This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/6G36fDx7KHnUGQU9dNWb1qOwMgM.roa File: 6G36fDx7KHnUGQU9dNWb1qOwMgM.roa (raw, json) Hash identifier: Y51GYRsbaHipseGEbd5TzOncbvLWpvZ1c7bFiJ3+iX0= Subject key identifier: E8:6D:FA:7C:3C:7B:28:79:D4:19:05:3D:74:D5:9B:D6:A3:B0:32:03 Certificate issuer: /CN=668e9b2eefb205342382b6072a903f9d9837071a Certificate serial: 019AFD07E18545E46F1A3BC848F024154DD8 Authority key identifier: 66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/6G36fDx7KHnUGQU9dNWb1qOwMgM.roa Signing time: Mon 08 Dec 2025 08:15:43 +0000 ROA not before: Mon 08 Dec 2025 08:15:43 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44056 IP address blocks: 31.135.224.0/20 maxlen: 24 31.135.226.0/23 maxlen: 23 31.135.227.0/24 maxlen: 24 31.135.228.0/22 maxlen: 22 31.135.232.0/22 maxlen: 22 31.135.236.0/23 maxlen: 23 31.135.236.0/24 maxlen: 24 46.148.128.0/20 maxlen: 20 46.148.128.0/22 maxlen: 22 46.148.130.0/24 maxlen: 24 46.148.132.0/22 maxlen: 22 46.148.143.0/24 maxlen: 24 83.97.104.0/21 maxlen: 21 91.195.130.0/23 maxlen: 23 91.230.146.0/24 maxlen: 24 91.237.186.0/23 maxlen: 23 91.237.186.0/24 maxlen: 24 91.237.187.0/24 maxlen: 24 109.196.64.0/20 maxlen: 24 109.196.64.0/22 maxlen: 22 109.196.64.0/24 maxlen: 24 109.196.68.0/22 maxlen: 22 109.196.68.0/24 maxlen: 24 109.196.72.0/22 maxlen: 22 109.196.72.0/24 maxlen: 24 109.196.73.0/24 maxlen: 24 109.196.74.0/24 maxlen: 24 109.196.75.0/24 maxlen: 24 109.196.76.0/22 maxlen: 22 109.196.76.0/24 maxlen: 24 109.196.77.0/24 maxlen: 24 109.196.78.0/24 maxlen: 24 109.196.79.0/24 maxlen: 24 176.125.192.0/19 maxlen: 19 195.2.238.0/23 maxlen: 23 2a13:2940::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fd:07:e1:85:45:e4:6f:1a:3b:c8:48:f0:24:15:4d:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=668e9b2eefb205342382b6072a903f9d9837071a Validity Not Before: Dec 8 08:15:43 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e86dfa7c3c7b2879d419053d74d59bd6a3b03203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:39:2f:f1:84:1b:cc:3a:b9:86:c6:31:9c:3c: 5a:f2:c3:70:c9:fc:dc:1f:95:85:a8:dc:01:b9:48: bd:88:b2:c1:f0:a6:0c:26:64:e5:35:3a:17:20:47: 5e:cb:7b:31:87:e0:f3:da:14:2b:27:97:7e:89:15: d6:6b:32:0a:69:5f:60:51:64:1a:a2:88:f8:52:b6: b1:d0:8d:50:ec:52:ab:8c:89:8e:9b:17:6a:0f:5b: 2d:dd:3f:a9:64:70:c6:5e:a0:4c:4e:03:de:4f:db: 91:7f:80:98:14:84:7e:86:c4:72:a9:32:b5:95:b8: 9a:a5:95:87:d0:d0:da:17:56:18:70:71:3b:74:a0: 13:9a:41:f1:07:2f:01:f1:bb:63:29:e6:4a:f9:ce: 64:4f:80:84:a0:2d:64:26:3d:af:f8:59:99:15:90: 56:47:ab:6c:1a:6e:a1:e7:e6:49:de:6f:57:44:fb: 20:bd:54:51:45:c3:43:86:76:8f:8e:66:8c:f3:a6: 35:21:6f:c4:a5:46:ac:57:88:47:09:99:84:ea:73: 79:f0:3d:ac:51:66:ea:0f:7b:67:08:88:c5:1e:ac: 90:4d:be:95:70:68:98:ec:b8:4f:34:58:9a:26:8d: 61:fc:14:f7:53:f5:fc:f4:9c:57:d8:ef:21:aa:ec: b1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:6D:FA:7C:3C:7B:28:79:D4:19:05:3D:74:D5:9B:D6:A3:B0:32:03 X509v3 Authority Key Identifier: keyid:66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/6G36fDx7KHnUGQU9dNWb1qOwMgM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.135.224.0/20 46.148.128.0/20 83.97.104.0/21 91.195.130.0/23 91.230.146.0/24 91.237.186.0/23 109.196.64.0/20 176.125.192.0/19 195.2.238.0/23 IPv6: 2a13:2940::/32 Signature Algorithm: sha256WithRSAEncryption 9a:05:57:c5:0e:8f:a4:9b:2e:7e:ee:25:7b:18:fe:aa:be:7c: a9:e7:4c:b2:88:f9:79:c2:de:0a:af:59:f8:e7:e8:fa:85:3b: 04:d3:7a:0e:7b:e3:60:72:7b:16:92:2f:a1:7b:9a:29:1a:ab: af:db:19:6e:8f:30:9e:45:36:04:6a:97:63:93:63:fa:05:2a: 71:70:9f:5c:72:b5:f8:22:ed:36:bd:b9:74:11:f6:53:9f:81: d8:89:a2:7b:76:c3:86:b8:fb:7e:8b:6b:0f:74:9a:b7:63:8c: b0:64:9e:75:2d:7b:bf:2a:15:c1:1b:bf:99:91:73:f2:cc:02: 59:60:f0:b8:07:8c:1e:05:e1:ef:a4:4d:28:66:99:e7:54:ed: 5a:0a:52:c4:88:03:33:a7:71:09:2f:5c:c4:37:65:f7:75:c3: e5:53:83:15:b8:42:03:f5:25:c6:54:1f:21:17:34:63:91:de: 07:af:1b:51:0c:e2:08:dc:f4:6a:da:f3:ec:fd:16:cc:a8:18: 96:1e:92:7e:c8:dd:22:07:49:a9:34:d4:45:92:ad:3d:b4:94: b8:98:f1:d9:32:ee:8c:81:12:64:29:d4:2f:3f:62:46:3d:fe: d6:57:94:6f:a8:8b:21:3b:69:1f:6e:62:60:0f:38:2d:52:b4: b3:f5:93:d3 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgISAZr9B+GFReRvGjvISPAkFU3YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2OGU5YjJlZWZiMjA1MzQyMzgyYjYwNzJhOTAzZjlkOTgz NzA3MWEwHhcNMjUxMjA4MDgxNTQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODZkZmE3YzNjN2IyODc5ZDQxOTA1M2Q3NGQ1OWJkNmEzYjAzMjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Dkv8YQbzDq5hsYxnDxa8sNwyfzc H5WFqNwBuUi9iLLB8KYMJmTlNToXIEdey3sxh+Dz2hQrJ5d+iRXWazIKaV9gUWQa ooj4Urax0I1Q7FKrjImOmxdqD1st3T+pZHDGXqBMTgPeT9uRf4CYFIR+hsRyqTK1 lbiapZWH0NDaF1YYcHE7dKATmkHxBy8B8btjKeZK+c5kT4CEoC1kJj2v+FmZFZBW R6tsGm6h5+ZJ3m9XRPsgvVRRRcNDhnaPjmaM86Y1IW/EpUasV4hHCZmE6nN58D2s UWbqD3tnCIjFHqyQTb6VcGiY7LhPNFiaJo1h/BT3U/X89JxX2O8hquyxdwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFOht+nw8eyh51BkFPXTVm9ajsDIDMB8GA1UdIwQY MBaAFGaOmy7vsgU0I4K2ByqQP52YNwcaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm82Ykx1LXlCVFFqZ3JZSEtwQV9uWmczQnhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC80YTEzMDUtMzkxYy00NDZjLTlhMzMt NGMwOGZmZTEwMDc2LzEvNkczNmZEeDdLSG5VR1FVOWROV2IxcU93TWdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC80YTEzMDUtMzkxYy00NDZjLTlhMzMtNGMwOGZmZTEwMDc2 LzEvWm82Ykx1LXlCVFFqZ3JZSEtwQV9uWmczQnhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQEH4fgAwQE LpSAAwQDU2FoAwQBW8OCAwQAW+aSAwQBW+26AwQEbcRAAwQFsH3AAwQBwwLuMA0E AgACMAcDBQAqEylAMA0GCSqGSIb3DQEBCwUAA4IBAQCaBVfFDo+kmy5+7iV7GP6q vnyp50yyiPl5wt4Kr1n45+j6hTsE03oOe+NgcnsWki+he5opGquv2xlujzCeRTYE apdjk2P6BSpxcJ9ccrX4Iu02vbl0EfZTn4HYiaJ7dsOGuPt+i2sPdJq3Y4ywZJ51 LXu/KhXBG7+ZkXPyzAJZYPC4B4weBeHvpE0oZpnnVO1aClLEiAMzp3EJL1zEN2X3 dcPlU4MVuEID9SXGVB8hFzRjkd4HrxtRDOII3PRq2vPs/RbMqBiWHpJ+yN0iB0mp NNRFkq09tJS4mPHZMu6MgRJkKdQvP2JGPf7WV5RvqIshO2kfbmJgDzgtUrSz9ZPT -----END CERTIFICATE-----Generated at Fri Dec 19 07:14:07 2025 by rpki-client