This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/g9Qng6ACgAuBODGkbHiafdbJxzY.roa File: g9Qng6ACgAuBODGkbHiafdbJxzY.roa (raw, json) Hash identifier: e5Lp+G7TOMYhM1H52WWLfJNs8UZtlWDCqmJ6QLye2Dc= Subject key identifier: 83:D4:27:83:A0:02:80:0B:81:38:31:A4:6C:78:9A:7D:D6:C9:C7:36 Certificate issuer: /CN=22cb36f8506c118bfc41f5dae362264a96814990 Certificate serial: 019AE3691D6853061A5367F13B7565B3C483 Authority key identifier: 22:CB:36:F8:50:6C:11:8B:FC:41:F5:DA:E3:62:26:4A:96:81:49:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iss2-FBsEYv8QfXa42ImSpaBSZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/g9Qng6ACgAuBODGkbHiafdbJxzY.roa Signing time: Wed 03 Dec 2025 08:51:48 +0000 ROA not before: Wed 03 Dec 2025 08:51:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209025 IP address blocks: 185.75.22.0/23 maxlen: 23 2a10:cd44::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/Iss2-FBsEYv8QfXa42ImSpaBSZA.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/Iss2-FBsEYv8QfXa42ImSpaBSZA.mft rsync://rpki.ripe.net/repository/DEFAULT/Iss2-FBsEYv8QfXa42ImSpaBSZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:69:1d:68:53:06:1a:53:67:f1:3b:75:65:b3:c4:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22cb36f8506c118bfc41f5dae362264a96814990 Validity Not Before: Dec 3 08:51:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=83d42783a002800b813831a46c789a7dd6c9c736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ec:66:2d:81:cf:2e:f0:fe:8b:ce:94:b8:08: 94:e0:e5:fd:48:bb:2a:fb:4e:d9:a0:d0:fe:b5:3b: 8c:96:7a:ca:f1:0d:24:a5:9a:88:8d:ad:f0:e6:e5: 21:7c:25:d3:6e:8f:0c:0f:23:dc:aa:60:c7:1b:4c: db:4d:00:eb:41:b8:62:da:8a:ce:6e:2b:d0:e9:69: 28:ea:4f:66:c9:40:25:de:44:83:08:a8:eb:da:89: 48:ca:0d:d2:a9:06:49:64:a0:1b:f0:31:fd:d0:1c: 1c:1f:56:17:b8:d4:72:6c:1b:d3:90:d5:f3:d3:71: 75:09:43:b3:d4:23:bb:66:6a:6a:ab:e4:61:e3:68: 93:a9:6c:ff:af:be:98:83:53:e3:3d:ea:08:a4:f1: 4a:c3:ab:02:e3:b0:e4:53:d6:59:58:0b:65:2e:f3: 24:71:bb:e6:e7:0c:ad:60:fe:0c:0b:25:74:fc:78: d0:9f:11:8c:fd:31:3c:ca:99:76:f7:8b:57:fb:d9: 97:bf:e5:90:15:11:a6:dd:e3:14:39:87:11:a5:08: 50:28:52:e1:09:76:ea:03:16:96:bb:c7:11:c4:b5: 61:93:12:f4:db:fd:0a:b8:58:90:67:95:dc:51:0d: 6f:1c:dc:e6:3e:2f:c7:83:cf:2b:c3:b5:65:1d:5d: 5f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:D4:27:83:A0:02:80:0B:81:38:31:A4:6C:78:9A:7D:D6:C9:C7:36 X509v3 Authority Key Identifier: keyid:22:CB:36:F8:50:6C:11:8B:FC:41:F5:DA:E3:62:26:4A:96:81:49:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iss2-FBsEYv8QfXa42ImSpaBSZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/g9Qng6ACgAuBODGkbHiafdbJxzY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/Iss2-FBsEYv8QfXa42ImSpaBSZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.75.22.0/23 IPv6: 2a10:cd44::/30 Signature Algorithm: sha256WithRSAEncryption 66:0a:78:b1:a2:04:9e:77:4f:95:48:e4:13:81:02:88:90:8a: d1:62:8b:d8:5b:9e:f7:b7:88:b3:1b:6c:8e:e4:68:4f:49:a7: b3:a8:3f:69:9b:f7:8b:d9:59:ef:61:1f:b2:7f:38:a9:cc:80: 23:a2:60:05:10:b8:69:e4:7c:6c:04:50:0f:17:cd:74:a0:d1: 37:6e:ab:1e:39:96:ba:c9:99:0f:20:4a:61:e0:d4:0d:b4:a2: 63:a4:1f:17:38:e8:ac:29:d0:bc:7c:0f:a6:30:3f:f1:e9:22: b2:ec:34:a6:67:00:ac:75:7c:3e:23:41:39:68:d3:26:a8:38: 02:76:44:c0:a4:75:87:08:e8:93:a5:da:7f:fd:8f:07:a1:ef: 82:59:45:1a:b9:20:d8:94:ff:39:92:53:63:7d:df:30:11:39: ec:13:da:22:7a:f2:7b:f0:09:b6:1a:48:b2:67:c1:c3:79:92: d6:16:75:ac:bc:3c:fa:65:dc:55:d7:14:f2:dc:63:63:60:76: 9a:5d:33:ee:69:32:b1:bf:c7:42:01:95:7e:0f:ad:a0:36:8c: 55:23:a4:89:71:87:ab:73:38:69:67:a2:4b:b3:ef:bf:b8:74: 30:18:c6:c7:52:e2:f2:95:48:0d:80:80:d1:6e:f0:57:0d:14: 1f:2d:e1:b8 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZrjaR1oUwYaU2fxO3Vls8SDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyY2IzNmY4NTA2YzExOGJmYzQxZjVkYWUzNjIyNjRhOTY4 MTQ5OTAwHhcNMjUxMjAzMDg1MTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4M2Q0Mjc4M2EwMDI4MDBiODEzODMxYTQ2Yzc4OWE3ZGQ2YzljNzM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOxmLYHPLvD+i86UuAiU4OX9SLsq +07ZoND+tTuMlnrK8Q0kpZqIja3w5uUhfCXTbo8MDyPcqmDHG0zbTQDrQbhi2orO bivQ6Wko6k9myUAl3kSDCKjr2olIyg3SqQZJZKAb8DH90BwcH1YXuNRybBvTkNXz 03F1CUOz1CO7Zmpqq+Rh42iTqWz/r76Yg1PjPeoIpPFKw6sC47DkU9ZZWAtlLvMk cbvm5wytYP4MCyV0/HjQnxGM/TE8ypl294tX+9mXv+WQFRGm3eMUOYcRpQhQKFLh CXbqAxaWu8cRxLVhkxL02/0KuFiQZ5XcUQ1vHNzmPi/Hg88rw7VlHV1f2QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIPUJ4OgAoALgTgxpGx4mn3Wycc2MB8GA1UdIwQY MBaAFCLLNvhQbBGL/EH12uNiJkqWgUmQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNzMi1GQnNFWXY4UWZYYTQySW1TcGFCU1pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy81MGNhMzUtYmRlNi00NTA4LWI4MGYt MjM2Nzg5NTg3OTk3LzEvZzlRbmc2QUNnQXVCT0RHa2JIaWFmZGJKeHpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy81MGNhMzUtYmRlNi00NTA4LWI4MGYtMjM2Nzg5NTg3OTk3 LzEvSXNzMi1GQnNFWXY4UWZYYTQySW1TcGFCU1pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBuUsWMA0E AgACMAcDBQIqEM1EMA0GCSqGSIb3DQEBCwUAA4IBAQBmCnixogSed0+VSOQTgQKI kIrRYovYW573t4izG2yO5GhPSaezqD9pm/eL2VnvYR+yfzipzIAjomAFELhp5Hxs BFAPF810oNE3bqseOZa6yZkPIEph4NQNtKJjpB8XOOisKdC8fA+mMD/x6SKy7DSm ZwCsdXw+I0E5aNMmqDgCdkTApHWHCOiTpdp//Y8Hoe+CWUUauSDYlP85klNjfd8w ETnsE9oievJ78Am2GkiyZ8HDeZLWFnWsvDz6ZdxV1xTy3GNjYHaaXTPuaTKxv8dC AZV+D62gNoxVI6SJcYerczhpZ6JLs++/uHQwGMbHUuLylUgNgIDRbvBXDRQfLeG4 -----END CERTIFICATE-----Generated at Sat Dec 6 09:22:28 2025 by rpki-client