This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/uXaR6RAYcqB3z1-tbN1V4Lmmtig.roa File: uXaR6RAYcqB3z1-tbN1V4Lmmtig.roa (raw, json) Hash identifier: Z0domiO2KfsF3sKgfBv0gzE592rMugMpuZyP3VV1qNI= Subject key identifier: B9:76:91:E9:10:18:72:A0:77:CF:5F:AD:6C:DD:55:E0:B9:A6:B6:28 Certificate issuer: /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce Certificate serial: 019AFCE7A05B4ABA498F6290C5CCEB1FD218 Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/uXaR6RAYcqB3z1-tbN1V4Lmmtig.roa Signing time: Mon 08 Dec 2025 07:40:29 +0000 ROA not before: Mon 08 Dec 2025 07:40:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 401776 IP address blocks: 78.108.61.0/24 maxlen: 24 78.108.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:e7:a0:5b:4a:ba:49:8f:62:90:c5:cc:eb:1f:d2:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce Validity Not Before: Dec 8 07:40:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b97691e9101872a077cf5fad6cdd55e0b9a6b628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4e:2e:c1:9c:59:2b:32:a2:c7:31:00:bc:d1: 66:0e:87:e3:b1:5b:05:25:de:6d:31:b7:6d:62:bb: 53:84:57:d2:bb:49:97:f9:7d:1c:20:56:8c:10:4a: 63:7c:89:9d:d5:df:a8:36:fb:e5:dc:64:58:2b:31: 4a:9c:f8:f3:dd:d1:d4:5a:6b:47:9b:8c:b5:35:1f: 3a:1b:cb:6a:a0:2d:1d:5a:ab:a4:c5:f5:7c:ae:1a: c5:4c:90:c9:7a:3c:47:5c:0a:8f:de:22:57:d8:02: d2:0e:88:18:1d:48:65:e9:f7:7a:24:e2:c3:bb:ba: ee:80:67:58:6b:18:f8:85:9f:41:b9:6a:44:3d:b8: b1:53:d6:b0:a1:d0:ba:df:3a:9a:57:48:1e:56:cc: 66:da:15:25:7b:cb:15:03:73:7b:71:47:fa:e7:78: 4e:72:27:21:ce:e8:57:2a:11:0a:eb:fc:08:8d:20: f9:c5:be:37:09:e1:bc:96:f6:e9:77:c0:b1:a2:ef: 9a:b1:47:99:5f:fe:eb:d7:ea:88:93:0e:9f:7b:12: 7d:e2:6d:17:c6:90:62:34:75:4e:61:78:44:63:56: 60:c5:80:7d:c8:e0:46:de:39:a9:b5:f6:3d:70:cb: f9:96:0d:2d:11:eb:f0:f5:72:4c:c0:b0:c9:5c:73: d2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:76:91:E9:10:18:72:A0:77:CF:5F:AD:6C:DD:55:E0:B9:A6:B6:28 X509v3 Authority Key Identifier: keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/uXaR6RAYcqB3z1-tbN1V4Lmmtig.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.108.61.0-78.108.62.255 Signature Algorithm: sha256WithRSAEncryption 1c:bc:3c:a6:d9:c5:f4:54:1e:38:3e:d8:9d:cd:89:42:92:81: ac:3d:88:7a:a0:dc:42:79:e3:5d:5a:73:6c:7c:36:8e:c3:e5: 7a:5a:b3:16:d2:5c:c1:b7:0f:56:7f:bc:d1:12:b8:a6:09:97: 6d:82:25:e3:bf:61:a3:9c:e6:dd:f9:3e:e9:44:ce:0d:6f:b5: fb:d2:75:55:b0:67:cb:d8:9e:dd:64:c8:a3:96:fc:44:51:e2: 46:2a:59:02:3d:f4:7d:ae:ad:ad:1e:dc:f0:cf:f2:3e:2e:ed: b2:d7:37:57:d5:26:76:1a:61:c4:8b:23:f0:6c:e4:97:b0:a8: 52:fa:5c:10:87:1a:dd:4d:51:09:a6:89:0a:8c:02:5e:02:8f: 5d:e1:03:77:19:3c:b4:51:8c:2a:e9:c2:30:19:fa:45:cc:20: 20:7a:62:6a:f1:a4:4a:5b:d4:1d:c2:83:0c:fc:95:f4:de:f1: df:90:d2:0c:7a:ed:c0:17:52:46:26:33:ee:49:46:bd:a5:33: 98:55:84:50:bb:11:a0:7f:9c:2b:54:28:e9:2a:3b:fd:8b:66: c6:91:0a:4c:6a:1d:33:3c:43:dd:07:86:db:b1:93:c8:4f:11: 76:e4:fe:f9:6b:50:2a:24:70:ff:ca:c5:09:3e:61:7b:07:5b: 01:e7:02:fc -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZr856BbSrpJj2KQxczrH9IYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2YWEzZmJjNzhlMzEyMjkxNTdjNzhiNmQyM2E2NWViMmUz NTNkY2UwHhcNMjUxMjA4MDc0MDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTc2OTFlOTEwMTg3MmEwNzdjZjVmYWQ2Y2RkNTVlMGI5YTZiNjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk4uwZxZKzKixzEAvNFmDofjsVsF Jd5tMbdtYrtThFfSu0mX+X0cIFaMEEpjfImd1d+oNvvl3GRYKzFKnPjz3dHUWmtH m4y1NR86G8tqoC0dWqukxfV8rhrFTJDJejxHXAqP3iJX2ALSDogYHUhl6fd6JOLD u7rugGdYaxj4hZ9BuWpEPbixU9awodC63zqaV0geVsxm2hUle8sVA3N7cUf653hO cichzuhXKhEK6/wIjSD5xb43CeG8lvbpd8Cxou+asUeZX/7r1+qIkw6fexJ94m0X xpBiNHVOYXhEY1ZgxYB9yOBG3jmptfY9cMv5lg0tEevw9XJMwLDJXHPSMQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFLl2kekQGHKgd89frWzdVeC5prYoMB8GA1UdIwQY MBaAFNaqP7x44xIpFXx4ttI6ZesuNT3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2Mt ODI3NmM4YWFjNTBlLzEvdVhhUjZSQVljcUIzejEtdGJOMVY0TG1tdGlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2MtODI3NmM4YWFjNTBl LzEvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABObD0D BABObD4wDQYJKoZIhvcNAQELBQADggEBABy8PKbZxfRUHjg+2J3NiUKSgaw9iHqg 3EJ5411ac2x8No7D5XpasxbSXMG3D1Z/vNESuKYJl22CJeO/YaOc5t35PulEzg1v tfvSdVWwZ8vYnt1kyKOW/ERR4kYqWQI99H2ura0e3PDP8j4u7bLXN1fVJnYaYcSL I/Bs5JewqFL6XBCHGt1NUQmmiQqMAl4Cj13hA3cZPLRRjCrpwjAZ+kXMICB6Ymrx pEpb1B3Cgwz8lfTe8d+Q0gx67cAXUkYmM+5JRr2lM5hVhFC7EaB/nCtUKOkqO/2L ZsaRCkxqHTM8Q90Hhtuxk8hPEXbk/vlrUCokcP/KxQk+YXsHWwHnAvw= -----END CERTIFICATE-----Generated at Sat Dec 13 21:16:31 2025 by rpki-client