This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Rrd6grgXsDFWspVSNwl-RZOMHCA.roa File: Rrd6grgXsDFWspVSNwl-RZOMHCA.roa (raw, json) Hash identifier: 5ZHqDEIeF1ZHWE61BL7KKWvJHEOZv1SLsZeuVJDB0cM= Subject key identifier: 46:B7:7A:82:B8:17:B0:31:56:B2:95:52:37:09:7E:45:93:8C:1C:20 Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Certificate serial: 019A6F06089E2F59C9B3C1392A26DE00F116 Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Rrd6grgXsDFWspVSNwl-RZOMHCA.roa Signing time: Mon 10 Nov 2025 18:27:37 +0000 ROA not before: Mon 10 Nov 2025 18:27:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209710 IP address blocks: 185.115.242.0/24 maxlen: 32 185.238.241.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6f:06:08:9e:2f:59:c9:b3:c1:39:2a:26:de:00:f1:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Validity Not Before: Nov 10 18:27:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=46b77a82b817b03156b2955237097e45938c1c20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:28:81:1b:89:90:73:d0:c1:9b:a7:55:97:46: dc:bc:48:5e:e5:ee:ce:00:4a:5d:ca:6c:31:7d:82: 8b:cf:94:90:fe:1d:0b:40:3e:27:1a:75:b4:41:b4: 86:a4:c6:e1:9d:13:78:22:e0:25:9c:3e:df:92:ea: 45:5d:bc:c1:ef:74:45:ea:36:63:ef:ae:bd:57:75: ef:39:01:30:b6:a2:b4:0c:0d:5f:c8:ee:f3:d6:a2: 8f:26:65:e6:de:98:00:2c:ec:80:7b:84:b2:b9:6e: c3:3a:c1:7d:ca:1c:47:b4:f5:32:84:5d:c2:99:43: 81:cb:f3:a4:22:0c:f0:97:7e:19:a2:26:b1:f2:e9: 82:57:9a:36:8d:c7:df:f2:01:5f:e9:3e:04:24:d1: 31:48:53:32:3b:e8:2a:1a:b2:f4:d9:3a:18:11:fb: d2:4e:9f:d0:19:db:0d:c1:20:1e:32:2d:79:de:e6: c1:57:26:3d:93:6c:4b:0c:d7:31:8e:dd:dc:d6:36: 61:a5:e6:8e:fa:3a:80:39:b4:07:f7:a1:7f:87:49: 73:b8:39:0f:ef:0a:a5:8b:45:a3:1a:70:43:a5:ef: 0f:17:ea:c3:b2:e2:16:be:7a:71:18:c1:06:9f:6d: 06:8d:32:05:3f:80:38:18:e0:e2:87:01:36:79:8b: 7e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:B7:7A:82:B8:17:B0:31:56:B2:95:52:37:09:7E:45:93:8C:1C:20 X509v3 Authority Key Identifier: keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Rrd6grgXsDFWspVSNwl-RZOMHCA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.115.242.0/24 185.238.241.0/24 Signature Algorithm: sha256WithRSAEncryption 16:d8:c3:85:f8:0a:23:a8:67:ec:30:a3:7b:cc:84:e0:00:c4: 5b:3c:48:59:bc:03:db:65:b7:f5:05:f3:77:d9:d9:82:79:80: 63:a7:5f:c4:27:0f:76:08:fd:57:51:0d:f7:9d:02:bd:80:cc: 98:4e:d8:38:c0:e2:2a:59:04:55:86:77:88:fb:10:d9:88:02: b5:83:f0:ff:b0:ba:90:7f:84:d1:3d:15:25:58:67:28:56:11: 82:e7:b6:74:87:e2:fb:32:18:bb:ba:6b:ac:41:c4:66:12:a8: d8:2e:00:d1:35:85:5b:ca:b7:7b:88:00:1f:ff:89:6b:2f:ef: c7:3a:a7:82:3c:b0:7a:d0:c8:f7:a8:5d:2f:aa:db:42:aa:16: dd:02:75:a1:8d:5a:30:63:01:8a:c0:f6:c0:d6:d1:83:08:fc: 6b:c9:80:68:01:8f:b5:1e:97:27:30:32:1e:5c:a5:2a:de:10: c6:7c:01:b7:92:b0:d8:aa:8e:ed:f0:3d:41:f3:7d:f8:e0:47: b9:41:3f:02:95:96:eb:00:2d:d8:da:be:0c:fc:09:2b:29:c5: d4:82:5c:12:1a:37:2c:0e:ab:b0:64:6c:34:a9:93:74:0d:05: d2:de:d4:cf:cc:05:b6:88:25:8b:0d:85:68:55:5a:10:47:25: 69:f4:1a:00 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZpvBgieL1nJs8E5KibeAPEWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi YTU3NDUwHhcNMjUxMTEwMTgyNzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NmI3N2E4MmI4MTdiMDMxNTZiMjk1NTIzNzA5N2U0NTkzOGMxYzIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCiBG4mQc9DBm6dVl0bcvEhe5e7O AEpdymwxfYKLz5SQ/h0LQD4nGnW0QbSGpMbhnRN4IuAlnD7fkupFXbzB73RF6jZj 7669V3XvOQEwtqK0DA1fyO7z1qKPJmXm3pgALOyAe4SyuW7DOsF9yhxHtPUyhF3C mUOBy/OkIgzwl34Zoiax8umCV5o2jcff8gFf6T4EJNExSFMyO+gqGrL02ToYEfvS Tp/QGdsNwSAeMi153ubBVyY9k2xLDNcxjt3c1jZhpeaO+jqAObQH96F/h0lzuDkP 7wqli0WjGnBDpe8PF+rDsuIWvnpxGMEGn20GjTIFP4A4GODihwE2eYt+XwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEa3eoK4F7AxVrKVUjcJfkWTjBwgMB8GA1UdIwQY MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt ZmVhYzI2ZWFlY2MyLzEvUnJkNmdyZ1hzREZXc3BWU053bC1SWk9NSENBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuXPyAwQA ue7xMA0GCSqGSIb3DQEBCwUAA4IBAQAW2MOF+AojqGfsMKN7zITgAMRbPEhZvAPb Zbf1BfN32dmCeYBjp1/EJw92CP1XUQ33nQK9gMyYTtg4wOIqWQRVhneI+xDZiAK1 g/D/sLqQf4TRPRUlWGcoVhGC57Z0h+L7Mhi7umusQcRmEqjYLgDRNYVbyrd7iAAf /4lrL+/HOqeCPLB60Mj3qF0vqttCqhbdAnWhjVowYwGKwPbA1tGDCPxryYBoAY+1 HpcnMDIeXKUq3hDGfAG3krDYqo7t8D1B83344Ee5QT8ClZbrAC3Y2r4M/AkrKcXU glwSGjcsDquwZGw0qZN0DQXS3tTPzAW2iCWLDYVoVVoQRyVp9BoA -----END CERTIFICATE-----Generated at Fri Dec 5 05:58:02 2025 by rpki-client