This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/6UDsATLFOBowasxnhJMDeAafmaI.roa File: 6UDsATLFOBowasxnhJMDeAafmaI.roa (raw, json) Hash identifier: mek1AJKC9MdmAKcvzYGE5CNoG2zhpmvZdbDUh1f1RR8= Subject key identifier: E9:40:EC:01:32:C5:38:1A:30:6A:CC:67:84:93:03:78:06:9F:99:A2 Certificate issuer: /CN=bc63a36d5c80651a89a76906c9e3402fb34568da Certificate serial: 019AE4A374B5896266B3EC6BDB014F602667 Authority key identifier: BC:63:A3:6D:5C:80:65:1A:89:A7:69:06:C9:E3:40:2F:B3:45:68:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/6UDsATLFOBowasxnhJMDeAafmaI.roa Signing time: Wed 03 Dec 2025 14:35:08 +0000 ROA not before: Wed 03 Dec 2025 14:35:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 1267 IP address blocks: 185.145.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.crl rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e4:a3:74:b5:89:62:66:b3:ec:6b:db:01:4f:60:26:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc63a36d5c80651a89a76906c9e3402fb34568da Validity Not Before: Dec 3 14:35:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e940ec0132c5381a306acc6784930378069f99a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6c:d0:b8:77:ec:bc:07:63:9b:92:e4:b6:67: 37:f0:7c:f9:56:b9:82:6c:2f:8c:ef:4f:a4:b7:b2: 6e:93:de:3e:ab:14:85:76:83:86:81:65:c6:4f:a6: 02:dd:36:93:96:74:bf:a6:ed:dc:46:07:a3:bf:86: da:df:ee:26:d3:99:e5:2f:a0:50:2a:55:f2:28:40: 30:67:8f:e5:c0:5a:0e:7b:10:ee:bb:33:92:3c:fd: 76:a1:09:8c:b9:12:a1:f8:db:2f:64:b1:57:85:a0: a5:b7:73:95:cf:1e:61:0d:ca:3b:98:cd:0b:ca:9c: 58:8a:70:02:eb:8c:ef:79:6e:b0:be:ef:13:9d:f0: 10:f8:90:9c:7e:77:f2:af:02:40:7e:42:9e:b3:13: 9e:83:55:da:f7:d0:fd:31:2b:83:48:9d:8f:1d:8f: ec:ae:e7:ed:cc:01:cc:fd:64:10:3c:65:f8:0d:3a: ed:c5:2e:a2:ea:70:fa:7d:91:0e:d1:88:55:1f:c5: 1c:93:94:76:90:a0:2d:6d:68:e2:d6:03:89:c2:1b: ec:b4:d2:97:10:47:28:73:33:44:7f:f6:2c:15:d9: f9:79:75:58:e4:ea:77:32:fe:df:fd:ae:4f:ee:48: 63:73:aa:a2:c9:69:cc:fc:df:02:0e:87:3a:4e:fa: c0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:40:EC:01:32:C5:38:1A:30:6A:CC:67:84:93:03:78:06:9F:99:A2 X509v3 Authority Key Identifier: keyid:BC:63:A3:6D:5C:80:65:1A:89:A7:69:06:C9:E3:40:2F:B3:45:68:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/6UDsATLFOBowasxnhJMDeAafmaI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.145.101.0/24 Signature Algorithm: sha256WithRSAEncryption 24:e2:50:cc:8b:0e:0b:25:06:2a:96:4a:f4:e9:54:44:d6:d0: d4:cc:1f:21:78:02:94:ac:0e:02:50:a7:eb:62:17:bc:01:49: bb:d5:a6:94:66:2f:8b:14:05:0f:b4:c9:ba:71:a9:42:94:c6: 36:55:6c:41:09:33:60:f0:d7:0e:eb:07:2b:1e:0f:bf:14:8a: 3e:44:9b:eb:90:99:de:dc:05:24:51:9f:1e:f6:03:d5:a4:db: 83:99:13:17:7e:2e:60:f2:ed:22:ef:ea:26:60:a7:94:be:50: f8:25:da:8f:1a:c7:d1:82:91:59:94:84:c7:b7:39:d5:36:da: 5b:40:ae:74:fb:3c:00:c4:46:c2:42:87:8f:29:be:05:6d:95: a1:6d:90:61:f7:04:f5:03:ed:45:5f:6b:96:0d:69:34:d8:aa: 96:78:1c:ae:c9:9e:94:60:c2:ec:33:64:93:7f:ab:80:8a:0b: 7f:6b:b0:06:37:97:84:f6:41:a6:4d:19:97:47:0c:11:97:ff: 2d:d3:0a:7c:27:03:4b:a3:45:cf:a9:4e:f0:19:1d:fd:ff:2d: 46:4b:ed:1a:3d:d9:69:ad:42:24:3b:0e:3d:0f:9b:cd:65:ef: b8:2c:15:81:b2:8e:12:20:ec:bc:dc:00:9c:4a:ad:dd:bd:c3: c6:06:03:41 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrko3S1iWJms+xr2wFPYCZnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNjNhMzZkNWM4MDY1MWE4OWE3NjkwNmM5ZTM0MDJmYjM0 NTY4ZGEwHhcNMjUxMjAzMTQzNTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTQwZWMwMTMyYzUzODFhMzA2YWNjNjc4NDkzMDM3ODA2OWY5OWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWzQuHfsvAdjm5Lktmc38Hz5VrmC bC+M70+kt7Juk94+qxSFdoOGgWXGT6YC3TaTlnS/pu3cRgejv4ba3+4m05nlL6BQ KlXyKEAwZ4/lwFoOexDuuzOSPP12oQmMuRKh+NsvZLFXhaClt3OVzx5hDco7mM0L ypxYinAC64zveW6wvu8TnfAQ+JCcfnfyrwJAfkKesxOeg1Xa99D9MSuDSJ2PHY/s ruftzAHM/WQQPGX4DTrtxS6i6nD6fZEO0YhVH8Uck5R2kKAtbWji1gOJwhvstNKX EEcoczNEf/YsFdn5eXVY5Op3Mv7f/a5P7khjc6qiyWnM/N8CDoc6TvrAcQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOlA7AEyxTgaMGrMZ4STA3gGn5miMB8GA1UdIwQY MBaAFLxjo21cgGUaiadpBsnjQC+zRWjaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkdPamJWeUFaUnFKcDJrR3llTkFMN05GYU5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9jM2FiNjktNzE2Mi00MjIyLWFhMjAt NGUzYjIwZWMxNmEzLzEvNlVEc0FUTEZPQm93YXN4bmhKTURlQWFmbWFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni9jM2FiNjktNzE2Mi00MjIyLWFhMjAtNGUzYjIwZWMxNmEz LzEvdkdPamJWeUFaUnFKcDJrR3llTkFMN05GYU5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZFlMA0G CSqGSIb3DQEBCwUAA4IBAQAk4lDMiw4LJQYqlkr06VRE1tDUzB8heAKUrA4CUKfr Yhe8AUm71aaUZi+LFAUPtMm6calClMY2VWxBCTNg8NcO6wcrHg+/FIo+RJvrkJne 3AUkUZ8e9gPVpNuDmRMXfi5g8u0i7+omYKeUvlD4JdqPGsfRgpFZlITHtznVNtpb QK50+zwAxEbCQoePKb4FbZWhbZBh9wT1A+1FX2uWDWk02KqWeByuyZ6UYMLsM2ST f6uAigt/a7AGN5eE9kGmTRmXRwwRl/8t0wp8JwNLo0XPqU7wGR39/y1GS+0aPdlp rUIkOw49D5vNZe+4LBWBso4SIOy83ACcSq3dvcPGBgNB -----END CERTIFICATE-----Generated at Sat Dec 6 14:35:13 2025 by rpki-client