This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/9XbIodbnySKteNY1vvzZKxaJqbk.roa File: 9XbIodbnySKteNY1vvzZKxaJqbk.roa (raw, json) Hash identifier: IuR8R4FezYMayrS933wpE541gdySmXwc2hPwk7VdGcs= Subject key identifier: F5:76:C8:A1:D6:E7:C9:22:AD:78:D6:35:BE:FC:D9:2B:16:89:A9:B9 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019A96139783E4AF31F229EB70A5CBD6BDF2 Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/9XbIodbnySKteNY1vvzZKxaJqbk.roa Signing time: Tue 18 Nov 2025 08:27:37 +0000 ROA not before: Tue 18 Nov 2025 08:27:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 208690 IP address blocks: 212.69.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:96:13:97:83:e4:af:31:f2:29:eb:70:a5:cb:d6:bd:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Nov 18 08:27:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f576c8a1d6e7c922ad78d635befcd92b1689a9b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6e:b8:13:d1:ad:ff:3e:90:e7:5c:78:cb:48: c3:5c:31:e0:3e:4e:a0:58:5e:54:55:34:9f:43:60: 2b:79:09:e9:17:f6:3d:7a:17:25:85:32:54:72:cf: c6:f3:5d:e1:77:4c:7a:20:95:24:e6:a0:51:10:ae: ba:d4:ff:80:8c:e2:45:04:a1:70:93:c6:0a:d6:f4: f7:28:58:f3:e9:17:4b:db:31:69:6f:cc:35:cb:32: 55:19:9e:c1:f1:c6:7a:c5:51:e3:49:0f:fe:17:b6: 38:9e:c2:be:77:cb:c0:fd:4d:49:80:f5:3f:1e:ac: 3b:95:14:51:64:38:1b:95:10:ef:cf:b0:2e:b7:b8: 20:66:4e:b6:8a:c9:a1:4d:cf:9b:a5:d4:b9:e0:91: 75:a9:85:de:be:93:f6:1f:7e:77:d5:76:44:b8:93: 0e:7f:09:5e:95:7f:18:39:39:dc:9a:c1:20:9d:10: f7:be:ec:1f:53:5a:a4:c9:43:ba:1e:0b:ed:9b:42: 06:b2:a8:4c:a1:a7:37:a2:62:65:24:ac:53:75:56: e8:2c:b8:88:47:b4:2d:83:3d:76:44:08:7c:5e:0a: 4e:7c:0f:3a:5d:14:e5:d2:9d:55:8e:5d:fb:7d:6c: ed:bc:cf:e5:62:74:8a:f9:06:6b:d2:8f:97:2d:ba: 4e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:76:C8:A1:D6:E7:C9:22:AD:78:D6:35:BE:FC:D9:2B:16:89:A9:B9 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/9XbIodbnySKteNY1vvzZKxaJqbk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.69.5.0/24 Signature Algorithm: sha256WithRSAEncryption 29:1d:fa:1a:c8:65:c9:5f:34:03:ec:79:52:66:85:f0:ba:fd: 8d:75:6c:b6:9f:c8:ee:e0:b5:b6:b1:bf:e5:dc:ed:39:f0:35: 03:58:4e:10:a5:8e:e5:1a:ad:2b:a9:ab:64:58:48:da:10:0f: 1d:42:73:e4:bd:b8:93:aa:55:91:d9:5a:8e:6c:ee:cd:aa:03: 55:b7:9f:0b:8a:35:d1:be:51:84:a1:3d:eb:47:8c:61:4c:db: 52:31:0a:3d:63:7d:f9:f1:bc:b6:20:6d:ce:e0:1f:0c:90:20: 56:6f:b2:7c:25:98:31:5d:a3:60:b5:7c:3a:89:80:99:8a:df: fd:5b:ec:2b:3f:38:0f:84:f7:e7:5e:2a:d7:d0:39:2c:63:c2: 3c:5a:2c:2f:14:df:65:dd:91:2e:89:e1:ec:78:cb:f1:36:8b: 07:5a:5b:89:4f:67:2e:fd:0f:e3:64:4f:5a:89:04:ea:f4:bc: 6b:fd:4e:ca:fe:d9:82:8e:e7:c6:5e:00:b2:52:95:8d:45:2a: b6:b5:a7:ce:91:01:03:27:96:65:08:f6:65:2a:fa:60:45:a2: 99:a2:a6:45:1e:c8:1f:fc:8d:be:bb:00:05:b8:1a:20:18:03: a6:cb:d3:31:73:99:38:b5:23:b8:07:fa:87:6b:45:f3:f8:a0: e9:46:ac:0c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqWE5eD5K8x8inrcKXL1r3yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjUxMTE4MDgyNzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTc2YzhhMWQ2ZTdjOTIyYWQ3OGQ2MzViZWZjZDkyYjE2ODlhOWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuG64E9Gt/z6Q51x4y0jDXDHgPk6g WF5UVTSfQ2AreQnpF/Y9ehclhTJUcs/G813hd0x6IJUk5qBREK661P+AjOJFBKFw k8YK1vT3KFjz6RdL2zFpb8w1yzJVGZ7B8cZ6xVHjSQ/+F7Y4nsK+d8vA/U1JgPU/ Hqw7lRRRZDgblRDvz7Aut7ggZk62ismhTc+bpdS54JF1qYXevpP2H3531XZEuJMO fwlelX8YOTncmsEgnRD3vuwfU1qkyUO6Hgvtm0IGsqhMoac3omJlJKxTdVboLLiI R7Qtgz12RAh8XgpOfA86XRTl0p1Vjl37fWztvM/lYnSK+QZr0o+XLbpO/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPV2yKHW58kirXjWNb782SsWiam5MB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvOVhiSW9kYm55U0t0ZU5ZMXZ2elpLeGFKcWJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1EUFMA0G CSqGSIb3DQEBCwUAA4IBAQApHfoayGXJXzQD7HlSZoXwuv2NdWy2n8ju4LW2sb/l 3O058DUDWE4QpY7lGq0rqatkWEjaEA8dQnPkvbiTqlWR2VqObO7NqgNVt58LijXR vlGEoT3rR4xhTNtSMQo9Y3358by2IG3O4B8MkCBWb7J8JZgxXaNgtXw6iYCZit/9 W+wrPzgPhPfnXirX0DksY8I8WiwvFN9l3ZEuieHseMvxNosHWluJT2cu/Q/jZE9a iQTq9Lxr/U7K/tmCjufGXgCyUpWNRSq2tafOkQEDJ5ZlCPZlKvpgRaKZoqZFHsgf /I2+uwAFuBogGAOmy9Mxc5k4tSO4B/qHa0Xz+KDpRqwM -----END CERTIFICATE-----Generated at Sat Dec 6 15:35:22 2025 by rpki-client