This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/T2t-3ZKoU6M4Ujox8WAfUxdK7qI.roa File: T2t-3ZKoU6M4Ujox8WAfUxdK7qI.roa (raw, json) Hash identifier: VAxMAWxtsURNc/PGf1R3h9jyou/4mp3Gt7iwxj007ec= Subject key identifier: 4F:6B:7E:DD:92:A8:53:A3:38:52:3A:31:F1:60:1F:53:17:4A:EE:A2 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019AD93B86FEAA73027B7354BD75AA525F16 Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/T2t-3ZKoU6M4Ujox8WAfUxdK7qI.roa Signing time: Mon 01 Dec 2025 09:25:48 +0000 ROA not before: Mon 01 Dec 2025 09:25:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 401776 IP address blocks: 109.121.33.0/24 maxlen: 24 178.253.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:3b:86:fe:aa:73:02:7b:73:54:bd:75:aa:52:5f:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Dec 1 09:25:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4f6b7edd92a853a338523a31f1601f53174aeea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:86:b5:e0:38:b9:ad:5f:be:29:5c:2b:bb:56: 22:42:3e:08:0c:c6:4b:fc:24:84:06:40:ec:71:84: 41:73:3d:6e:1e:8a:c3:25:03:8f:02:77:78:fc:55: 15:b9:6b:b5:b9:50:f0:4a:2c:fa:33:3a:65:9e:2d: a2:40:23:17:76:82:04:6a:a7:0c:74:12:01:06:8d: 21:d3:94:81:64:a7:1b:af:5b:4a:c3:c3:97:e0:c3: 35:b3:53:b8:a7:42:c1:39:3a:a1:9b:5f:8f:43:62: 7d:a2:2f:13:a4:b9:59:59:4c:78:8e:29:06:02:2c: a4:b5:30:4a:dd:3b:86:dc:b4:ca:85:e3:3c:1d:97: 5c:c3:34:3b:82:cb:6a:8e:72:68:7c:48:7d:11:5a: 24:c8:03:91:71:1d:5a:c1:7f:e2:4b:32:0f:0d:e5: d1:b9:60:11:28:23:45:44:00:c9:60:a7:eb:98:fc: 9c:ae:44:8c:ff:97:95:4e:80:76:d2:e7:25:d8:cf: cb:98:04:6a:cd:79:fe:23:2a:d9:fa:9e:be:27:ab: 57:b3:63:5f:2a:22:7e:48:0e:33:1e:a7:29:18:33: d7:e7:29:da:c2:01:6a:0c:2c:56:55:be:7b:43:80: a8:d6:04:4f:0d:aa:52:1a:6e:b5:4f:ce:d9:5c:38: f8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:6B:7E:DD:92:A8:53:A3:38:52:3A:31:F1:60:1F:53:17:4A:EE:A2 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/T2t-3ZKoU6M4Ujox8WAfUxdK7qI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.121.33.0/24 178.253.221.0/24 Signature Algorithm: sha256WithRSAEncryption 30:0b:ee:a2:18:78:ab:e8:13:e8:1a:ad:90:a2:42:0a:2b:da: f9:fc:42:5e:6a:98:4b:b5:61:d9:63:fc:34:7c:7d:c5:47:6c: 01:f8:2b:d0:23:1b:f1:86:98:1d:f4:31:aa:88:2a:a1:9c:77: c0:a6:a6:a5:8b:70:1f:91:7c:59:c8:d1:c4:51:31:99:f0:f7: cb:c3:46:99:76:2e:61:ae:32:a0:2b:ce:38:83:ab:80:9e:d5: ad:03:a6:40:af:dc:f8:2f:b3:17:fa:23:8d:4f:68:61:ce:75: 7f:5c:62:b9:91:f1:1a:5e:76:35:66:1a:19:6c:e7:63:a9:ed: 24:31:5b:5c:67:d7:f7:44:66:5b:f3:51:e3:c1:16:bc:b9:8f: ab:03:71:34:03:ef:a9:52:0a:12:2a:bb:84:b0:30:00:24:32: 15:56:0a:e4:1e:96:48:ac:29:91:7c:e1:97:0e:09:b3:29:c0: c1:b5:c2:90:b8:5d:38:8f:75:14:68:1f:91:34:e1:12:cd:fc: 51:9b:84:77:eb:c7:7a:cb:b9:da:13:35:c5:3f:a3:8d:c5:c6: 0e:5f:6c:8b:7b:c3:ce:3f:76:77:ed:0f:85:23:53:87:08:34: 6a:e8:7c:50:70:9f:99:69:6a:b1:8b:93:d9:b0:7f:12:88:e0: 82:84:8e:2c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrZO4b+qnMCe3NUvXWqUl8WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjUxMjAxMDkyNTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjZiN2VkZDkyYTg1M2EzMzg1MjNhMzFmMTYwMWY1MzE3NGFlZWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoa14Di5rV++KVwru1YiQj4IDMZL /CSEBkDscYRBcz1uHorDJQOPAnd4/FUVuWu1uVDwSiz6Mzplni2iQCMXdoIEaqcM dBIBBo0h05SBZKcbr1tKw8OX4MM1s1O4p0LBOTqhm1+PQ2J9oi8TpLlZWUx4jikG AiyktTBK3TuG3LTKheM8HZdcwzQ7gstqjnJofEh9EVokyAORcR1awX/iSzIPDeXR uWARKCNFRADJYKfrmPycrkSM/5eVToB20ucl2M/LmARqzXn+IyrZ+p6+J6tXs2Nf KiJ+SA4zHqcpGDPX5ynawgFqDCxWVb57Q4Co1gRPDapSGm61T87ZXDj4FwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFE9rft2SqFOjOFI6MfFgH1MXSu6iMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvVDJ0LTNaS29VNk00VWpveDhXQWZVeGRLN3FJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbXkhAwQA sv3dMA0GCSqGSIb3DQEBCwUAA4IBAQAwC+6iGHir6BPoGq2QokIKK9r5/EJeaphL tWHZY/w0fH3FR2wB+CvQIxvxhpgd9DGqiCqhnHfApqali3AfkXxZyNHEUTGZ8PfL w0aZdi5hrjKgK844g6uAntWtA6ZAr9z4L7MX+iONT2hhznV/XGK5kfEaXnY1ZhoZ bOdjqe0kMVtcZ9f3RGZb81HjwRa8uY+rA3E0A++pUgoSKruEsDAAJDIVVgrkHpZI rCmRfOGXDgmzKcDBtcKQuF04j3UUaB+RNOESzfxRm4R368d6y7naEzXFP6ONxcYO X2yLe8POP3Z37Q+FI1OHCDRq6HxQcJ+ZaWqxi5PZsH8SiOCChI4s -----END CERTIFICATE-----Generated at Sat Dec 6 11:46:34 2025 by rpki-client