinSbzNL+QnSm xskV -----END CERTIFICATE-----Generated at Wed Dec 10 08:18:57 2025 by rpki-client