This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/6wLYz_0GDv2Y0q8t5HxFE4yd5Cs.roa File: 6wLYz_0GDv2Y0q8t5HxFE4yd5Cs.roa (raw, json) Hash identifier: NxuKiuiC9jV6u19YnE/nOvvI4iZdVAPYVTvvSuegT3s= Subject key identifier: EB:02:D8:CF:FD:06:0E:FD:98:D2:AF:2D:E4:7C:45:13:8C:9D:E4:2B Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019AA397086DD1199003518BB1A7D8A78388 Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/6wLYz_0GDv2Y0q8t5HxFE4yd5Cs.roa Signing time: Thu 20 Nov 2025 23:26:15 +0000 ROA not before: Thu 20 Nov 2025 23:26:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215590 IP address blocks: 77.239.108.0/22 maxlen: 24 150.241.88.0/23 maxlen: 24 150.241.106.0/23 maxlen: 24 150.241.115.0/24 maxlen: 24 150.241.116.0/24 maxlen: 24 150.241.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a3:97:08:6d:d1:19:90:03:51:8b:b1:a7:d8:a7:83:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Nov 20 23:26:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=eb02d8cffd060efd98d2af2de47c45138c9de42b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9a:4a:7a:b1:99:42:23:ac:34:71:ad:8f:3c: 23:de:60:b9:9a:b3:59:6c:04:7f:1d:8c:a5:c0:66: 2c:b3:9b:e8:f7:62:f5:c0:89:51:ed:f9:ea:1f:8f: 98:ec:49:f5:27:c5:db:fa:81:ca:70:dc:67:e2:df: 50:5f:10:d1:17:d0:c8:bf:ea:34:f1:a2:b9:08:bc: c9:04:3e:57:59:fa:ef:25:9f:f3:3e:c7:7b:64:10: 2e:cb:c3:53:be:b9:61:4d:4d:c3:c9:c6:08:a1:0e: ac:59:5b:ad:02:71:7c:d4:51:1b:b6:e5:d3:1c:a4: fb:85:ce:49:30:19:a4:75:5b:73:d3:05:10:82:a0: 05:f2:50:a7:ec:10:e0:9c:56:02:d5:1d:ac:11:09: 72:0e:d5:c3:33:57:57:84:07:37:a3:cb:2e:81:61: 10:a9:a7:43:8a:68:8c:16:a9:cc:48:59:9a:78:dc: 58:2b:fe:e5:4b:23:7d:fa:50:de:d0:e8:45:0c:79: 53:c3:48:47:96:88:8f:99:49:d7:70:23:50:f7:99: 1e:4b:24:55:c8:dd:2f:a5:1a:66:25:65:a0:6e:fd: b1:8f:fa:dc:d5:04:c3:d0:d0:91:bf:e0:59:5e:55: f5:ec:66:32:a5:93:39:71:01:0b:b3:22:21:a9:78: bb:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:02:D8:CF:FD:06:0E:FD:98:D2:AF:2D:E4:7C:45:13:8C:9D:E4:2B X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/6wLYz_0GDv2Y0q8t5HxFE4yd5Cs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.239.108.0/22 150.241.88.0/23 150.241.106.0/23 150.241.115.0-150.241.116.255 150.241.123.0/24 Signature Algorithm: sha256WithRSAEncryption b5:93:99:0f:1b:bd:e7:d1:b9:ef:fa:fd:5b:43:1d:26:5a:81: 4c:3f:42:f7:85:3b:48:04:1e:90:13:3a:69:56:1f:01:22:76: 68:f2:39:9b:a4:80:0a:d3:f7:45:79:e6:b9:54:08:ad:1a:db: 65:21:02:b9:9d:88:5c:4c:6d:08:4d:5f:82:33:66:cc:2e:90: 95:6d:02:54:fb:81:6b:0a:ef:7d:92:0c:41:46:cf:13:84:47: bd:a7:7b:3b:81:01:19:03:2f:c2:6b:81:99:e5:30:c8:92:f4: e9:be:18:74:c7:0d:0c:00:a1:2e:04:ca:90:55:2e:20:ee:0e: 9b:17:37:45:f6:0c:dd:f8:8d:b7:ed:c8:5b:ca:ba:4d:40:67: 15:fc:6e:89:39:0e:86:79:1d:76:d1:9f:d5:74:90:1d:b9:a6: c0:1d:01:f0:14:29:9e:b4:46:26:ae:f9:cf:7a:7a:48:6b:3a: 0e:63:de:33:5d:7a:50:02:1b:58:06:e7:c9:93:fb:f0:81:a3: e2:56:61:78:0d:b7:63:6d:2a:e1:52:e1:65:d8:94:25:e9:2e: 1c:7e:e8:ad:4f:f0:38:0e:6b:26:b3:9b:07:71:cb:56:2d:3f: 69:fa:46:49:ee:68:64:5f:cc:29:b7:91:8d:7e:04:c3:87:a3: e4:b0:2b:99 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZqjlwht0RmQA1GLsafYp4OIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjUxMTIwMjMyNjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjAyZDhjZmZkMDYwZWZkOThkMmFmMmRlNDdjNDUxMzhjOWRlNDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwppKerGZQiOsNHGtjzwj3mC5mrNZ bAR/HYylwGYss5vo92L1wIlR7fnqH4+Y7En1J8Xb+oHKcNxn4t9QXxDRF9DIv+o0 8aK5CLzJBD5XWfrvJZ/zPsd7ZBAuy8NTvrlhTU3DycYIoQ6sWVutAnF81FEbtuXT HKT7hc5JMBmkdVtz0wUQgqAF8lCn7BDgnFYC1R2sEQlyDtXDM1dXhAc3o8sugWEQ qadDimiMFqnMSFmaeNxYK/7lSyN9+lDe0OhFDHlTw0hHloiPmUnXcCNQ95keSyRV yN0vpRpmJWWgbv2xj/rc1QTD0NCRv+BZXlX17GYypZM5cQELsyIhqXi7cwIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFOsC2M/9Bg79mNKvLeR8RROMneQrMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvNndMWXpfMEdEdjJZMHE4dDVIeEZFNHlkNUNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQCTe9sAwQB lvFYAwQBlvFqMAwDBACW8XMDBACW8XQDBACW8XswDQYJKoZIhvcNAQELBQADggEB ALWTmQ8bvefRue/6/VtDHSZagUw/QveFO0gEHpATOmlWHwEidmjyOZukgArT90V5 5rlUCK0a22UhArmdiFxMbQhNX4IzZswukJVtAlT7gWsK732SDEFGzxOER72nezuB ARkDL8JrgZnlMMiS9Om+GHTHDQwAoS4EypBVLiDuDpsXN0X2DN34jbftyFvKuk1A ZxX8bok5DoZ5HXbRn9V0kB25psAdAfAUKZ60Riau+c96ekhrOg5j3jNdelACG1gG 58mT+/CBo+JWYXgNt2NtKuFS4WXYlCXpLhx+6K1P8DgOayazmwdxy1YtP2n6Rknu aGRfzCm3kY1+BMOHo+SwK5k= -----END CERTIFICATE-----Generated at Fri Dec 5 17:53:13 2025 by rpki-client