This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/cA6lNEEcIDbZuEOTgnHTiqfxfx4.roa File: cA6lNEEcIDbZuEOTgnHTiqfxfx4.roa (raw, json) Hash identifier: 8f71F0XboBesdGjMZ637fgl0ngKhSWlMfo5XT1YncCs= Subject key identifier: 70:0E:A5:34:41:1C:20:36:D9:B8:43:93:82:71:D3:8A:A7:F1:7F:1E Certificate issuer: /CN=7728155856b8ce4d85f8da4f6d35b055b30dbd3c Certificate serial: 019AE095DA4F9BFCC2CCB64E965199F38DFB Authority key identifier: 77:28:15:58:56:B8:CE:4D:85:F8:DA:4F:6D:35:B0:55:B3:0D:BD:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dygVWFa4zk2F-NpPbTWwVbMNvTw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/cA6lNEEcIDbZuEOTgnHTiqfxfx4.roa Signing time: Tue 02 Dec 2025 19:41:48 +0000 ROA not before: Tue 02 Dec 2025 19:41:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 216068 IP address blocks: 94.232.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.mft rsync://rpki.ripe.net/repository/DEFAULT/dygVWFa4zk2F-NpPbTWwVbMNvTw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e0:95:da:4f:9b:fc:c2:cc:b6:4e:96:51:99:f3:8d:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7728155856b8ce4d85f8da4f6d35b055b30dbd3c Validity Not Before: Dec 2 19:41:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=700ea534411c2036d9b843938271d38aa7f17f1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:19:f4:a3:ae:63:e4:51:d3:99:55:c3:66:1b: ff:e3:0c:8d:35:b1:00:98:a6:da:3e:3b:cb:4c:c2: 52:5b:b5:cc:90:9b:34:c3:84:62:20:67:d5:63:c3: e0:5c:84:8a:6d:c3:1b:bf:d0:9d:df:d4:1c:67:37: 63:44:3a:f8:73:dc:4e:61:ba:c6:7d:ea:ac:02:e2: 1a:1d:56:fa:8d:a6:40:7b:8b:4f:40:f1:9c:ec:ce: 45:f3:75:59:fc:bd:7c:7a:be:f0:a1:a6:5b:ba:3e: 2b:18:8f:d2:0e:de:5a:69:1d:ae:00:53:0d:fa:54: d7:b2:4a:35:17:20:59:a3:5c:ee:67:84:dc:c7:bc: f7:e4:59:e4:2e:21:09:3e:b6:c4:c8:05:5a:01:ba: 47:5e:fc:60:26:26:85:44:17:25:4a:11:82:fc:f4: e1:b7:df:11:25:3c:d3:f2:15:6d:98:d9:06:01:75: bb:ed:2d:71:0c:0f:4b:22:f9:0c:8d:a9:d6:1f:31: 16:38:c2:5d:5d:42:7e:96:aa:d1:24:42:05:68:ac: b3:cf:73:99:01:60:79:6d:e9:d4:50:62:3b:83:74: 00:db:e9:b2:bf:dd:0c:b4:d9:79:a0:99:c4:e5:cc: fc:dd:9f:41:2f:61:6c:b2:79:16:30:61:7b:9e:c3: a6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:0E:A5:34:41:1C:20:36:D9:B8:43:93:82:71:D3:8A:A7:F1:7F:1E X509v3 Authority Key Identifier: keyid:77:28:15:58:56:B8:CE:4D:85:F8:DA:4F:6D:35:B0:55:B3:0D:BD:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dygVWFa4zk2F-NpPbTWwVbMNvTw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/cA6lNEEcIDbZuEOTgnHTiqfxfx4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.232.47.0/24 Signature Algorithm: sha256WithRSAEncryption bb:42:19:6a:88:a0:c5:30:83:fa:a9:80:4d:0d:b1:24:fb:b0: 06:fc:c9:9d:aa:b1:5b:33:45:6f:91:a9:33:d9:6c:a4:f5:99: 97:a5:0e:dc:9e:78:04:3f:a4:7c:0a:88:1b:be:f4:1d:b1:3d: 28:65:1e:18:1d:3c:23:46:bc:dd:9e:c6:57:7a:53:73:cf:8e: 8a:f1:7e:ff:19:25:46:9c:e6:87:30:7c:33:1a:48:60:da:5d: 15:3d:54:4f:d0:4e:30:d5:d3:9b:8d:9d:cf:81:dc:46:6e:c4: da:dc:dc:18:ef:7d:b1:d9:b5:89:1b:f4:e5:79:d1:69:4b:15: bb:ef:88:2d:4a:2a:97:a4:e4:eb:e8:1c:92:47:5e:31:06:29: 14:35:cd:13:36:7a:0c:35:b4:95:3b:40:f0:b3:14:74:89:76: a2:64:14:d7:ce:0f:dc:13:5c:7a:8f:40:bb:9e:f8:bf:d3:76: 19:e8:5b:58:20:fb:c1:f8:e9:7a:88:14:cf:64:f6:64:df:6a: 66:20:0a:4c:70:b7:0c:47:51:0d:2e:fa:64:ad:17:2e:fd:85: 54:90:d4:ab:9b:38:b5:20:a3:54:b4:5f:3c:84:db:8d:10:78: 11:4d:db:40:83:f2:1c:8b:66:32:71:e6:01:15:2b:12:4a:58: e2:1f:89:6f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrgldpPm/zCzLZOllGZ8437MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MjgxNTU4NTZiOGNlNGQ4NWY4ZGE0ZjZkMzViMDU1YjMw ZGJkM2MwHhcNMjUxMjAyMTk0MTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDBlYTUzNDQxMWMyMDM2ZDliODQzOTM4MjcxZDM4YWE3ZjE3ZjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBn0o65j5FHTmVXDZhv/4wyNNbEA mKbaPjvLTMJSW7XMkJs0w4RiIGfVY8PgXISKbcMbv9Cd39QcZzdjRDr4c9xOYbrG feqsAuIaHVb6jaZAe4tPQPGc7M5F83VZ/L18er7woaZbuj4rGI/SDt5aaR2uAFMN +lTXsko1FyBZo1zuZ4Tcx7z35FnkLiEJPrbEyAVaAbpHXvxgJiaFRBclShGC/PTh t98RJTzT8hVtmNkGAXW77S1xDA9LIvkMjanWHzEWOMJdXUJ+lqrRJEIFaKyzz3OZ AWB5benUUGI7g3QA2+myv90MtNl5oJnE5cz83Z9BL2FssnkWMGF7nsOmKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHAOpTRBHCA22bhDk4Jx04qn8X8eMB8GA1UdIwQY MBaAFHcoFVhWuM5NhfjaT201sFWzDb08MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHlnVldGYTR6azJGLU5wUGJUV3dWYk1OdlR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8zZGNjNGItOTM1Mi00MTFkLTkyNWEt Y2M3ZDQ2M2M4MjBiLzEvY0E2bE5FRWNJRGJadUVPVGduSFRpcWZ4Zng0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8zZGNjNGItOTM1Mi00MTFkLTkyNWEtY2M3ZDQ2M2M4MjBi LzEvZHlnVldGYTR6azJGLU5wUGJUV3dWYk1OdlR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXugvMA0G CSqGSIb3DQEBCwUAA4IBAQC7QhlqiKDFMIP6qYBNDbEk+7AG/MmdqrFbM0Vvkakz 2Wyk9ZmXpQ7cnngEP6R8CogbvvQdsT0oZR4YHTwjRrzdnsZXelNzz46K8X7/GSVG nOaHMHwzGkhg2l0VPVRP0E4w1dObjZ3PgdxGbsTa3NwY732x2bWJG/TledFpSxW7 74gtSiqXpOTr6BySR14xBikUNc0TNnoMNbSVO0DwsxR0iXaiZBTXzg/cE1x6j0C7 nvi/03YZ6FtYIPvB+Ol6iBTPZPZk32pmIApMcLcMR1ENLvpkrRcu/YVUkNSrmzi1 IKNUtF88hNuNEHgRTdtAg/Ici2YyceYBFSsSSljiH4lv -----END CERTIFICATE-----Generated at Sat Dec 6 09:54:51 2025 by rpki-client