This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/6vvVzQkEayT-sKwWlVAPXHp5ujQ.roa File: 6vvVzQkEayT-sKwWlVAPXHp5ujQ.roa (raw, json) Hash identifier: hbQHUjPH/g+s8yCzoA2SyiJe+7mC/9L+htWgYPmde/Q= Subject key identifier: EA:FB:D5:CD:09:04:6B:24:FE:B0:AC:16:95:50:0F:5C:7A:79:BA:34 Certificate issuer: /CN=90b8a15466c3ff1e915d780a10b0baa9ad694860 Certificate serial: 019AA0FB9D53125AB8DE8D0652647156BC2F Authority key identifier: 90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/6vvVzQkEayT-sKwWlVAPXHp5ujQ.roa Signing time: Thu 20 Nov 2025 11:17:15 +0000 ROA not before: Thu 20 Nov 2025 11:17:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 59611 IP address blocks: 91.245.80.0/21 maxlen: 21 195.20.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a0:fb:9d:53:12:5a:b8:de:8d:06:52:64:71:56:bc:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90b8a15466c3ff1e915d780a10b0baa9ad694860 Validity Not Before: Nov 20 11:17:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=eafbd5cd09046b24feb0ac1695500f5c7a79ba34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4c:69:53:51:03:d3:a9:8e:79:52:a3:a1:a1: 09:38:1d:39:56:c8:91:79:4d:2f:f6:ae:ad:d8:9e: 1f:52:31:23:5e:79:7b:2e:ef:0c:66:55:d8:a1:dd: e7:43:16:3e:48:92:a2:e4:93:9d:9a:a9:37:59:56: f9:21:04:eb:7d:cf:87:fa:e7:df:a7:3a:e7:52:92: 67:75:bc:ad:0a:84:f7:a2:75:74:e9:ab:1e:df:ab: 57:fe:e4:5d:e5:f0:0c:97:1d:ce:a0:b2:de:61:18: 4a:2d:a2:a6:3c:28:f9:e0:73:0e:61:c0:be:c4:bc: c2:d2:24:de:31:82:e2:60:5d:59:06:78:44:9d:8f: 30:f5:6e:21:a6:46:fd:f3:7a:83:be:79:0d:d6:17: eb:4f:a7:8f:6e:36:79:68:e3:29:fe:ba:13:bb:c8: 60:59:e4:58:87:ba:6b:ae:31:55:72:42:cc:2d:f4: f9:dd:d0:bc:35:fe:00:90:fa:92:18:06:34:1d:12: 0b:60:0f:f1:ac:a7:0c:c6:15:43:2f:a0:69:7e:84: 99:62:87:9b:a3:5e:35:26:c6:5b:13:07:b4:1b:87: f8:a4:2f:7f:78:6b:11:c8:4f:c8:85:f2:9a:ea:84: ac:1f:3c:ff:83:9f:af:20:4a:b9:bd:95:53:e2:33: ad:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:FB:D5:CD:09:04:6B:24:FE:B0:AC:16:95:50:0F:5C:7A:79:BA:34 X509v3 Authority Key Identifier: keyid:90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/6vvVzQkEayT-sKwWlVAPXHp5ujQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.245.80.0/21 195.20.200.0/23 Signature Algorithm: sha256WithRSAEncryption ac:75:e3:40:ed:76:2f:2d:39:15:ff:6b:78:5c:b4:6c:56:1c: 15:b4:ee:69:8b:5b:26:90:a7:e3:ff:80:2a:7e:08:c2:47:88: 6a:3e:ac:f9:98:ea:55:93:c5:a1:7e:3e:66:43:c3:ae:ab:0c: a2:53:1b:84:6e:e7:24:94:92:99:cc:0a:e5:a1:d7:11:86:b9: d7:32:c5:9a:33:77:6a:34:95:84:8a:16:07:4e:2b:f0:67:bc: f3:7a:54:e2:6d:0f:80:0c:b0:0f:ed:92:05:ce:38:28:e7:de: 21:9b:60:06:79:7c:55:7b:c9:b4:1d:0e:db:75:dd:ef:d1:3c: 6e:08:4f:02:dc:ae:bc:45:8e:01:ea:b0:61:bc:38:df:b7:05: 7e:6f:d9:00:23:e1:d5:2c:6b:fa:3f:77:f2:e2:8b:34:9f:90: 6f:13:bc:4f:31:b2:a6:1f:7e:87:0c:b0:37:7a:42:a5:4f:2f: 5b:a3:de:0d:70:85:a5:6f:70:21:d9:4f:3b:d7:93:9e:50:90: 4f:31:dd:0c:2b:df:a5:4e:1a:48:90:28:51:24:3d:25:aa:aa: a2:54:fc:89:b5:0d:40:ba:9d:ca:33:6c:1c:6c:ac:0e:21:7b: a9:9d:c3:be:e6:d4:0a:0d:8a:ee:d4:03:45:b0:3a:66:b8:4b: 53:a9:8c:30 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqg+51TElq43o0GUmRxVrwvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwYjhhMTU0NjZjM2ZmMWU5MTVkNzgwYTEwYjBiYWE5YWQ2 OTQ4NjAwHhcNMjUxMTIwMTExNzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWZiZDVjZDA5MDQ2YjI0ZmViMGFjMTY5NTUwMGY1YzdhNzliYTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwExpU1ED06mOeVKjoaEJOB05VsiR eU0v9q6t2J4fUjEjXnl7Lu8MZlXYod3nQxY+SJKi5JOdmqk3WVb5IQTrfc+H+uff pzrnUpJndbytCoT3onV06ase36tX/uRd5fAMlx3OoLLeYRhKLaKmPCj54HMOYcC+ xLzC0iTeMYLiYF1ZBnhEnY8w9W4hpkb983qDvnkN1hfrT6ePbjZ5aOMp/roTu8hg WeRYh7prrjFVckLMLfT53dC8Nf4AkPqSGAY0HRILYA/xrKcMxhVDL6BpfoSZYoeb o141JsZbEwe0G4f4pC9/eGsRyE/IhfKa6oSsHzz/g5+vIEq5vZVT4jOtQQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOr71c0JBGsk/rCsFpVQD1x6ebo0MB8GA1UdIwQY MBaAFJC4oVRmw/8ekV14ChCwuqmtaUhgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0xpaFZHYkRfeDZSWFhnS0VMQzZxYTFwU0dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9hMmRmNDQtMzhiMi00ZDEyLTgzNDct NzhlOTk3ODY5OTUyLzEvNnZ2VnpRa0VheVQtc0t3V2xWQVBYSHA1dWpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9hMmRmNDQtMzhiMi00ZDEyLTgzNDctNzhlOTk3ODY5OTUy LzEva0xpaFZHYkRfeDZSWFhnS0VMQzZxYTFwU0dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDW/VQAwQB wxTIMA0GCSqGSIb3DQEBCwUAA4IBAQCsdeNA7XYvLTkV/2t4XLRsVhwVtO5pi1sm kKfj/4AqfgjCR4hqPqz5mOpVk8Whfj5mQ8OuqwyiUxuEbucklJKZzArlodcRhrnX MsWaM3dqNJWEihYHTivwZ7zzelTibQ+ADLAP7ZIFzjgo594hm2AGeXxVe8m0HQ7b dd3v0TxuCE8C3K68RY4B6rBhvDjftwV+b9kAI+HVLGv6P3fy4os0n5BvE7xPMbKm H36HDLA3ekKlTy9bo94NcIWlb3Ah2U8715OeUJBPMd0MK9+lThpIkChRJD0lqqqi VPyJtQ1Aup3KM2wcbKwOIXupncO+5tQKDYru1ANFsDpmuEtTqYww -----END CERTIFICATE-----Generated at Sat Dec 6 13:31:00 2025 by rpki-client