This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/6Fg7wtAwutmcLUzAjmzQTBDc-14.roa File: 6Fg7wtAwutmcLUzAjmzQTBDc-14.roa (raw, json) Hash identifier: cgk4tzeyjppTkUWpcIbNvFnqDx/8dz1BTIJGLNKeMY4= Subject key identifier: E8:58:3B:C2:D0:30:BA:D9:9C:2D:4C:C0:8E:6C:D0:4C:10:DC:FB:5E Certificate issuer: /CN=a3be74d7d6b37644c01bed55e0db31464b9860c6 Certificate serial: 019AEA0ECBE33AB27C061F0DB915A68EAF0D Authority key identifier: A3:BE:74:D7:D6:B3:76:44:C0:1B:ED:55:E0:DB:31:46:4B:98:60:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o75019azdkTAG-1V4NsxRkuYYMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/6Fg7wtAwutmcLUzAjmzQTBDc-14.roa Signing time: Thu 04 Dec 2025 15:50:29 +0000 ROA not before: Thu 04 Dec 2025 15:50:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204731 IP address blocks: 185.241.224.0/22 maxlen: 22 185.241.224.0/23 maxlen: 23 185.241.226.0/23 maxlen: 23 2a0c:b381::/32 maxlen: 32 2a0c:b381:500::/40 maxlen: 40 2a0c:b381:700::/40 maxlen: 40 2a0c:b381:800::/40 maxlen: 40 2a0c:b381:900::/40 maxlen: 40 2a0c:b381:a00::/40 maxlen: 40 2a0c:b381:b00::/40 maxlen: 40 2a0c:b381:d00::/40 maxlen: 40 2a0c:b381:e00::/40 maxlen: 40 2a0c:b381:f00::/40 maxlen: 40 2a0c:b381:1000::/40 maxlen: 40 2a0c:b381:1100::/40 maxlen: 40 2a0c:b381:1200::/40 maxlen: 40 2a0c:b381:1300::/40 maxlen: 40 2a0c:b381:1400::/40 maxlen: 40 2a0c:b381:1500::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.crl rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.mft rsync://rpki.ripe.net/repository/DEFAULT/o75019azdkTAG-1V4NsxRkuYYMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ea:0e:cb:e3:3a:b2:7c:06:1f:0d:b9:15:a6:8e:af:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3be74d7d6b37644c01bed55e0db31464b9860c6 Validity Not Before: Dec 4 15:50:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e8583bc2d030bad99c2d4cc08e6cd04c10dcfb5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c8:80:6c:f6:fb:54:e5:77:1d:98:b4:ac:a5: 9d:c6:b3:cb:4b:d8:40:98:16:da:20:dc:47:8b:6a: e6:b6:cb:eb:77:a9:5e:5c:11:6b:aa:f7:eb:b2:ee: 68:43:e1:d9:0a:0f:f9:dd:f7:54:08:03:24:8b:7a: 52:3d:8b:8f:44:2f:48:d3:9e:0b:1a:f9:8f:e0:a3: 73:4b:4a:08:cc:a6:88:f3:7d:94:20:0f:89:7e:1d: f7:85:59:97:8f:a6:ea:b2:14:b3:19:cb:10:9f:5a: 3d:52:b6:84:50:a2:30:c9:d6:10:9f:31:41:a7:78: 79:0e:69:38:8d:83:b9:19:5a:91:36:55:28:db:11: 9c:35:fc:2d:fa:8c:45:85:6c:52:5a:fb:61:d9:52: 32:96:3c:21:f8:8f:8e:92:ec:d8:e0:c7:15:6c:2c: f9:ea:8e:9c:5b:e4:19:b0:46:57:2d:31:62:97:a7: db:94:10:c9:06:70:41:5e:0a:67:33:bc:37:81:74: 9c:6e:51:81:0e:f4:c9:e5:b8:14:3c:60:dd:c3:e2: d2:67:15:34:31:e5:d7:9b:ae:c3:94:3c:78:c2:4d: 9c:0d:4c:04:e5:4a:46:9b:d4:96:bd:b7:b3:4f:a7: 09:91:83:9c:0c:f0:2b:d4:78:81:84:08:09:96:f4: 65:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:58:3B:C2:D0:30:BA:D9:9C:2D:4C:C0:8E:6C:D0:4C:10:DC:FB:5E X509v3 Authority Key Identifier: keyid:A3:BE:74:D7:D6:B3:76:44:C0:1B:ED:55:E0:DB:31:46:4B:98:60:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o75019azdkTAG-1V4NsxRkuYYMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/6Fg7wtAwutmcLUzAjmzQTBDc-14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.241.224.0/22 IPv6: 2a0c:b381::/32 Signature Algorithm: sha256WithRSAEncryption 76:be:b6:5a:13:26:29:9d:6c:8a:bd:5c:43:75:36:e0:af:f5: 6e:6f:81:7a:a6:24:c0:b0:7a:2f:6b:46:63:14:00:4c:b2:63: 6c:be:3c:19:c2:84:70:63:aa:fe:79:aa:c8:55:69:bd:c8:08: 0e:6c:26:de:f9:1e:7c:b9:7e:a8:f0:01:5c:de:55:d0:e5:20: 33:28:d2:14:9d:df:ad:65:1a:ff:dd:12:df:21:25:1b:d9:cb: fc:11:e8:9e:b6:a6:c5:8a:cb:62:a6:4c:40:de:45:1c:ea:55: 13:62:45:fa:a2:e4:0e:0b:63:95:d0:cb:9e:41:e4:4b:07:d1: 18:91:3d:99:cc:26:53:d2:a3:05:8a:95:d3:fb:62:3f:08:17: 90:5a:d8:b6:18:ee:32:80:cc:9c:3a:75:af:2b:74:77:a1:12: ce:72:54:67:09:a9:ce:b8:65:22:49:b8:78:52:29:f9:eb:f8: 11:46:2b:98:c9:ca:17:69:23:2f:7a:54:eb:13:cd:a0:8d:c4: aa:ed:83:aa:8e:e5:00:6f:e5:af:62:d0:07:ff:ba:4a:5d:0f: 29:6f:fc:db:ea:87:79:5b:d4:e3:04:6f:ae:02:eb:c8:e4:db: 44:0b:1d:57:a4:a0:86:e2:5d:04:7f:1e:e7:e8:59:9d:40:7b: f2:ce:90:c8 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZrqDsvjOrJ8Bh8NuRWmjq8NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzYmU3NGQ3ZDZiMzc2NDRjMDFiZWQ1NWUwZGIzMTQ2NGI5 ODYwYzYwHhcNMjUxMjA0MTU1MDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODU4M2JjMmQwMzBiYWQ5OWMyZDRjYzA4ZTZjZDA0YzEwZGNmYjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlciAbPb7VOV3HZi0rKWdxrPLS9hA mBbaINxHi2rmtsvrd6leXBFrqvfrsu5oQ+HZCg/53fdUCAMki3pSPYuPRC9I054L GvmP4KNzS0oIzKaI832UIA+Jfh33hVmXj6bqshSzGcsQn1o9UraEUKIwydYQnzFB p3h5Dmk4jYO5GVqRNlUo2xGcNfwt+oxFhWxSWvth2VIyljwh+I+OkuzY4McVbCz5 6o6cW+QZsEZXLTFil6fblBDJBnBBXgpnM7w3gXScblGBDvTJ5bgUPGDdw+LSZxU0 MeXXm67DlDx4wk2cDUwE5UpGm9SWvbezT6cJkYOcDPAr1HiBhAgJlvRlTQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOhYO8LQMLrZnC1MwI5s0EwQ3PteMB8GA1UdIwQY MBaAFKO+dNfWs3ZEwBvtVeDbMUZLmGDGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzc1MDE5YXpka1RBRy0xVjROc3hSa3VZWU1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi85NjFhY2EtZjQyNS00ODg3LWFmNGEt Y2ZhMDYxMDMwMzQ2LzEvNkZnN3d0QXd1dG1jTFV6QWptelFUQkRjLTE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi85NjFhY2EtZjQyNS00ODg3LWFmNGEtY2ZhMDYxMDMwMzQ2 LzEvbzc1MDE5YXpka1RBRy0xVjROc3hSa3VZWU1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCufHgMA0E AgACMAcDBQAqDLOBMA0GCSqGSIb3DQEBCwUAA4IBAQB2vrZaEyYpnWyKvVxDdTbg r/Vub4F6piTAsHova0ZjFABMsmNsvjwZwoRwY6r+earIVWm9yAgObCbe+R58uX6o 8AFc3lXQ5SAzKNIUnd+tZRr/3RLfISUb2cv8EeietqbFistipkxA3kUc6lUTYkX6 ouQOC2OV0MueQeRLB9EYkT2ZzCZT0qMFipXT+2I/CBeQWti2GO4ygMycOnWvK3R3 oRLOclRnCanOuGUiSbh4Uin56/gRRiuYycoXaSMvelTrE82gjcSq7YOqjuUAb+Wv YtAH/7pKXQ8pb/zb6od5W9TjBG+uAuvI5NtECx1XpKCG4l0Efx7n6FmdQHvyzpDI -----END CERTIFICATE-----Generated at Sat Dec 6 11:36:41 2025 by rpki-client