This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/i3Yvt2E2dFIpTKrARXvo2lAaDnM.roa File: i3Yvt2E2dFIpTKrARXvo2lAaDnM.roa (raw, json) Hash identifier: Oze7Tfu2gV4WEQbFU7lPaCQtRKwbCFs8LJ6/icqEnVo= Subject key identifier: 8B:76:2F:B7:61:36:74:52:29:4C:AA:C0:45:7B:E8:DA:50:1A:0E:73 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019AFE6CBACC5D21162E19232D7073F1692C Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/i3Yvt2E2dFIpTKrARXvo2lAaDnM.roa Signing time: Mon 08 Dec 2025 14:45:29 +0000 ROA not before: Mon 08 Dec 2025 14:45:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 81.18.48.0/24 maxlen: 24 81.18.63.0/24 maxlen: 24 109.121.47.0/24 maxlen: 24 178.219.6.0/24 maxlen: 24 185.47.91.0/24 maxlen: 24 188.255.198.0/24 maxlen: 24 212.69.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 11:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:6c:ba:cc:5d:21:16:2e:19:23:2d:70:73:f1:69:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Dec 8 14:45:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8b762fb761367452294caac0457be8da501a0e73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f6:70:50:f7:43:f2:18:23:28:65:12:61:59: 0b:20:14:4c:34:99:46:e2:17:d2:20:ac:33:6d:e5: 81:cf:89:c3:08:f0:eb:ce:ae:a3:13:ba:0f:9f:c6: cb:0c:ea:18:8f:0d:95:37:f0:12:57:2d:88:56:11: ef:df:8e:09:50:63:29:a3:60:0e:01:3b:90:bb:7b: 16:a1:a0:e3:a6:6e:22:83:68:5c:9e:a1:ab:d1:65: 4a:ba:bd:dd:87:b0:da:14:e3:3b:31:2d:fc:ac:f8: 2e:40:a1:6f:f4:06:61:35:74:af:bb:46:59:ec:dc: 58:14:7e:e9:e1:d5:82:62:20:dd:72:f6:f7:88:b3: 12:34:78:fd:55:af:5e:82:53:e5:76:eb:5b:12:fd: b0:1c:01:ad:7e:61:2d:09:46:57:f0:18:11:96:33: 8a:5e:a6:1b:ee:0f:2a:66:d0:f6:95:1b:26:5d:76: 72:ba:31:05:6d:fb:05:25:7b:62:c6:31:ab:33:ac: cd:8f:9f:cd:3d:ab:4e:e9:c7:5f:66:b4:c8:dc:db: 30:8b:40:80:59:46:e4:fc:47:91:4d:32:19:10:e7: 28:69:af:fc:8d:86:d1:5a:7d:4f:cf:64:eb:80:7b: 67:95:b5:03:9c:14:8e:f3:f3:1f:69:86:a3:26:c9: 15:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:76:2F:B7:61:36:74:52:29:4C:AA:C0:45:7B:E8:DA:50:1A:0E:73 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/i3Yvt2E2dFIpTKrARXvo2lAaDnM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.18.48.0/24 81.18.63.0/24 109.121.47.0/24 178.219.6.0/24 185.47.91.0/24 188.255.198.0/24 212.69.11.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:36:36:db:d1:2c:58:aa:40:dc:6d:8e:67:d4:bc:16:43:4f: 81:d4:f4:91:2f:ba:91:ba:99:ba:95:38:aa:42:7e:e3:59:12: 47:91:00:0d:82:20:5c:94:e5:25:b8:b7:95:2f:ea:66:a4:97: 13:ef:14:d9:9b:f8:ec:58:8b:9b:26:8e:7e:f6:6b:40:bc:90: 97:d7:ba:85:a1:e4:4f:d4:6c:29:21:51:25:5a:af:45:78:b2: 16:a3:d7:99:dd:42:99:e2:52:56:95:c3:e5:0a:a7:fd:4d:17: 8b:76:fa:1a:82:60:93:f9:f2:aa:ab:a7:ff:74:31:2d:7b:03: ad:ee:be:ac:2d:84:34:3e:64:8f:55:44:35:fd:ba:f9:6a:92: c4:c3:f5:41:27:be:4c:c8:e5:99:a1:1b:cd:1a:81:af:1f:39: 82:0a:f0:3f:f1:aa:db:5c:ac:32:bf:aa:dc:20:63:d9:04:ec: e2:ef:7d:d1:1c:ec:db:84:01:66:47:1c:f2:0f:5d:b3:35:ba: 47:ec:5a:af:ff:dd:b5:15:1c:f4:5f:99:e6:04:1f:0f:e0:b7: 68:75:cd:c0:bb:3b:f9:63:a6:11:70:7d:3e:e5:34:01:e8:0a: 0a:4d:d6:40:25:c1:60:ec:64:29:25:56:31:e5:ca:06:3d:c8: 89:36:99:7d -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZr+bLrMXSEWLhkjLXBz8WksMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjUxMjA4MTQ0NTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Yjc2MmZiNzYxMzY3NDUyMjk0Y2FhYzA0NTdiZThkYTUwMWEwZTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPZwUPdD8hgjKGUSYVkLIBRMNJlG 4hfSIKwzbeWBz4nDCPDrzq6jE7oPn8bLDOoYjw2VN/ASVy2IVhHv344JUGMpo2AO ATuQu3sWoaDjpm4ig2hcnqGr0WVKur3dh7DaFOM7MS38rPguQKFv9AZhNXSvu0ZZ 7NxYFH7p4dWCYiDdcvb3iLMSNHj9Va9eglPldutbEv2wHAGtfmEtCUZX8BgRljOK XqYb7g8qZtD2lRsmXXZyujEFbfsFJXtixjGrM6zNj5/NPatO6cdfZrTI3Nswi0CA WUbk/EeRTTIZEOcoaa/8jYbRWn1Pz2TrgHtnlbUDnBSO8/MfaYajJskVxwIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFIt2L7dhNnRSKUyqwEV76NpQGg5zMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvaTNZdnQyRTJkRklwVEtyQVJYdm8ybEFhRG5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAURIwAwQA URI/AwQAbXkvAwQAstsGAwQAuS9bAwQAvP/GAwQA1EULMA0GCSqGSIb3DQEBCwUA A4IBAQBqNjbb0SxYqkDcbY5n1LwWQ0+B1PSRL7qRupm6lTiqQn7jWRJHkQANgiBc lOUluLeVL+pmpJcT7xTZm/jsWIubJo5+9mtAvJCX17qFoeRP1GwpIVElWq9FeLIW o9eZ3UKZ4lJWlcPlCqf9TReLdvoagmCT+fKqq6f/dDEtewOt7r6sLYQ0PmSPVUQ1 /br5apLEw/VBJ75MyOWZoRvNGoGvHzmCCvA/8arbXKwyv6rcIGPZBOzi733RHOzb hAFmRxzyD12zNbpH7Fqv/921FRz0X5nmBB8P4Ldodc3Auzv5Y6YRcH0+5TQB6AoK TdZAJcFg7GQpJVYx5coGPciJNpl9 -----END CERTIFICATE-----Generated at Mon Dec 15 17:21:39 2025 by rpki-client