This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/6QMQKtWwcd7qtN8rUJfjAA80stY.roa File: 6QMQKtWwcd7qtN8rUJfjAA80stY.roa (raw, json) Hash identifier: vi5fCYqnGO7QvwAUOW0ptahNy5X2IqMPhfiW65Kpt+E= Subject key identifier: E9:03:10:2A:D5:B0:71:DE:EA:B4:DF:2B:50:97:E3:00:0F:34:B2:D6 Certificate issuer: /CN=55e93cc3e61cf334b16111cae34ae9928c4fc3fa Certificate serial: 019AC55F1B42A66FF616776C1762315028F9 Authority key identifier: 55:E9:3C:C3:E6:1C:F3:34:B1:61:11:CA:E3:4A:E9:92:8C:4F:C3:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vek8w-Yc8zSxYRHK40rpkoxPw_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/6QMQKtWwcd7qtN8rUJfjAA80stY.roa Signing time: Thu 27 Nov 2025 12:52:15 +0000 ROA not before: Thu 27 Nov 2025 12:52:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 59499 IP address blocks: 5.159.8.0/21 maxlen: 21 5.159.8.0/22 maxlen: 22 5.159.12.0/22 maxlen: 22 185.141.16.0/22 maxlen: 22 185.141.18.0/23 maxlen: 23 185.141.18.0/24 maxlen: 24 185.141.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.crl rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft rsync://rpki.ripe.net/repository/DEFAULT/Vek8w-Yc8zSxYRHK40rpkoxPw_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c5:5f:1b:42:a6:6f:f6:16:77:6c:17:62:31:50:28:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55e93cc3e61cf334b16111cae34ae9928c4fc3fa Validity Not Before: Nov 27 12:52:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e903102ad5b071deeab4df2b5097e3000f34b2d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d5:3b:a5:53:4b:39:98:37:4f:80:c0:08:a0: 0e:60:2b:95:9c:9c:d3:b5:ce:aa:04:c8:c6:90:c8: a2:dc:11:52:4d:f0:73:31:3b:c5:78:f4:54:27:1e: 80:d4:5f:fa:85:ca:84:1d:3b:57:8a:d8:d3:7f:9c: ed:26:9a:24:42:b9:1f:09:f0:97:2d:d2:21:3b:4b: 0e:af:3d:61:6a:74:3d:4d:35:c3:bc:4e:17:24:74: 8b:74:37:cc:46:e0:0f:48:05:ec:65:f3:dc:51:6d: e0:ad:a0:14:23:69:dc:61:a8:fb:19:6b:4e:30:53: 4a:37:c6:d0:f6:90:2f:06:6a:9e:7e:4f:85:09:43: a4:5f:42:03:6a:04:1c:fa:f0:77:db:69:50:f6:29: 43:56:f8:4f:12:e0:84:96:1f:23:d3:67:1f:fa:b3: fc:c3:00:5d:6f:99:1b:8e:1c:e4:fd:4c:7c:a8:36: 06:e7:16:23:49:37:83:ea:40:54:35:4f:ce:6c:54: 78:0c:6e:06:0d:db:8f:a4:ea:32:ed:de:30:3f:11: 6b:dd:e8:fe:fa:52:72:19:cf:7c:87:63:39:8d:ab: bd:69:74:51:9b:02:71:32:40:91:f4:63:21:9e:bb: d2:2e:67:e1:25:32:84:ca:e7:ef:7f:16:bd:c4:37: 84:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:03:10:2A:D5:B0:71:DE:EA:B4:DF:2B:50:97:E3:00:0F:34:B2:D6 X509v3 Authority Key Identifier: keyid:55:E9:3C:C3:E6:1C:F3:34:B1:61:11:CA:E3:4A:E9:92:8C:4F:C3:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vek8w-Yc8zSxYRHK40rpkoxPw_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/6QMQKtWwcd7qtN8rUJfjAA80stY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.159.8.0/21 185.141.16.0/22 Signature Algorithm: sha256WithRSAEncryption 67:b4:b8:11:98:3a:34:92:bf:53:d4:64:e8:be:04:5c:13:82: 7d:ea:e8:06:d6:1a:af:e8:a4:2b:c1:bc:c9:c5:e0:f6:95:94: 39:e6:c7:06:c5:b8:91:ce:ac:07:a6:8a:ec:44:64:46:ce:60: 9a:36:3e:d2:51:0a:b6:7c:31:d3:9e:e4:45:81:dd:ce:85:e6: 01:ba:0e:b8:41:b4:72:bf:fa:ea:d3:1c:ec:dd:5a:20:bb:b1: 34:43:ad:ad:bf:eb:90:b2:74:22:f7:7b:b5:a1:df:23:47:62: bc:98:4c:81:8b:1b:45:f9:33:a8:72:47:72:10:1d:f9:bd:f7: ea:76:ef:7b:3c:41:36:6b:20:ff:d3:4c:f5:a0:52:60:cf:2c: ad:dc:06:b3:71:8b:c8:76:1c:73:b8:43:fb:e4:d7:cf:2f:a6: b5:c4:a1:a0:4d:ed:3b:7b:e1:9e:3f:51:c1:d6:7c:84:5f:2f: 02:bb:88:d5:47:63:eb:65:eb:f9:7e:d9:eb:26:52:bf:e2:d2: ec:3e:c2:99:d9:d7:fe:c9:d3:87:a7:4f:bd:b4:f6:20:f8:75: dc:9c:dd:71:40:75:13:06:65:24:74:dc:e0:a8:cc:21:2f:f9: 78:5a:ec:1a:ad:06:c3:7d:da:4d:83:76:97:03:cf:05:d6:4f: 86:1a:1b:6d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrFXxtCpm/2FndsF2IxUCj5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1ZTkzY2MzZTYxY2YzMzRiMTYxMTFjYWUzNGFlOTkyOGM0 ZmMzZmEwHhcNMjUxMTI3MTI1MjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTAzMTAyYWQ1YjA3MWRlZWFiNGRmMmI1MDk3ZTMwMDBmMzRiMmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tU7pVNLOZg3T4DACKAOYCuVnJzT tc6qBMjGkMii3BFSTfBzMTvFePRUJx6A1F/6hcqEHTtXitjTf5ztJpokQrkfCfCX LdIhO0sOrz1hanQ9TTXDvE4XJHSLdDfMRuAPSAXsZfPcUW3graAUI2ncYaj7GWtO MFNKN8bQ9pAvBmqefk+FCUOkX0IDagQc+vB322lQ9ilDVvhPEuCElh8j02cf+rP8 wwBdb5kbjhzk/Ux8qDYG5xYjSTeD6kBUNU/ObFR4DG4GDduPpOoy7d4wPxFr3ej+ +lJyGc98h2M5jau9aXRRmwJxMkCR9GMhnrvSLmfhJTKEyufvfxa9xDeExwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOkDECrVsHHe6rTfK1CX4wAPNLLWMB8GA1UdIwQY MBaAFFXpPMPmHPM0sWERyuNK6ZKMT8P6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmVrOHctWWM4elN4WVJISzQwcnBrb3hQd19vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8zYzQzODYtNDIzOC00ZGU2LWI1MGIt ZTgwOTJkZDY1YzdmLzEvNlFNUUt0V3djZDdxdE44clVKZmpBQTgwc3RZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8zYzQzODYtNDIzOC00ZGU2LWI1MGItZTgwOTJkZDY1Yzdm LzEvVmVrOHctWWM4elN4WVJISzQwcnBrb3hQd19vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDBZ8IAwQC uY0QMA0GCSqGSIb3DQEBCwUAA4IBAQBntLgRmDo0kr9T1GTovgRcE4J96ugG1hqv 6KQrwbzJxeD2lZQ55scGxbiRzqwHporsRGRGzmCaNj7SUQq2fDHTnuRFgd3OheYB ug64QbRyv/rq0xzs3Vogu7E0Q62tv+uQsnQi93u1od8jR2K8mEyBixtF+TOockdy EB35vffqdu97PEE2ayD/00z1oFJgzyyt3AazcYvIdhxzuEP75NfPL6a1xKGgTe07 e+GeP1HB1nyEXy8Cu4jVR2PrZev5ftnrJlK/4tLsPsKZ2df+ydOHp0+9tPYg+HXc nN1xQHUTBmUkdNzgqMwhL/l4WuwarQbDfdpNg3aXA88F1k+GGhtt -----END CERTIFICATE-----Generated at Sun Dec 7 00:26:52 2025 by rpki-client