This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/6haaqsZJASL0vfr2TIyTHd7LSqw.roa File: 6haaqsZJASL0vfr2TIyTHd7LSqw.roa (raw, json) Hash identifier: dsj6vnuBCN4426KVza8EzOGbZVK+ekxYCC7Vg/Bv8dM= Subject key identifier: EA:16:9A:AA:C6:49:01:22:F4:BD:FA:F6:4C:8C:93:1D:DE:CB:4A:AC Certificate issuer: /CN=a844583953a02bc6a6699de927cf457007f05528 Certificate serial: 019B0CC8911228CC3D12E4E1D614881728D9 Authority key identifier: A8:44:58:39:53:A0:2B:C6:A6:69:9D:E9:27:CF:45:70:07:F0:55:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qERYOVOgK8amaZ3pJ89FcAfwVSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/6haaqsZJASL0vfr2TIyTHd7LSqw.roa Signing time: Thu 11 Dec 2025 09:40:29 +0000 ROA not before: Thu 11 Dec 2025 09:40:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 208972 IP address blocks: 217.70.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.crl rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.mft rsync://rpki.ripe.net/repository/DEFAULT/qERYOVOgK8amaZ3pJ89FcAfwVSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:c8:91:12:28:cc:3d:12:e4:e1:d6:14:88:17:28:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a844583953a02bc6a6699de927cf457007f05528 Validity Not Before: Dec 11 09:40:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ea169aaac6490122f4bdfaf64c8c931ddecb4aac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3b:77:9e:83:a6:56:9c:ce:13:9c:b7:08:62: ff:7a:87:ae:4d:a9:33:55:fc:c7:e2:ed:b7:90:4e: e3:17:cf:57:a7:27:85:a4:fc:ca:74:c5:63:06:7b: c5:c4:c9:f2:1c:d5:c3:da:78:5b:99:4e:71:27:d7: 18:2f:63:0d:0a:22:12:60:d7:89:82:7f:3d:6b:0d: 2c:10:79:d1:82:0a:0f:1a:b0:12:5f:0c:c7:20:0b: c7:73:a7:01:1b:9d:3f:53:32:af:d1:04:e6:85:a6: 4f:4a:be:18:30:cd:26:16:15:23:26:0f:10:2e:70: 11:bd:dc:8f:50:36:9b:5a:6b:e4:42:fe:ea:cf:dc: 80:6c:ee:3f:c3:99:fc:00:b3:2f:a7:0f:59:bb:57: fc:50:78:b6:c2:0e:b7:1e:6e:eb:57:a5:86:4d:39: 9b:f9:f9:ee:04:16:f1:a6:ae:f5:a1:09:94:fa:fc: d7:87:ac:5e:00:48:70:3d:2d:f1:24:60:7d:f0:06: 17:79:61:64:f7:f3:08:25:4f:59:86:62:93:61:4d: 7b:cf:e8:ef:e4:9c:6b:d1:5a:a5:b1:cd:36:00:c9: 2c:85:b7:8f:8a:8f:74:3f:6d:f8:0f:c8:16:5f:e8: b4:a2:0a:14:96:83:84:9d:5c:6e:44:97:20:22:6a: e4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:16:9A:AA:C6:49:01:22:F4:BD:FA:F6:4C:8C:93:1D:DE:CB:4A:AC X509v3 Authority Key Identifier: keyid:A8:44:58:39:53:A0:2B:C6:A6:69:9D:E9:27:CF:45:70:07:F0:55:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qERYOVOgK8amaZ3pJ89FcAfwVSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/6haaqsZJASL0vfr2TIyTHd7LSqw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.70.12.0/24 Signature Algorithm: sha256WithRSAEncryption 55:d7:7e:8e:cd:34:0e:f7:6b:7c:6b:c0:6f:ea:97:86:9e:8a: f4:a0:2d:06:21:0b:06:62:b6:a0:4e:a3:1a:37:5b:a8:bd:69: 00:be:cb:10:0a:ce:99:9d:43:7b:71:40:5e:5c:6a:ca:47:26: 4e:89:d7:16:45:b3:1c:c3:10:a8:78:ac:b6:1b:02:08:4f:cd: 50:9f:c0:86:ac:f1:2b:80:43:44:fd:cd:9d:b4:db:2e:37:d1: 50:5f:20:7d:22:38:68:5e:f1:62:e3:db:f9:54:24:ff:06:05: 5e:3a:92:61:e6:b7:a4:f8:1e:85:46:6b:f9:ff:84:85:72:24: 7c:64:a4:31:eb:52:97:f3:a2:33:d7:d2:a4:d3:79:24:71:61: 4d:c3:84:2e:59:5c:1f:fd:8e:ff:60:9c:89:8d:61:b6:bf:7e: f4:52:79:b4:d3:b7:ba:2d:a9:c4:e7:bb:07:85:4c:6b:90:40: 2b:ae:44:f4:9b:07:74:4a:47:7e:d3:02:a4:cb:34:7a:3a:7e: 19:2c:9f:b6:0c:b5:07:1c:16:c2:d4:04:28:3d:3d:e4:bf:3e: 78:c6:36:f0:af:e4:0a:03:b1:fe:6f:95:9c:3c:c3:42:b8:77: 67:ad:52:ff:bb:56:40:60:75:51:e8:04:ec:53:fd:29:43:eb: a0:d3:b5:02 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsMyJESKMw9EuTh1hSIFyjZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NDQ1ODM5NTNhMDJiYzZhNjY5OWRlOTI3Y2Y0NTcwMDdm MDU1MjgwHhcNMjUxMjExMDk0MDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTE2OWFhYWM2NDkwMTIyZjRiZGZhZjY0YzhjOTMxZGRlY2I0YWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDt3noOmVpzOE5y3CGL/eoeuTakz VfzH4u23kE7jF89XpyeFpPzKdMVjBnvFxMnyHNXD2nhbmU5xJ9cYL2MNCiISYNeJ gn89aw0sEHnRggoPGrASXwzHIAvHc6cBG50/UzKv0QTmhaZPSr4YMM0mFhUjJg8Q LnARvdyPUDabWmvkQv7qz9yAbO4/w5n8ALMvpw9Zu1f8UHi2wg63Hm7rV6WGTTmb +fnuBBbxpq71oQmU+vzXh6xeAEhwPS3xJGB98AYXeWFk9/MIJU9ZhmKTYU17z+jv 5Jxr0Vqlsc02AMkshbePio90P234D8gWX+i0ogoUloOEnVxuRJcgImrk9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOoWmqrGSQEi9L369kyMkx3ey0qsMB8GA1UdIwQY MBaAFKhEWDlToCvGpmmd6SfPRXAH8FUoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUVSWU9WT2dLOGFtYVozcEo4OUZjQWZ3VlNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8zMDMxY2MtYTcwNS00MmM4LTgwMDMt MTEzODEwYTlmY2FlLzEvNmhhYXFzWkpBU0wwdmZyMlRJeVRIZDdMU3F3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC8zMDMxY2MtYTcwNS00MmM4LTgwMDMtMTEzODEwYTlmY2Fl LzEvcUVSWU9WT2dLOGFtYVozcEo4OUZjQWZ3VlNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2UYMMA0G CSqGSIb3DQEBCwUAA4IBAQBV136OzTQO92t8a8Bv6peGnor0oC0GIQsGYragTqMa N1uovWkAvssQCs6ZnUN7cUBeXGrKRyZOidcWRbMcwxCoeKy2GwIIT81Qn8CGrPEr gENE/c2dtNsuN9FQXyB9IjhoXvFi49v5VCT/BgVeOpJh5rek+B6FRmv5/4SFciR8 ZKQx61KX86Iz19Kk03kkcWFNw4QuWVwf/Y7/YJyJjWG2v370Unm007e6LanE57sH hUxrkEArrkT0mwd0Skd+0wKkyzR6On4ZLJ+2DLUHHBbC1AQoPT3kvz54xjbwr+QK A7H+b5WcPMNCuHdnrVL/u1ZAYHVR6ATsU/0pQ+ug07UC -----END CERTIFICATE-----Generated at Thu Dec 18 18:14:01 2025 by rpki-client