This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/6zV97dJ4xQGri5YZtNgkYLMqa5k.roa File: 6zV97dJ4xQGri5YZtNgkYLMqa5k.roa (raw, json) Hash identifier: djZiLuc0yQH0F11utvsJqgMrXcwZTVdReJ+W5OxQEEs= Subject key identifier: EB:35:7D:ED:D2:78:C5:01:AB:8B:96:19:B4:D8:24:60:B3:2A:6B:99 Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019AD98931CEA6F7637B3A8EFA772E1F8C87 Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/6zV97dJ4xQGri5YZtNgkYLMqa5k.roa Signing time: Mon 01 Dec 2025 10:50:38 +0000 ROA not before: Mon 01 Dec 2025 10:50:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214526 IP address blocks: 87.236.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 08:09:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:89:31:ce:a6:f7:63:7b:3a:8e:fa:77:2e:1f:8c:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Dec 1 10:50:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=eb357dedd278c501ab8b9619b4d82460b32a6b99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:31:b2:ff:f1:7e:c5:77:5f:a1:b2:cc:d2:68: 1c:f0:fb:92:09:89:9d:97:f0:74:fa:f7:21:97:22: 27:a4:fb:34:ce:b0:f6:51:f6:58:73:70:52:20:1e: 8f:e2:bf:d9:f7:a6:5b:5b:98:49:c5:1a:9c:23:00: c5:28:95:68:8c:e7:8e:68:4b:2e:71:ad:c9:af:2d: 89:0b:00:76:ed:bd:75:9a:5a:fa:a0:9a:49:99:be: d9:57:3c:83:3b:dd:c6:66:ca:38:68:da:7e:d0:9e: 42:ea:48:01:25:16:3c:be:58:00:d9:e2:a3:ed:a3: 63:a3:42:4c:46:38:97:80:ec:28:3a:98:8b:2e:1f: 3a:98:da:a3:fa:46:52:43:7e:5f:87:3d:dc:a5:8a: 30:9b:c2:3c:e1:95:65:93:24:f9:5b:70:1a:b3:24: 33:43:12:49:20:e5:5b:07:24:8b:84:14:0e:80:7d: e4:d1:a1:2a:57:35:51:da:37:5b:40:16:b0:cd:b7: 68:fd:bf:fc:3b:1c:fa:67:56:e9:3d:a3:8e:53:40: 49:fc:10:26:7f:ee:19:d0:1d:4e:a6:77:22:b0:ce: 09:e2:c4:78:60:a0:b9:91:77:bc:3f:71:00:a7:ef: 2a:b9:0d:21:cb:88:4f:2a:f8:9d:42:79:33:23:d3: 2c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:35:7D:ED:D2:78:C5:01:AB:8B:96:19:B4:D8:24:60:B3:2A:6B:99 X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/6zV97dJ4xQGri5YZtNgkYLMqa5k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.236.38.0/24 Signature Algorithm: sha256WithRSAEncryption 44:09:fb:3b:7f:b2:b5:e7:d0:c3:46:ac:d4:b8:52:46:93:74: 77:7b:32:65:43:08:8f:cf:7b:48:76:58:cb:2a:ce:24:8b:10: 6d:9a:07:d1:59:bc:cd:48:b7:18:ce:c9:7b:01:6a:32:3a:fa: df:2e:73:2e:ff:b2:bb:bc:08:1a:ab:7d:b1:35:e0:44:57:e2: eb:2c:8c:13:8a:a2:4c:ba:2c:34:16:09:5d:a7:65:1f:a5:a9: 05:ef:db:bf:e9:c8:6f:e5:0a:5d:4d:96:78:13:21:8e:27:ad: 5c:33:9c:d8:34:15:fd:8b:14:eb:67:50:36:02:a6:a6:08:bb: 6c:b6:be:8f:6d:38:7a:dd:56:a4:da:c7:46:6b:5f:8b:07:8d: 69:e1:7d:00:51:80:8f:e9:f3:7a:21:90:96:61:a3:ca:bd:a1: 56:41:56:97:88:a6:e7:cc:7b:49:92:c6:c6:20:fb:b7:a4:21: 47:2c:4d:69:6d:e3:18:62:1a:d0:7f:47:44:3c:a0:23:e9:6c: f5:be:2e:a0:f0:fd:72:8d:80:cd:ef:b0:48:79:7b:4c:08:94: 94:89:02:41:72:52:52:7e:65:eb:05:b2:15:3c:93:56:1f:3f: db:9c:81:6b:c6:4e:53:5a:e3:b7:5c:f4:52:cd:78:3b:09:6e: 98:a0:d9:74 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrZiTHOpvdjezqO+ncuH4yHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjUxMjAxMTA1MDM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjM1N2RlZGQyNzhjNTAxYWI4Yjk2MTliNGQ4MjQ2MGIzMmE2Yjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TGy//F+xXdfobLM0mgc8PuSCYmd l/B0+vchlyInpPs0zrD2UfZYc3BSIB6P4r/Z96ZbW5hJxRqcIwDFKJVojOeOaEsu ca3Jry2JCwB27b11mlr6oJpJmb7ZVzyDO93GZso4aNp+0J5C6kgBJRY8vlgA2eKj 7aNjo0JMRjiXgOwoOpiLLh86mNqj+kZSQ35fhz3cpYowm8I84ZVlkyT5W3AasyQz QxJJIOVbBySLhBQOgH3k0aEqVzVR2jdbQBawzbdo/b/8Oxz6Z1bpPaOOU0BJ/BAm f+4Z0B1OpncisM4J4sR4YKC5kXe8P3EAp+8quQ0hy4hPKvidQnkzI9MszQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOs1fe3SeMUBq4uWGbTYJGCzKmuZMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvNnpWOTdkSjR4UUdyaTVZWnROZ2tZTE1xYTVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+wmMA0G CSqGSIb3DQEBCwUAA4IBAQBECfs7f7K159DDRqzUuFJGk3R3ezJlQwiPz3tIdljL Ks4kixBtmgfRWbzNSLcYzsl7AWoyOvrfLnMu/7K7vAgaq32xNeBEV+LrLIwTiqJM uiw0Fgldp2UfpakF79u/6chv5QpdTZZ4EyGOJ61cM5zYNBX9ixTrZ1A2AqamCLts tr6PbTh63Vak2sdGa1+LB41p4X0AUYCP6fN6IZCWYaPKvaFWQVaXiKbnzHtJksbG IPu3pCFHLE1pbeMYYhrQf0dEPKAj6Wz1vi6g8P1yjYDN77BIeXtMCJSUiQJBclJS fmXrBbIVPJNWHz/bnIFrxk5TWuO3XPRSzXg7CW6YoNl0 -----END CERTIFICATE-----Generated at Wed Dec 3 11:45:16 2025 by rpki-client