This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/6WAg8JrDfDvaRdqnJoreTiAMqjo.roa File: 6WAg8JrDfDvaRdqnJoreTiAMqjo.roa (raw, json) Hash identifier: UPvZw2SufTUPSG/smPYEJeeJol9ZJRChCX3XNigGkpQ= Subject key identifier: E9:60:20:F0:9A:C3:7C:3B:DA:45:DA:A7:26:8A:DE:4E:20:0C:AA:3A Certificate issuer: /CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8 Certificate serial: 019AEDBB0B53DD3A82F624E073E244F2771F Authority key identifier: 31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/6WAg8JrDfDvaRdqnJoreTiAMqjo.roa Signing time: Fri 05 Dec 2025 08:57:29 +0000 ROA not before: Fri 05 Dec 2025 08:57:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 199837 IP address blocks: 185.44.212.0/22 maxlen: 22 185.128.148.0/22 maxlen: 22 2a04:9f00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ed:bb:0b:53:dd:3a:82:f6:24:e0:73:e2:44:f2:77:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8 Validity Not Before: Dec 5 08:57:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e96020f09ac37c3bda45daa7268ade4e200caa3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1c:cf:c8:6b:be:77:f9:37:28:82:01:46:5f: 22:81:72:49:5b:c9:be:ee:74:80:17:67:7e:6b:f1: 24:c5:cd:41:bb:b6:b5:b8:b0:5e:ed:dd:ac:a1:80: 10:d1:5d:a7:7b:be:79:b2:d8:6e:7a:83:03:77:66: 18:21:27:06:02:68:fd:74:69:a2:09:02:a4:80:29: 36:9d:06:88:c3:f0:d2:89:ba:bf:1e:03:37:9b:5f: 49:11:78:53:5b:b7:86:66:e6:7f:94:13:4f:05:c6: a8:df:10:92:c6:1e:d0:91:08:52:23:47:47:ce:80: eb:b2:e7:e1:f5:7d:42:4f:48:e9:dc:fa:a9:c3:bb: d7:24:dd:aa:98:2e:fd:a2:b0:6a:4c:d4:cb:47:f7: 93:1b:7f:9b:be:10:a7:df:10:65:bf:39:c8:84:b2: 22:95:df:f3:ac:1c:40:14:bd:f3:ab:d0:e3:a7:fe: 11:21:4f:ba:20:54:b9:b2:da:5e:ac:2a:03:53:ab: ff:c2:0f:ba:2e:d5:7a:e1:50:31:e8:c4:54:f8:b9: 9a:b5:ea:4d:cd:61:07:90:c2:14:e4:1e:e3:9b:20: 7a:18:b1:34:91:98:8c:8d:2d:e1:f0:92:46:cd:c1: a6:55:c2:c9:90:b1:50:0a:5b:44:8b:d9:5d:66:f5: bb:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:60:20:F0:9A:C3:7C:3B:DA:45:DA:A7:26:8A:DE:4E:20:0C:AA:3A X509v3 Authority Key Identifier: keyid:31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/6WAg8JrDfDvaRdqnJoreTiAMqjo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.44.212.0/22 185.128.148.0/22 IPv6: 2a04:9f00::/29 Signature Algorithm: sha256WithRSAEncryption 26:0d:ff:3b:41:8a:71:e0:1d:c2:9c:1b:d4:57:61:2d:bd:61: ee:c2:8e:4a:f6:ab:e0:23:94:5f:4f:f6:97:ad:c9:3a:b6:16: b0:1b:bc:00:4e:25:3a:b3:0c:24:f0:49:2a:b6:f9:df:68:aa: 6c:77:a8:36:c4:29:e8:00:f4:70:28:f8:9e:3a:db:03:a7:6f: 67:53:75:48:e7:86:fb:08:67:3c:3b:a1:6b:16:01:77:7e:15: 70:93:27:e6:59:e0:fa:7d:ba:5c:84:5a:e7:1c:c7:3d:10:a5: b5:e0:f0:51:4a:bb:33:e0:76:be:a5:33:96:47:1d:78:4d:35: fb:4c:9e:d2:cf:9f:0f:4f:ab:a7:b6:20:c3:2f:02:b0:1f:ce: 36:a5:10:d9:54:13:46:86:a7:0d:64:8a:e6:f7:8a:53:b6:ac: 39:7f:75:b1:35:e0:fd:9e:d1:9d:f0:c5:f6:13:bd:9f:7e:58: f0:4e:3b:bc:eb:da:7c:b6:be:ac:f1:a2:14:26:63:4a:47:87: d0:0e:d8:b6:bb:2b:d3:3c:55:06:62:1a:c1:9f:b7:58:bb:6c: d0:6a:d5:f9:68:8a:98:ba:0e:3b:4d:b0:80:de:a5:1e:bb:09: 65:84:ba:fc:53:04:44:97:e3:9e:d3:b9:5b:24:56:89:e8:cb: b5:5d:b6:95 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZrtuwtT3TqC9iTgc+JE8ncfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxYjBmNjRjNjlkMzMwYjY2ZWJjZDAzYTliZjBmZGMxOWYz MTQ3ZDgwHhcNMjUxMjA1MDg1NzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTYwMjBmMDlhYzM3YzNiZGE0NWRhYTcyNjhhZGU0ZTIwMGNhYTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hzPyGu+d/k3KIIBRl8igXJJW8m+ 7nSAF2d+a/Ekxc1Bu7a1uLBe7d2soYAQ0V2ne755sthueoMDd2YYIScGAmj9dGmi CQKkgCk2nQaIw/DSibq/HgM3m19JEXhTW7eGZuZ/lBNPBcao3xCSxh7QkQhSI0dH zoDrsufh9X1CT0jp3Pqpw7vXJN2qmC79orBqTNTLR/eTG3+bvhCn3xBlvznIhLIi ld/zrBxAFL3zq9Djp/4RIU+6IFS5stperCoDU6v/wg+6LtV64VAx6MRU+LmatepN zWEHkMIU5B7jmyB6GLE0kZiMjS3h8JJGzcGmVcLJkLFQCltEi9ldZvW7JwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFOlgIPCaw3w72kXapyaK3k4gDKo6MB8GA1UdIwQY MBaAFDGw9kxp0zC2brzQOpvw/cGfMUfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWJEMlRHblRNTFp1dk5BNm1fRDl3Wjh4UjlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yZmI0NzMtOGU2Yi00ZjBkLWFkMzAt ZDQ5MzQ0OTNhNjc5LzEvNldBZzhKckRmRHZhUmRxbkpvcmVUaUFNcWpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8yZmI0NzMtOGU2Yi00ZjBkLWFkMzAtZDQ5MzQ0OTNhNjc5 LzEvTWJEMlRHblRNTFp1dk5BNm1fRDl3Wjh4UjlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuSzUAwQC uYCUMA0EAgACMAcDBQMqBJ8AMA0GCSqGSIb3DQEBCwUAA4IBAQAmDf87QYpx4B3C nBvUV2EtvWHuwo5K9qvgI5RfT/aXrck6thawG7wATiU6swwk8EkqtvnfaKpsd6g2 xCnoAPRwKPieOtsDp29nU3VI54b7CGc8O6FrFgF3fhVwkyfmWeD6fbpchFrnHMc9 EKW14PBRSrsz4Ha+pTOWRx14TTX7TJ7Sz58PT6untiDDLwKwH842pRDZVBNGhqcN ZIrm94pTtqw5f3WxNeD9ntGd8MX2E72ffljwTju869p8tr6s8aIUJmNKR4fQDti2 uyvTPFUGYhrBn7dYu2zQatX5aIqYug47TbCA3qUeuwllhLr8UwREl+Oe07lbJFaJ 6Mu1XbaV -----END CERTIFICATE-----Generated at Sat Dec 6 23:30:34 2025 by rpki-client