This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/6tgQgTfm85LpNc3uFwCPSeOHgn0.roa File: 6tgQgTfm85LpNc3uFwCPSeOHgn0.roa (raw, json) Hash identifier: wCzEcSC/toNrpIYexSQkBXqRoE/bPAxt1JhjpW1voZY= Subject key identifier: EA:D8:10:81:37:E6:F3:92:E9:35:CD:EE:17:00:8F:49:E3:87:82:7D Certificate issuer: /CN=7c29c2f5723f29ec5e0e793e73ab55b8a1c86ba9 Certificate serial: 019B089E2E8642D10381C1256203FC1CECF3 Authority key identifier: 7C:29:C2:F5:72:3F:29:EC:5E:0E:79:3E:73:AB:55:B8:A1:C8:6B:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/6tgQgTfm85LpNc3uFwCPSeOHgn0.roa Signing time: Wed 10 Dec 2025 14:15:42 +0000 ROA not before: Wed 10 Dec 2025 14:15:42 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210281 IP address blocks: 185.135.44.0/24 maxlen: 24 195.178.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:9e:2e:86:42:d1:03:81:c1:25:62:03:fc:1c:ec:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c29c2f5723f29ec5e0e793e73ab55b8a1c86ba9 Validity Not Before: Dec 10 14:15:42 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ead8108137e6f392e935cdee17008f49e387827d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9e:69:0d:e8:5d:4d:64:56:e1:ba:25:d4:02: 01:40:83:67:9c:48:b3:8f:32:f6:13:02:0a:c3:6e: 3e:59:d4:84:ab:0d:f5:cd:54:b8:7c:68:79:4a:02: a3:44:13:ba:ce:11:07:fe:bd:ce:7a:1c:a3:0c:9e: 22:62:de:9c:12:25:78:06:e6:67:f1:a4:7d:d9:a1: 6a:10:ed:10:77:29:32:53:55:09:10:3d:08:19:d0: e0:4a:57:c4:0c:7a:4c:9b:06:76:f2:79:f2:c8:b8: 78:5d:26:5f:94:7f:dc:10:3b:1f:8e:80:a7:39:95: 32:e7:5e:b4:f6:3e:ed:32:70:3b:15:35:37:23:4c: 0e:06:47:8b:c1:8d:11:90:7c:e2:5d:11:24:78:41: d8:22:02:c1:2b:a7:dd:1e:e1:5a:bc:5d:ff:32:9b: d7:b1:3e:a9:ee:94:cc:2a:80:ee:76:62:78:b9:bb: dd:f1:73:ac:80:0d:c6:62:a9:f7:d9:1a:00:8d:1e: 68:f1:38:65:23:f2:cf:84:e8:a3:20:25:86:9a:21: 08:98:4d:4d:ff:45:17:8c:d7:d9:03:92:ce:c9:9e: b6:cb:f5:1a:b6:2d:8f:9a:85:d9:68:cb:4e:4c:ae: fc:a8:ad:4c:7e:33:48:8a:41:5d:75:be:54:08:b3: 3f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:D8:10:81:37:E6:F3:92:E9:35:CD:EE:17:00:8F:49:E3:87:82:7D X509v3 Authority Key Identifier: keyid:7C:29:C2:F5:72:3F:29:EC:5E:0E:79:3E:73:AB:55:B8:A1:C8:6B:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/6tgQgTfm85LpNc3uFwCPSeOHgn0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.135.44.0/24 195.178.98.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:31:39:1a:9f:07:89:db:05:be:9e:c6:ba:ab:2b:f7:02:0f: de:1e:2e:17:bf:ff:d9:4d:a8:27:fc:ba:a0:df:96:eb:e4:4a: 13:e1:44:23:a0:13:52:2d:b8:86:c9:02:6d:cc:e8:39:3a:7b: f4:63:e5:92:88:fc:54:31:1e:3e:01:0a:49:3a:eb:cb:1f:3e: 2c:49:2c:ff:3d:d7:61:59:52:00:9e:bf:bb:90:d6:38:2c:91: a7:c7:54:18:eb:99:5d:35:84:66:4a:14:00:68:4c:bf:ba:f3: d3:ee:e5:29:54:2f:5c:3d:40:d4:7a:2b:00:70:3a:14:6e:f5: 95:c9:3e:46:f9:ef:b6:c3:e8:b3:27:1a:8d:0a:31:51:f9:05: d7:51:71:c9:04:7d:57:68:22:2b:ca:d7:e8:5a:b2:c3:f5:53: dc:f7:31:8f:b5:f4:46:05:ec:fa:cd:05:cc:41:62:d7:c4:8e: ed:4c:19:fe:44:22:ef:81:63:2a:10:1b:b8:36:35:02:7c:ba: 0a:82:f6:e2:f0:4d:18:0f:d0:1b:e0:ab:9f:51:a9:07:34:47: fa:fa:0d:7b:65:2c:8e:06:be:46:3e:9d:5e:86:7e:1f:0d:28: 42:a8:ac:6e:75:ae:3f:28:bb:4b:f1:6a:39:b5:ab:e9:71:12: c5:47:1b:b7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsIni6GQtEDgcElYgP8HOzzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjMjljMmY1NzIzZjI5ZWM1ZTBlNzkzZTczYWI1NWI4YTFj ODZiYTkwHhcNMjUxMjEwMTQxNTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWQ4MTA4MTM3ZTZmMzkyZTkzNWNkZWUxNzAwOGY0OWUzODc4MjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZ5pDehdTWRW4bol1AIBQINnnEiz jzL2EwIKw24+WdSEqw31zVS4fGh5SgKjRBO6zhEH/r3OehyjDJ4iYt6cEiV4BuZn 8aR92aFqEO0QdykyU1UJED0IGdDgSlfEDHpMmwZ28nnyyLh4XSZflH/cEDsfjoCn OZUy51609j7tMnA7FTU3I0wOBkeLwY0RkHziXREkeEHYIgLBK6fdHuFavF3/MpvX sT6p7pTMKoDudmJ4ubvd8XOsgA3GYqn32RoAjR5o8ThlI/LPhOijICWGmiEImE1N /0UXjNfZA5LOyZ62y/Uati2PmoXZaMtOTK78qK1MfjNIikFddb5UCLM/AQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOrYEIE35vOS6TXN7hcAj0njh4J9MB8GA1UdIwQY MBaAFHwpwvVyPynsXg55PnOrVbihyGupMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkNuQzlYSV9LZXhlRG5rLWM2dFZ1S0hJYTZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kOTlmYWMtMzVkYy00ZjJjLThmOTUt ZjE5NTIyM2QwM2IzLzEvNnRnUWdUZm04NUxwTmMzdUZ3Q1BTZU9IZ24wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9kOTlmYWMtMzVkYy00ZjJjLThmOTUtZjE5NTIyM2QwM2Iz LzEvZkNuQzlYSV9LZXhlRG5rLWM2dFZ1S0hJYTZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuYcsAwQA w7JiMA0GCSqGSIb3DQEBCwUAA4IBAQB9MTkanweJ2wW+nsa6qyv3Ag/eHi4Xv//Z Tagn/Lqg35br5EoT4UQjoBNSLbiGyQJtzOg5Onv0Y+WSiPxUMR4+AQpJOuvLHz4s SSz/PddhWVIAnr+7kNY4LJGnx1QY65ldNYRmShQAaEy/uvPT7uUpVC9cPUDUeisA cDoUbvWVyT5G+e+2w+izJxqNCjFR+QXXUXHJBH1XaCIrytfoWrLD9VPc9zGPtfRG Bez6zQXMQWLXxI7tTBn+RCLvgWMqEBu4NjUCfLoKgvbi8E0YD9Ab4KufUakHNEf6 +g17ZSyOBr5GPp1ehn4fDShCqKxuda4/KLtL8Wo5tavpcRLFRxu3 -----END CERTIFICATE-----Generated at Fri Dec 12 01:01:23 2025 by rpki-client