This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/1-FD6F4qn_9bSIPxqte-wc4QpAnY.roa File: 1-FD6F4qn_9bSIPxqte-wc4QpAnY.roa (raw, json) Hash identifier: R4A5i2N8JYKg21Uc7Bt5Hjz+LtBEOYUw0Vl9yYmvj1U= Subject key identifier: F8:50:FA:17:8A:A7:FF:D6:D2:20:FC:6A:B5:EF:B0:73:84:29:02:76 Certificate issuer: /CN=230340d27e4b24f9124977322edb36942e2d160c Certificate serial: 019ADA592C2ADC9C7BBCE217994DD3EF4529 Authority key identifier: 23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/1-FD6F4qn_9bSIPxqte-wc4QpAnY.roa Signing time: Mon 01 Dec 2025 14:37:48 +0000 ROA not before: Mon 01 Dec 2025 14:37:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 30778 IP address blocks: 81.6.128.0/21 maxlen: 21 81.6.133.0/24 maxlen: 25 81.6.136.0/23 maxlen: 23 81.6.138.0/24 maxlen: 24 81.6.140.0/22 maxlen: 22 2a00:cd80:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:da:59:2c:2a:dc:9c:7b:bc:e2:17:99:4d:d3:ef:45:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=230340d27e4b24f9124977322edb36942e2d160c Validity Not Before: Dec 1 14:37:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f850fa178aa7ffd6d220fc6ab5efb07384290276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e0:8c:25:72:5e:bc:1c:63:76:5a:8c:28:27: 01:61:03:27:f7:0c:c9:5f:42:0c:2b:c7:54:a2:d0: 0f:1d:ba:49:b5:c7:d3:2b:f5:bc:c2:73:4e:f0:10: 28:18:f8:ff:76:bd:0e:58:71:eb:d8:05:68:74:34: f5:47:e9:bb:6e:7b:ed:63:68:1e:9c:6a:e6:c1:b5: b5:2b:21:40:60:49:34:76:ac:ed:bd:5f:2c:85:3a: ec:db:67:c3:67:6d:79:58:aa:39:1b:09:0e:75:88: e0:db:f3:42:ea:a7:f1:cd:f1:02:e9:46:63:fb:27: 27:7b:7c:cf:9f:b4:c4:2d:98:f1:eb:2c:75:43:e3: ca:8e:ca:5b:63:74:8a:2f:94:b4:1d:8a:57:6c:a5: 9a:2f:17:24:0a:96:09:75:1c:f1:08:15:00:41:79: 46:17:cd:b3:46:4d:53:d6:91:fc:64:2d:65:9c:c2: 7b:25:f9:30:ca:c8:15:30:fb:e0:c8:0f:df:86:45: 7e:e4:c1:8b:6b:3d:4d:f4:7c:08:b0:ba:e5:19:e6: 05:32:ab:64:98:96:cd:bc:87:2b:c4:94:2b:e6:df: b6:52:4b:d5:b2:c8:3d:20:a7:03:24:00:36:90:70: 02:54:78:12:23:be:c3:69:65:eb:d0:2a:03:2a:1a: f5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:50:FA:17:8A:A7:FF:D6:D2:20:FC:6A:B5:EF:B0:73:84:29:02:76 X509v3 Authority Key Identifier: keyid:23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/1-FD6F4qn_9bSIPxqte-wc4QpAnY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.6.128.0-81.6.138.255 81.6.140.0/22 IPv6: 2a00:cd80:8000::/33 Signature Algorithm: sha256WithRSAEncryption 3c:af:2b:f6:a7:b9:d0:29:18:4d:6f:56:13:4b:9f:d9:8b:50: ce:e9:db:35:49:f0:00:c4:db:53:c6:57:04:68:9a:64:a6:05: 20:aa:ab:b0:54:1e:df:12:32:5d:21:23:e1:44:a0:79:20:88: 35:8f:f9:05:76:6a:3a:f9:dc:ff:41:c0:23:64:c6:07:9f:bc: a9:08:fa:69:92:dd:33:06:c7:65:b2:53:a6:13:47:2c:9c:03: c5:fb:67:73:f8:6a:f6:58:f6:af:46:ab:12:74:20:b4:fe:03: 99:38:f9:f3:99:c8:dd:5e:bc:fe:92:83:45:53:48:63:b1:28: c9:09:d2:a2:d8:ba:56:c7:70:86:45:0b:79:a0:ba:69:a9:75: e2:bf:f0:d7:24:1a:58:04:46:c6:92:f7:82:46:dd:07:f1:5d: 8c:c8:55:4e:35:a6:9c:a4:21:f3:b1:93:a7:b2:be:3b:6b:dc: 29:d0:78:8f:ae:ae:be:c4:66:2e:a0:a2:e9:64:66:c3:5d:6b: ee:3e:00:16:3f:82:3a:5e:ad:3b:66:b1:03:c1:92:a1:b5:e8: f1:73:71:24:df:68:c8:ed:a6:bc:7d:e7:55:c2:20:ad:b7:9c: d5:6e:f1:92:05:a9:0c:88:35:9e:e1:69:38:27:b3:a3:ee:6a: fd:51:36:c9 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgISAZraWSwq3Jx7vOIXmU3T70UpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMDM0MGQyN2U0YjI0ZjkxMjQ5NzczMjJlZGIzNjk0MmUy ZDE2MGMwHhcNMjUxMjAxMTQzNzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODUwZmExNzhhYTdmZmQ2ZDIyMGZjNmFiNWVmYjA3Mzg0MjkwMjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOCMJXJevBxjdlqMKCcBYQMn9wzJ X0IMK8dUotAPHbpJtcfTK/W8wnNO8BAoGPj/dr0OWHHr2AVodDT1R+m7bnvtY2ge nGrmwbW1KyFAYEk0dqztvV8shTrs22fDZ215WKo5GwkOdYjg2/NC6qfxzfEC6UZj +ycne3zPn7TELZjx6yx1Q+PKjspbY3SKL5S0HYpXbKWaLxckCpYJdRzxCBUAQXlG F82zRk1T1pH8ZC1lnMJ7JfkwysgVMPvgyA/fhkV+5MGLaz1N9HwIsLrlGeYFMqtk mJbNvIcrxJQr5t+2UkvVssg9IKcDJAA2kHACVHgSI77DaWXr0CoDKhr1wQIDAQAB o4ICKDCCAiQwHQYDVR0OBBYEFPhQ+heKp//W0iD8arXvsHOEKQJ2MB8GA1UdIwQY MBaAFCMDQNJ+SyT5Ekl3Mi7bNpQuLRYMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXdOQTBuNUxKUGtTU1hjeUx0czJsQzR0Rmd3LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS83YmRmNTItNmFjNS00YzI0LWJmZDAt YjU3MDkwN2I1OWViLzEvMS1GRDZGNHFuXzliU0lQeHF0ZS13YzRRcEFuWS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYjkvN2JkZjUyLTZhYzUtNGMyNC1iZmQwLWI1NzA5MDdiNTll Yi8xL0l3TkEwbjVMSlBrU1NYY3lMdHMybEM0dEZndy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA9BggrBgEFBQcBBwEB/wQuMCwwGgQCAAEwFDAMAwQHUQaA AwQAUQaKAwQCUQaMMA4EAgACMAgDBgcqAM2AgDANBgkqhkiG9w0BAQsFAAOCAQEA PK8r9qe50CkYTW9WE0uf2YtQzunbNUnwAMTbU8ZXBGiaZKYFIKqrsFQe3xIyXSEj 4USgeSCINY/5BXZqOvnc/0HAI2TGB5+8qQj6aZLdMwbHZbJTphNHLJwDxftnc/hq 9lj2r0arEnQgtP4DmTj585nI3V68/pKDRVNIY7EoyQnSoti6VsdwhkULeaC6aal1 4r/w1yQaWARGxpL3gkbdB/FdjMhVTjWmnKQh87GTp7K+O2vcKdB4j66uvsRmLqCi 6WRmw11r7j4AFj+COl6tO2axA8GSobXo8XNxJN9oyO2mvH3nVcIgrbec1W7xkgWp DIg1nuFpOCezo+5q/VE2yQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:03:42 2025 by rpki-client