This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/_6Gpvi80h_TE7tw2yAX36ydHEWA.roa File: _6Gpvi80h_TE7tw2yAX36ydHEWA.roa (raw, json) Hash identifier: jVkHdJt8HB18VC0GmXsEQ5DZ2TNDFNbfuCM46PL3l5I= Subject key identifier: FF:A1:A9:BE:2F:34:87:F4:C4:EE:DC:36:C8:05:F7:EB:27:47:11:60 Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Certificate serial: 019AF50B2809EACED5ADFC08C7BA2078372B Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/_6Gpvi80h_TE7tw2yAX36ydHEWA.roa Signing time: Sat 06 Dec 2025 19:02:20 +0000 ROA not before: Sat 06 Dec 2025 19:02:20 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205899 IP address blocks: 46.249.110.0/24 maxlen: 24 185.215.247.0/24 maxlen: 24 185.231.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:28:09:ea:ce:d5:ad:fc:08:c7:ba:20:78:37:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Validity Not Before: Dec 6 19:02:20 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ffa1a9be2f3487f4c4eedc36c805f7eb27471160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bc:7c:d9:9a:20:2e:b7:34:18:c7:9c:a8:b5: 16:79:64:b5:b3:31:a6:bd:6e:5b:cd:38:3d:96:67: c4:49:5b:51:df:bd:1e:29:81:02:36:fa:89:26:b8: 57:c8:49:02:99:1f:f4:41:ba:f4:ec:1a:32:43:a6: ef:dd:90:dd:26:45:03:a8:23:f7:d1:3b:53:a7:9c: ae:32:89:11:12:61:22:d5:56:7c:40:81:19:16:52: 42:d7:2b:7c:33:2f:39:bb:14:8f:c3:ba:bc:f3:44: 32:d3:06:a6:dd:57:18:8a:86:0d:8f:73:b8:51:72: cb:db:e8:c0:ec:79:bd:4e:6e:74:6e:b1:3d:91:c2: a9:b0:53:cc:eb:18:ee:8d:b0:96:c1:10:d0:ae:1a: dd:0c:1a:86:0e:f4:9d:fd:08:69:ae:fb:4d:d1:07: 33:dc:48:9b:2d:05:fa:11:c9:4c:99:e4:cf:72:4b: c0:54:90:0a:70:f6:06:c0:29:44:7a:8e:34:fb:f9: ee:86:5e:96:6f:23:5f:fa:7a:1e:7c:62:20:42:06: 10:cd:76:70:77:1c:65:15:c5:7d:aa:16:c7:09:c5: f1:5e:42:35:b6:a5:5f:8e:f0:87:fa:e1:da:4b:15: 7b:63:bd:0d:9a:5c:49:7f:57:b3:33:ec:ed:5a:15: 38:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A1:A9:BE:2F:34:87:F4:C4:EE:DC:36:C8:05:F7:EB:27:47:11:60 X509v3 Authority Key Identifier: keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/_6Gpvi80h_TE7tw2yAX36ydHEWA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.249.110.0/24 185.215.247.0/24 185.231.173.0/24 Signature Algorithm: sha256WithRSAEncryption 31:05:22:e0:39:21:d9:30:3a:5c:99:03:1f:43:95:31:f5:3e: 3a:0a:0e:25:85:46:f9:e9:8c:0c:23:e6:1c:f2:a3:7a:e4:38: e4:fe:f8:f6:12:f4:44:84:93:07:d5:bf:8b:43:1c:73:24:f5: 93:0c:ab:fe:cc:b5:72:bc:9d:f5:7e:67:0c:c0:be:e5:89:d1: 07:93:1f:5c:53:a3:ac:a4:ef:af:d6:ef:7e:49:87:b0:f3:0a: aa:f2:19:18:ab:fa:50:26:ac:90:f7:41:2a:86:4a:b2:2a:d3: 66:37:31:32:39:75:7f:5a:e6:15:41:42:16:ef:83:e0:19:d6: 1d:f4:67:c9:96:84:6c:68:f3:16:76:28:5e:09:6e:b7:37:fa: e2:b2:e0:4f:1e:9a:3a:98:aa:3a:83:58:ed:60:c2:4f:f1:c7: 86:81:fd:23:c7:0c:73:86:fe:1f:f4:d0:84:1f:ab:91:a1:92: 9c:d8:1b:a6:3d:29:d1:64:54:4c:01:a5:c3:96:a8:34:f1:1b: f7:dc:9b:a1:79:4a:4d:b5:56:6e:83:19:3e:48:d2:6c:b0:93: b8:6e:8b:df:ca:4e:15:f4:32:f9:54:3f:19:ca:be:07:7f:2e: 82:d0:48:38:2a:b0:8d:68:70:42:ae:23:6a:a0:b2:e0:13:0e: 1c:aa:ef:73 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZr1CygJ6s7VrfwIx7ogeDcrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2 NWE0NzgwHhcNMjUxMjA2MTkwMjIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmExYTliZTJmMzQ4N2Y0YzRlZWRjMzZjODA1ZjdlYjI3NDcxMTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bx82ZogLrc0GMecqLUWeWS1szGm vW5bzTg9lmfESVtR370eKYECNvqJJrhXyEkCmR/0Qbr07BoyQ6bv3ZDdJkUDqCP3 0TtTp5yuMokREmEi1VZ8QIEZFlJC1yt8My85uxSPw7q880Qy0wam3VcYioYNj3O4 UXLL2+jA7Hm9Tm50brE9kcKpsFPM6xjujbCWwRDQrhrdDBqGDvSd/QhprvtN0Qcz 3EibLQX6EclMmeTPckvAVJAKcPYGwClEeo40+/nuhl6WbyNf+noefGIgQgYQzXZw dxxlFcV9qhbHCcXxXkI1tqVfjvCH+uHaSxV7Y70NmlxJf1ezM+ztWhU4DQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFP+hqb4vNIf0xO7cNsgF9+snRxFgMB8GA1UdIwQY MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt ZmUwNjU5MTc2YTU2LzEvXzZHcHZpODBoX1RFN3R3MnlBWDM2eWRIRVdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2 LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALvluAwQA udf3AwQAueetMA0GCSqGSIb3DQEBCwUAA4IBAQAxBSLgOSHZMDpcmQMfQ5Ux9T46 Cg4lhUb56YwMI+Yc8qN65Djk/vj2EvREhJMH1b+LQxxzJPWTDKv+zLVyvJ31fmcM wL7lidEHkx9cU6OspO+v1u9+SYew8wqq8hkYq/pQJqyQ90EqhkqyKtNmNzEyOXV/ WuYVQUIW74PgGdYd9GfJloRsaPMWdiheCW63N/risuBPHpo6mKo6g1jtYMJP8ceG gf0jxwxzhv4f9NCEH6uRoZKc2BumPSnRZFRMAaXDlqg08Rv33JuheUpNtVZugxk+ SNJssJO4bovfyk4V9DL5VD8Zyr4Hfy6C0Eg4KrCNaHBCriNqoLLgEw4cqu9z -----END CERTIFICATE-----Generated at Sun Dec 7 16:56:34 2025 by rpki-client