This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/86dVkhKjbFpJgllgLzuidaZO0FI.roa File: 86dVkhKjbFpJgllgLzuidaZO0FI.roa (raw, json) Hash identifier: GibbvgXaC4YuMyvO6ogrZ7XtFa4wmuVDdxbg7+26bAY= Subject key identifier: F3:A7:55:92:12:A3:6C:5A:49:82:59:60:2F:3B:A2:75:A6:4E:D0:52 Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Certificate serial: 019AE42C718CC28D4EDE8EBADD1D969FF176 Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/86dVkhKjbFpJgllgLzuidaZO0FI.roa Signing time: Wed 03 Dec 2025 12:25:09 +0000 ROA not before: Wed 03 Dec 2025 12:25:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203279 IP address blocks: 81.15.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e4:2c:71:8c:c2:8d:4e:de:8e:ba:dd:1d:96:9f:f1:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Validity Not Before: Dec 3 12:25:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f3a7559212a36c5a498259602f3ba275a64ed052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:89:e4:db:f2:2b:0a:a8:6e:30:63:1e:72:04: 35:a0:2d:5a:fc:20:07:52:73:b8:e5:c8:b6:7e:b3: 6e:b9:ad:3c:08:03:b7:13:10:09:ad:d0:9b:98:94: 7d:8d:9f:c8:00:84:7f:15:ef:e6:34:6c:cb:73:27: d8:42:40:30:19:8d:09:d9:fa:2f:a0:07:16:b1:6d: 79:2b:7d:19:72:1d:98:96:6f:8e:19:4a:54:57:0f: 3d:3c:72:f7:03:c9:01:38:5c:7a:a8:75:d0:30:ff: 0a:b6:94:73:8e:5b:7c:72:8c:b8:3d:4c:bb:5b:d1: c7:36:69:86:89:61:df:d7:1f:b9:3f:3e:67:a1:e3: 44:61:c6:9b:1c:7c:26:98:7e:9c:10:82:2b:5c:23: 95:de:68:8a:0f:c5:dd:5a:e4:fb:bd:6d:dd:c0:27: e2:27:c5:45:08:32:03:fe:d8:6a:10:43:65:47:4c: 6b:67:76:ed:66:2a:23:37:5f:18:0f:0f:fe:49:55: e3:32:d8:44:61:10:5e:b4:54:e6:f1:0f:8c:1f:8b: 76:20:a3:64:25:aa:22:f9:b8:fc:48:4c:1f:bb:bc: 73:f2:ef:1b:58:10:80:ab:c3:30:46:1a:67:70:4a: 0e:e0:e0:b6:19:b6:52:3e:e2:21:ca:54:56:83:dc: 27:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:A7:55:92:12:A3:6C:5A:49:82:59:60:2F:3B:A2:75:A6:4E:D0:52 X509v3 Authority Key Identifier: keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/86dVkhKjbFpJgllgLzuidaZO0FI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.15.237.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:6c:d8:43:49:57:1c:cf:05:7a:5c:97:5f:a1:43:a0:24:48: 4a:c2:53:bf:4d:59:91:bc:49:2b:21:57:bf:3b:86:70:b2:b1: c6:ac:e9:d7:b0:02:50:ad:75:03:e6:ce:97:b0:ba:69:dd:ec: 19:0f:b5:79:0f:d2:85:bf:fb:8c:cb:e5:f0:11:78:79:9e:7b: ef:b3:d0:1e:39:02:0b:83:30:29:5a:53:30:0b:18:75:0d:b1: 94:de:4d:10:4f:0d:19:b2:a6:6c:0f:81:af:b5:3a:59:46:21: d9:60:e6:39:e0:41:df:e0:8f:e7:54:e4:2a:26:66:6e:d0:ae: 09:ce:75:f2:7d:f6:f5:5e:a2:63:c0:29:a1:92:50:c5:32:99: b1:f2:5b:de:f4:a7:32:f1:00:a3:08:a8:39:a1:4f:62:74:52: d6:2f:ff:21:98:14:b2:d6:f0:b2:0b:b8:9f:87:eb:64:58:59: 71:e1:9d:e7:52:3c:d9:09:4c:77:1a:cd:57:d3:6a:41:12:6d: 3c:46:08:75:87:79:ce:e6:ec:b4:eb:bd:70:16:8c:80:fb:de: 96:fe:3f:db:23:24:2f:34:b9:7f:9f:46:62:a7:3c:ed:1e:fe: 7f:49:bf:c6:ba:9f:9d:97:b8:79:c4:39:3d:7f:ad:4a:d4:b4: 4f:2c:af:22 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrkLHGMwo1O3o663R2Wn/F2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj MmQ3NmIwHhcNMjUxMjAzMTIyNTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmM2E3NTU5MjEyYTM2YzVhNDk4MjU5NjAyZjNiYTI3NWE2NGVkMDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuonk2/IrCqhuMGMecgQ1oC1a/CAH UnO45ci2frNuua08CAO3ExAJrdCbmJR9jZ/IAIR/Fe/mNGzLcyfYQkAwGY0J2fov oAcWsW15K30Zch2Ylm+OGUpUVw89PHL3A8kBOFx6qHXQMP8KtpRzjlt8coy4PUy7 W9HHNmmGiWHf1x+5Pz5noeNEYcabHHwmmH6cEIIrXCOV3miKD8XdWuT7vW3dwCfi J8VFCDID/thqEENlR0xrZ3btZiojN18YDw/+SVXjMthEYRBetFTm8Q+MH4t2IKNk Jaoi+bj8SEwfu7xz8u8bWBCAq8MwRhpncEoO4OC2GbZSPuIhylRWg9wnYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPOnVZISo2xaSYJZYC87onWmTtBSMB8GA1UdIwQY MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt NTI3NjZiMjRiYWE0LzEvODZkVmtoS2piRnBKZ2xsZ0x6dWlkYVpPMEZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0 LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUQ/tMA0G CSqGSIb3DQEBCwUAA4IBAQAubNhDSVcczwV6XJdfoUOgJEhKwlO/TVmRvEkrIVe/ O4ZwsrHGrOnXsAJQrXUD5s6XsLpp3ewZD7V5D9KFv/uMy+XwEXh5nnvvs9AeOQIL gzApWlMwCxh1DbGU3k0QTw0ZsqZsD4GvtTpZRiHZYOY54EHf4I/nVOQqJmZu0K4J znXyffb1XqJjwCmhklDFMpmx8lve9Kcy8QCjCKg5oU9idFLWL/8hmBSy1vCyC7if h+tkWFlx4Z3nUjzZCUx3Gs1X02pBEm08Rgh1h3nO5uy0671wFoyA+96W/j/bIyQv NLl/n0ZipzztHv5/Sb/Gup+dl7h5xDk9f61K1LRPLK8i -----END CERTIFICATE-----Generated at Sat Dec 6 11:04:11 2025 by rpki-client