This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/6w9YYZofXuAgxjk7hq0MFU5TxUA.roa File: 6w9YYZofXuAgxjk7hq0MFU5TxUA.roa (raw, json) Hash identifier: psQbqp3Dv/axG/Fm+AyyjZW7+7TGZniv6yrpPXuxg9E= Subject key identifier: EB:0F:58:61:9A:1F:5E:E0:20:C6:39:3B:86:AD:0C:15:4E:53:C5:40 Certificate issuer: /CN=215266435617fa0f1fd2837ec80c6d83b0b9d608 Certificate serial: 019AB1C9AC1AE7CB2202DDDE9F63B34D085E Authority key identifier: 21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/6w9YYZofXuAgxjk7hq0MFU5TxUA.roa Signing time: Sun 23 Nov 2025 17:36:15 +0000 ROA not before: Sun 23 Nov 2025 17:36:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214526 IP address blocks: 194.26.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.mft rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b1:c9:ac:1a:e7:cb:22:02:dd:de:9f:63:b3:4d:08:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=215266435617fa0f1fd2837ec80c6d83b0b9d608 Validity Not Before: Nov 23 17:36:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=eb0f58619a1f5ee020c6393b86ad0c154e53c540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:12:58:dd:64:7e:bb:57:b1:21:d2:ec:58:35: 45:a3:ea:cd:4c:a1:7c:cf:90:30:fe:38:da:e9:a1: 5f:f2:5c:ae:64:cc:49:7c:ba:f3:e9:48:94:97:82: 7d:4c:dc:69:a2:0a:d6:68:56:97:77:a4:06:00:6f: 85:24:80:1e:40:17:1a:e5:fa:98:c4:86:d5:89:c3: 4b:97:f5:a6:bc:e7:9c:81:62:76:43:ef:ba:c4:d8: ed:9a:47:35:3f:df:cb:11:d2:4d:2a:19:2b:c9:78: fa:b0:61:e7:36:0d:b4:92:ba:dc:ba:8c:6a:11:c7: 41:20:be:af:dd:2b:bc:36:3d:5f:d8:26:71:71:5a: a6:a0:ef:37:31:85:3e:e7:5b:c5:76:e6:b2:dc:1f: d4:53:df:be:fd:f3:b5:c5:d1:46:c8:30:54:76:09: 37:d1:75:28:cf:ec:64:ba:79:4e:a7:9c:66:dc:1e: 55:b4:df:0b:37:2a:86:9e:35:7b:fd:8d:63:cd:86: 3b:f8:40:57:d2:7f:c0:6d:1b:e9:09:5c:eb:78:4a: 20:37:5a:ff:32:b4:ac:49:3b:65:3d:21:45:20:35: dc:6a:d6:d0:e3:d0:01:7e:98:c1:df:5e:b2:5e:e6: aa:09:a1:21:56:45:00:c8:87:c5:8c:92:38:a5:c0: 65:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:0F:58:61:9A:1F:5E:E0:20:C6:39:3B:86:AD:0C:15:4E:53:C5:40 X509v3 Authority Key Identifier: keyid:21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/6w9YYZofXuAgxjk7hq0MFU5TxUA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.26.195.0/24 Signature Algorithm: sha256WithRSAEncryption 50:7e:91:ea:c5:42:c6:87:9a:27:f4:8d:de:0b:26:2b:37:39: 98:26:80:6e:ee:43:70:c4:68:2b:1d:53:5a:2c:3c:6e:85:89: e0:b1:24:e1:f4:b3:ba:cd:5f:2a:96:0c:8f:20:03:3a:86:8c: 15:b4:8d:e0:53:57:d2:21:f7:8c:42:e8:10:08:01:dc:ef:85: 55:93:cc:d2:80:22:c8:b3:80:5f:8d:e1:9e:81:91:df:aa:ff: 64:08:14:c1:55:c6:0b:f3:f3:e5:dd:5a:55:51:8c:3c:57:31: 68:68:5a:57:a3:3b:f4:f1:d7:41:96:bb:27:9e:6a:d5:5e:6c: 37:30:a6:6a:e5:7e:87:a3:da:49:72:54:e4:9f:78:1f:48:08: d9:76:cd:17:7a:15:16:bd:cc:a3:11:96:da:4b:a1:4a:51:59: d0:c1:0d:34:3c:08:37:32:0b:01:1e:25:7f:10:8a:20:a8:d6: 56:7f:d6:ed:8f:f1:34:92:c0:c8:fc:04:a2:35:4f:e1:11:8b: fa:ab:4b:ab:7e:fc:fc:00:fb:77:02:62:4a:f4:3d:96:5a:e4: dd:3a:18:7f:b2:83:05:aa:be:6c:56:fe:52:3b:8b:27:36:43: 44:2d:11:d8:5b:43:ff:31:0b:1c:81:f7:a6:80:eb:40:a8:97: fe:3f:97:55 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqxyawa58siAt3en2OzTQheMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxNTI2NjQzNTYxN2ZhMGYxZmQyODM3ZWM4MGM2ZDgzYjBi OWQ2MDgwHhcNMjUxMTIzMTczNjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjBmNTg2MTlhMWY1ZWUwMjBjNjM5M2I4NmFkMGMxNTRlNTNjNTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRJY3WR+u1exIdLsWDVFo+rNTKF8 z5Aw/jja6aFf8lyuZMxJfLrz6UiUl4J9TNxpogrWaFaXd6QGAG+FJIAeQBca5fqY xIbVicNLl/WmvOecgWJ2Q++6xNjtmkc1P9/LEdJNKhkryXj6sGHnNg20krrcuoxq EcdBIL6v3Su8Nj1f2CZxcVqmoO83MYU+51vFduay3B/UU9++/fO1xdFGyDBUdgk3 0XUoz+xkunlOp5xm3B5VtN8LNyqGnjV7/Y1jzYY7+EBX0n/AbRvpCVzreEogN1r/ MrSsSTtlPSFFIDXcatbQ49ABfpjB316yXuaqCaEhVkUAyIfFjJI4pcBl4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOsPWGGaH17gIMY5O4atDBVOU8VAMB8GA1UdIwQY MBaAFCFSZkNWF/oPH9KDfsgMbYOwudYIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVZKbVExWVgtZzhmMG9OLXlBeHRnN0M1MWdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9jMDcyYWUtMTVkNy00MmE4LWJmYzIt YmM5M2NhNjc5ZTFmLzEvNnc5WVlab2ZYdUFneGprN2hxME1GVTVUeFVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9jMDcyYWUtMTVkNy00MmE4LWJmYzItYmM5M2NhNjc5ZTFm LzEvSVZKbVExWVgtZzhmMG9OLXlBeHRnN0M1MWdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwhrDMA0G CSqGSIb3DQEBCwUAA4IBAQBQfpHqxULGh5on9I3eCyYrNzmYJoBu7kNwxGgrHVNa LDxuhYngsSTh9LO6zV8qlgyPIAM6howVtI3gU1fSIfeMQugQCAHc74VVk8zSgCLI s4BfjeGegZHfqv9kCBTBVcYL8/Pl3VpVUYw8VzFoaFpXozv08ddBlrsnnmrVXmw3 MKZq5X6Ho9pJclTkn3gfSAjZds0XehUWvcyjEZbaS6FKUVnQwQ00PAg3MgsBHiV/ EIogqNZWf9btj/E0ksDI/ASiNU/hEYv6q0urfvz8APt3AmJK9D2WWuTdOhh/soMF qr5sVv5SO4snNkNELRHYW0P/MQscgfemgOtAqJf+P5dV -----END CERTIFICATE-----Generated at Sat Dec 6 17:19:57 2025 by rpki-client