This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/bU6GT3ku3p0MR6dR8VEIPVRff1A.roa File: bU6GT3ku3p0MR6dR8VEIPVRff1A.roa (raw, json) Hash identifier: Ggx8XIhx0sf2q0IA6wlbNX4vA755P9SRAXjjwL+vg/w= Subject key identifier: 6D:4E:86:4F:79:2E:DE:9D:0C:47:A7:51:F1:51:08:3D:54:5F:7F:50 Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Certificate serial: 019B02205FB401C9E37DF47A54A10C996C42 Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/bU6GT3ku3p0MR6dR8VEIPVRff1A.roa Signing time: Tue 09 Dec 2025 08:00:34 +0000 ROA not before: Tue 09 Dec 2025 08:00:34 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9304 IP address blocks: 2.59.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:02:20:5f:b4:01:c9:e3:7d:f4:7a:54:a1:0c:99:6c:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Validity Not Before: Dec 9 08:00:34 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6d4e864f792ede9d0c47a751f151083d545f7f50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:69:86:0d:e5:d8:01:41:6d:0d:6c:22:25:60: fd:69:fd:f6:c9:d7:64:67:62:ce:29:99:69:43:5b: d2:4a:3e:7b:4a:6e:3f:3e:3e:5c:53:7d:e1:50:c6: 71:d9:47:50:ea:89:01:ae:e2:73:8c:e2:42:b9:60: ed:d7:b2:fe:63:20:08:c9:4c:99:6b:82:c2:48:ac: 16:37:1b:17:89:c2:6b:10:ed:2a:3b:c2:1a:58:36: 72:b6:99:4c:21:44:cb:96:a2:1d:55:09:6b:0d:40: 09:e9:0a:f4:73:eb:d5:27:74:55:01:e5:f9:dd:ed: 96:22:3b:1d:90:1d:ed:b1:03:09:b5:1f:a2:38:6c: b6:07:42:ba:47:04:4c:6b:2b:34:33:8d:3f:85:49: 29:de:a2:a2:af:c6:01:70:53:0f:58:ff:2a:1d:31: f2:9b:05:ab:79:2b:48:03:a4:34:b3:ea:2b:4d:27: 0b:2e:5e:77:9e:69:25:ad:db:80:8b:ea:31:c8:81: 1c:ae:0a:01:50:3a:18:97:1b:bd:74:c5:c2:ba:d5: 1c:7d:d0:46:36:bc:2e:db:d7:10:5c:c3:1f:c5:90: d2:2a:fc:3f:35:6a:9d:a9:90:4f:d0:f1:e6:9a:8d: 65:ce:b8:8b:b1:ef:1c:f5:18:0d:74:23:ca:61:78: 76:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:4E:86:4F:79:2E:DE:9D:0C:47:A7:51:F1:51:08:3D:54:5F:7F:50 X509v3 Authority Key Identifier: keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/bU6GT3ku3p0MR6dR8VEIPVRff1A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.180.0/24 Signature Algorithm: sha256WithRSAEncryption 69:76:d9:9c:69:b9:04:97:df:61:c5:40:12:76:b7:3c:f4:f9: 07:6e:e0:c0:c3:c2:26:a6:b7:53:a1:f9:25:45:2b:46:af:10: 64:71:b3:70:8c:48:5a:f7:94:10:ac:53:a8:f9:d2:aa:50:e0: 60:87:f1:37:1c:44:ec:c5:cc:60:98:8a:a8:84:a7:5f:92:95: 25:46:9b:b2:13:2f:e2:7f:4d:75:fb:21:ad:3f:d6:9d:10:84: 25:ed:e8:4d:3b:f4:df:ec:58:40:5b:0c:fb:8a:60:f0:d6:ee: 0f:b9:01:28:49:ba:24:a3:50:74:97:65:0c:b4:92:87:00:76: e2:8d:5c:e9:38:76:a3:07:0b:9f:93:b6:85:5f:1c:38:86:70: 63:5a:3e:bf:47:a1:9a:dc:b1:c2:76:93:e5:89:e8:b7:a6:19: 91:d2:69:84:8c:be:e0:fd:23:c0:19:34:6b:ed:40:f8:9d:13: 58:61:21:04:b0:e2:4b:3b:f6:b4:51:33:cb:ed:0b:1f:46:3a: 10:63:4d:ec:dd:1c:ba:00:b5:37:a2:14:7f:bd:40:60:5a:53: 3d:84:65:e9:79:df:6e:16:4f:46:e7:0b:da:ee:4e:89:f8:84: 24:51:01:7b:b4:71:95:a9:64:4b:38:8b:6a:7c:5b:93:bc:9b: 25:01:3c:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsCIF+0AcnjffR6VKEMmWxCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhN2YwMzZlMjU5MjM5MWZiNDVhM2RkMzNjYWYwYjA3OTU2 OTczY2YwHhcNMjUxMjA5MDgwMDM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDRlODY0Zjc5MmVkZTlkMGM0N2E3NTFmMTUxMDgzZDU0NWY3ZjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8GmGDeXYAUFtDWwiJWD9af32yddk Z2LOKZlpQ1vSSj57Sm4/Pj5cU33hUMZx2UdQ6okBruJzjOJCuWDt17L+YyAIyUyZ a4LCSKwWNxsXicJrEO0qO8IaWDZytplMIUTLlqIdVQlrDUAJ6Qr0c+vVJ3RVAeX5 3e2WIjsdkB3tsQMJtR+iOGy2B0K6RwRMays0M40/hUkp3qKir8YBcFMPWP8qHTHy mwWreStIA6Q0s+orTScLLl53nmklrduAi+oxyIEcrgoBUDoYlxu9dMXCutUcfdBG Nrwu29cQXMMfxZDSKvw/NWqdqZBP0PHmmo1lzriLse8c9RgNdCPKYXh2UQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG1Ohk95Lt6dDEenUfFRCD1UX39QMB8GA1UdIwQY MBaAFBp/A24lkjkftFo90zyvCweVaXPPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2It MzQwZDYyNWM2ZGJhLzEvYlU2R1Qza3UzcDBNUjZkUjhWRUlQVlJmZjFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2ItMzQwZDYyNWM2ZGJh LzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAju0MA0G CSqGSIb3DQEBCwUAA4IBAQBpdtmcabkEl99hxUASdrc89PkHbuDAw8ImprdTofkl RStGrxBkcbNwjEha95QQrFOo+dKqUOBgh/E3HETsxcxgmIqohKdfkpUlRpuyEy/i f011+yGtP9adEIQl7ehNO/Tf7FhAWwz7imDw1u4PuQEoSboko1B0l2UMtJKHAHbi jVzpOHajBwufk7aFXxw4hnBjWj6/R6Ga3LHCdpPliei3phmR0mmEjL7g/SPAGTRr 7UD4nRNYYSEEsOJLO/a0UTPL7QsfRjoQY03s3Ry6ALU3ohR/vUBgWlM9hGXped9u Fk9G5wva7k6J+IQkUQF7tHGVqWRLOItqfFuTvJslATwp -----END CERTIFICATE-----Generated at Thu Dec 11 03:50:41 2025 by rpki-client