This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/NlD2H4xMWnDfn75RbUM_nfwFa3A.roa File: NlD2H4xMWnDfn75RbUM_nfwFa3A.roa (raw, json) Hash identifier: /G8JsiteEo/1vlfrQenpvHlgsa45Uk3WUbeTNlKcBUI= Subject key identifier: 36:50:F6:1F:8C:4C:5A:70:DF:9F:BE:51:6D:43:3F:9D:FC:05:6B:70 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019AD95D676860DA439FA24BC352CA309F30 Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/NlD2H4xMWnDfn75RbUM_nfwFa3A.roa Signing time: Mon 01 Dec 2025 10:02:48 +0000 ROA not before: Mon 01 Dec 2025 10:02:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 21859 IP address blocks: 77.105.61.0/24 maxlen: 24 109.121.45.0/24 maxlen: 24 178.219.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:5d:67:68:60:da:43:9f:a2:4b:c3:52:ca:30:9f:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Dec 1 10:02:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3650f61f8c4c5a70df9fbe516d433f9dfc056b70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d7:bc:95:7b:16:4b:b7:c1:2f:03:7f:44:af: 78:87:b0:f5:59:25:20:64:de:d4:e9:31:4c:6b:f5: 9c:a3:74:5f:99:b1:86:a3:58:21:12:c9:88:d0:06: 5c:65:d0:c5:6c:18:63:bf:52:7c:24:6e:20:ac:e4: ba:53:5a:90:52:14:37:0b:cb:39:c3:c3:96:5f:6e: 50:af:62:73:69:c7:ae:1a:45:8c:e5:62:84:92:68: 68:73:12:ac:5c:6b:f5:44:68:cd:aa:70:87:5b:00: b4:31:6d:ae:29:e8:86:d5:97:d8:2d:ea:50:38:43: 10:87:d1:8f:ed:a9:50:7d:45:d0:ca:fb:b5:00:f5: 58:df:19:6a:05:0e:7a:3e:2b:e1:e7:33:03:4c:b2: 87:84:03:d8:73:06:e8:b0:91:31:05:ba:1e:20:1b: b8:73:2a:46:08:b4:26:f4:11:03:3a:91:53:68:dc: d8:f2:d3:fe:0f:95:41:69:ce:4d:e6:51:f7:93:d8: 0c:74:ac:4e:e0:15:ff:13:80:0b:36:56:97:6f:65: 7a:e7:70:7e:88:24:f2:fc:fa:bb:dc:30:01:ee:27: 7c:07:6f:07:1f:c0:5e:88:a4:1e:b9:e3:e5:5c:47: f4:c8:54:cf:90:76:ec:2d:7b:e7:aa:ce:a4:7a:32: 4e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:50:F6:1F:8C:4C:5A:70:DF:9F:BE:51:6D:43:3F:9D:FC:05:6B:70 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/NlD2H4xMWnDfn75RbUM_nfwFa3A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.105.61.0/24 109.121.45.0/24 178.219.7.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:e9:64:18:96:8e:4c:88:01:06:ca:ad:49:1b:0a:0f:b3:2e: 92:49:d1:1a:a5:a7:a8:36:77:fd:16:95:69:53:a4:49:d2:e2: f5:00:4b:fd:1a:f9:b6:59:08:6f:45:00:ac:30:38:9a:5d:f1: cc:92:1a:45:c2:f5:60:e8:51:9e:29:59:c0:98:91:8c:37:d1: 77:0e:54:00:5e:08:24:aa:67:83:01:3f:b9:ec:16:74:4b:53: ea:d4:b8:a3:11:13:72:09:aa:0f:44:cf:78:85:b1:95:a9:f0: 7c:88:a1:57:a8:06:41:ca:de:c4:e9:e1:ee:d4:b3:a8:12:ee: 9e:e2:d7:d9:4a:97:07:c4:bd:3e:5f:06:1e:e6:8d:e8:e6:1d: 70:e0:ff:35:1f:bc:13:0f:44:76:57:54:0f:66:b8:1b:18:07: 56:2c:4a:cf:13:af:c2:ff:03:a3:c8:ce:4c:96:06:e0:13:80: 79:d4:2e:ae:05:f2:f8:ad:50:59:61:c1:76:aa:67:d1:fc:04: 3c:2d:df:60:46:c2:ac:91:ce:41:e7:71:0a:cb:ee:36:91:cb: c4:e6:1c:95:bf:8d:99:2f:c6:c1:64:16:70:a1:04:28:81:b7: af:16:ac:43:48:ed:fa:59:bc:e1:83:d6:53:c2:dc:2d:47:93: 65:1d:36:3d -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZrZXWdoYNpDn6JLw1LKMJ8wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjUxMjAxMTAwMjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjUwZjYxZjhjNGM1YTcwZGY5ZmJlNTE2ZDQzM2Y5ZGZjMDU2YjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNe8lXsWS7fBLwN/RK94h7D1WSUg ZN7U6TFMa/Wco3RfmbGGo1ghEsmI0AZcZdDFbBhjv1J8JG4grOS6U1qQUhQ3C8s5 w8OWX25Qr2JzaceuGkWM5WKEkmhocxKsXGv1RGjNqnCHWwC0MW2uKeiG1ZfYLepQ OEMQh9GP7alQfUXQyvu1APVY3xlqBQ56Pivh5zMDTLKHhAPYcwbosJExBboeIBu4 cypGCLQm9BEDOpFTaNzY8tP+D5VBac5N5lH3k9gMdKxO4BX/E4ALNlaXb2V653B+ iCTy/Pq73DAB7id8B28HH8BeiKQeuePlXEf0yFTPkHbsLXvnqs6kejJOjQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDZQ9h+MTFpw35++UW1DP538BWtwMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvTmxEMkg0eE1XbkRmbjc1UmJVTV9uZndGYTNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATWk9AwQA bXktAwQAstsHMA0GCSqGSIb3DQEBCwUAA4IBAQB86WQYlo5MiAEGyq1JGwoPsy6S SdEapaeoNnf9FpVpU6RJ0uL1AEv9Gvm2WQhvRQCsMDiaXfHMkhpFwvVg6FGeKVnA mJGMN9F3DlQAXggkqmeDAT+57BZ0S1Pq1LijERNyCaoPRM94hbGVqfB8iKFXqAZB yt7E6eHu1LOoEu6e4tfZSpcHxL0+XwYe5o3o5h1w4P81H7wTD0R2V1QPZrgbGAdW LErPE6/C/wOjyM5MlgbgE4B51C6uBfL4rVBZYcF2qmfR/AQ8Ld9gRsKskc5B53EK y+42kcvE5hyVv42ZL8bBZBZwoQQogbevFqxDSO36Wbzhg9ZTwtwtR5NlHTY9 -----END CERTIFICATE-----Generated at Sat Dec 6 15:35:31 2025 by rpki-client