This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/0q-3LrdZn_4YUc7nDchWpSwex8I.roa File: 0q-3LrdZn_4YUc7nDchWpSwex8I.roa (raw, json) Hash identifier: 3Qw6MJqjQq8kL5cqox3Cgu57fPaEgLQn0FhwZYIzDvk= Subject key identifier: D2:AF:B7:2E:B7:59:9F:FE:18:51:CE:E7:0D:C8:56:A5:2C:1E:C7:C2 Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Certificate serial: 019B21E059D8014A0D297AF2F48457543E2F Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/0q-3LrdZn_4YUc7nDchWpSwex8I.roa Signing time: Mon 15 Dec 2025 11:58:29 +0000 ROA not before: Mon 15 Dec 2025 11:58:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214025 IP address blocks: 82.206.80.0/24 maxlen: 24 82.206.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:e0:59:d8:01:4a:0d:29:7a:f2:f4:84:57:54:3e:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Validity Not Before: Dec 15 11:58:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d2afb72eb7599ffe1851cee70dc856a52c1ec7c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:30:dd:93:54:52:ad:1c:dd:4c:7a:b2:94:1e: 0d:97:fb:77:b4:df:3c:77:1d:bc:18:6f:00:41:21: f8:3f:db:ea:75:af:e3:60:da:01:82:a8:9a:1d:fd: c0:8b:85:b6:03:cf:01:1d:e4:16:50:d6:ae:39:7f: f4:77:ec:09:56:d9:22:db:a2:3b:44:bf:e7:6f:9a: 67:65:b9:f6:a2:95:c2:95:33:f2:0d:65:ba:80:61: f3:a3:93:f4:fd:c5:f3:80:02:78:26:c8:02:0f:35: 4b:83:7d:60:c9:91:22:93:94:13:73:fd:dd:83:db: 73:d7:1e:88:c5:fc:fd:56:08:5a:11:c5:db:69:60: 90:7e:ca:3a:17:ca:c2:e5:bf:55:74:d9:1e:38:06: 08:03:81:b7:c3:a8:13:11:81:12:ea:a9:4d:d6:ee: 2d:da:33:7e:d4:96:8f:ef:58:4f:84:40:6f:80:16: ba:af:a1:6b:29:a2:fe:dc:39:ef:2b:a3:36:4f:e4: a5:1e:04:6c:5b:65:39:54:d2:c9:0e:29:4b:6c:66: 50:27:07:0f:20:01:ee:d1:82:24:45:cc:05:50:a1: 59:fe:41:d8:84:bb:53:cc:47:a3:29:e7:ad:86:18: ac:a5:80:65:48:9f:75:85:97:9c:4f:79:f2:e2:3a: a2:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:AF:B7:2E:B7:59:9F:FE:18:51:CE:E7:0D:C8:56:A5:2C:1E:C7:C2 X509v3 Authority Key Identifier: keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/0q-3LrdZn_4YUc7nDchWpSwex8I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.206.80.0/24 82.206.109.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:6a:c0:48:18:cb:ee:a1:ec:b5:88:be:18:45:2e:e7:9c:bf: 66:2f:e2:9c:29:6d:60:9e:8e:11:8b:8f:f5:23:1e:e1:fd:a8: 21:7d:27:cf:a8:11:4e:3b:57:64:3e:7b:28:66:16:4e:d9:9a: 45:de:51:96:2b:eb:44:77:1c:98:fa:2f:7c:a1:a6:7f:01:10: c3:03:24:df:61:d0:f0:ef:4f:b8:01:8b:08:4f:ee:a4:dc:d2: 21:99:10:6f:12:24:c7:ce:1c:22:cc:b5:8f:f8:6f:df:54:5a: 58:76:d6:46:ac:8b:a3:5a:0f:62:4c:10:3d:10:39:fc:a7:21: 2e:f9:cb:d6:07:28:03:9c:a5:a8:6b:e6:51:df:de:00:6e:ba: 8d:5d:31:b2:fc:1d:a8:13:63:80:25:5e:74:52:70:d9:72:d0: 8d:77:8c:d4:60:53:8f:23:5f:31:a3:7b:a9:33:bd:06:72:44: 5a:09:85:b9:1f:79:36:4b:32:69:53:96:44:0a:25:e8:6d:a9: 9d:e0:53:a2:3c:24:82:57:94:ce:c9:6a:11:da:21:cc:b0:ae: 9c:f9:2e:05:05:7a:32:c6:9d:2f:ea:14:1d:59:67:18:95:da: 1e:fa:ef:86:25:97:2d:1d:77:b0:9b:70:10:74:a2:ef:1b:2b: 30:cf:41:a5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsh4FnYAUoNKXry9IRXVD4vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2 ZmQ5YjUwHhcNMjUxMjE1MTE1ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmFmYjcyZWI3NTk5ZmZlMTg1MWNlZTcwZGM4NTZhNTJjMWVjN2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDDdk1RSrRzdTHqylB4Nl/t3tN88 dx28GG8AQSH4P9vqda/jYNoBgqiaHf3Ai4W2A88BHeQWUNauOX/0d+wJVtki26I7 RL/nb5pnZbn2opXClTPyDWW6gGHzo5P0/cXzgAJ4JsgCDzVLg31gyZEik5QTc/3d g9tz1x6Ixfz9VghaEcXbaWCQfso6F8rC5b9VdNkeOAYIA4G3w6gTEYES6qlN1u4t 2jN+1JaP71hPhEBvgBa6r6FrKaL+3DnvK6M2T+SlHgRsW2U5VNLJDilLbGZQJwcP IAHu0YIkRcwFUKFZ/kHYhLtTzEejKeethhispYBlSJ91hZecT3ny4jqiiwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNKvty63WZ/+GFHO5w3IVqUsHsfCMB8GA1UdIwQY MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt NTk1OTE5YmUwZjUyLzEvMHEtM0xyZFpuXzRZVWM3bkRjaFdwU3dleDhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUs5QAwQA Us5tMA0GCSqGSIb3DQEBCwUAA4IBAQCcasBIGMvuoey1iL4YRS7nnL9mL+KcKW1g no4Ri4/1Ix7h/aghfSfPqBFOO1dkPnsoZhZO2ZpF3lGWK+tEdxyY+i98oaZ/ARDD AyTfYdDw70+4AYsIT+6k3NIhmRBvEiTHzhwizLWP+G/fVFpYdtZGrIujWg9iTBA9 EDn8pyEu+cvWBygDnKWoa+ZR394AbrqNXTGy/B2oE2OAJV50UnDZctCNd4zUYFOP I18xo3upM70GckRaCYW5H3k2SzJpU5ZECiXobamd4FOiPCSCV5TOyWoR2iHMsK6c +S4FBXoyxp0v6hQdWWcYldoe+u+GJZctHXewm3AQdKLvGyswz0Gl -----END CERTIFICATE-----Generated at Wed Dec 17 15:24:18 2025 by rpki-client