This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/p6zJI7fLaajTwxijhyxSXHf0c_A.roa File: p6zJI7fLaajTwxijhyxSXHf0c_A.roa (raw, json) Hash identifier: xRiSXGx292mwjOrVD1g1q4F+cBXFDzNZJugikcE8Q4A= Subject key identifier: A7:AC:C9:23:B7:CB:69:A8:D3:C3:18:A3:87:2C:52:5C:77:F4:73:F0 Certificate issuer: /CN=5bc1503610bf82d8687b7aefb879a6578704f32a Certificate serial: 019ACA4235DEBD9D5A85CADDBDCA7D945392 Authority key identifier: 5B:C1:50:36:10:BF:82:D8:68:7B:7A:EF:B8:79:A6:57:87:04:F3:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/p6zJI7fLaajTwxijhyxSXHf0c_A.roa Signing time: Fri 28 Nov 2025 11:38:48 +0000 ROA not before: Fri 28 Nov 2025 11:38:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 199496 IP address blocks: 185.132.140.0/22 maxlen: 24 185.132.142.0/23 maxlen: 23 185.183.19.0/24 maxlen: 24 2a06:e240::/29 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.crl rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ca:42:35:de:bd:9d:5a:85:ca:dd:bd:ca:7d:94:53:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bc1503610bf82d8687b7aefb879a6578704f32a Validity Not Before: Nov 28 11:38:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a7acc923b7cb69a8d3c318a3872c525c77f473f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:08:37:b9:35:26:20:37:3a:64:50:2b:57:a7: 9b:0d:0b:59:9f:84:3e:06:5e:4f:79:c3:15:1d:8d: 8d:39:d1:ac:23:9b:fe:c2:c2:9c:e9:77:2e:9c:2d: 2a:2a:97:48:59:a6:47:0a:dd:8d:b2:20:01:27:1d: 6d:1c:fe:47:08:2a:b2:39:f5:dd:8c:c7:2d:38:df: d0:70:3d:d6:e4:2e:e5:eb:e3:fa:b9:b1:d0:bf:42: ab:1c:f6:bd:01:60:da:ed:80:a3:7b:ef:8f:75:bf: 2c:50:fa:df:53:c0:01:1c:6a:5d:46:ff:8f:8e:2f: 14:76:b7:7e:ff:d9:34:98:42:16:03:52:a7:32:36: d9:36:9f:6e:31:08:64:f5:0e:7e:f8:bb:44:d3:18: ff:25:ad:21:2e:97:d5:d7:6b:c4:77:e7:8d:8f:47: 1f:f7:ba:86:28:94:8f:46:82:68:57:12:ce:75:66: cc:41:61:b8:ee:02:92:df:93:83:b2:48:b4:aa:19: 4b:10:c0:fd:b2:9b:63:17:ac:b5:a0:64:d2:66:17: f0:f7:9e:9f:b7:1c:92:6f:cd:cc:52:c3:71:e3:a2: ba:36:2c:6e:b4:80:20:56:fa:fa:97:50:6f:56:60: 68:76:25:fe:2a:f0:b4:73:56:a0:47:24:46:a8:e5: da:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:AC:C9:23:B7:CB:69:A8:D3:C3:18:A3:87:2C:52:5C:77:F4:73:F0 X509v3 Authority Key Identifier: keyid:5B:C1:50:36:10:BF:82:D8:68:7B:7A:EF:B8:79:A6:57:87:04:F3:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/p6zJI7fLaajTwxijhyxSXHf0c_A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.132.140.0/22 185.183.19.0/24 IPv6: 2a06:e240::/29 Signature Algorithm: sha256WithRSAEncryption 99:6a:8f:c8:42:1b:17:5b:26:37:f3:ac:21:1a:ad:11:c5:c5: 78:70:7f:cf:68:09:bf:ff:44:51:b6:c1:a1:ee:15:c1:0f:5a: 19:b9:ac:30:02:ad:19:59:0a:04:98:53:cb:53:ea:22:31:ef: 19:79:ed:21:80:2d:bb:a4:46:2a:5e:74:7a:4c:ee:6e:d5:df: 74:71:ae:0d:51:57:87:0b:9d:4d:ad:e2:38:f8:19:52:36:ad: 24:2e:e0:ff:41:97:af:ba:db:60:e1:58:bd:1e:c8:be:9f:be: 13:12:94:08:66:f2:cf:7a:e7:ae:05:2f:69:31:8f:7f:a1:f3: 6d:87:7c:cc:22:1b:57:76:c8:63:eb:82:10:d6:e3:b8:14:ce: 1f:23:a2:72:ab:6c:fb:1b:27:76:16:d8:fb:89:ac:40:07:1b: 6b:a0:cf:ea:74:46:09:52:19:df:0a:13:78:4d:08:e1:2e:12: bb:ed:20:9b:27:4c:2b:ce:82:ae:38:0c:4b:e6:2e:08:e7:ac: db:70:d4:5a:98:99:e8:3c:68:86:dd:00:f4:ab:d7:82:ed:3b: dd:a2:a5:90:33:b3:0f:94:5a:c7:0d:70:ed:ea:b5:d1:68:58: c6:e9:ec:72:9c:64:de:df:b4:29:75:44:1b:d4:e1:2b:4e:a1: 70:e5:04:47 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZrKQjXevZ1ahcrdvcp9lFOSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViYzE1MDM2MTBiZjgyZDg2ODdiN2FlZmI4NzlhNjU3ODcw NGYzMmEwHhcNMjUxMTI4MTEzODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2FjYzkyM2I3Y2I2OWE4ZDNjMzE4YTM4NzJjNTI1Yzc3ZjQ3M2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQg3uTUmIDc6ZFArV6ebDQtZn4Q+ Bl5PecMVHY2NOdGsI5v+wsKc6XcunC0qKpdIWaZHCt2NsiABJx1tHP5HCCqyOfXd jMctON/QcD3W5C7l6+P6ubHQv0KrHPa9AWDa7YCje++Pdb8sUPrfU8ABHGpdRv+P ji8Udrd+/9k0mEIWA1KnMjbZNp9uMQhk9Q5++LtE0xj/Ja0hLpfV12vEd+eNj0cf 97qGKJSPRoJoVxLOdWbMQWG47gKS35ODski0qhlLEMD9sptjF6y1oGTSZhfw956f txySb83MUsNx46K6NixutIAgVvr6l1BvVmBodiX+KvC0c1agRyRGqOXa+QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFKesySO3y2mo08MYo4csUlx39HPwMB8GA1UdIwQY MBaAFFvBUDYQv4LYaHt677h5pleHBPMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzhGUU5oQ19ndGhvZTNydnVIbW1WNGNFOHlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8zMGEzMDktYjE4ZS00ZjI3LThlN2Ut ZTdiMzcyZTRjN2M1LzEvcDZ6Skk3ZkxhYWpUd3hpamh5eFNYSGYwY19BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny8zMGEzMDktYjE4ZS00ZjI3LThlN2UtZTdiMzcyZTRjN2M1 LzEvVzhGUU5oQ19ndGhvZTNydnVIbW1WNGNFOHlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuYSMAwQA ubcTMA0EAgACMAcDBQMqBuJAMA0GCSqGSIb3DQEBCwUAA4IBAQCZao/IQhsXWyY3 86whGq0RxcV4cH/PaAm//0RRtsGh7hXBD1oZuawwAq0ZWQoEmFPLU+oiMe8Zee0h gC27pEYqXnR6TO5u1d90ca4NUVeHC51NreI4+BlSNq0kLuD/QZevuttg4Vi9Hsi+ n74TEpQIZvLPeueuBS9pMY9/ofNth3zMIhtXdshj64IQ1uO4FM4fI6Jyq2z7Gyd2 Ftj7iaxABxtroM/qdEYJUhnfChN4TQjhLhK77SCbJ0wrzoKuOAxL5i4I56zbcNRa mJnoPGiG3QD0q9eC7TvdoqWQM7MPlFrHDXDt6rXRaFjG6exynGTe37QpdUQb1OEr TqFw5QRH -----END CERTIFICATE-----Generated at Sat Dec 6 14:54:37 2025 by rpki-client