This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/tvKdacTyPhsu3aile8gsFpB1HcM.roa File: tvKdacTyPhsu3aile8gsFpB1HcM.roa (raw, json) Hash identifier: yiqjckQWXIHm/HpkT1O/N4DyAaNrbG/A0u9Wu9m03qo= Subject key identifier: B6:F2:9D:69:C4:F2:3E:1B:2E:DD:A8:A5:7B:C8:2C:16:90:75:1D:C3 Certificate issuer: /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce Certificate serial: 019B086AB6278D4968993FAC0B514E6E0EC7 Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/tvKdacTyPhsu3aile8gsFpB1HcM.roa Signing time: Wed 10 Dec 2025 13:19:29 +0000 ROA not before: Wed 10 Dec 2025 13:19:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207787 IP address blocks: 78.108.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:6a:b6:27:8d:49:68:99:3f:ac:0b:51:4e:6e:0e:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce Validity Not Before: Dec 10 13:19:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b6f29d69c4f23e1b2edda8a57bc82c1690751dc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d6:7e:04:2d:56:66:bf:2d:e1:9d:c4:bf:64: 2a:15:8b:b3:ec:43:46:f7:26:a9:1b:8c:ce:8b:e6: 48:da:b3:cb:9b:53:f3:86:54:8e:ed:16:d8:0b:2c: 58:61:62:82:d4:86:6a:ba:a9:17:1d:c8:12:a4:4d: cf:cf:61:f1:34:c3:d7:69:81:4d:41:aa:84:50:e9: 25:92:2a:a3:e8:96:1b:1c:5c:62:c0:40:a8:7b:12: b5:bb:14:25:7a:a9:7a:c9:83:12:79:c1:0b:f8:e5: 37:da:b2:bd:ec:99:92:46:aa:18:94:59:6e:dd:47: c5:56:6a:a8:a6:83:98:2b:59:7e:e6:a5:12:23:d2: 58:1d:2a:4e:a0:08:46:b8:c9:93:56:e0:45:c2:ea: 61:f8:6e:13:e5:fe:08:0b:3c:cd:51:14:a9:a9:4b: a9:49:60:56:9a:ac:dd:4c:6f:e3:f8:24:22:e6:bd: f1:82:91:0b:f8:31:24:f4:3a:3e:1b:2c:27:a7:26: 48:e7:69:11:59:dd:14:af:46:28:f5:f7:a3:43:3a: 88:9d:7d:dd:5d:6b:eb:dc:62:32:b7:f8:e5:24:51: 25:19:04:8e:cc:d2:da:ca:d7:09:a7:b4:4a:56:53: 0d:21:a7:77:f5:e7:a7:c6:11:fb:df:58:8b:5a:73: a2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:F2:9D:69:C4:F2:3E:1B:2E:DD:A8:A5:7B:C8:2C:16:90:75:1D:C3 X509v3 Authority Key Identifier: keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/tvKdacTyPhsu3aile8gsFpB1HcM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.108.60.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:bb:b8:71:6a:1d:b2:3d:08:3d:6a:fc:ff:66:34:fd:ef:7f: ec:39:2c:0a:60:f6:28:bc:38:21:70:56:80:f0:55:c1:18:b6: 7c:1d:96:dd:95:28:5f:bd:73:9a:d3:ef:b3:4b:78:16:97:7c: 1d:1d:37:46:e6:d2:b8:4d:4e:7b:79:4b:46:26:39:49:01:fa: ba:a5:2a:d5:94:4b:f3:aa:e8:c4:45:ce:26:4c:e0:b8:52:1e: 1b:3b:6c:e0:5d:62:20:77:0a:5b:29:ec:f9:7c:f7:0f:d9:ee: a4:e5:06:95:1b:cd:bc:dd:f0:f9:45:0c:e6:6e:84:6c:de:00: c2:19:7b:c4:02:59:c0:e2:30:8d:3e:d7:e8:27:75:f8:e0:10: 32:f3:31:58:9a:d9:2f:31:b7:a3:d6:b1:2d:e1:54:a2:d1:08: 55:13:eb:0d:14:42:54:5f:dc:fd:40:3b:de:9a:97:d5:f9:de: ad:9c:54:61:01:2a:f1:87:77:ea:9b:53:4d:8c:fe:9c:a8:0b: 81:ff:6d:f9:7d:77:bc:08:57:9a:87:53:5a:07:22:d5:bd:13: f7:11:5b:e9:9a:b3:04:56:69:ba:97:cd:e7:10:b7:17:6d:5d: 49:c1:19:c0:f6:ff:da:85:18:68:5e:17:f2:b3:9f:3b:b8:90: 65:82:c8:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsIarYnjUlomT+sC1FObg7HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2YWEzZmJjNzhlMzEyMjkxNTdjNzhiNmQyM2E2NWViMmUz NTNkY2UwHhcNMjUxMjEwMTMxOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNmYyOWQ2OWM0ZjIzZTFiMmVkZGE4YTU3YmM4MmMxNjkwNzUxZGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9Z+BC1WZr8t4Z3Ev2QqFYuz7ENG 9yapG4zOi+ZI2rPLm1PzhlSO7RbYCyxYYWKC1IZquqkXHcgSpE3Pz2HxNMPXaYFN QaqEUOklkiqj6JYbHFxiwECoexK1uxQleql6yYMSecEL+OU32rK97JmSRqoYlFlu 3UfFVmqopoOYK1l+5qUSI9JYHSpOoAhGuMmTVuBFwuph+G4T5f4ICzzNURSpqUup SWBWmqzdTG/j+CQi5r3xgpEL+DEk9Do+GywnpyZI52kRWd0Ur0Yo9fejQzqInX3d XWvr3GIyt/jlJFElGQSOzNLaytcJp7RKVlMNIad39eenxhH731iLWnOiNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLbynWnE8j4bLt2opXvILBaQdR3DMB8GA1UdIwQY MBaAFNaqP7x44xIpFXx4ttI6ZesuNT3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2Mt ODI3NmM4YWFjNTBlLzEvdHZLZGFjVHlQaHN1M2FpbGU4Z3NGcEIxSGNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2MtODI3NmM4YWFjNTBl LzEvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATmw8MA0G CSqGSIb3DQEBCwUAA4IBAQB9u7hxah2yPQg9avz/ZjT973/sOSwKYPYovDghcFaA 8FXBGLZ8HZbdlShfvXOa0++zS3gWl3wdHTdG5tK4TU57eUtGJjlJAfq6pSrVlEvz qujERc4mTOC4Uh4bO2zgXWIgdwpbKez5fPcP2e6k5QaVG8283fD5RQzmboRs3gDC GXvEAlnA4jCNPtfoJ3X44BAy8zFYmtkvMbej1rEt4VSi0QhVE+sNFEJUX9z9QDve mpfV+d6tnFRhASrxh3fqm1NNjP6cqAuB/235fXe8CFeah1NaByLVvRP3EVvpmrME Vmm6l83nELcXbV1JwRnA9v/ahRhoXhfys587uJBlgsgx -----END CERTIFICATE-----Generated at Sat Dec 13 21:16:30 2025 by rpki-client