This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/6ZIH7aj9HotSaFuzWe3ljE29xmA.roa File: 6ZIH7aj9HotSaFuzWe3ljE29xmA.roa (raw, json) Hash identifier: vmlKE0Or/tuBIxk6jlTBvc5kaKPfYCv13QbD/qSFu5o= Subject key identifier: E9:92:07:ED:A8:FD:1E:8B:52:68:5B:B3:59:ED:E5:8C:4D:BD:C6:60 Certificate issuer: /CN=a999cffa6e48fa2c4f8d09803396b457a630a33d Certificate serial: 019A6CFF70E88BD6F3023DD4AD7756D50835 Authority key identifier: A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/6ZIH7aj9HotSaFuzWe3ljE29xmA.roa Signing time: Mon 10 Nov 2025 09:01:11 +0000 ROA not before: Mon 10 Nov 2025 09:01:11 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 51809 IP address blocks: 87.192.96.0/21 maxlen: 21 185.138.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6c:ff:70:e8:8b:d6:f3:02:3d:d4:ad:77:56:d5:08:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a999cffa6e48fa2c4f8d09803396b457a630a33d Validity Not Before: Nov 10 09:01:11 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e99207eda8fd1e8b52685bb359ede58c4dbdc660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:07:7f:0d:34:a8:70:df:5c:6a:a7:e8:76:46: c6:22:44:f8:dd:47:02:a4:8d:5b:db:dc:dd:88:41: 09:aa:05:6c:c2:be:2c:90:ad:aa:fb:01:c0:54:83: bb:d2:1b:a1:8e:50:c6:57:85:72:2d:cc:97:ec:52: e8:d3:22:12:ac:50:39:37:43:3d:8b:f6:43:ff:4a: 2f:f7:18:8e:4f:0b:0d:4a:e7:b3:5c:14:f2:c7:bc: 26:43:b1:5d:b4:59:c7:8e:1e:ba:c9:70:14:32:f3: 19:b5:05:18:d7:05:d5:67:03:ae:4a:ca:76:d8:68: ad:3f:f6:05:f4:2e:d7:52:3e:33:17:0b:7f:10:d8: 2f:30:2b:4b:f9:f4:fe:21:8e:dc:3a:fc:92:36:16: 6d:48:bc:7b:dc:c4:44:b2:5b:f2:85:65:8d:d6:0a: 8a:a0:63:a0:64:d5:1e:8c:b6:42:b9:c1:19:1f:62: 6c:6f:15:5e:2f:f0:f7:1b:33:c9:16:fc:a4:e8:d9: 70:8b:26:7b:1c:a1:a4:2f:ac:2a:67:1d:89:2c:11: 70:07:88:91:c1:bd:25:99:da:b0:6f:df:6c:ee:7a: b7:b3:51:6d:b5:66:b2:8b:1e:7d:af:0c:56:1c:a4: bd:c6:25:9d:0d:bd:e4:56:9d:45:3d:96:0d:12:35: 82:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:92:07:ED:A8:FD:1E:8B:52:68:5B:B3:59:ED:E5:8C:4D:BD:C6:60 X509v3 Authority Key Identifier: keyid:A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/6ZIH7aj9HotSaFuzWe3ljE29xmA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.192.96.0/21 185.138.196.0/22 Signature Algorithm: sha256WithRSAEncryption 16:7b:43:fc:8e:c5:b0:5d:1e:8d:4e:46:0e:c0:4a:5e:8f:6f: da:b1:71:8d:d0:97:1f:04:c5:c2:4a:47:72:83:f7:3c:6f:31: e6:33:02:df:e0:f9:13:1a:8a:eb:98:02:1b:5d:73:89:ca:a8: ed:fe:51:8a:4a:26:57:aa:08:91:c2:fb:b1:18:61:cf:25:b5: 73:44:f3:00:07:78:2d:b3:fd:e8:64:fe:39:4c:31:69:0d:e5: 04:87:7f:27:f7:b7:b9:d1:de:16:06:80:2a:4c:db:e8:d2:b3: 52:e2:cc:87:3f:15:b2:57:cc:1e:f9:d8:64:10:e4:06:df:00: e3:64:90:74:93:67:a3:4a:87:7b:f4:46:e5:b4:11:cc:ca:6d: 36:16:3f:ff:40:e0:a9:3b:c4:de:c3:06:6e:f8:f6:a9:04:e6: 08:a0:d2:66:55:ae:41:e1:22:46:26:40:49:fe:2c:52:4b:d2: 5f:5a:ad:bd:00:b7:cb:1d:c1:3c:6e:a8:68:80:0d:d4:c2:8b: d4:97:35:4e:63:03:8c:59:23:39:58:91:32:fc:bf:ee:26:c3: a9:69:08:5b:5c:f3:0a:74:a0:1e:dc:fe:44:93:3d:96:7a:de: c8:59:bb:36:21:23:2d:22:87:f4:c8:98:38:50:1a:0a:47:c0: 15:ae:6b:ff -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZps/3Doi9bzAj3UrXdW1Qg1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5OTljZmZhNmU0OGZhMmM0ZjhkMDk4MDMzOTZiNDU3YTYz MGEzM2QwHhcNMjUxMTEwMDkwMTExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTkyMDdlZGE4ZmQxZThiNTI2ODViYjM1OWVkZTU4YzRkYmRjNjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAd/DTSocN9caqfodkbGIkT43UcC pI1b29zdiEEJqgVswr4skK2q+wHAVIO70huhjlDGV4VyLcyX7FLo0yISrFA5N0M9 i/ZD/0ov9xiOTwsNSuezXBTyx7wmQ7FdtFnHjh66yXAUMvMZtQUY1wXVZwOuSsp2 2GitP/YF9C7XUj4zFwt/ENgvMCtL+fT+IY7cOvySNhZtSLx73MREslvyhWWN1gqK oGOgZNUejLZCucEZH2JsbxVeL/D3GzPJFvyk6NlwiyZ7HKGkL6wqZx2JLBFwB4iR wb0lmdqwb99s7nq3s1FttWayix59rwxWHKS9xiWdDb3kVp1FPZYNEjWCNQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOmSB+2o/R6LUmhbs1nt5YxNvcZgMB8GA1UdIwQY MBaAFKmZz/puSPosT40JgDOWtFemMKM9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVpuUC1tNUktaXhQalFtQU01YTBWNll3b3owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9mMTQzZDAtYWViOC00YjUyLTljMzUt YjNhNTA5MTBjMmE4LzEvNlpJSDdhajlIb3RTYUZ1eldlM2xqRTI5eG1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9mMTQzZDAtYWViOC00YjUyLTljMzUtYjNhNTA5MTBjMmE4 LzEvcVpuUC1tNUktaXhQalFtQU01YTBWNll3b3owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDV8BgAwQC uYrEMA0GCSqGSIb3DQEBCwUAA4IBAQAWe0P8jsWwXR6NTkYOwEpej2/asXGN0Jcf BMXCSkdyg/c8bzHmMwLf4PkTGorrmAIbXXOJyqjt/lGKSiZXqgiRwvuxGGHPJbVz RPMAB3gts/3oZP45TDFpDeUEh38n97e50d4WBoAqTNvo0rNS4syHPxWyV8we+dhk EOQG3wDjZJB0k2ejSod79EbltBHMym02Fj//QOCpO8TewwZu+PapBOYIoNJmVa5B 4SJGJkBJ/ixSS9JfWq29ALfLHcE8bqhogA3UwovUlzVOYwOMWSM5WJEy/L/uJsOp aQhbXPMKdKAe3P5Ekz2Wet7IWbs2ISMtIof0yJg4UBoKR8AVrmv/ -----END CERTIFICATE-----Generated at Sat Dec 6 14:35:11 2025 by rpki-client