This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/6Z4b57MPwkhXcs7J77Og5ggNHxk.roa File: 6Z4b57MPwkhXcs7J77Og5ggNHxk.roa (raw, json) Hash identifier: dJBszKW/oW+tRw8WTxNJkgV8kHFKswAFFpUPQ986IzE= Subject key identifier: E9:9E:1B:E7:B3:0F:C2:48:57:72:CE:C9:EF:B3:A0:E6:08:0D:1F:19 Certificate issuer: /CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208 Certificate serial: 019B2242E9F352F643184D1336EE98889A10 Authority key identifier: F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/6Z4b57MPwkhXcs7J77Og5ggNHxk.roa Signing time: Mon 15 Dec 2025 13:46:09 +0000 ROA not before: Mon 15 Dec 2025 13:46:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16247 IP address blocks: 194.145.240.0/24 maxlen: 24 194.145.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:42:e9:f3:52:f6:43:18:4d:13:36:ee:98:88:9a:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208 Validity Not Before: Dec 15 13:46:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e99e1be7b30fc2485772cec9efb3a0e6080d1f19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:1d:87:fa:15:ad:2a:91:21:64:e6:25:31:2d: 97:8a:46:3d:fe:25:af:42:21:5f:19:87:1a:f6:91: 30:25:ee:2d:e2:0b:8d:f6:ed:c7:00:5c:02:ea:10: 55:9f:30:a6:ae:2b:7e:72:26:ad:e1:9a:3c:b6:bb: 2d:d7:8a:36:bf:cf:01:bb:3e:d2:44:98:9d:ac:0d: 62:76:25:a5:89:8b:89:ed:ba:33:cf:2b:27:e8:31: 2a:bc:cf:36:cf:d6:61:64:2f:7f:72:e1:32:aa:3d: 35:02:36:20:bc:de:d6:26:f4:c0:f5:34:1f:5a:1e: fa:22:d7:e7:2d:07:1a:f5:4b:dc:f7:fb:6f:23:f2: 22:fa:99:04:69:eb:53:45:4b:d5:e2:a0:a8:d5:b6: f9:9d:12:27:43:ff:04:e5:49:01:5e:68:e0:3e:6e: a1:ee:72:43:22:a0:3d:19:14:91:a7:e2:13:7b:39: 45:50:bc:e9:e6:f3:4d:b8:73:b7:37:1a:85:3b:c7: 95:f2:9b:64:fb:c0:06:06:b5:57:2a:cd:e4:bd:c9: c8:d0:54:f5:cf:8b:60:f0:c0:f1:3a:c5:fb:2d:a2: e5:f2:e3:08:3d:db:b4:29:59:d7:1b:8b:eb:10:00: 43:d0:32:a8:cf:a3:9d:c7:2d:19:ba:9c:0b:a7:f8: 10:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:9E:1B:E7:B3:0F:C2:48:57:72:CE:C9:EF:B3:A0:E6:08:0D:1F:19 X509v3 Authority Key Identifier: keyid:F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/6Z4b57MPwkhXcs7J77Og5ggNHxk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.145.240.0/23 Signature Algorithm: sha256WithRSAEncryption 75:72:1a:95:71:14:7c:68:f9:61:5f:c9:8c:2e:9d:03:7a:da: 95:89:bd:84:93:f2:9e:12:0c:d7:c2:77:6f:4c:ea:44:a9:2a: f6:4f:70:67:f6:64:d8:9e:8e:55:e4:9f:f0:9f:1b:b7:02:dc: a1:6a:c2:7e:ac:8f:94:6f:fe:36:5b:ff:fd:0f:cd:4a:ee:78: 66:18:fa:08:5c:8f:93:dd:7e:02:d9:6b:92:80:05:e6:43:9e: af:d1:e6:0e:35:7a:54:7e:89:2a:19:2c:71:c2:ea:9e:99:52: 4b:b7:31:f9:8d:a2:79:9f:5f:b1:b5:0f:e2:21:3e:10:c7:e0: f8:96:18:9a:75:58:fb:34:e5:3e:26:c0:9c:85:60:72:83:0b: f7:84:e2:c2:fd:5a:16:63:bc:d5:be:81:65:09:33:b1:9a:84: af:e0:aa:d3:f0:93:d0:71:ba:08:89:66:b9:92:7c:6c:6c:3c: 26:2f:64:e8:84:0a:e2:38:9a:41:f2:b8:0c:45:75:a1:f2:f9: ac:77:f1:c3:20:3b:07:e6:a9:3f:43:e2:5e:60:07:86:10:4d: ba:c0:3b:b8:29:e1:84:96:68:9b:2f:e7:ff:b9:ce:ee:37:33: bc:db:89:82:55:98:ca:c6:49:60:4f:a6:dc:b0:78:24:51:63: b3:aa:39:77 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZsiQunzUvZDGE0TNu6YiJoQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YWU5ODgxYmYxMTIwOThhMmJmZDQ5YTBiY2ZmZGNjY2U3 YmMyMDgwHhcNMjUxMjE1MTM0NjA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTllMWJlN2IzMGZjMjQ4NTc3MmNlYzllZmIzYTBlNjA4MGQxZjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAix2H+hWtKpEhZOYlMS2XikY9/iWv QiFfGYca9pEwJe4t4guN9u3HAFwC6hBVnzCmrit+ciat4Zo8trst14o2v88Buz7S RJidrA1idiWliYuJ7bozzysn6DEqvM82z9ZhZC9/cuEyqj01AjYgvN7WJvTA9TQf Wh76ItfnLQca9Uvc9/tvI/Ii+pkEaetTRUvV4qCo1bb5nRInQ/8E5UkBXmjgPm6h 7nJDIqA9GRSRp+ITezlFULzp5vNNuHO3NxqFO8eV8ptk+8AGBrVXKs3kvcnI0FT1 z4tg8MDxOsX7LaLl8uMIPdu0KVnXG4vrEABD0DKoz6Odxy0ZupwLp/gQrwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFOmeG+ezD8JIV3LOye+zoOYIDR8ZMB8GA1UdIwQY MBaAFPiumIG/ESCYor/UmgvP/czOe8IIMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LNllnYjhSSUppaXY5U2FDOF85ek01N3dnZy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvNWQ5ZjU3LTBmMTAtNGUxNC1iNGFm LTI1YTE1YTUyNGY4Ny8xLzZaNGI1N01Qd2toWGNzN0o3N09nNWdnTkh4ay5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMTQvNWQ5ZjU3LTBmMTAtNGUxNC1iNGFmLTI1YTE1YTUyNGY4 Ny8xLzEtSzZZZ2I4UklKaWl2OVNhQzhfOXpNNTd3Z2cuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHCkfAw DQYJKoZIhvcNAQELBQADggEBAHVyGpVxFHxo+WFfyYwunQN62pWJvYST8p4SDNfC d29M6kSpKvZPcGf2ZNiejlXkn/CfG7cC3KFqwn6sj5Rv/jZb//0PzUrueGYY+ghc j5PdfgLZa5KABeZDnq/R5g41elR+iSoZLHHC6p6ZUku3MfmNonmfX7G1D+IhPhDH 4PiWGJp1WPs05T4mwJyFYHKDC/eE4sL9WhZjvNW+gWUJM7GahK/gqtPwk9BxugiJ ZrmSfGxsPCYvZOiECuI4mkHyuAxFdaHy+ax38cMgOwfmqT9D4l5gB4YQTbrAO7gp 4YSWaJsv5/+5zu43M7zbiYJVmMrGSWBPptyweCRRY7OqOXc= -----END CERTIFICATE-----Generated at Thu Dec 18 20:01:14 2025 by rpki-client