This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6p_JcIjG5YFbgV9LHQiPw71oPKw.roa File: 6p_JcIjG5YFbgV9LHQiPw71oPKw.roa (raw, json) Hash identifier: XGt6U0sKr2BnNp+CQIZTFKrFh/uurXwWXt2ffLao23k= Subject key identifier: EA:9F:C9:70:88:C6:E5:81:5B:81:5F:4B:1D:08:8F:C3:BD:68:3C:AC Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019AA08DC3C70F285F16D5FD5766E2E82D3C Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6p_JcIjG5YFbgV9LHQiPw71oPKw.roa Signing time: Thu 20 Nov 2025 09:17:16 +0000 ROA not before: Thu 20 Nov 2025 09:17:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214143 IP address blocks: 82.152.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 24 Nov 2025 06:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a0:8d:c3:c7:0f:28:5f:16:d5:fd:57:66:e2:e8:2d:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Nov 20 09:17:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ea9fc97088c6e5815b815f4b1d088fc3bd683cac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1a:02:a3:ec:06:55:2f:64:52:91:c3:5c:89: 01:63:5d:e5:e4:5a:9a:5a:35:9d:11:de:bc:7e:f3: ec:89:7f:00:00:3d:e6:e3:df:56:2d:e4:ff:7a:91: 22:fd:0a:fc:5d:eb:4a:e3:08:05:33:93:32:34:23: c7:3f:70:18:d9:79:17:96:84:7d:ab:5e:0a:93:ee: 10:fb:81:68:4d:6b:65:2a:44:4f:74:11:a9:1e:8b: e0:2c:37:d1:78:f1:d1:d1:7d:9e:c8:be:5d:0b:92: 7c:98:e3:a3:69:fe:3b:4c:87:79:b9:a0:c9:81:d3: 2a:de:a9:4e:ea:2f:ea:9a:96:6f:8b:f7:9c:32:af: d7:bb:a9:3e:af:42:5c:e5:fc:ed:de:55:1d:43:5f: 46:1c:4d:5e:fa:b8:49:b8:31:42:2d:84:26:4e:c4: 26:b1:17:46:81:ab:e3:eb:1b:98:0e:4d:23:45:26: 03:aa:53:ae:3d:d4:a9:b2:10:6e:ed:2f:1b:87:50: 49:33:58:20:56:d6:92:e9:9b:49:6e:35:01:c6:82: fc:91:69:3b:1d:af:a9:25:da:32:09:ea:e8:11:4c: 65:13:81:2f:c5:7a:64:7c:63:8e:d6:81:c1:8b:63: 3a:9d:2c:43:dc:db:02:81:44:8f:ca:d7:8f:83:99: cf:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:9F:C9:70:88:C6:E5:81:5B:81:5F:4B:1D:08:8F:C3:BD:68:3C:AC X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6p_JcIjG5YFbgV9LHQiPw71oPKw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.152.49.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:50:a4:7c:58:02:07:34:96:ee:cb:54:29:53:78:a6:1e:f9: 2f:36:db:35:60:1f:ca:75:c2:61:8e:52:21:f3:f2:8d:61:2b: ab:f1:de:c2:99:50:ee:44:78:8d:27:60:c1:28:45:5c:a1:8a: 7e:98:d5:53:32:ae:6a:2c:66:c8:3b:09:2c:a2:d8:1a:60:81: 56:a9:cf:5f:d3:6c:02:01:98:0b:84:82:e3:e4:0d:f3:1c:f4: 56:8d:ee:98:1d:e3:d3:31:86:1c:d1:28:7f:ff:71:ae:05:59: dc:5d:d3:31:f3:6c:a5:00:9a:81:f9:16:44:55:25:ee:c7:7c: 37:22:eb:9c:37:a8:19:1e:d6:c2:a5:3e:f7:a8:57:7a:7f:84: b6:bf:2c:74:aa:9b:44:a5:08:a1:f6:cb:28:6a:b3:4d:e4:d4: d3:f5:88:e5:24:5c:6c:80:96:1d:79:74:08:a2:65:0a:a3:10: 53:4e:37:5a:d1:cc:10:54:f8:d4:d9:e9:fa:d3:cd:02:7c:b8: 59:02:a8:d1:58:3c:0c:3d:cb:99:e6:1e:1b:5c:a0:12:41:02: 77:1f:80:eb:3f:0d:d8:ca:49:ce:5a:b7:9a:10:fe:d3:3f:bf: aa:9e:ad:f5:08:7d:17:42:0b:97:a4:59:a4:f5:95:08:fb:cc: 06:74:d8:c5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqgjcPHDyhfFtX9V2bi6C08MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMTIwMDkxNzE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTlmYzk3MDg4YzZlNTgxNWI4MTVmNGIxZDA4OGZjM2JkNjgzY2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBoCo+wGVS9kUpHDXIkBY13l5Fqa WjWdEd68fvPsiX8AAD3m499WLeT/epEi/Qr8XetK4wgFM5MyNCPHP3AY2XkXloR9 q14Kk+4Q+4FoTWtlKkRPdBGpHovgLDfRePHR0X2eyL5dC5J8mOOjaf47TId5uaDJ gdMq3qlO6i/qmpZvi/ecMq/Xu6k+r0Jc5fzt3lUdQ19GHE1e+rhJuDFCLYQmTsQm sRdGgavj6xuYDk0jRSYDqlOuPdSpshBu7S8bh1BJM1ggVtaS6ZtJbjUBxoL8kWk7 Ha+pJdoyCeroEUxlE4EvxXpkfGOO1oHBi2M6nSxD3NsCgUSPytePg5nPuwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOqfyXCIxuWBW4FfSx0Ij8O9aDysMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvNnBfSmNJakc1WUZiZ1Y5TEhRaVB3NzFvUEt3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpgxMA0G CSqGSIb3DQEBCwUAA4IBAQA8UKR8WAIHNJbuy1QpU3imHvkvNts1YB/KdcJhjlIh 8/KNYSur8d7CmVDuRHiNJ2DBKEVcoYp+mNVTMq5qLGbIOwksotgaYIFWqc9f02wC AZgLhILj5A3zHPRWje6YHePTMYYc0Sh//3GuBVncXdMx82ylAJqB+RZEVSXux3w3 IuucN6gZHtbCpT73qFd6f4S2vyx0qptEpQih9ssoarNN5NTT9YjlJFxsgJYdeXQI omUKoxBTTjda0cwQVPjU2en6080CfLhZAqjRWDwMPcuZ5h4bXKASQQJ3H4DrPw3Y yknOWreaEP7TP7+qnq31CH0XQguXpFmk9ZUI+8wGdNjF -----END CERTIFICATE-----Generated at Sun Nov 23 12:08:14 2025 by rpki-client