This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/sC6hTHceQWLDMM011RpCackLo6w.roa File: sC6hTHceQWLDMM011RpCackLo6w.roa (raw, json) Hash identifier: 5nD1+okP6qCATYfkMX1MFPDQStP6LJfnX1QHLzdrNNs= Subject key identifier: B0:2E:A1:4C:77:1E:41:62:C3:30:CD:35:D5:1A:42:69:C9:0B:A3:AC Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019AA040CC4120739646E733972E4D83B16B Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/sC6hTHceQWLDMM011RpCackLo6w.roa Signing time: Thu 20 Nov 2025 07:53:12 +0000 ROA not before: Thu 20 Nov 2025 07:53:12 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 21859 IP address blocks: 155.2.218.0/24 maxlen: 24 155.2.219.0/24 maxlen: 24 158.173.202.0/24 maxlen: 24 158.173.204.0/24 maxlen: 24 192.253.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a0:40:cc:41:20:73:96:46:e7:33:97:2e:4d:83:b1:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Nov 20 07:53:12 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b02ea14c771e4162c330cd35d51a4269c90ba3ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:79:35:57:3f:93:61:37:6a:31:f6:50:1c:2c: 18:0b:fc:cf:5b:17:e7:e9:fb:43:4b:87:cc:47:3f: ab:a0:1a:07:2a:89:2f:a7:c9:ab:5d:08:01:81:7b: 68:52:c1:9f:4d:1e:f2:e6:b7:7a:23:fc:dc:fd:19: 8e:3a:2b:4d:eb:a6:7b:8f:8c:4b:b7:81:dd:72:1b: 87:99:d5:13:37:2d:9e:ea:24:50:c0:81:f3:0e:c5: c3:71:06:29:5f:26:9d:f0:b9:f9:52:c3:01:25:21: 32:85:ca:64:55:4c:48:fe:75:39:99:39:c9:5f:f0: 2d:49:66:f1:e2:47:33:ab:ba:6e:9a:b6:1a:69:6c: da:af:5d:90:39:a1:84:94:c9:4f:62:04:4d:b2:75: fe:e8:14:10:ab:53:b1:83:1b:a8:23:9d:21:4a:7b: 58:41:46:49:5e:18:d1:1f:28:13:bb:e9:46:2a:c6: 6b:6a:aa:c4:06:ac:7b:80:6b:40:c3:b7:74:97:a2: a6:49:4a:90:5a:7d:da:60:cc:b8:60:80:67:eb:9e: 07:fb:29:ee:72:44:87:c9:42:a4:d3:0a:81:0a:62: fa:98:5f:e8:f3:55:7f:21:b0:99:10:73:f6:03:ef: 20:cb:fb:4f:cc:6a:85:08:bb:e0:12:a0:a6:b5:d2: e6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:2E:A1:4C:77:1E:41:62:C3:30:CD:35:D5:1A:42:69:C9:0B:A3:AC X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/sC6hTHceQWLDMM011RpCackLo6w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.2.218.0/23 158.173.202.0/24 158.173.204.0/24 192.253.210.0/24 Signature Algorithm: sha256WithRSAEncryption 24:83:40:0b:84:07:a8:b8:61:d4:50:6a:4f:ed:d9:87:42:71: a1:0d:c2:dc:59:ca:c9:d4:ad:fc:5d:6f:0f:d9:00:84:96:9d: 8d:d6:aa:fb:1c:f9:c9:ae:bb:2c:ca:e5:43:8e:af:7b:ac:35: 0c:11:6f:a6:01:33:41:5d:88:4a:ff:90:59:a4:3c:cc:b0:05: 50:b9:e9:08:34:53:f7:fc:d2:f8:6c:9b:b2:36:9b:ba:59:f8: 5b:37:5f:a9:8f:53:64:c1:d7:7e:5b:fb:4c:b1:cd:73:4a:48: 0e:18:a5:70:ea:62:50:8f:cd:e1:b1:13:50:3d:77:48:f8:a7: 4d:fc:e1:f1:13:de:b7:1d:6e:71:4e:3b:b4:97:05:0b:ab:38: 5d:8b:a3:ce:3d:5a:30:51:b5:27:25:3a:d1:6c:1a:39:bb:28: 95:34:d6:51:25:f0:a5:f1:52:ae:8c:c8:f1:a1:55:89:cc:56: 74:85:d4:ab:08:e2:62:7f:66:6f:b5:1c:8b:b1:32:0e:ac:a4: 5c:06:8c:5d:ff:d1:64:d2:3b:6f:07:71:c2:6d:cf:6a:5d:c5: 54:30:e4:62:0e:9a:e6:54:76:f7:61:35:b8:00:bf:34:67:d5: b7:32:9b:72:88:83:5d:47:14:21:ad:55:09:a0:09:c5:3b:19: 3d:d2:a1:b7 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZqgQMxBIHOWRuczly5Ng7FrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjUxMTIwMDc1MzEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDJlYTE0Yzc3MWU0MTYyYzMzMGNkMzVkNTFhNDI2OWM5MGJhM2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnk1Vz+TYTdqMfZQHCwYC/zPWxfn 6ftDS4fMRz+roBoHKokvp8mrXQgBgXtoUsGfTR7y5rd6I/zc/RmOOitN66Z7j4xL t4HdchuHmdUTNy2e6iRQwIHzDsXDcQYpXyad8Ln5UsMBJSEyhcpkVUxI/nU5mTnJ X/AtSWbx4kczq7pumrYaaWzar12QOaGElMlPYgRNsnX+6BQQq1OxgxuoI50hSntY QUZJXhjRHygTu+lGKsZraqrEBqx7gGtAw7d0l6KmSUqQWn3aYMy4YIBn654H+ynu ckSHyUKk0wqBCmL6mF/o81V/IbCZEHP2A+8gy/tPzGqFCLvgEqCmtdLmbQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFLAuoUx3HkFiwzDNNdUaQmnJC6OsMB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvc0M2aFRIY2VRV0xETU0wMTFScENhY2tMbzZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBmwLaAwQA nq3KAwQAnq3MAwQAwP3SMA0GCSqGSIb3DQEBCwUAA4IBAQAkg0ALhAeouGHUUGpP 7dmHQnGhDcLcWcrJ1K38XW8P2QCElp2N1qr7HPnJrrssyuVDjq97rDUMEW+mATNB XYhK/5BZpDzMsAVQuekINFP3/NL4bJuyNpu6WfhbN1+pj1Nkwdd+W/tMsc1zSkgO GKVw6mJQj83hsRNQPXdI+KdN/OHxE963HW5xTju0lwULqzhdi6POPVowUbUnJTrR bBo5uyiVNNZRJfCl8VKujMjxoVWJzFZ0hdSrCOJif2ZvtRyLsTIOrKRcBoxd/9Fk 0jtvB3HCbc9qXcVUMORiDprmVHb3YTW4AL80Z9W3MptyiINdRxQhrVUJoAnFOxk9 0qG3 -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:54 2025 by rpki-client