This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/6oN7ugLAK3Erp9jqnMQdNrMVNOw.roa File: 6oN7ugLAK3Erp9jqnMQdNrMVNOw.roa (raw, json) Hash identifier: 2OE5X924UyTs73uKq2L0IicxfY1Ja9/xXAEDVVNFHY8= Subject key identifier: EA:83:7B:BA:02:C0:2B:71:2B:A7:D8:EA:9C:C4:1D:36:B3:15:34:EC Certificate issuer: /CN=21b9f2a826acf767a50e59b29ec1ff092cfd3c1c Certificate serial: 019A9263AF8A6525F6F0D0DA1F008E9D4C58 Authority key identifier: 21:B9:F2:A8:26:AC:F7:67:A5:0E:59:B2:9E:C1:FF:09:2C:FD:3C:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbnyqCas92elDlmynsH_CSz9PBw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/6oN7ugLAK3Erp9jqnMQdNrMVNOw.roa Signing time: Mon 17 Nov 2025 15:16:37 +0000 ROA not before: Mon 17 Nov 2025 15:16:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 206215 IP address blocks: 167.150.22.0/24 maxlen: 24 167.150.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.crl rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.mft rsync://rpki.ripe.net/repository/DEFAULT/IbnyqCas92elDlmynsH_CSz9PBw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:92:63:af:8a:65:25:f6:f0:d0:da:1f:00:8e:9d:4c:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21b9f2a826acf767a50e59b29ec1ff092cfd3c1c Validity Not Before: Nov 17 15:16:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ea837bba02c02b712ba7d8ea9cc41d36b31534ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:8d:d5:ce:0d:ae:82:6c:42:4d:49:b5:44:e4: 92:5c:b0:a1:68:21:56:e7:50:69:5a:85:35:8b:e8: 7c:77:d3:b3:b3:bb:36:d6:c4:3e:73:50:a2:0b:bb: ba:19:ed:b0:87:65:92:65:70:7b:9d:b8:c2:00:e4: e4:1c:22:f0:e4:ce:0f:85:1c:23:05:33:d1:97:c3: 16:ca:bc:da:e3:2f:bc:b7:4c:5e:3e:0b:33:b8:ee: ba:63:28:93:53:04:9f:b9:e6:91:da:ee:1e:5d:e7: a3:ee:1b:e3:04:04:ce:e4:19:66:ab:57:ec:f8:c9: d3:55:a3:3d:24:35:54:c6:06:27:ef:e6:11:c4:0c: 05:ed:1e:3e:47:e6:16:74:96:ad:e1:b5:62:75:14: a8:34:bd:36:63:3b:5f:25:65:75:99:df:9c:f4:2b: ea:ee:e7:eb:c5:af:87:35:c4:7a:c1:4e:82:37:0f: dc:b1:88:d0:2b:9c:fe:66:8f:28:97:10:7c:1d:a8: b7:e7:84:a2:19:bb:ac:0b:99:01:f9:50:42:86:6d: 2d:e2:40:12:48:71:f1:da:a6:ec:9b:f0:25:41:31: cc:bc:8d:68:a0:b7:1a:ed:b1:64:1c:db:d6:11:a0: 4c:bb:fe:21:85:f3:8a:e4:19:7d:d8:a6:cf:64:54: 70:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:83:7B:BA:02:C0:2B:71:2B:A7:D8:EA:9C:C4:1D:36:B3:15:34:EC X509v3 Authority Key Identifier: keyid:21:B9:F2:A8:26:AC:F7:67:A5:0E:59:B2:9E:C1:FF:09:2C:FD:3C:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbnyqCas92elDlmynsH_CSz9PBw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/6oN7ugLAK3Erp9jqnMQdNrMVNOw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.150.22.0/24 167.150.220.0/24 Signature Algorithm: sha256WithRSAEncryption 13:e8:3e:57:6d:23:68:56:11:87:6c:d9:78:47:dd:b1:5f:58: 48:55:36:bf:4d:a1:5b:4f:ba:c3:62:45:c6:85:94:b3:fb:cf: 28:ac:91:5d:11:c7:46:eb:bf:d9:cb:e4:41:12:9d:91:c7:9d: 6d:29:7d:e1:9a:39:51:62:db:11:62:58:4a:a6:93:c7:5d:d1: 5f:3e:f9:d8:ac:4a:48:fa:3d:6d:aa:21:51:6c:7b:09:45:e2: 49:95:40:96:46:12:43:02:cf:06:2a:71:25:e0:2b:eb:71:47: 2e:d2:ef:85:61:93:42:c1:99:57:22:64:56:20:65:dd:8e:b0: 65:77:d1:b2:e5:27:53:92:a2:ff:79:4c:bf:ce:20:51:d4:8f: 50:e7:a2:c9:40:60:bf:2b:51:10:14:7b:e6:80:9a:bf:23:c4: 41:8d:24:d4:7d:ca:ed:0d:a6:5f:46:03:bb:a9:b4:5f:40:a9: ad:d2:bf:13:dc:ec:c4:92:08:32:fe:e2:b7:28:54:28:a1:8f: 0c:e6:ea:9d:26:42:fd:7e:18:33:f8:8e:c0:76:a0:ce:0d:8c: 74:8f:7c:21:5f:c7:8f:eb:fe:0e:e3:b8:21:86:fe:07:a2:74: c8:2c:22:9c:29:73:ae:c0:b0:c2:7d:84:d7:8c:f7:18:6f:9c: 30:70:c9:6d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqSY6+KZSX28NDaHwCOnUxYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYjlmMmE4MjZhY2Y3NjdhNTBlNTliMjllYzFmZjA5MmNm ZDNjMWMwHhcNMjUxMTE3MTUxNjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTgzN2JiYTAyYzAyYjcxMmJhN2Q4ZWE5Y2M0MWQzNmIzMTUzNGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Y3Vzg2ugmxCTUm1ROSSXLChaCFW 51BpWoU1i+h8d9Ozs7s21sQ+c1CiC7u6Ge2wh2WSZXB7nbjCAOTkHCLw5M4PhRwj BTPRl8MWyrza4y+8t0xePgszuO66YyiTUwSfueaR2u4eXeej7hvjBATO5Blmq1fs +MnTVaM9JDVUxgYn7+YRxAwF7R4+R+YWdJat4bVidRSoNL02YztfJWV1md+c9Cvq 7ufrxa+HNcR6wU6CNw/csYjQK5z+Zo8olxB8Hai354SiGbusC5kB+VBChm0t4kAS SHHx2qbsm/AlQTHMvI1ooLca7bFkHNvWEaBMu/4hhfOK5Bl92KbPZFRwhwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOqDe7oCwCtxK6fY6pzEHTazFTTsMB8GA1UdIwQY MBaAFCG58qgmrPdnpQ5Zsp7B/wks/TwcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWJueXFDYXM5MmVsRGxteW5zSF9DU3o5UEJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9kNzBmNzgtMDgyZS00ZWMyLTgxMDAt N2NkY2I1MGVkMGU0LzEvNm9ON3VnTEFLM0VycDlqcW5NUWROck1WTk93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9kNzBmNzgtMDgyZS00ZWMyLTgxMDAtN2NkY2I1MGVkMGU0 LzEvSWJueXFDYXM5MmVsRGxteW5zSF9DU3o5UEJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAp5YWAwQA p5bcMA0GCSqGSIb3DQEBCwUAA4IBAQAT6D5XbSNoVhGHbNl4R92xX1hIVTa/TaFb T7rDYkXGhZSz+88orJFdEcdG67/Zy+RBEp2Rx51tKX3hmjlRYtsRYlhKppPHXdFf PvnYrEpI+j1tqiFRbHsJReJJlUCWRhJDAs8GKnEl4CvrcUcu0u+FYZNCwZlXImRW IGXdjrBld9Gy5SdTkqL/eUy/ziBR1I9Q56LJQGC/K1EQFHvmgJq/I8RBjSTUfcrt DaZfRgO7qbRfQKmt0r8T3OzEkggy/uK3KFQooY8M5uqdJkL9fhgz+I7AdqDODYx0 j3whX8eP6/4O47ghhv4HonTILCKcKXOuwLDCfYTXjPcYb5wwcMlt -----END CERTIFICATE-----Generated at Sat Dec 6 19:45:31 2025 by rpki-client