This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/8p0vHisf8LEAOOTpbtSnWyUPELg.roa File: 8p0vHisf8LEAOOTpbtSnWyUPELg.roa (raw, json) Hash identifier: L7lfixYxGiLj5z+KL1DNyfbgczvGThdejAvokcY3xcA= Subject key identifier: F2:9D:2F:1E:2B:1F:F0:B1:00:38:E4:E9:6E:D4:A7:5B:25:0F:10:B8 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019AEEE757CAE0B78F6A5249BB33E39D402C Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/8p0vHisf8LEAOOTpbtSnWyUPELg.roa Signing time: Fri 05 Dec 2025 14:25:29 +0000 ROA not before: Fri 05 Dec 2025 14:25:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 81.18.48.0/24 maxlen: 24 81.18.63.0/24 maxlen: 24 109.121.47.0/24 maxlen: 24 178.219.6.0/24 maxlen: 24 178.253.224.0/24 maxlen: 24 185.47.91.0/24 maxlen: 24 188.255.198.0/24 maxlen: 24 212.69.11.0/24 maxlen: 24 212.69.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:e7:57:ca:e0:b7:8f:6a:52:49:bb:33:e3:9d:40:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Dec 5 14:25:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f29d2f1e2b1ff0b10038e4e96ed4a75b250f10b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d2:66:0c:a6:12:ae:60:66:a2:28:aa:10:6a: fa:69:99:44:80:67:cd:20:b6:40:75:0c:32:c2:f0: 89:31:9c:9e:d4:23:5e:cd:6e:1c:4d:c4:18:49:8d: bc:cd:9c:31:39:4a:46:e6:17:91:93:07:bb:d0:0c: 22:e4:0b:bb:a6:56:17:a8:4d:1a:12:7f:00:ac:79: 4b:c6:bf:c4:3d:c2:01:18:35:34:11:fa:61:95:83: f8:3d:31:64:c0:5b:c4:16:90:d1:2a:b9:48:ef:a0: 86:dc:a9:5d:e6:cd:a0:0c:44:a9:fc:77:c1:3c:d6: 50:12:e7:3b:d8:82:cd:0e:60:a5:4c:e1:ff:31:ee: f7:f5:69:4b:89:89:0d:06:2f:46:db:e5:7b:be:ef: 3f:bd:d5:9b:e0:ad:09:83:87:b7:0c:d1:d7:29:3b: fe:09:f8:8c:b6:7f:b6:ba:cd:20:08:f6:1b:a5:bc: 80:fa:ed:59:61:c1:60:99:02:ae:ec:64:40:e0:8d: 8f:ed:a8:44:c2:14:da:30:03:3d:fe:b0:6d:04:b4: a7:a0:94:c7:6d:7a:46:e5:de:0e:79:f2:42:f6:18: 2d:3f:09:06:72:81:35:b2:c2:69:46:1e:14:05:1b: e7:6e:1a:07:8e:4d:ec:0d:5c:49:72:de:49:a6:23: bb:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:9D:2F:1E:2B:1F:F0:B1:00:38:E4:E9:6E:D4:A7:5B:25:0F:10:B8 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/8p0vHisf8LEAOOTpbtSnWyUPELg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.18.48.0/24 81.18.63.0/24 109.121.47.0/24 178.219.6.0/24 178.253.224.0/24 185.47.91.0/24 188.255.198.0/24 212.69.11.0/24 212.69.31.0/24 Signature Algorithm: sha256WithRSAEncryption 70:ab:75:1c:e1:8b:0a:0e:f4:86:19:81:f0:67:b8:68:95:84: 4a:2e:e3:31:6c:35:bc:0c:13:de:b6:af:9b:96:40:2e:5b:12: 69:6c:66:77:a9:69:ba:3e:26:44:04:82:45:cf:e4:ec:59:65: 04:53:84:5d:74:e9:09:b5:7f:1d:6a:82:27:7c:01:5a:89:1c: 5b:17:cb:30:ad:14:5a:c9:dc:d1:39:d7:2b:6c:8c:34:72:40: b5:91:71:40:76:f9:0c:09:15:c5:97:14:56:62:39:b4:4e:7b: 4e:84:83:53:30:71:9d:31:6c:06:5e:e5:a4:51:96:7a:84:cb: d4:f0:f9:0f:ed:18:4d:47:1c:02:a0:38:92:bc:a3:d6:6e:d2: 22:d7:4b:2f:a9:a3:16:1e:99:36:a9:60:7f:a7:f2:74:c9:50: 29:e5:ca:8a:72:93:be:22:20:d9:5e:67:8f:eb:c3:84:e8:e7: 0e:28:a0:b5:2f:f2:d4:a4:10:79:04:4e:a1:23:ec:2e:0e:3f: 4f:67:b8:03:1d:19:46:20:90:24:4f:c1:e0:ab:83:15:d8:f0: 94:4d:d3:78:d4:f2:99:70:bc:1a:f0:d3:5f:35:30:c9:9b:bd: 44:ce:3b:87:2f:eb:18:29:64:4d:9b:05:86:14:b6:aa:d9:5f: ca:b9:62:5f -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZru51fK4LePalJJuzPjnUAsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjUxMjA1MTQyNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjlkMmYxZTJiMWZmMGIxMDAzOGU0ZTk2ZWQ0YTc1YjI1MGYxMGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNJmDKYSrmBmoiiqEGr6aZlEgGfN ILZAdQwywvCJMZye1CNezW4cTcQYSY28zZwxOUpG5heRkwe70Awi5Au7plYXqE0a En8ArHlLxr/EPcIBGDU0EfphlYP4PTFkwFvEFpDRKrlI76CG3Kld5s2gDESp/HfB PNZQEuc72ILNDmClTOH/Me739WlLiYkNBi9G2+V7vu8/vdWb4K0Jg4e3DNHXKTv+ CfiMtn+2us0gCPYbpbyA+u1ZYcFgmQKu7GRA4I2P7ahEwhTaMAM9/rBtBLSnoJTH bXpG5d4OefJC9hgtPwkGcoE1ssJpRh4UBRvnbhoHjk3sDVxJct5JpiO7vQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFPKdLx4rH/CxADjk6W7Up1slDxC4MB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvOHAwdkhpc2Y4TEVBT09UcGJ0U25XeVVQRUxnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAURIwAwQA URI/AwQAbXkvAwQAstsGAwQAsv3gAwQAuS9bAwQAvP/GAwQA1EULAwQA1EUfMA0G CSqGSIb3DQEBCwUAA4IBAQBwq3Uc4YsKDvSGGYHwZ7holYRKLuMxbDW8DBPetq+b lkAuWxJpbGZ3qWm6PiZEBIJFz+TsWWUEU4RddOkJtX8daoInfAFaiRxbF8swrRRa ydzROdcrbIw0ckC1kXFAdvkMCRXFlxRWYjm0TntOhINTMHGdMWwGXuWkUZZ6hMvU 8PkP7RhNRxwCoDiSvKPWbtIi10svqaMWHpk2qWB/p/J0yVAp5cqKcpO+IiDZXmeP 68OE6OcOKKC1L/LUpBB5BE6hI+wuDj9PZ7gDHRlGIJAkT8Hgq4MV2PCUTdN41PKZ cLwa8NNfNTDJm71EzjuHL+sYKWRNmwWGFLaq2V/KuWJf -----END CERTIFICATE-----Generated at Sat Dec 6 11:46:30 2025 by rpki-client