This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/6PMwDiAXopohVbxk1UMeJR3h6wI.roa File: 6PMwDiAXopohVbxk1UMeJR3h6wI.roa (raw, json) Hash identifier: b1Q9+iAI/3qmSliaQKsZoVj95fObtjY6a+h9VgBcK/Q= Subject key identifier: E8:F3:30:0E:20:17:A2:9A:21:55:BC:64:D5:43:1E:25:1D:E1:EB:02 Certificate issuer: /CN=6db30a41a6a6f21a9b2dd7e5856a20d5b5effe1c Certificate serial: 019B4FE7303A2CEF4CBF9FE84E87975A5A42 Authority key identifier: 6D:B3:0A:41:A6:A6:F2:1A:9B:2D:D7:E5:85:6A:20:D5:B5:EF:FE:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bbMKQaam8hqbLdflhWog1bXv_hw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/6PMwDiAXopohVbxk1UMeJR3h6wI.roa Signing time: Wed 24 Dec 2025 10:28:29 +0000 ROA not before: Wed 24 Dec 2025 10:28:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215423 IP address blocks: 37.122.152.0/24 maxlen: 24 176.106.227.0/24 maxlen: 24 176.106.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.crl rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.mft rsync://rpki.ripe.net/repository/DEFAULT/bbMKQaam8hqbLdflhWog1bXv_hw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:e7:30:3a:2c:ef:4c:bf:9f:e8:4e:87:97:5a:5a:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6db30a41a6a6f21a9b2dd7e5856a20d5b5effe1c Validity Not Before: Dec 24 10:28:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e8f3300e2017a29a2155bc64d5431e251de1eb02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b7:2a:b6:f3:ba:74:22:b7:29:07:dd:63:7e: 4f:53:2f:65:54:a1:dc:e4:08:56:f6:63:80:f2:17: cb:9a:bd:c9:d6:13:da:5c:38:3f:9a:26:fe:d9:ac: 95:31:22:af:b7:e5:1e:00:55:64:79:48:68:95:f5: 7e:c7:c4:76:33:7c:ef:79:e9:2c:06:0f:26:09:70: fd:63:24:89:e0:3d:42:bb:83:21:85:9d:46:9f:f3: 3c:90:4a:24:96:ed:ea:ac:16:87:88:01:50:95:4d: 35:83:c9:9c:69:c9:29:37:ad:78:60:e2:4d:cc:6e: 12:c2:41:b8:36:08:6c:75:e8:fb:1d:b4:93:4e:aa: 07:15:42:75:a9:27:23:ac:2a:75:14:97:10:e7:c4: 65:4e:ad:97:98:c4:57:71:89:65:54:35:c2:a8:b8: 96:9b:d2:40:c9:c3:9a:02:d1:25:6f:8c:6f:80:16: de:0d:eb:bf:85:8f:d1:00:7b:24:a0:df:33:a6:99: bf:48:46:64:b4:c9:74:fd:92:8e:0c:50:1a:27:8c: 27:1a:15:7a:71:81:bf:be:c7:47:5b:a2:49:84:a5: 92:58:d2:44:33:9e:31:db:a3:af:a2:78:6a:2b:06: b7:50:2c:ea:8f:c8:da:e7:1e:6c:43:15:65:9b:16: a2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F3:30:0E:20:17:A2:9A:21:55:BC:64:D5:43:1E:25:1D:E1:EB:02 X509v3 Authority Key Identifier: keyid:6D:B3:0A:41:A6:A6:F2:1A:9B:2D:D7:E5:85:6A:20:D5:B5:EF:FE:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bbMKQaam8hqbLdflhWog1bXv_hw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/6PMwDiAXopohVbxk1UMeJR3h6wI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.122.152.0/24 176.106.227.0-176.106.228.255 Signature Algorithm: sha256WithRSAEncryption ca:ae:6b:05:3c:5c:bf:93:0d:a2:46:86:a0:f0:7f:5a:7b:3f: 8e:ce:4d:ae:36:a6:90:b6:51:42:89:53:08:73:ea:c2:b7:21: 29:6d:6e:0f:a7:fd:81:3e:58:3b:bd:e9:f3:be:27:e1:27:28: 92:a2:db:b9:73:52:88:6c:72:f5:95:57:5b:d9:0f:3e:63:7c: c5:dc:41:4b:9e:eb:6e:e0:01:39:25:0c:4f:fa:73:99:fd:f2: 1c:85:e0:50:65:ba:64:64:1a:90:23:cc:30:78:f7:45:13:14: f9:eb:43:9c:6a:38:dc:95:d4:6d:32:cd:c7:63:a8:b6:3c:3c: 26:2b:44:60:5c:b8:49:89:c7:7f:8f:73:14:f9:4f:6f:e8:c8: 24:89:4a:7d:33:f5:ec:57:25:82:94:74:63:b4:e1:94:5e:ff: 10:19:58:93:32:25:f4:e7:0c:d4:a0:a8:89:88:6b:f9:b8:ff: e3:2b:dc:0c:61:58:62:fb:77:df:f6:92:2f:f5:28:8f:49:1f: d7:c1:db:bf:4a:ac:52:1f:93:2b:bb:bc:40:b5:34:7c:c9:b1: 35:46:bb:be:0a:c4:2a:9d:38:dc:74:3c:45:97:a3:c5:16:48: 74:a1:04:f3:f8:aa:5f:02:4b:d4:ee:d7:05:83:b7:4f:ba:51: 71:3c:c8:84 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZtP5zA6LO9Mv5/oToeXWlpCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkYjMwYTQxYTZhNmYyMWE5YjJkZDdlNTg1NmEyMGQ1YjVl ZmZlMWMwHhcNMjUxMjI0MTAyODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOGYzMzAwZTIwMTdhMjlhMjE1NWJjNjRkNTQzMWUyNTFkZTFlYjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbcqtvO6dCK3KQfdY35PUy9lVKHc 5AhW9mOA8hfLmr3J1hPaXDg/mib+2ayVMSKvt+UeAFVkeUholfV+x8R2M3zveeks Bg8mCXD9YySJ4D1Cu4MhhZ1Gn/M8kEoklu3qrBaHiAFQlU01g8mcackpN614YOJN zG4SwkG4Nghsdej7HbSTTqoHFUJ1qScjrCp1FJcQ58RlTq2XmMRXcYllVDXCqLiW m9JAycOaAtElb4xvgBbeDeu/hY/RAHskoN8zppm/SEZktMl0/ZKODFAaJ4wnGhV6 cYG/vsdHW6JJhKWSWNJEM54x26OvonhqKwa3UCzqj8ja5x5sQxVlmxaijQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFOjzMA4gF6KaIVW8ZNVDHiUd4esCMB8GA1UdIwQY MBaAFG2zCkGmpvIamy3X5YVqINW17/4cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmJNS1FhYW04aHFiTGRmbGhXb2cxYlh2X2h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8yYjkyOTYtNmJkMS00OWZiLWFlYTAt ZDg5MzIxMWU2NzE5LzEvNlBNd0RpQVhvcG9oVmJ4azFVTWVKUjNoNndJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi8yYjkyOTYtNmJkMS00OWZiLWFlYTAtZDg5MzIxMWU2NzE5 LzEvYmJNS1FhYW04aHFiTGRmbGhXb2cxYlh2X2h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAJXqYMAwD BACwauMDBACwauQwDQYJKoZIhvcNAQELBQADggEBAMquawU8XL+TDaJGhqDwf1p7 P47OTa42ppC2UUKJUwhz6sK3ISltbg+n/YE+WDu96fO+J+EnKJKi27lzUohscvWV V1vZDz5jfMXcQUue627gATklDE/6c5n98hyF4FBlumRkGpAjzDB490UTFPnrQ5xq ONyV1G0yzcdjqLY8PCYrRGBcuEmJx3+PcxT5T2/oyCSJSn0z9exXJYKUdGO04ZRe /xAZWJMyJfTnDNSgqImIa/m4/+Mr3AxhWGL7d9/2ki/1KI9JH9fB279KrFIfkyu7 vEC1NHzJsTVGu74KxCqdONx0PEWXo8UWSHShBPP4ql8CS9Tu1wWDt0+6UXE8yIQ= -----END CERTIFICATE-----Generated at Fri Dec 26 17:18:16 2025 by rpki-client