This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6Cq_iiC-nDB3FGP4TE6wl3hbB9Y.roa File: 6Cq_iiC-nDB3FGP4TE6wl3hbB9Y.roa (raw, json) Hash identifier: vuHypYiz96+F4yCcehWTxrvmKuIDywotJBW3Z6mr5Cg= Subject key identifier: E8:2A:BF:8A:20:BE:9C:30:77:14:63:F8:4C:4E:B0:97:78:5B:07:D6 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019A914D6067EEF86F9B496C7D1A921BA6CE Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6Cq_iiC-nDB3FGP4TE6wl3hbB9Y.roa Signing time: Mon 17 Nov 2025 10:12:38 +0000 ROA not before: Mon 17 Nov 2025 10:12:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 63023 IP address blocks: 82.153.216.0/24 maxlen: 24 89.213.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 24 Nov 2025 06:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:91:4d:60:67:ee:f8:6f:9b:49:6c:7d:1a:92:1b:a6:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Nov 17 10:12:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e82abf8a20be9c30771463f84c4eb097785b07d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9b:d9:92:ae:a3:36:02:49:d1:bc:da:cb:fe: ce:57:5c:cc:89:bb:a0:8c:e5:2a:63:ff:e3:26:35: 78:45:5e:9e:33:14:6f:c2:3f:63:9a:6a:d4:f9:53: 5b:da:5d:3f:e1:a2:f1:d3:df:12:15:25:3a:60:b6: ff:60:ee:5d:95:a8:ff:ab:f2:26:5c:1e:ac:7d:d6: 9c:6c:85:c0:3e:fb:ac:a5:74:59:ca:57:0c:71:34: 9d:c2:1b:8b:fb:8f:72:ef:d5:4b:c9:64:37:83:78: 68:d8:f5:12:57:7e:b6:95:35:98:89:ae:34:1c:d3: 70:12:07:e6:13:69:09:c6:c8:f7:03:01:6b:c8:9b: 02:4b:e8:0d:45:36:0f:d7:45:9c:35:b6:5c:8c:71: f2:10:3d:50:d2:d3:d0:4d:d0:c1:b7:da:78:8f:e5: ad:3c:c3:3e:7d:d7:9f:7a:28:15:fa:b6:1b:92:75: 9c:d1:1b:d0:d5:47:5c:2f:84:f5:9a:b3:5c:dd:b4: 34:46:f8:c2:2a:03:70:83:9d:00:c6:f2:df:f3:4f: bc:44:81:46:7e:fd:7c:1a:47:07:2a:24:ba:d3:41: 5b:03:78:c3:93:09:51:b8:cd:63:fd:b4:d3:73:4b: d1:28:1a:55:50:2f:8a:79:f3:91:a8:0f:f9:e5:38: c7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:2A:BF:8A:20:BE:9C:30:77:14:63:F8:4C:4E:B0:97:78:5B:07:D6 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6Cq_iiC-nDB3FGP4TE6wl3hbB9Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.153.216.0/24 89.213.213.0/24 Signature Algorithm: sha256WithRSAEncryption 39:9f:2f:b3:af:99:06:3b:7c:12:69:2a:85:a2:2b:cb:f8:70: 21:76:1f:6e:31:2c:bb:ea:c4:17:b7:b5:16:69:28:6e:ec:ff: e6:22:ea:52:60:60:ca:96:2d:41:ec:5a:13:c8:97:c6:4c:60: ed:03:e2:14:4e:73:b2:5b:4e:c1:60:c1:79:a0:4f:76:49:86: e4:1c:11:30:1f:2f:d1:c5:d7:66:d3:b3:f3:f4:b3:7b:09:ea: b3:b7:e8:96:ed:cf:09:2b:06:ab:f7:2d:9e:d6:63:dd:f7:b7: 72:3b:70:40:97:19:10:3a:f8:db:a9:3e:f5:e0:50:02:88:0d: 16:0d:e2:a8:da:51:f2:df:93:2f:80:ce:0c:a7:08:f4:7f:ad: 21:38:db:09:3c:04:a7:82:58:fa:4d:0b:17:1c:0e:0f:a4:98: a3:91:f5:6d:1f:d0:10:c4:7e:99:28:30:f4:48:44:03:48:a7: 06:52:1a:c1:53:d0:1c:ec:f4:89:6f:3d:de:e5:88:3b:7b:b5: 5c:9e:e9:56:8b:88:4c:a1:6f:45:15:0d:95:42:39:6c:0c:a2: 87:8f:cf:5b:c2:29:02:03:9e:67:dc:db:ab:d9:56:4b:1b:ce: e6:61:d4:b5:19:d9:d7:b7:93:3d:d5:85:49:8f:e8:9c:c2:55: a3:33:b8:89 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqRTWBn7vhvm0lsfRqSG6bOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMTE3MTAxMjM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODJhYmY4YTIwYmU5YzMwNzcxNDYzZjg0YzRlYjA5Nzc4NWIwN2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopvZkq6jNgJJ0bzay/7OV1zMibug jOUqY//jJjV4RV6eMxRvwj9jmmrU+VNb2l0/4aLx098SFSU6YLb/YO5dlaj/q/Im XB6sfdacbIXAPvuspXRZylcMcTSdwhuL+49y79VLyWQ3g3ho2PUSV362lTWYia40 HNNwEgfmE2kJxsj3AwFryJsCS+gNRTYP10WcNbZcjHHyED1Q0tPQTdDBt9p4j+Wt PMM+fdefeigV+rYbknWc0RvQ1UdcL4T1mrNc3bQ0RvjCKgNwg50AxvLf80+8RIFG fv18GkcHKiS600FbA3jDkwlRuM1j/bTTc0vRKBpVUC+KefORqA/55TjHSwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOgqv4ogvpwwdxRj+ExOsJd4WwfWMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvNkNxX2lpQy1uREIzRkdQNFRFNndsM2hiQjlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUpnYAwQA WdXVMA0GCSqGSIb3DQEBCwUAA4IBAQA5ny+zr5kGO3wSaSqFoivL+HAhdh9uMSy7 6sQXt7UWaShu7P/mIupSYGDKli1B7FoTyJfGTGDtA+IUTnOyW07BYMF5oE92SYbk HBEwHy/Rxddm07Pz9LN7Ceqzt+iW7c8JKwar9y2e1mPd97dyO3BAlxkQOvjbqT71 4FACiA0WDeKo2lHy35MvgM4Mpwj0f60hONsJPASnglj6TQsXHA4PpJijkfVtH9AQ xH6ZKDD0SEQDSKcGUhrBU9Ac7PSJbz3e5Yg7e7VcnulWi4hMoW9FFQ2VQjlsDKKH j89bwikCA55n3Nur2VZLG87mYdS1GdnXt5M91YVJj+icwlWjM7iJ -----END CERTIFICATE-----Generated at Sun Nov 23 12:06:53 2025 by rpki-client