This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/j6hKxXwYJoHNuCTDhs-IfIh2tt4.roa File: j6hKxXwYJoHNuCTDhs-IfIh2tt4.roa (raw, json) Hash identifier: TjFUu5xlgLo8Aa3mMyacmbyQA66hBclRcNenDgJBYgM= Subject key identifier: 8F:A8:4A:C5:7C:18:26:81:CD:B8:24:C3:86:CF:88:7C:88:76:B6:DE Certificate issuer: /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca Certificate serial: 019B36092CEE84247FE036047E38202232A2 Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/j6hKxXwYJoHNuCTDhs-IfIh2tt4.roa Signing time: Fri 19 Dec 2025 09:55:29 +0000 ROA not before: Fri 19 Dec 2025 09:55:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 13285 IP address blocks: 92.12.0.0/14 maxlen: 14 92.12.0.0/15 maxlen: 15 92.14.0.0/15 maxlen: 15 213.208.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 10:04:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:09:2c:ee:84:24:7f:e0:36:04:7e:38:20:22:32:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca Validity Not Before: Dec 19 09:55:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8fa84ac57c182681cdb824c386cf887c8876b6de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3a:d6:99:74:8c:da:6e:15:2b:db:43:58:fe: 20:07:05:f8:0e:7f:5c:cb:b1:15:43:e9:02:bb:08: 01:23:8e:fa:f8:45:c5:c6:6b:67:52:c2:b7:d4:98: 0b:a0:da:a4:ae:7c:2a:32:35:2e:f0:7d:b9:4c:cc: 69:e1:00:d3:71:82:69:96:4d:d8:bc:fc:f6:cf:4f: 81:dc:c5:1b:39:c7:d5:d3:b6:a3:3a:d2:46:96:f1: 6d:94:58:7d:08:b1:96:00:42:a5:00:96:c8:66:cb: c9:df:4e:b4:29:cc:81:69:f2:46:d2:c2:69:51:50: d6:89:d6:21:a4:0e:de:2a:b0:1a:34:94:83:c2:b0: 0c:ce:33:10:0f:b8:91:34:aa:dc:b9:6a:7d:3d:0c: 74:fb:dd:88:3b:97:e6:5f:54:c8:f0:aa:0d:be:a4: 06:8a:9c:26:d5:e1:df:69:21:d7:35:88:5d:c5:15: ce:7c:fb:ed:79:71:3d:21:51:c6:20:6f:7f:26:62: da:09:26:93:8f:de:8b:c0:a6:95:bb:b3:05:90:8c: a1:3e:81:f0:82:15:63:11:22:5a:2d:3f:99:73:17: ed:90:ad:aa:de:4f:bf:71:37:a6:ed:69:b8:77:fc: 94:d7:6e:71:aa:22:70:6d:73:f8:45:d6:de:21:ad: da:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A8:4A:C5:7C:18:26:81:CD:B8:24:C3:86:CF:88:7C:88:76:B6:DE X509v3 Authority Key Identifier: keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/j6hKxXwYJoHNuCTDhs-IfIh2tt4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.12.0.0/14 213.208.64.0/18 Signature Algorithm: sha256WithRSAEncryption af:d0:28:cf:9a:86:a2:2a:ea:b6:e4:2f:7a:65:5b:a7:f8:7b: 89:3b:61:2d:05:97:01:55:ce:8c:66:9c:2f:84:4b:81:a0:03: fd:00:77:e5:06:85:b2:57:d6:d6:94:29:2b:ef:62:40:97:23: 62:4f:5d:10:01:f5:78:50:ea:87:00:f1:8a:75:30:e2:14:ad: 61:fc:57:29:07:44:ed:51:59:76:6d:f0:b2:c2:37:d2:98:1a: 00:a9:bf:6f:90:43:fb:c5:98:e7:3e:75:1b:62:69:ac:3f:9d: ec:4a:e1:e0:ce:b8:0d:7a:4b:d9:80:5a:b7:19:85:46:ac:cf: dc:37:cd:a2:b2:57:0e:8d:6f:60:1a:a7:38:65:cb:e5:40:ec: 0a:04:62:9a:1d:7a:26:cb:b9:59:86:62:74:df:1f:52:2b:7f: aa:23:66:8e:52:9a:83:2d:3c:20:e2:8d:4a:31:34:ec:84:3e: 6a:eb:cb:22:81:1b:58:43:16:4f:2a:92:c7:ca:f0:32:c6:c1: 40:91:20:c7:47:a9:e1:5d:c6:23:03:6e:c1:72:e1:78:04:82: 4a:0b:1e:0c:8e:1a:61:75:ac:09:96:8e:38:38:0d:91:df:f8: 12:59:8d:91:a1:5f:c8:9c:44:1e:72:e5:64:45:c7:62:ec:51: 71:ec:33:61 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgISAZs2CSzuhCR/4DYEfjggIjKiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MzA3ZDI5ZjU1NDNmMjFlYTMwMDliOTUyM2ZlNzFiOGYx MzY5Y2EwHhcNMjUxMjE5MDk1NTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZmE4NGFjNTdjMTgyNjgxY2RiODI0YzM4NmNmODg3Yzg4NzZiNmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTrWmXSM2m4VK9tDWP4gBwX4Dn9c y7EVQ+kCuwgBI476+EXFxmtnUsK31JgLoNqkrnwqMjUu8H25TMxp4QDTcYJplk3Y vPz2z0+B3MUbOcfV07ajOtJGlvFtlFh9CLGWAEKlAJbIZsvJ3060KcyBafJG0sJp UVDWidYhpA7eKrAaNJSDwrAMzjMQD7iRNKrcuWp9PQx0+92IO5fmX1TI8KoNvqQG ipwm1eHfaSHXNYhdxRXOfPvteXE9IVHGIG9/JmLaCSaTj96LwKaVu7MFkIyhPoHw ghVjESJaLT+ZcxftkK2q3k+/cTem7Wm4d/yU125xqiJwbXP4RdbeIa3awwIDAQAB o4ICDjCCAgowHQYDVR0OBBYEFI+oSsV8GCaBzbgkw4bPiHyIdrbeMB8GA1UdIwQY MBaAFBYwfSn1VD8h6jAJuVI/5xuPE2nKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iZjVlNzAtNjY2NS00OWRlLWI5Y2Yt NGNmZTQwZjA3YTZiLzEvajZoS3hYd1lKb0hOdUNURGhzLUlmSWgydHQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9iZjVlNzAtNjY2NS00OWRlLWI5Y2YtNGNmZTQwZjA3YTZi LzEvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMCXAwDBAbV 0EAwDQYJKoZIhvcNAQELBQADggEBAK/QKM+ahqIq6rbkL3plW6f4e4k7YS0FlwFV zoxmnC+ES4GgA/0Ad+UGhbJX1taUKSvvYkCXI2JPXRAB9XhQ6ocA8Yp1MOIUrWH8 VykHRO1RWXZt8LLCN9KYGgCpv2+QQ/vFmOc+dRtiaaw/nexK4eDOuA16S9mAWrcZ hUasz9w3zaKyVw6Nb2Aapzhly+VA7AoEYpodeibLuVmGYnTfH1Irf6ojZo5SmoMt PCDijUoxNOyEPmrryyKBG1hDFk8qksfK8DLGwUCRIMdHqeFdxiMDbsFy4XgEgkoL HgyOGmF1rAmWjjg4DZHf+BJZjZGhX8icRB5y5WRFx2LsUXHsM2E= -----END CERTIFICATE-----Generated at Fri Dec 19 19:48:33 2025 by rpki-client