This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/l6Of-KrRGVykcgu3h7QSbFC7bQQ.roa File: l6Of-KrRGVykcgu3h7QSbFC7bQQ.roa (raw, json) Hash identifier: Pvj/cgPKEzSqHb5nKymHUki+MXiOyPlXb16CCSnRpB0= Subject key identifier: 97:A3:9F:F8:AA:D1:19:5C:A4:72:0B:B7:87:B4:12:6C:50:BB:6D:04 Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47 Certificate serial: 019B133132843C2E68696DABD55E806A17B4 Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/l6Of-KrRGVykcgu3h7QSbFC7bQQ.roa Signing time: Fri 12 Dec 2025 15:32:29 +0000 ROA not before: Fri 12 Dec 2025 15:32:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209274 IP address blocks: 80.71.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:13:31:32:84:3c:2e:68:69:6d:ab:d5:5e:80:6a:17:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47 Validity Not Before: Dec 12 15:32:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=97a39ff8aad1195ca4720bb787b4126c50bb6d04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:85:41:6c:b3:d6:27:f2:cf:44:88:cd:ad:65: cb:59:f8:da:cc:0a:5c:6d:45:e5:83:e4:d3:8b:a4: 5a:90:42:0e:2e:65:8e:93:fe:4e:26:09:3a:03:33: e4:3f:c5:6d:e7:41:e0:0e:ac:b5:5b:77:7e:a4:42: 89:31:06:59:54:42:8a:f6:6b:e4:c7:81:df:23:4d: b5:4e:03:f5:0b:7c:72:84:7b:06:73:d3:c9:d8:be: 19:a1:ed:eb:1e:48:6d:1a:b9:cd:c7:71:cf:d3:80: 37:b5:df:b4:49:b3:60:89:af:9f:2e:7f:23:a1:1b: 47:82:05:d1:ef:4a:ce:b3:1e:5d:3e:c3:fc:64:e9: ab:6d:a0:7c:fa:1e:75:9a:c1:14:bf:18:79:3a:9a: ff:6a:ac:cc:f5:0d:56:50:00:50:c6:5f:46:d6:a4: 12:eb:c7:c1:79:c8:53:66:5c:2e:ee:c4:d9:6b:10: 8a:ca:30:f8:dc:f1:0f:ac:23:d5:af:22:4c:bb:99: fe:6a:2c:2b:95:0c:52:8e:6f:e2:b7:2b:df:cb:61: 82:cb:94:b5:d8:77:5e:2b:e7:75:1b:ca:aa:ab:39: 7c:e5:dc:3e:65:58:7c:5e:86:b7:f6:c9:5c:df:f6: 8c:d2:00:0b:21:c8:0b:bf:bc:2b:75:d1:36:72:20: d4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A3:9F:F8:AA:D1:19:5C:A4:72:0B:B7:87:B4:12:6C:50:BB:6D:04 X509v3 Authority Key Identifier: keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/l6Of-KrRGVykcgu3h7QSbFC7bQQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.71.224.0/24 Signature Algorithm: sha256WithRSAEncryption 63:ce:32:ce:74:62:fc:e0:e3:8c:0c:68:fe:15:a2:01:4e:1a: a0:7c:71:66:ff:29:11:82:3b:24:59:84:71:3a:3e:94:a8:0d: 0e:bd:11:74:4a:e0:6b:d9:26:32:dd:c8:09:34:ad:d9:54:1a: 3a:13:f4:63:90:07:0f:ca:c1:10:e2:eb:c0:02:f3:b8:0e:8a: 1f:d7:94:2e:77:fe:1d:27:1a:61:61:68:30:73:e9:8d:12:91: ee:3b:3d:02:a3:d8:1c:0a:b7:4e:cf:05:d3:ea:b9:56:4f:34: 19:ee:48:e3:48:80:51:3b:e3:61:0c:78:b5:f4:9e:26:a2:19: 89:87:e0:40:46:d6:fd:14:21:1d:40:f1:7e:ce:3a:1e:51:2b: 8d:1a:11:3c:54:c5:6b:0f:78:93:bc:be:68:3a:7a:b9:8a:55: 04:c1:e4:9f:94:3d:07:ed:43:03:58:fd:cf:32:47:ea:e7:ff: 03:d6:9b:12:71:63:e9:c8:40:5d:c6:ab:b6:6e:c1:40:09:3c: ee:5b:a0:24:31:b8:54:60:0b:c8:86:bf:39:11:f8:02:ea:59: 3b:33:79:f8:a5:64:69:99:4b:5e:67:7f:e0:ab:33:26:0a:64: 4b:9a:03:cd:3e:8b:08:1b:1c:a4:90:81:67:38:a6:0e:e4:2a: 38:34:6e:10 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsTMTKEPC5oaW2r1V6Aahe0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx MDhlNDcwHhcNMjUxMjEyMTUzMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5N2EzOWZmOGFhZDExOTVjYTQ3MjBiYjc4N2I0MTI2YzUwYmI2ZDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYVBbLPWJ/LPRIjNrWXLWfjazApc bUXlg+TTi6RakEIOLmWOk/5OJgk6AzPkP8Vt50HgDqy1W3d+pEKJMQZZVEKK9mvk x4HfI021TgP1C3xyhHsGc9PJ2L4Zoe3rHkhtGrnNx3HP04A3td+0SbNgia+fLn8j oRtHggXR70rOsx5dPsP8ZOmrbaB8+h51msEUvxh5Opr/aqzM9Q1WUABQxl9G1qQS 68fBechTZlwu7sTZaxCKyjD43PEPrCPVryJMu5n+aiwrlQxSjm/ityvfy2GCy5S1 2HdeK+d1G8qqqzl85dw+ZVh8Xoa39slc3/aM0gALIcgLv7wrddE2ciDUmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJejn/iq0RlcpHILt4e0EmxQu20EMB8GA1UdIwQY MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt MTkxODliM2M5YzdkLzEvbDZPZi1LclJHVnlrY2d1M2g3UVNiRkM3YlFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEfgMA0G CSqGSIb3DQEBCwUAA4IBAQBjzjLOdGL84OOMDGj+FaIBThqgfHFm/ykRgjskWYRx Oj6UqA0OvRF0SuBr2SYy3cgJNK3ZVBo6E/RjkAcPysEQ4uvAAvO4Doof15Qud/4d JxphYWgwc+mNEpHuOz0Co9gcCrdOzwXT6rlWTzQZ7kjjSIBRO+NhDHi19J4mohmJ h+BARtb9FCEdQPF+zjoeUSuNGhE8VMVrD3iTvL5oOnq5ilUEweSflD0H7UMDWP3P Mkfq5/8D1psScWPpyEBdxqu2bsFACTzuW6AkMbhUYAvIhr85EfgC6lk7M3n4pWRp mUteZ3/gqzMmCmRLmgPNPosIGxykkIFnOKYO5Co4NG4Q -----END CERTIFICATE-----Generated at Sat Dec 20 12:32:40 2025 by rpki-client