This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/L6F3hMFG6OHpYjqYf1l-WbKWZXk.roa File: L6F3hMFG6OHpYjqYf1l-WbKWZXk.roa (raw, json) Hash identifier: 8j/OG5YeGp1EWqfzfGru7P5HJ0XCSggNNNfREFm5M8U= Subject key identifier: 2F:A1:77:84:C1:46:E8:E1:E9:62:3A:98:7F:59:7E:59:B2:96:65:79 Certificate issuer: /CN=a5d4a5a5d14c8a3b8cb94d1cb46c0d6e2a1c4847 Certificate serial: 019A9E17DC963E734005ED87DFA0668CBE79 Authority key identifier: A5:D4:A5:A5:D1:4C:8A:3B:8C:B9:4D:1C:B4:6C:0D:6E:2A:1C:48:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdSlpdFMijuMuU0ctGwNbiocSEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/L6F3hMFG6OHpYjqYf1l-WbKWZXk.roa Signing time: Wed 19 Nov 2025 21:49:15 +0000 ROA not before: Wed 19 Nov 2025 21:49:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203409 IP address blocks: 185.185.172.0/24 maxlen: 24 185.185.173.0/24 maxlen: 24 185.185.174.0/24 maxlen: 24 185.185.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.crl rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.mft rsync://rpki.ripe.net/repository/DEFAULT/pdSlpdFMijuMuU0ctGwNbiocSEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9e:17:dc:96:3e:73:40:05:ed:87:df:a0:66:8c:be:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5d4a5a5d14c8a3b8cb94d1cb46c0d6e2a1c4847 Validity Not Before: Nov 19 21:49:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2fa17784c146e8e1e9623a987f597e59b2966579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e5:e5:e0:49:d7:5e:30:8c:17:1c:6b:5b:68: d1:b0:de:62:d0:d4:f4:f5:69:9a:fd:0a:99:29:e5: 33:b6:7c:ed:33:de:fd:2a:f4:60:6f:55:b7:e5:18: 8b:62:21:89:fe:a9:29:9e:ad:02:32:b0:c3:d6:77: 90:6b:55:45:5e:17:70:eb:3e:55:22:4a:5c:a9:2e: 9d:63:75:d5:db:39:12:c5:52:18:b8:c8:4b:fb:88: f4:5a:40:43:dc:31:df:1b:ed:fb:50:3c:6a:12:dc: b7:70:cf:d1:ac:2a:e4:c1:b2:72:14:bc:aa:03:50: f5:ce:7b:22:52:33:d5:b9:41:d9:a1:96:e3:6e:fb: 70:ce:34:35:51:70:75:0a:a3:50:d2:f5:10:14:8b: 09:78:cd:cc:cd:ef:e5:46:39:4c:e8:01:15:30:2a: 44:b4:f3:83:ad:2c:c0:6a:35:e8:09:62:d6:d9:ca: 1f:3d:a3:19:f4:49:62:f8:47:8d:20:3f:3e:79:0d: d2:0a:b1:b7:45:cc:72:b0:ab:a4:97:b6:f5:9f:cc: 5d:ec:a1:0d:0f:f5:de:ee:fc:9e:35:7e:d4:bf:ef: 1a:91:cc:39:f1:32:4e:fc:80:d9:3a:1f:63:3b:e6: 1b:42:19:79:dc:58:06:6c:b7:6b:8a:04:93:3f:31: b8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:A1:77:84:C1:46:E8:E1:E9:62:3A:98:7F:59:7E:59:B2:96:65:79 X509v3 Authority Key Identifier: keyid:A5:D4:A5:A5:D1:4C:8A:3B:8C:B9:4D:1C:B4:6C:0D:6E:2A:1C:48:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdSlpdFMijuMuU0ctGwNbiocSEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/L6F3hMFG6OHpYjqYf1l-WbKWZXk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.185.172.0/22 Signature Algorithm: sha256WithRSAEncryption 5c:e9:94:09:99:b7:dc:a1:67:0c:af:d7:8f:bd:c4:f6:7a:7d: fb:6c:a9:11:f3:eb:ac:93:02:af:bf:9c:56:2e:03:93:87:09: 14:5a:e8:34:95:ef:aa:b9:24:b4:b1:13:cc:38:52:14:80:70: b2:46:20:1f:3b:98:77:17:6c:5c:a0:8d:1e:55:68:3e:53:f6: 17:d3:1c:76:88:40:2e:04:2a:20:28:f2:f7:57:e4:14:60:c3: f8:36:d9:d3:e9:63:c7:27:aa:a3:0b:83:be:cf:69:e9:ad:a2: a8:bf:c8:a8:30:ec:19:e7:f7:84:78:da:1e:78:14:2f:e4:46: 79:d6:5a:6d:47:fb:8e:6e:f7:b1:c3:5d:d2:ed:bc:78:19:b5: 4b:d6:af:15:54:d3:c5:02:4c:89:9e:e2:93:e6:fd:1f:08:13: 77:c3:ec:7a:92:52:71:e7:d8:55:8e:88:91:50:77:ca:df:4b: c6:6f:49:02:b1:de:81:e1:57:87:8e:cc:a8:0a:a6:83:2c:8e: c0:5b:5a:f3:25:d9:0f:ab:a5:03:0b:9c:ab:38:1d:aa:48:14: 7e:59:a5:c4:03:9d:b8:fc:df:2e:30:d7:5a:da:ce:8c:b4:b0: c3:1c:25:ae:16:70:3e:dc:48:74:d4:41:b0:76:43:a8:b1:35: ae:d4:e2:40 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqeF9yWPnNABe2H36BmjL55MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1ZDRhNWE1ZDE0YzhhM2I4Y2I5NGQxY2I0NmMwZDZlMmEx YzQ4NDcwHhcNMjUxMTE5MjE0OTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZmExNzc4NGMxNDZlOGUxZTk2MjNhOTg3ZjU5N2U1OWIyOTY2NTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+Xl4EnXXjCMFxxrW2jRsN5i0NT0 9Wma/QqZKeUztnztM979KvRgb1W35RiLYiGJ/qkpnq0CMrDD1neQa1VFXhdw6z5V IkpcqS6dY3XV2zkSxVIYuMhL+4j0WkBD3DHfG+37UDxqEty3cM/RrCrkwbJyFLyq A1D1znsiUjPVuUHZoZbjbvtwzjQ1UXB1CqNQ0vUQFIsJeM3Mze/lRjlM6AEVMCpE tPODrSzAajXoCWLW2cofPaMZ9Eli+EeNID8+eQ3SCrG3RcxysKukl7b1n8xd7KEN D/Xe7vyeNX7Uv+8akcw58TJO/IDZOh9jO+YbQhl53FgGbLdrigSTPzG44wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC+hd4TBRujh6WI6mH9ZflmylmV5MB8GA1UdIwQY MBaAFKXUpaXRTIo7jLlNHLRsDW4qHEhHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGRTbHBkRk1panVNdVUwY3RHd05iaW9jU0VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC82ZDg1ZWEtZjc0YS00NjRiLWI0YTIt MjJjMDhkY2JmNTcyLzEvTDZGM2hNRkc2T0hwWWpxWWYxbC1XYktXWlhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC82ZDg1ZWEtZjc0YS00NjRiLWI0YTItMjJjMDhkY2JmNTcy LzEvcGRTbHBkRk1panVNdVUwY3RHd05iaW9jU0VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubmsMA0G CSqGSIb3DQEBCwUAA4IBAQBc6ZQJmbfcoWcMr9ePvcT2en37bKkR8+uskwKvv5xW LgOThwkUWug0le+quSS0sRPMOFIUgHCyRiAfO5h3F2xcoI0eVWg+U/YX0xx2iEAu BCogKPL3V+QUYMP4NtnT6WPHJ6qjC4O+z2npraKov8ioMOwZ5/eEeNoeeBQv5EZ5 1lptR/uObvexw13S7bx4GbVL1q8VVNPFAkyJnuKT5v0fCBN3w+x6klJx59hVjoiR UHfK30vGb0kCsd6B4VeHjsyoCqaDLI7AW1rzJdkPq6UDC5yrOB2qSBR+WaXEA524 /N8uMNda2s6MtLDDHCWuFnA+3Eh01EGwdkOosTWu1OJA -----END CERTIFICATE-----Generated at Sat Dec 6 14:05:26 2025 by rpki-client