This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/6M2vy0lXQ_7tjjvEV8gpPSTThuU.roa File: 6M2vy0lXQ_7tjjvEV8gpPSTThuU.roa (raw, json) Hash identifier: b5cu0WL7Qtxz50JCQiFAw4pft+pkECZSSQHywDd6X6k= Subject key identifier: E8:CD:AF:CB:49:57:43:FE:ED:8E:3B:C4:57:C8:29:3D:24:D3:86:E5 Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Certificate serial: 019B08FD322FF68F676EA775A63B23F06EC1 Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/6M2vy0lXQ_7tjjvEV8gpPSTThuU.roa Signing time: Wed 10 Dec 2025 15:59:29 +0000 ROA not before: Wed 10 Dec 2025 15:59:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48678 IP address blocks: 5.180.105.0/24 maxlen: 24 5.180.106.0/24 maxlen: 24 5.180.107.0/24 maxlen: 24 45.131.0.0/24 maxlen: 24 45.131.1.0/24 maxlen: 24 45.131.2.0/24 maxlen: 24 45.131.3.0/24 maxlen: 24 45.136.4.0/24 maxlen: 24 77.83.200.0/24 maxlen: 24 77.83.201.0/24 maxlen: 24 77.83.202.0/24 maxlen: 24 91.208.204.0/24 maxlen: 24 194.116.237.0/24 maxlen: 24 2a09:8780::/29 maxlen: 29 2a0f:b700::/29 maxlen: 29 2a0f:e900::/29 maxlen: 29 2a0f:eb00::/29 maxlen: 29 2a0f:eb05::/32 maxlen: 32 2a0f:eb07::/32 maxlen: 32 2a0f:ed00::/29 maxlen: 29 2a0f:ed03::/32 maxlen: 32 2a0f:f900::/29 maxlen: 29 2a13:a440:7::/48 maxlen: 48 2a13:a441::/32 maxlen: 32 2a13:a445::/32 maxlen: 32 2a13:a447::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:fd:32:2f:f6:8f:67:6e:a7:75:a6:3b:23:f0:6e:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Validity Not Before: Dec 10 15:59:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e8cdafcb495743feed8e3bc457c8293d24d386e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c8:7e:ad:2f:e2:21:da:5c:19:2a:88:e0:32: e5:3d:78:52:3c:40:b3:57:a1:3f:1f:81:f9:f2:21: 22:a2:70:e6:dc:86:d7:4c:de:49:5e:ab:d6:31:58: 56:16:21:2a:9d:30:f2:d8:22:0c:68:ee:9b:c0:92: 56:58:fd:84:16:f2:99:cf:38:4f:10:17:28:e4:cc: 6c:a0:70:15:52:c8:97:e4:fd:df:05:02:01:ad:78: f8:d9:c6:59:3d:5c:2c:5a:4b:70:49:6f:48:a1:26: 37:71:a0:d8:16:c0:6a:0f:bc:8a:e1:e8:ea:c9:ca: 64:18:cf:24:07:4b:e4:66:a5:3f:cd:0b:44:3e:96: 98:13:29:0a:76:af:99:17:5c:ed:11:4b:c6:ed:62: 36:50:a7:48:c1:42:0c:55:60:8f:56:cf:48:5c:bd: c0:52:db:7f:fb:5f:87:89:86:4d:51:ef:f1:6c:26: dd:43:91:6c:e1:f9:3c:ab:fa:c9:c5:62:ab:7a:1e: 0d:a5:40:70:10:70:e5:3a:f8:74:a1:1c:fb:0d:05: 48:88:fa:a0:ab:a6:05:11:98:f8:ac:68:1c:7e:c0: 44:57:b0:c6:b5:a2:c5:1a:71:01:10:aa:5f:68:a1: 08:11:e7:3f:cb:72:e6:0e:55:bf:c1:47:f6:cf:7d: f5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:CD:AF:CB:49:57:43:FE:ED:8E:3B:C4:57:C8:29:3D:24:D3:86:E5 X509v3 Authority Key Identifier: keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/6M2vy0lXQ_7tjjvEV8gpPSTThuU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.105.0-5.180.107.255 45.131.0.0/22 45.136.4.0/24 77.83.200.0-77.83.202.255 91.208.204.0/24 194.116.237.0/24 IPv6: 2a09:8780::/29 2a0f:b700::/29 2a0f:e900::/29 2a0f:eb00::/29 2a0f:ed00::/29 2a0f:f900::/29 2a13:a440:7::/48 2a13:a441::/32 2a13:a445::/32 2a13:a447::/32 Signature Algorithm: sha256WithRSAEncryption 8a:35:73:c8:0f:06:91:96:dc:9e:7f:05:4a:c7:08:01:eb:7d: f0:bf:a9:44:d7:61:d7:34:fe:d5:61:53:e0:d1:c3:75:06:b6: 22:dc:c6:e3:81:00:bc:e2:56:5f:b5:3c:a1:fa:8c:b4:15:5d: 59:b8:31:26:43:be:d6:70:51:cc:50:af:4a:55:b2:21:44:f4: 5e:c3:0c:55:c9:e8:0d:32:60:c6:fb:03:5e:5a:ae:b5:bc:8f: 21:32:7c:ae:09:7b:45:3b:65:72:0b:40:ba:b4:7c:75:f7:9e: 82:e9:09:c4:37:0b:e7:5a:87:cf:e3:ff:6b:f6:5c:af:7d:07: f6:77:10:a4:7b:11:7d:0d:6a:d6:4f:c0:54:53:09:3c:f8:d7: 43:ee:3a:a1:c1:71:27:7b:08:2a:1c:bd:f0:dc:44:fe:5d:89: 6e:2d:9e:21:6a:06:e1:8d:49:f8:f5:16:70:ac:c8:74:32:1d: 6f:9d:4d:82:4a:6b:44:3c:6c:35:db:a5:56:52:dc:7d:95:5e: d9:3e:1d:b5:90:79:65:5c:a5:a1:1c:a7:e0:c2:02:6f:2b:91: fd:59:ac:bb:bc:3d:32:86:8e:a3:eb:46:d9:8f:f0:75:f3:cb: d2:3e:a2:b3:83:78:74:cc:38:ab:91:8a:08:04:3e:bf:c9:ee: 5a:ce:30:5a -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZsI/TIv9o9nbqd1pjsj8G7BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl ZjVkYWYwHhcNMjUxMjEwMTU1OTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOGNkYWZjYjQ5NTc0M2ZlZWQ4ZTNiYzQ1N2M4MjkzZDI0ZDM4NmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmch+rS/iIdpcGSqI4DLlPXhSPECz V6E/H4H58iEionDm3IbXTN5JXqvWMVhWFiEqnTDy2CIMaO6bwJJWWP2EFvKZzzhP EBco5MxsoHAVUsiX5P3fBQIBrXj42cZZPVwsWktwSW9IoSY3caDYFsBqD7yK4ejq ycpkGM8kB0vkZqU/zQtEPpaYEykKdq+ZF1ztEUvG7WI2UKdIwUIMVWCPVs9IXL3A Utt/+1+HiYZNUe/xbCbdQ5Fs4fk8q/rJxWKreh4NpUBwEHDlOvh0oRz7DQVIiPqg q6YFEZj4rGgcfsBEV7DGtaLFGnEBEKpfaKEIEec/y3LmDlW/wUf2z331YwIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFOjNr8tJV0P+7Y47xFfIKT0k04blMB8GA1UdIwQY MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt NWRkNmUyMmViYWIwLzEvNk0ydnkwbFhRXzd0amp2RVY4Z3BQU1RUaHVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGfBggrBgEFBQcBBwEB/wSBjzCBjDA6BAIAATA0MAwDBAAF tGkDBAIFtGgDBAItgwADBAAtiAQwDAMEA01TyAMEAE1TygMEAFvQzAMEAMJ07TBO BAIAAjBIAwUDKgmHgAMFAyoPtwADBQMqD+kAAwUDKg/rAAMFAyoP7QADBQMqD/kA AwcAKhOkQAAHAwUAKhOkQQMFACoTpEUDBQAqE6RHMA0GCSqGSIb3DQEBCwUAA4IB AQCKNXPIDwaRltyefwVKxwgB633wv6lE12HXNP7VYVPg0cN1BrYi3MbjgQC84lZf tTyh+oy0FV1ZuDEmQ77WcFHMUK9KVbIhRPRewwxVyegNMmDG+wNeWq61vI8hMnyu CXtFO2VyC0C6tHx1956C6QnENwvnWofP4/9r9lyvfQf2dxCkexF9DWrWT8BUUwk8 +NdD7jqhwXEnewgqHL3w3ET+XYluLZ4hagbhjUn49RZwrMh0Mh1vnU2CSmtEPGw1 26VWUtx9lV7ZPh21kHllXKWhHKfgwgJvK5H9Way7vD0yho6j60bZj/B188vSPqKz g3h0zDirkYoIBD6/ye5azjBa -----END CERTIFICATE-----Generated at Sat Dec 13 08:17:13 2025 by rpki-client