This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/P8hK1xx0uR9M_W5wlPbcjI1WZ6Q.roa File: P8hK1xx0uR9M_W5wlPbcjI1WZ6Q.roa (raw, json) Hash identifier: SCdC0Do6rE7PvJaZA3lqj9Cb1JlbAfPHO9i2vBKpJo4= Subject key identifier: 3F:C8:4A:D7:1C:74:B9:1F:4C:FD:6E:70:94:F6:DC:8C:8D:56:67:A4 Certificate issuer: /CN=606b9ba219e362b2a827720a05c43c7d1c1fa8ef Certificate serial: 019AD92CE0D893A051875CC4DD810C71B156 Authority key identifier: 60:6B:9B:A2:19:E3:62:B2:A8:27:72:0A:05:C4:3C:7D:1C:1F:A8:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/P8hK1xx0uR9M_W5wlPbcjI1WZ6Q.roa Signing time: Mon 01 Dec 2025 09:09:48 +0000 ROA not before: Mon 01 Dec 2025 09:09:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16509 IP address blocks: 185.135.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:2c:e0:d8:93:a0:51:87:5c:c4:dd:81:0c:71:b1:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606b9ba219e362b2a827720a05c43c7d1c1fa8ef Validity Not Before: Dec 1 09:09:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3fc84ad71c74b91f4cfd6e7094f6dc8c8d5667a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f1:04:ce:2b:20:67:80:13:d7:f1:b1:a8:6e: 88:1a:c6:45:c2:9e:bb:b6:ce:09:4d:cd:94:64:d2: df:c6:17:0a:ef:28:81:6b:dd:46:70:5c:89:bc:6b: 2a:6a:62:70:63:a5:c1:fb:3c:94:2d:02:ce:f7:f4: 47:83:a2:f4:23:18:0b:e2:96:81:33:d3:ca:dc:51: 5e:df:41:3e:59:47:9d:14:3e:e7:c6:c2:35:de:c7: 3d:e6:ec:43:00:1c:12:1a:14:b8:d3:34:51:d7:4d: ca:d2:52:3d:c4:ff:1e:87:8c:dc:24:8e:60:c9:13: fb:90:cc:13:36:d7:3d:88:13:ef:d1:1e:23:0f:65: fe:49:64:e5:86:b8:b6:8c:38:2e:08:db:01:ec:8f: 5e:74:21:76:7a:6e:ba:9d:d9:17:b8:86:ac:ef:54: 7a:41:62:bc:6a:93:9f:0e:65:24:42:64:50:0e:6d: 2d:90:12:26:77:a6:4c:ce:28:35:54:86:75:eb:64: 3a:f7:bc:39:76:02:5f:00:26:e9:6c:6b:8e:84:6f: 65:4e:19:2f:2b:d4:64:ab:ae:49:65:19:d6:56:b1: e2:4b:c6:34:da:cd:92:80:2d:6b:dc:0a:28:7c:af: 24:ff:ea:bc:21:3a:8a:5a:ea:a9:01:4e:b1:35:66: 6f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:C8:4A:D7:1C:74:B9:1F:4C:FD:6E:70:94:F6:DC:8C:8D:56:67:A4 X509v3 Authority Key Identifier: keyid:60:6B:9B:A2:19:E3:62:B2:A8:27:72:0A:05:C4:3C:7D:1C:1F:A8:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/P8hK1xx0uR9M_W5wlPbcjI1WZ6Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.135.116.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:f2:09:df:a9:51:14:42:3a:2c:13:55:80:60:04:0a:e9:07: 4e:38:30:09:0c:2b:8f:e8:b3:16:da:f2:1a:41:60:54:b3:90: fc:26:62:25:ea:29:94:3e:67:46:8a:fb:86:0a:7d:9c:05:70: 4f:48:fe:12:38:94:ab:f4:55:ce:51:2a:b0:2a:50:eb:4c:83: de:b2:26:af:08:11:88:9d:7a:da:6b:a0:b2:69:5d:4d:9e:07: e5:02:c6:8f:e3:c0:64:63:5f:96:72:3c:c9:d8:ab:68:03:16: 34:3f:d5:55:a7:be:a4:21:78:85:2d:04:7c:da:17:b8:c3:c5: dc:ae:95:e5:36:4d:d6:76:10:50:47:c5:f9:36:28:2f:97:03: 86:94:e6:9b:69:33:64:f0:79:e0:b8:37:a2:11:57:57:fe:81: ec:ee:ff:35:24:b7:d5:87:c6:78:57:3f:76:cb:38:9a:af:99: 0c:63:6e:64:58:ee:62:60:68:50:15:47:38:80:89:b5:a3:bc: 5e:ed:cf:44:2d:8f:ac:f0:47:a1:00:c9:77:47:1a:59:37:3b: 78:6c:73:6e:69:07:50:85:a5:80:e5:0c:7b:85:88:6c:74:3d: dd:c5:62:c0:ff:b5:38:a1:41:f6:d7:6e:aa:3c:19:48:88:0d: c0:a0:35:9a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrZLODYk6BRh1zE3YEMcbFWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNmI5YmEyMTllMzYyYjJhODI3NzIwYTA1YzQzYzdkMWMx ZmE4ZWYwHhcNMjUxMjAxMDkwOTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZmM4NGFkNzFjNzRiOTFmNGNmZDZlNzA5NGY2ZGM4YzhkNTY2N2E0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vEEzisgZ4AT1/GxqG6IGsZFwp67 ts4JTc2UZNLfxhcK7yiBa91GcFyJvGsqamJwY6XB+zyULQLO9/RHg6L0IxgL4paB M9PK3FFe30E+WUedFD7nxsI13sc95uxDABwSGhS40zRR103K0lI9xP8eh4zcJI5g yRP7kMwTNtc9iBPv0R4jD2X+SWTlhri2jDguCNsB7I9edCF2em66ndkXuIas71R6 QWK8apOfDmUkQmRQDm0tkBImd6ZMzig1VIZ162Q697w5dgJfACbpbGuOhG9lThkv K9Rkq65JZRnWVrHiS8Y02s2SgC1r3AoofK8k/+q8ITqKWuqpAU6xNWZvWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD/IStccdLkfTP1ucJT23IyNVmekMB8GA1UdIwQY MBaAFGBrm6IZ42KyqCdyCgXEPH0cH6jvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUd1Ym9obmpZcktvSjNJS0JjUThmUndmcU84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81YTBhZjgtMjRiMi00MTU0LWE0MTIt YjRmYjU3MDhkYjE1LzEvUDhoSzF4eDB1UjlNX1c1d2xQYmNqSTFXWjZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi81YTBhZjgtMjRiMi00MTU0LWE0MTItYjRmYjU3MDhkYjE1 LzEvWUd1Ym9obmpZcktvSjNJS0JjUThmUndmcU84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYd0MA0G CSqGSIb3DQEBCwUAA4IBAQCa8gnfqVEUQjosE1WAYAQK6QdOODAJDCuP6LMW2vIa QWBUs5D8JmIl6imUPmdGivuGCn2cBXBPSP4SOJSr9FXOUSqwKlDrTIPesiavCBGI nXraa6CyaV1NngflAsaP48BkY1+WcjzJ2KtoAxY0P9VVp76kIXiFLQR82he4w8Xc rpXlNk3WdhBQR8X5NigvlwOGlOabaTNk8HnguDeiEVdX/oHs7v81JLfVh8Z4Vz92 yziar5kMY25kWO5iYGhQFUc4gIm1o7xe7c9ELY+s8EehAMl3RxpZNzt4bHNuaQdQ haWA5Qx7hYhsdD3dxWLA/7U4oUH2126qPBlIiA3AoDWa -----END CERTIFICATE-----Generated at Sat Dec 6 09:54:55 2025 by rpki-client