This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/FsdwEgiqk0tgi0Rde-JJq-MqKkc.roa File: FsdwEgiqk0tgi0Rde-JJq-MqKkc.roa (raw, json) Hash identifier: pNc7mIfrGdsXcLvKWTR7Ssmi3FPFS6cjaq4FxY0o41k= Subject key identifier: 16:C7:70:12:08:AA:93:4B:60:8B:44:5D:7B:E2:49:AB:E3:2A:2A:47 Certificate issuer: /CN=6fa86d1c1676a59a46acf37336192e985cff0e5b Certificate serial: 019A81BED183F3C6D7872701DFE194993AD1 Authority key identifier: 6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/FsdwEgiqk0tgi0Rde-JJq-MqKkc.roa Signing time: Fri 14 Nov 2025 09:42:37 +0000 ROA not before: Fri 14 Nov 2025 09:42:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 200187 IP address blocks: 45.14.173.0/24 maxlen: 24 80.94.82.0/24 maxlen: 24 80.94.83.0/24 maxlen: 24 185.35.144.0/22 maxlen: 22 2a04:4fe0::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.mft rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:81:be:d1:83:f3:c6:d7:87:27:01:df:e1:94:99:3a:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fa86d1c1676a59a46acf37336192e985cff0e5b Validity Not Before: Nov 14 09:42:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=16c7701208aa934b608b445d7be249abe32a2a47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cb:50:3b:b5:e8:ed:c5:2c:e8:94:9a:21:c3: 6d:11:90:2e:4f:3c:f1:3c:25:bd:7e:2e:a6:1a:6b: f3:33:ee:27:e3:62:ac:46:a0:88:1c:f2:31:9f:9b: d3:b4:30:30:69:84:1e:4e:84:f0:da:b6:30:a9:ba: 34:27:f4:ff:38:6f:30:49:ba:96:28:10:9b:9c:42: 4a:ed:0a:f8:fb:9c:f8:d7:7d:41:93:3c:37:89:12: c9:50:0f:95:4e:ef:62:66:03:91:b5:b3:45:75:72: 45:6b:b4:1b:0d:55:d9:ba:a9:67:76:a1:6f:da:9e: f2:bd:1b:1a:1c:f6:c8:b1:5f:bb:ce:e5:80:75:34: 7d:8b:c2:d9:5c:76:83:d5:c1:2e:47:7f:e6:45:04: c7:a2:db:3a:d6:13:12:52:78:b0:d8:e7:07:92:10: c4:fd:af:37:b8:cb:02:4d:6e:0b:5a:a1:c8:7d:08: 37:ee:14:e3:69:17:d5:5a:81:bf:57:28:25:54:87: d5:7f:a2:82:24:da:f7:82:60:c8:b2:37:11:41:af: 96:3d:f9:4c:7a:a1:ff:df:b2:ad:23:3c:d2:c3:5c: 3d:cf:c3:a6:1c:ca:95:af:e8:c5:de:f5:75:22:65: 9c:ab:40:a6:07:8e:02:6c:22:75:ed:83:17:a2:aa: de:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C7:70:12:08:AA:93:4B:60:8B:44:5D:7B:E2:49:AB:E3:2A:2A:47 X509v3 Authority Key Identifier: keyid:6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/FsdwEgiqk0tgi0Rde-JJq-MqKkc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.14.173.0/24 80.94.82.0/23 185.35.144.0/22 IPv6: 2a04:4fe0::/30 Signature Algorithm: sha256WithRSAEncryption 6d:32:86:9a:d9:8a:0a:fa:30:b3:bb:f8:55:82:d1:eb:9b:b1: 87:00:9f:ac:f6:22:bc:03:a3:c6:2b:08:2f:c5:b4:e8:37:79: e7:12:b0:c9:9d:08:b8:96:de:bd:45:f1:c1:01:30:ef:dc:e4: c9:98:a6:00:01:84:0b:af:78:c0:21:fd:be:cf:3e:24:64:3a: cc:ad:92:43:43:d6:b8:5e:59:d0:cf:ab:68:b9:7a:78:bb:ef: ff:ba:a5:ca:13:72:8c:77:a9:6f:00:d3:e8:e2:0e:09:b2:40: 25:4b:86:5a:12:b3:f7:3c:21:28:6b:87:4c:e5:84:18:e8:1b: 99:a4:b1:45:62:95:1c:21:b5:d7:1c:87:6d:ee:88:26:2d:47: e5:7f:b4:16:84:9f:da:72:27:d8:96:8d:19:7a:bf:fc:19:b1: 6f:3d:15:35:50:49:32:48:7f:e7:4e:c6:55:48:c6:5f:cb:ca: 78:99:17:a6:a3:7e:ca:a5:fd:59:6c:f7:8c:32:ed:d4:cd:ca: bc:3e:be:aa:94:67:53:5c:5e:f6:97:f8:e8:fa:39:48:01:3b: e9:41:80:4d:08:fa:f5:a6:da:e0:2e:ed:73:74:73:81:d6:ff: 50:66:63:98:83:ab:4e:cf:e3:be:46:18:b9:90:8a:ad:84:e2: 12:46:ad:6b -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZqBvtGD88bXhycB3+GUmTrRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYTg2ZDFjMTY3NmE1OWE0NmFjZjM3MzM2MTkyZTk4NWNm ZjBlNWIwHhcNMjUxMTE0MDk0MjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNmM3NzAxMjA4YWE5MzRiNjA4YjQ0NWQ3YmUyNDlhYmUzMmEyYTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzctQO7Xo7cUs6JSaIcNtEZAuTzzx PCW9fi6mGmvzM+4n42KsRqCIHPIxn5vTtDAwaYQeToTw2rYwqbo0J/T/OG8wSbqW KBCbnEJK7Qr4+5z4131Bkzw3iRLJUA+VTu9iZgORtbNFdXJFa7QbDVXZuqlndqFv 2p7yvRsaHPbIsV+7zuWAdTR9i8LZXHaD1cEuR3/mRQTHots61hMSUniw2OcHkhDE /a83uMsCTW4LWqHIfQg37hTjaRfVWoG/VyglVIfVf6KCJNr3gmDIsjcRQa+WPflM eqH/37KtIzzSw1w9z8OmHMqVr+jF3vV1ImWcq0CmB44CbCJ17YMXoqreLQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFBbHcBIIqpNLYItEXXviSavjKipHMB8GA1UdIwQY MBaAFG+obRwWdqWaRqzzczYZLphc/w5bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjZodEhCWjJwWnBHclBOek5oa3VtRnpfRGxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hZmUzNzMtZTViYy00MDEwLThhZDYt NmFhYjJiMWI5MjJjLzEvRnNkd0VnaXFrMHRnaTBSZGUtSkpxLU1xS2tjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9hZmUzNzMtZTViYy00MDEwLThhZDYtNmFhYjJiMWI5MjJj LzEvYjZodEhCWjJwWnBHclBOek5oa3VtRnpfRGxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQALQ6tAwQB UF5SAwQCuSOQMA0EAgACMAcDBQIqBE/gMA0GCSqGSIb3DQEBCwUAA4IBAQBtMoaa 2YoK+jCzu/hVgtHrm7GHAJ+s9iK8A6PGKwgvxbToN3nnErDJnQi4lt69RfHBATDv 3OTJmKYAAYQLr3jAIf2+zz4kZDrMrZJDQ9a4XlnQz6touXp4u+//uqXKE3KMd6lv ANPo4g4JskAlS4ZaErP3PCEoa4dM5YQY6BuZpLFFYpUcIbXXHIdt7ogmLUflf7QW hJ/acifYlo0Zer/8GbFvPRU1UEkySH/nTsZVSMZfy8p4mRemo37Kpf1ZbPeMMu3U zcq8Pr6qlGdTXF72l/jo+jlIATvpQYBNCPr1ptrgLu1zdHOB1v9QZmOYg6tOz+O+ Rhi5kIqthOISRq1r -----END CERTIFICATE-----Generated at Sat Dec 6 17:19:43 2025 by rpki-client