This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/6Y0BMysGtqFOncNKoV1mFL8gtK8.roa File: 6Y0BMysGtqFOncNKoV1mFL8gtK8.roa (raw, json) Hash identifier: bzW1jVkDO7MNGbEtIfzohL9NB4x4x/NSC3JqJKWeLDg= Subject key identifier: E9:8D:01:33:2B:06:B6:A1:4E:9D:C3:4A:A1:5D:66:14:BF:20:B4:AF Certificate issuer: /CN=9577345dfcc93478c5ff221d482ee4c98483f908 Certificate serial: 019AEED5F0E3FCDEE08959DCDBD8454744C1 Authority key identifier: 95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/6Y0BMysGtqFOncNKoV1mFL8gtK8.roa Signing time: Fri 05 Dec 2025 14:06:29 +0000 ROA not before: Fri 05 Dec 2025 14:06:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 216083 IP address blocks: 5.42.148.0/22 maxlen: 24 195.68.234.0/23 maxlen: 23 195.68.234.0/24 maxlen: 24 195.68.235.0/24 maxlen: 24 2a14:1a00::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:d5:f0:e3:fc:de:e0:89:59:dc:db:d8:45:47:44:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9577345dfcc93478c5ff221d482ee4c98483f908 Validity Not Before: Dec 5 14:06:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e98d01332b06b6a14e9dc34aa15d6614bf20b4af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c1:24:f7:2a:48:a3:8b:e9:1e:db:ee:10:17: a0:83:9b:97:44:ed:0d:8f:c8:72:1e:2d:6f:ec:b0: 0e:f0:45:24:18:fe:90:d7:9d:db:da:fc:be:ac:d7: 33:73:0e:4f:43:6a:6b:00:36:8e:c7:6e:3a:67:44: 59:a1:3d:97:a4:7f:1e:e6:be:ac:20:a9:bb:1e:3f: b6:cb:18:9c:65:5c:62:f5:cf:0b:57:23:4e:c6:0c: 7e:5d:12:3d:5b:9f:a9:a2:cd:26:db:47:ea:f0:6d: 80:ff:86:2c:df:52:4e:c6:b7:0a:0d:89:3f:58:a3: 54:75:7a:ba:83:8e:1c:40:36:3a:0a:6b:bc:64:2c: df:ff:b5:19:e0:cd:94:27:14:7f:18:d3:72:5b:ef: 94:aa:f7:c3:8b:0a:dc:ca:d0:ee:0d:1f:4b:6c:dc: 79:60:66:b6:61:4f:b8:48:bf:e1:33:29:79:e8:9b: 6d:b3:4c:c3:47:e6:d2:88:0f:76:2f:9f:62:1e:55: 7f:24:c7:80:ad:07:0b:01:e4:61:e2:35:c8:ff:17: c8:df:06:f0:e0:9a:26:8e:95:d8:36:ef:4e:26:0e: 95:5e:f7:64:ee:7f:f5:d7:10:83:84:56:67:2d:cc: 05:cb:bf:85:47:7e:f5:29:16:ab:d3:22:0c:f6:8f: ea:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:8D:01:33:2B:06:B6:A1:4E:9D:C3:4A:A1:5D:66:14:BF:20:B4:AF X509v3 Authority Key Identifier: keyid:95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/6Y0BMysGtqFOncNKoV1mFL8gtK8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.42.148.0/22 195.68.234.0/23 IPv6: 2a14:1a00::/29 Signature Algorithm: sha256WithRSAEncryption 08:62:6c:68:b2:f0:35:37:88:9f:a5:67:87:0e:24:27:b3:22: 96:b9:32:4d:c2:24:92:c7:17:f6:f4:e4:c0:da:63:82:48:40: 31:33:1b:49:9e:78:20:3a:14:31:d6:3e:c0:2c:ef:b1:59:b5: ae:3d:f0:8e:17:e9:09:2c:98:4f:65:3d:ac:b7:f8:08:9d:4c: 78:8c:67:2d:a6:26:f8:66:2c:b4:9c:54:61:c6:8e:59:28:c2: 22:df:b4:7b:ab:04:af:0f:61:08:14:0a:35:63:7b:b9:0b:84: ec:88:d6:8a:09:7f:76:77:69:36:ed:b2:b1:1a:6b:2d:ae:a7: f5:8b:ea:b9:1f:2b:6d:13:14:dc:2a:44:dd:f1:e5:40:cf:5d: a4:eb:dd:13:eb:2a:cb:da:40:02:70:39:db:47:6a:93:21:a4: 6c:d3:a8:b5:5c:38:78:52:96:11:8e:10:74:e0:fc:39:ee:79: 46:0d:88:ec:ed:db:ae:0e:ca:54:f8:b4:2b:cd:bc:55:ec:81: b1:c4:a0:6e:06:14:b0:c7:43:b9:61:92:45:3e:48:8f:17:d2: ed:38:c4:f5:d6:a6:42:ab:b4:d6:82:81:0e:01:7b:28:06:ed: 51:87:42:34:1f:8b:9b:4c:75:36:40:bb:3b:b5:85:13:b9:1c: 2f:3f:9d:0b -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZru1fDj/N7giVnc29hFR0TBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NzczNDVkZmNjOTM0NzhjNWZmMjIxZDQ4MmVlNGM5ODQ4 M2Y5MDgwHhcNMjUxMjA1MTQwNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOThkMDEzMzJiMDZiNmExNGU5ZGMzNGFhMTVkNjYxNGJmMjBiNGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sEk9ypIo4vpHtvuEBegg5uXRO0N j8hyHi1v7LAO8EUkGP6Q153b2vy+rNczcw5PQ2prADaOx246Z0RZoT2XpH8e5r6s IKm7Hj+2yxicZVxi9c8LVyNOxgx+XRI9W5+pos0m20fq8G2A/4Ys31JOxrcKDYk/ WKNUdXq6g44cQDY6Cmu8ZCzf/7UZ4M2UJxR/GNNyW++UqvfDiwrcytDuDR9LbNx5 YGa2YU+4SL/hMyl56Jtts0zDR+bSiA92L59iHlV/JMeArQcLAeRh4jXI/xfI3wbw 4JomjpXYNu9OJg6VXvdk7n/11xCDhFZnLcwFy7+FR371KRar0yIM9o/qKwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFOmNATMrBrahTp3DSqFdZhS/ILSvMB8GA1UdIwQY MBaAFJV3NF38yTR4xf8iHUgu5MmEg/kIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFhjMFhmekpOSGpGX3lJZFNDN2t5WVNELVFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9iMTZmNjYtMmFmNC00NjNlLTk3ODUt NDMzZjVmYTRmOTAxLzEvNlkwQk15c0d0cUZPbmNOS29WMW1GTDhndEs4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9iMTZmNjYtMmFmNC00NjNlLTk3ODUtNDMzZjVmYTRmOTAx LzEvbFhjMFhmekpOSGpGX3lJZFNDN2t5WVNELVFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCBSqUAwQB w0TqMA0EAgACMAcDBQMqFBoAMA0GCSqGSIb3DQEBCwUAA4IBAQAIYmxosvA1N4if pWeHDiQnsyKWuTJNwiSSxxf29OTA2mOCSEAxMxtJnnggOhQx1j7ALO+xWbWuPfCO F+kJLJhPZT2st/gInUx4jGctpib4Ziy0nFRhxo5ZKMIi37R7qwSvD2EIFAo1Y3u5 C4TsiNaKCX92d2k27bKxGmstrqf1i+q5HyttExTcKkTd8eVAz12k690T6yrL2kAC cDnbR2qTIaRs06i1XDh4UpYRjhB04Pw57nlGDYjs7duuDspU+LQrzbxV7IGxxKBu BhSwx0O5YZJFPkiPF9LtOMT11qZCq7TWgoEOAXsoBu1Rh0I0H4ubTHU2QLs7tYUT uRwvP50L -----END CERTIFICATE-----Generated at Sat Dec 6 18:22:29 2025 by rpki-client