This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/_AOJOYaKErZGvsfU7qm_IvMsQ0g.roa File: _AOJOYaKErZGvsfU7qm_IvMsQ0g.roa (raw, json) Hash identifier: Vbz8GWBaKRhisRxQT8z1bkf+dXj5yXsIPaS15uZ+NRo= Subject key identifier: FC:03:89:39:86:8A:12:B6:46:BE:C7:D4:EE:A9:BF:22:F3:2C:43:48 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019AF3A0C06F80CDC0E8FB53527978ABB79F Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/_AOJOYaKErZGvsfU7qm_IvMsQ0g.roa Signing time: Sat 06 Dec 2025 12:26:29 +0000 ROA not before: Sat 06 Dec 2025 12:26:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 81.18.48.0/24 maxlen: 24 81.18.63.0/24 maxlen: 24 109.121.47.0/24 maxlen: 24 178.219.6.0/24 maxlen: 24 178.253.224.0/24 maxlen: 24 185.47.91.0/24 maxlen: 24 188.255.198.0/24 maxlen: 24 212.69.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:a0:c0:6f:80:cd:c0:e8:fb:53:52:79:78:ab:b7:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Dec 6 12:26:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fc038939868a12b646bec7d4eea9bf22f32c4348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:cd:1f:b9:74:4f:28:6e:0f:e7:51:64:82:a0: d7:ff:07:dc:47:b3:c2:22:73:47:bb:d0:ff:b9:55: 67:a3:48:a8:68:f5:25:2b:76:5c:11:86:7f:32:6d: 5a:f4:9a:64:73:ba:85:91:0b:b0:bf:d3:70:b3:dd: c2:d5:1e:65:34:6f:9e:be:f7:15:a5:61:8c:48:6c: e3:5c:74:94:1d:b1:37:f4:15:09:72:0e:93:4f:ab: 5e:d4:2f:98:5e:64:b1:bd:47:41:ee:9d:ba:45:d6: 2b:85:ac:a2:ba:c7:dc:dc:39:94:6c:17:e7:8a:83: 84:3f:2a:b2:ae:8b:23:e8:7d:1b:f1:49:b6:5d:b2: e8:03:e7:a8:85:0c:31:1a:8d:da:a5:1d:60:83:be: 66:1d:9c:91:a6:30:bd:10:fa:5e:a5:83:26:0f:5b: 57:fd:ff:5b:2c:7d:a9:8c:9e:b6:c2:17:2c:dd:7a: 6c:1b:4a:35:6b:da:51:dd:17:6a:69:26:56:32:37: 6d:56:e6:80:61:84:62:47:90:79:90:c6:98:52:b4: 21:b2:11:0d:e8:a1:38:9e:eb:61:75:6c:bc:71:cd: 52:65:12:e0:b9:dc:6c:3f:e0:d6:a5:4e:66:9d:b8: 65:95:15:a7:7f:14:8b:29:4b:d3:66:93:a6:3a:4a: db:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:03:89:39:86:8A:12:B6:46:BE:C7:D4:EE:A9:BF:22:F3:2C:43:48 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/_AOJOYaKErZGvsfU7qm_IvMsQ0g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.18.48.0/24 81.18.63.0/24 109.121.47.0/24 178.219.6.0/24 178.253.224.0/24 185.47.91.0/24 188.255.198.0/24 212.69.11.0/24 Signature Algorithm: sha256WithRSAEncryption 35:93:3d:61:a5:ed:c0:af:81:26:c3:00:81:fb:56:dd:9c:dc: 38:41:91:48:37:26:47:5f:e8:04:d8:3f:14:cf:c0:6f:a8:f4: 0d:0c:00:6f:ba:f1:3d:3c:03:02:d3:79:c8:73:35:b5:9b:28: 6d:6d:e9:f9:92:ea:1b:c5:79:97:6a:1d:ad:f5:d6:88:f2:f2: b0:3b:dd:c5:c2:14:30:25:46:43:a9:ae:b5:6f:ec:f0:7f:f7: 8a:a9:ae:2a:68:99:93:1b:6c:d3:2c:65:69:9f:71:62:83:a7: 85:56:a3:1c:c3:21:20:92:7c:37:ed:2b:13:1e:5d:97:da:65: 54:ab:d2:07:5b:a1:d8:82:d5:ea:4b:ed:46:3e:28:cb:e1:dc: 49:46:0a:ca:e6:24:a3:30:3b:ad:18:0b:b4:74:86:ea:0e:d6: ec:67:60:69:d9:0c:13:ad:e0:88:1e:7e:0f:6f:f8:f9:22:64: 3d:18:45:34:0b:14:fe:0c:2a:0b:06:87:6e:d5:af:e8:5d:b2: c5:19:a1:8d:46:8d:39:85:ea:1a:b5:f0:b0:d0:ad:75:12:74: 23:31:a5:ea:39:dd:a4:6a:f5:ff:db:10:df:c9:fd:51:c3:1a: 55:8e:7e:c7:4f:cc:46:80:1f:b1:2c:df:04:6e:cf:73:71:65: 00:61:e8:5f -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZrzoMBvgM3A6PtTUnl4q7efMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjUxMjA2MTIyNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzAzODkzOTg2OGExMmI2NDZiZWM3ZDRlZWE5YmYyMmYzMmM0MzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8s0fuXRPKG4P51FkgqDX/wfcR7PC InNHu9D/uVVno0ioaPUlK3ZcEYZ/Mm1a9Jpkc7qFkQuwv9Nws93C1R5lNG+evvcV pWGMSGzjXHSUHbE39BUJcg6TT6te1C+YXmSxvUdB7p26RdYrhayiusfc3DmUbBfn ioOEPyqyrosj6H0b8Um2XbLoA+eohQwxGo3apR1gg75mHZyRpjC9EPpepYMmD1tX /f9bLH2pjJ62whcs3XpsG0o1a9pR3RdqaSZWMjdtVuaAYYRiR5B5kMaYUrQhshEN 6KE4nuthdWy8cc1SZRLgudxsP+DWpU5mnbhllRWnfxSLKUvTZpOmOkrb1wIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFPwDiTmGihK2Rr7H1O6pvyLzLENIMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvX0FPSk9ZYUtFclpHdnNmVTdxbV9Jdk1zUTBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAURIwAwQA URI/AwQAbXkvAwQAstsGAwQAsv3gAwQAuS9bAwQAvP/GAwQA1EULMA0GCSqGSIb3 DQEBCwUAA4IBAQA1kz1hpe3Ar4EmwwCB+1bdnNw4QZFINyZHX+gE2D8Uz8BvqPQN DABvuvE9PAMC03nIczW1myhtben5kuobxXmXah2t9daI8vKwO93FwhQwJUZDqa61 b+zwf/eKqa4qaJmTG2zTLGVpn3Fig6eFVqMcwyEgknw37SsTHl2X2mVUq9IHW6HY gtXqS+1GPijL4dxJRgrK5iSjMDutGAu0dIbqDtbsZ2Bp2QwTreCIHn4Pb/j5ImQ9 GEU0CxT+DCoLBodu1a/oXbLFGaGNRo05heoatfCw0K11EnQjMaXqOd2kavX/2xDf yf1RwxpVjn7HT8xGgB+xLN8Ebs9zcWUAYehf -----END CERTIFICATE-----Generated at Sat Dec 6 23:28:56 2025 by rpki-client