This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/6Lg9jgMDVJBnGiti5m2TqaW8RqE.roa File: 6Lg9jgMDVJBnGiti5m2TqaW8RqE.roa (raw, json) Hash identifier: Xcvnno30Ct1+6I5Qdwsu2VWVNQu6s6BxUJvk3j6L02s= Subject key identifier: E8:B8:3D:8E:03:03:54:90:67:1A:2B:62:E6:6D:93:A9:A5:BC:46:A1 Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Certificate serial: 019A95F5613D087DE251E36A8A661C69ACD2 Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/6Lg9jgMDVJBnGiti5m2TqaW8RqE.roa Signing time: Tue 18 Nov 2025 07:54:37 +0000 ROA not before: Tue 18 Nov 2025 07:54:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212238 IP address blocks: 86.104.215.0/24 maxlen: 24 89.32.200.0/24 maxlen: 24 89.32.204.0/24 maxlen: 24 89.33.83.0/24 maxlen: 24 89.47.34.0/24 maxlen: 24 103.47.52.0/22 maxlen: 22 162.218.158.0/24 maxlen: 24 188.215.5.0/24 maxlen: 24 194.26.149.0/24 maxlen: 24 212.102.116.0/24 maxlen: 24 2a07:4a80::/29 maxlen: 29 2a0a:eb00::/32 maxlen: 32 2a0a:eb01::/32 maxlen: 32 2a0a:eb02::/32 maxlen: 32 2a0a:eb03::/32 maxlen: 32 2a0a:eb04::/32 maxlen: 32 2a0a:eb05::/32 maxlen: 32 2a0a:eb06::/32 maxlen: 32 2a0a:eb07::/32 maxlen: 32 2a0f:c840::/32 maxlen: 32 2a0f:c841::/32 maxlen: 32 2a0f:c842::/32 maxlen: 32 2a0f:c843::/32 maxlen: 32 2a0f:c844::/32 maxlen: 32 2a0f:c845::/32 maxlen: 32 2a0f:c846::/32 maxlen: 32 2a0f:c847::/32 maxlen: 32 2a11:3bc0::/29 maxlen: 29 2a11:3bc0::/32 maxlen: 32 2a11:3bc1::/32 maxlen: 32 2a11:3bc2::/32 maxlen: 32 2a11:3bc3::/32 maxlen: 32 2a11:3bc4::/32 maxlen: 32 2a11:3bc5::/32 maxlen: 32 2a11:3bc6::/32 maxlen: 32 2a11:3bc7::/32 maxlen: 32 2a12:7700::/32 maxlen: 32 2a12:7701::/32 maxlen: 32 2a12:7702::/32 maxlen: 32 2a12:7703::/32 maxlen: 32 2a12:7704::/32 maxlen: 32 2a12:7705::/32 maxlen: 32 2a12:7706::/32 maxlen: 32 2a12:7707::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 07:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:95:f5:61:3d:08:7d:e2:51:e3:6a:8a:66:1c:69:ac:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Validity Not Before: Nov 18 07:54:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e8b83d8e03035490671a2b62e66d93a9a5bc46a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c0:db:9b:13:ae:3c:f8:29:cd:bd:3c:c7:0e: ac:02:18:3b:d6:03:9f:22:99:bd:3c:36:d1:e8:52: 1a:1b:ad:67:aa:b6:b4:e5:39:f1:ee:74:9c:5f:c2: 42:df:00:30:11:3e:d9:70:e8:ee:bb:44:74:0e:1b: 23:4e:ff:a5:46:f3:20:e5:05:dd:04:16:96:c0:c4: cb:cd:74:44:85:ed:20:9a:13:8a:1e:5d:47:c1:12: cd:91:46:9d:c9:58:61:4c:10:d3:3c:27:2a:92:d1: 7e:e9:c2:18:97:72:7a:9d:a3:cf:9d:2f:6a:54:c0: 6c:c7:1f:aa:fd:e6:5b:10:0e:a5:85:28:b5:b6:ff: e2:69:f9:b0:fe:7f:68:ff:b2:9b:3e:5c:a9:0e:72: 64:69:17:66:11:36:c4:13:d0:5f:50:5b:c3:4a:e5: 40:1c:f1:ef:9a:99:b1:a4:02:7d:a8:eb:63:85:54: 1e:33:ed:20:72:60:c4:ce:0f:26:4b:2f:c5:8e:ad: f5:4d:78:27:15:07:bc:d2:b3:be:61:73:c8:26:f2: 1d:12:de:77:7f:c4:59:07:44:4f:3f:70:5a:a6:6d: 3d:63:a0:46:71:40:e3:b4:8b:df:6d:43:fa:73:47: 17:bb:c9:2e:33:42:cd:9e:6f:e6:28:9c:00:51:a3: a2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:B8:3D:8E:03:03:54:90:67:1A:2B:62:E6:6D:93:A9:A5:BC:46:A1 X509v3 Authority Key Identifier: keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/6Lg9jgMDVJBnGiti5m2TqaW8RqE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.104.215.0/24 89.32.200.0/24 89.32.204.0/24 89.33.83.0/24 89.47.34.0/24 103.47.52.0/22 162.218.158.0/24 188.215.5.0/24 194.26.149.0/24 212.102.116.0/24 IPv6: 2a07:4a80::/29 2a0a:eb00::/29 2a0f:c840::/29 2a11:3bc0::/29 2a12:7700::/29 Signature Algorithm: sha256WithRSAEncryption 85:f0:fc:33:77:85:55:c1:95:16:b5:fa:bd:b3:97:35:c2:71: e0:59:6c:69:a5:51:d7:3a:03:fc:00:3c:d2:3c:4f:10:e5:cf: 9d:a6:65:aa:e0:81:0a:82:92:e5:c1:ea:ed:3e:31:d6:35:cc: 45:f6:d3:7a:e5:3a:1d:dd:69:73:95:5e:32:12:5e:67:c2:eb: 50:ef:0b:69:b6:ef:c5:88:5c:84:ab:12:a0:cf:9a:a0:e0:19: 45:d7:76:5e:f0:7b:30:75:4a:65:ea:c5:36:62:c7:2e:67:06: 09:77:b9:e3:ff:77:5c:69:f2:d8:20:8d:a1:f6:29:61:b8:52: 2e:40:14:df:f6:da:93:8f:df:3b:d6:88:da:d7:65:81:02:ee: 24:47:bf:3e:17:af:36:08:fd:90:82:6a:6a:6b:2b:d4:52:4f: ec:bd:17:3f:35:4b:84:be:04:65:85:76:9d:0f:18:53:cc:72: 7a:7f:31:76:1c:53:29:7c:83:54:61:42:5c:9d:27:92:82:1d: f2:77:dc:30:97:34:59:b5:f8:41:e0:45:ac:fe:d9:52:80:29: 09:cc:dd:ae:0d:08:78:6e:74:f4:69:4e:13:5c:23:6c:39:25: 64:4b:b6:4c:93:32:b7:be:5e:e8:6b:f8:e9:a7:19:69:73:38: 76:39:d9:16 -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgISAZqV9WE9CH3iUeNqimYcaazSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZmIzMmQyMjY2YjFmOWJjZTU3Y2FjOThiYzAyNDdmMmM5 MTk3ZjIwHhcNMjUxMTE4MDc1NDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOGI4M2Q4ZTAzMDM1NDkwNjcxYTJiNjJlNjZkOTNhOWE1YmM0NmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8DbmxOuPPgpzb08xw6sAhg71gOf Ipm9PDbR6FIaG61nqra05Tnx7nScX8JC3wAwET7ZcOjuu0R0DhsjTv+lRvMg5QXd BBaWwMTLzXREhe0gmhOKHl1HwRLNkUadyVhhTBDTPCcqktF+6cIYl3J6naPPnS9q VMBsxx+q/eZbEA6lhSi1tv/iafmw/n9o/7KbPlypDnJkaRdmETbEE9BfUFvDSuVA HPHvmpmxpAJ9qOtjhVQeM+0gcmDEzg8mSy/Fjq31TXgnFQe80rO+YXPIJvIdEt53 f8RZB0RPP3Bapm09Y6BGcUDjtIvfbUP6c0cXu8kuM0LNnm/mKJwAUaOi1wIDAQAB o4ICazCCAmcwHQYDVR0OBBYEFOi4PY4DA1SQZxorYuZtk6mlvEahMB8GA1UdIwQY MBaAFPX7MtImax+bzlfKyYvAJH8skZfyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAt MmQxNDNkN2I4NTNjLzEvNkxnOWpnTURWSkJuR2l0aTVtMlRxYVc4UnFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAtMmQxNDNkN2I4NTNj LzEvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGABggrBgEFBQcBBwEB/wRxMG8wQgQCAAEwPAMEAFZo1wME AFkgyAMEAFkgzAMEAFkhUwMEAFkvIgMEAmcvNAMEAKLangMEALzXBQMEAMIalQME ANRmdDApBAIAAjAjAwUDKgdKgAMFAyoK6wADBQMqD8hAAwUDKhE7wAMFAyoSdwAw DQYJKoZIhvcNAQELBQADggEBAIXw/DN3hVXBlRa1+r2zlzXCceBZbGmlUdc6A/wA PNI8TxDlz52mZarggQqCkuXB6u0+MdY1zEX203rlOh3daXOVXjISXmfC61DvC2m2 78WIXISrEqDPmqDgGUXXdl7wezB1SmXqxTZixy5nBgl3ueP/d1xp8tggjaH2KWG4 Ui5AFN/22pOP3zvWiNrXZYEC7iRHvz4XrzYI/ZCCamprK9RST+y9Fz81S4S+BGWF dp0PGFPMcnp/MXYcUyl8g1RhQlydJ5KCHfJ33DCXNFm1+EHgRaz+2VKAKQnM3a4N CHhudPRpThNcI2w5JWRLtkyTMre+Xuhr+OmnGWlzOHY52RY= -----END CERTIFICATE-----Generated at Wed Dec 3 12:02:54 2025 by rpki-client