This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/61CDtae0iEHfRxLjCGUt_ZI6-T0.roa File: 61CDtae0iEHfRxLjCGUt_ZI6-T0.roa (raw, json) Hash identifier: 92EcHG9klR/kBjMtbcIjDDa9fPiiHqjMtQbWGDBFd20= Subject key identifier: EB:50:83:B5:A7:B4:88:41:DF:47:12:E3:08:65:2D:FD:92:3A:F9:3D Certificate issuer: /CN=b86ddabfc48952bee26d6d5f828831f596a154e9 Certificate serial: 019AEEBD3B1C33DF5F6CC6895C91474674CE Authority key identifier: B8:6D:DA:BF:C4:89:52:BE:E2:6D:6D:5F:82:88:31:F5:96:A1:54:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/61CDtae0iEHfRxLjCGUt_ZI6-T0.roa Signing time: Fri 05 Dec 2025 13:39:29 +0000 ROA not before: Fri 05 Dec 2025 13:39:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214829 IP address blocks: 185.19.42.0/24 maxlen: 24 2a14:59c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.crl rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:bd:3b:1c:33:df:5f:6c:c6:89:5c:91:47:46:74:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b86ddabfc48952bee26d6d5f828831f596a154e9 Validity Not Before: Dec 5 13:39:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=eb5083b5a7b48841df4712e308652dfd923af93d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:62:56:03:c3:69:6c:9a:c8:34:57:6f:f7:29: 3a:ef:f5:aa:96:f2:b1:25:65:47:f7:e6:31:64:83: 4b:36:56:37:ce:09:f7:25:2e:9f:12:b0:9f:f5:a6: 38:5d:1b:28:a7:11:83:a3:01:64:4c:d6:1d:4d:20: e0:b4:6b:e2:71:b3:09:67:40:93:0a:da:bc:7b:78: 67:19:d0:8a:b3:9e:2b:d6:e4:b5:0c:23:a2:81:ae: c7:5f:da:ad:75:8b:2a:c2:97:5e:2b:66:46:29:d0: 00:a7:b5:b8:24:68:75:c1:99:1c:40:43:4d:b9:53: 61:83:01:b0:81:1f:22:09:0b:fc:20:3c:72:e0:3d: 0c:dd:c6:53:13:7d:e7:78:21:22:6e:95:74:a0:26: b5:c6:75:e9:c9:96:3d:ad:fa:ba:89:a2:22:6f:5c: ee:79:a0:db:e7:95:0d:54:a1:4b:ec:70:ca:77:ae: a1:7a:e5:d0:b9:0c:82:4e:68:58:89:a5:7d:e7:47: c0:e2:5d:04:13:69:4d:ce:d8:1a:1b:7f:90:d3:c6: 47:c2:8d:5a:d1:06:59:8c:dd:e2:53:25:cd:52:e1: 51:8c:7b:da:93:92:ea:b2:93:e1:77:6c:fb:b2:8c: 50:a3:78:f6:63:37:1f:83:df:1d:f4:0d:fd:dd:03: a0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:50:83:B5:A7:B4:88:41:DF:47:12:E3:08:65:2D:FD:92:3A:F9:3D X509v3 Authority Key Identifier: keyid:B8:6D:DA:BF:C4:89:52:BE:E2:6D:6D:5F:82:88:31:F5:96:A1:54:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/61CDtae0iEHfRxLjCGUt_ZI6-T0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.19.42.0/24 IPv6: 2a14:59c0::/29 Signature Algorithm: sha256WithRSAEncryption d7:ea:88:1c:b7:da:6a:72:c3:23:46:d6:8c:35:27:ae:a1:a6: e0:c5:83:ec:26:27:ac:e7:a2:95:ad:ab:68:2b:82:58:f9:11: 11:4e:41:a6:08:e8:81:2d:54:ab:40:17:34:e5:c3:76:d3:29: 8b:a6:5d:5d:47:87:f7:08:99:4c:79:df:2f:0e:de:0b:27:1c: c6:28:2a:83:91:fa:30:f5:22:82:e6:31:4f:71:fa:da:0f:c0: 27:c3:43:eb:29:99:16:19:24:a8:95:1f:af:b6:96:4d:97:d7: 7c:8f:62:aa:28:45:5c:98:48:a6:9e:0b:24:a2:44:e3:4d:1c: 43:1a:37:0f:3d:f9:46:44:b0:58:9f:bd:88:4c:da:26:23:8e: 3c:be:9b:08:81:da:a9:95:01:65:6b:5d:be:84:ed:bd:a4:00: eb:ff:93:8e:62:47:d6:f5:cf:da:27:50:98:67:b9:64:19:61: 28:e0:87:28:ab:50:24:11:9c:a7:43:fd:f6:5e:3a:d6:e0:79: a7:5a:e7:04:aa:64:c6:86:d5:9c:7f:c4:c9:7e:89:f9:96:aa: af:dc:6d:7b:2f:79:9b:4e:37:6b:c6:74:df:e9:27:ac:24:dd: a4:3e:98:4f:fb:86:cf:25:25:70:13:2d:ed:f6:f5:ba:bc:ed: 54:b1:b2:fe -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZruvTscM99fbMaJXJFHRnTOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NmRkYWJmYzQ4OTUyYmVlMjZkNmQ1ZjgyODgzMWY1OTZh MTU0ZTkwHhcNMjUxMjA1MTMzOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjUwODNiNWE3YjQ4ODQxZGY0NzEyZTMwODY1MmRmZDkyM2FmOTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGJWA8NpbJrINFdv9yk67/WqlvKx JWVH9+YxZINLNlY3zgn3JS6fErCf9aY4XRsopxGDowFkTNYdTSDgtGvicbMJZ0CT Ctq8e3hnGdCKs54r1uS1DCOiga7HX9qtdYsqwpdeK2ZGKdAAp7W4JGh1wZkcQENN uVNhgwGwgR8iCQv8IDxy4D0M3cZTE33neCEibpV0oCa1xnXpyZY9rfq6iaIib1zu eaDb55UNVKFL7HDKd66heuXQuQyCTmhYiaV950fA4l0EE2lNztgaG3+Q08ZHwo1a 0QZZjN3iUyXNUuFRjHvak5LqspPhd2z7soxQo3j2Yzcfg98d9A393QOgIQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOtQg7WntIhB30cS4whlLf2SOvk9MB8GA1UdIwQY MBaAFLht2r/EiVK+4m1tX4KIMfWWoVTpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUczYXY4U0pVcjdpYlcxZmdvZ3g5WmFoVk9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy82Njc5ZjQtOTE2NS00YThiLTg4OTIt N2RlYThmZmYyZTA4LzEvNjFDRHRhZTBpRUhmUnhMakNHVXRfWkk2LVQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy82Njc5ZjQtOTE2NS00YThiLTg4OTItN2RlYThmZmYyZTA4 LzEvdUczYXY4U0pVcjdpYlcxZmdvZ3g5WmFoVk9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuRMqMA0E AgACMAcDBQMqFFnAMA0GCSqGSIb3DQEBCwUAA4IBAQDX6ogct9pqcsMjRtaMNSeu oabgxYPsJies56KVratoK4JY+RERTkGmCOiBLVSrQBc05cN20ymLpl1dR4f3CJlM ed8vDt4LJxzGKCqDkfow9SKC5jFPcfraD8Anw0PrKZkWGSSolR+vtpZNl9d8j2Kq KEVcmEimngskokTjTRxDGjcPPflGRLBYn72ITNomI448vpsIgdqplQFla12+hO29 pADr/5OOYkfW9c/aJ1CYZ7lkGWEo4Icoq1AkEZynQ/32XjrW4HmnWucEqmTGhtWc f8TJfon5lqqv3G17L3mbTjdrxnTf6SesJN2kPphP+4bPJSVwEy3t9vW6vO1UsbL+ -----END CERTIFICATE-----Generated at Sun Dec 7 07:31:21 2025 by rpki-client