This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/P6Hu77rVoMsKWEMsSUdxWSREav4.roa File: P6Hu77rVoMsKWEMsSUdxWSREav4.roa (raw, json) Hash identifier: gDrf7D7gOdXeAd8Bf5WWWbnmgqq0Sokb/iYbfZaux/8= Subject key identifier: 3F:A1:EE:EF:BA:D5:A0:CB:0A:58:43:2C:49:47:71:59:24:44:6A:FE Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019ACC3BFE15728F37AC5B780EEBBCB9C015 Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/P6Hu77rVoMsKWEMsSUdxWSREav4.roa Signing time: Fri 28 Nov 2025 20:51:14 +0000 ROA not before: Fri 28 Nov 2025 20:51:14 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 39238 IP address blocks: 147.45.52.0/22 maxlen: 22 147.45.56.0/22 maxlen: 22 147.45.80.0/22 maxlen: 22 193.233.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cc:3b:fe:15:72:8f:37:ac:5b:78:0e:eb:bc:b9:c0:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Nov 28 20:51:14 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3fa1eeefbad5a0cb0a58432c4947715924446afe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:b2:83:d3:65:b4:87:88:c2:f5:80:e7:a1:c0: 5e:08:47:af:68:59:cc:df:2f:43:d4:d5:c7:01:96: ce:9f:b5:06:93:0b:54:70:85:d1:42:04:37:1b:cd: 04:bd:b5:53:56:33:73:ad:e8:ad:1a:38:e8:50:93: e1:6e:f6:d4:24:54:65:05:0c:7d:6b:35:39:0d:9e: 52:df:6e:d9:4a:63:bc:a4:cb:e7:d6:e1:a8:71:85: 85:08:53:42:f6:1e:ff:90:eb:36:dc:08:3f:d9:02: d5:58:73:96:c9:1e:cb:cf:b9:2a:d0:e8:99:26:19: b9:8a:a6:e4:6a:87:30:f3:87:b7:7b:56:20:36:15: f8:96:47:1c:3b:62:4c:86:03:9c:55:f0:5a:65:de: 50:e2:86:52:7e:84:49:bb:dc:07:e4:48:51:72:a0: d9:67:32:f1:10:c3:67:9f:de:fb:b2:49:87:c4:a4: b8:7e:25:ca:66:3e:88:93:8c:ce:cb:29:26:aa:1b: c5:e5:7e:50:9a:ea:5e:c6:46:e1:d4:a3:c2:90:0c: d9:75:a0:10:25:87:16:58:cb:c8:13:ea:13:5f:88: 11:0e:aa:14:43:e5:3b:46:4c:3c:62:ec:ab:5a:54: e3:f8:67:53:16:02:6a:c1:b7:23:36:ff:de:0d:00: a4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:A1:EE:EF:BA:D5:A0:CB:0A:58:43:2C:49:47:71:59:24:44:6A:FE X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/P6Hu77rVoMsKWEMsSUdxWSREav4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.45.52.0-147.45.59.255 147.45.80.0/22 193.233.238.0/24 Signature Algorithm: sha256WithRSAEncryption 99:e6:69:f8:1b:7e:90:e0:da:0b:65:79:03:8e:5d:a5:0b:04: 3b:89:d7:00:11:d3:69:fe:b1:39:9e:f3:7f:ef:3e:7f:ea:81: af:61:81:6e:f7:19:eb:a6:76:b3:b8:a5:39:ff:09:24:da:f1: 89:e4:1a:50:c0:ec:e1:b3:93:b8:ee:3e:df:71:af:19:d7:e3: 7c:c2:07:7a:bd:cd:60:23:89:f6:82:3b:ba:17:91:f3:7e:d7: 84:6e:79:f7:59:47:34:49:9a:d7:8e:4e:ed:74:63:34:b3:dc: f5:95:20:ba:41:65:9e:2e:37:3f:cb:24:45:71:6c:8a:f3:f8: 8d:11:65:e8:c1:1e:3d:ee:10:55:d2:49:c3:72:08:6c:32:15: ed:32:d0:ea:15:b9:ac:47:16:55:96:71:9e:6d:69:82:c1:43: 12:63:5c:08:6b:c4:ed:bb:9c:89:c7:9c:5c:bb:e6:6c:b5:e8: 8f:d0:a3:18:60:61:23:0e:02:d2:90:9a:fb:b0:7c:39:10:02: 8c:6e:7b:25:d6:8e:92:63:2b:21:0c:9d:74:db:a6:04:a4:78: d9:50:3d:5b:6a:9e:53:95:ea:8a:3d:d2:bf:56:f4:d5:be:0a: e8:ac:1b:ca:cd:84:97:df:02:df:51:09:3b:a6:cb:cf:d7:3d: 37:5f:02:a4 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZrMO/4Vco83rFt4Duu8ucAVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjUxMTI4MjA1MTE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZmExZWVlZmJhZDVhMGNiMGE1ODQzMmM0OTQ3NzE1OTI0NDQ2YWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8LKD02W0h4jC9YDnocBeCEevaFnM 3y9D1NXHAZbOn7UGkwtUcIXRQgQ3G80EvbVTVjNzreitGjjoUJPhbvbUJFRlBQx9 azU5DZ5S327ZSmO8pMvn1uGocYWFCFNC9h7/kOs23Ag/2QLVWHOWyR7Lz7kq0OiZ Jhm5iqbkaocw84e3e1YgNhX4lkccO2JMhgOcVfBaZd5Q4oZSfoRJu9wH5EhRcqDZ ZzLxEMNnn977skmHxKS4fiXKZj6Ik4zOyykmqhvF5X5Qmupexkbh1KPCkAzZdaAQ JYcWWMvIE+oTX4gRDqoUQ+U7Rkw8YuyrWlTj+GdTFgJqwbcjNv/eDQCk6wIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFD+h7u+61aDLClhDLElHcVkkRGr+MB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvUDZIdTc3clZvTXNLV0VNc1NVZHhXU1JFYXY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAKTLTQD BAKTLTgDBAKTLVADBADB6e4wDQYJKoZIhvcNAQELBQADggEBAJnmafgbfpDg2gtl eQOOXaULBDuJ1wAR02n+sTme83/vPn/qga9hgW73GeumdrO4pTn/CSTa8YnkGlDA 7OGzk7juPt9xrxnX43zCB3q9zWAjifaCO7oXkfN+14RuefdZRzRJmteOTu10YzSz 3PWVILpBZZ4uNz/LJEVxbIrz+I0RZejBHj3uEFXSScNyCGwyFe0y0OoVuaxHFlWW cZ5taYLBQxJjXAhrxO27nInHnFy75my16I/QoxhgYSMOAtKQmvuwfDkQAoxueyXW jpJjKyEMnXTbpgSkeNlQPVtqnlOV6oo90r9W9NW+CuisG8rNhJffAt9RCTumy8/X PTdfAqQ= -----END CERTIFICATE-----Generated at Sat Dec 6 14:54:49 2025 by rpki-client