This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/6xMftLCAOKrVwVv6NUAPSenS09M.roa File: 6xMftLCAOKrVwVv6NUAPSenS09M.roa (raw, json) Hash identifier: r6nGwqWYBox/dH/E1KG2dY2U+dcsZh0rlvfvDm7Fpts= Subject key identifier: EB:13:1F:B4:B0:80:38:AA:D5:C1:5B:FA:35:40:0F:49:E9:D2:D3:D3 Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Certificate serial: 019A9B94977B247E762DA26FCB6DADDFFB6D Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/6xMftLCAOKrVwVv6NUAPSenS09M.roa Signing time: Wed 19 Nov 2025 10:06:37 +0000 ROA not before: Wed 19 Nov 2025 10:06:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213438 IP address blocks: 78.159.130.0/24 maxlen: 24 93.152.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9b:94:97:7b:24:7e:76:2d:a2:6f:cb:6d:ad:df:fb:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Validity Not Before: Nov 19 10:06:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=eb131fb4b08038aad5c15bfa35400f49e9d2d3d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:36:96:3e:05:8c:82:85:e6:b5:68:34:8d:d7: 01:cb:25:43:4b:eb:26:66:1c:54:05:14:86:f9:46: 5c:b5:ba:9a:f5:60:3e:da:f4:73:05:b8:1a:c1:e0: ba:4c:dc:1f:43:6b:29:90:bf:94:98:74:6a:52:7c: a2:13:30:d6:f2:95:64:db:cd:78:6d:50:12:26:6e: 63:94:66:7f:02:e9:97:ea:68:fe:4f:27:47:89:b5: 95:9a:ea:59:9a:dc:d8:2c:40:a5:37:8d:e6:3c:ff: 97:82:38:e6:01:91:4b:ee:0e:5c:a1:f3:2e:52:67: be:c6:e2:4c:5c:34:e1:76:5e:96:04:3d:e5:b1:03: 34:dd:7c:b2:9e:f9:9c:74:9e:71:b5:4e:0a:36:0c: e8:77:04:1c:29:71:74:c4:68:6b:ec:7c:0d:26:1e: 11:8e:30:a8:35:f2:65:a9:b3:0f:9f:18:8d:3f:ff: e6:7e:72:b2:f5:90:15:f3:fe:79:e9:69:3f:30:e6: da:2b:e8:84:67:37:cf:e0:b3:30:c9:0d:bd:86:8f: 44:74:d6:a0:4e:28:8e:24:e8:50:37:f6:bf:4a:60: 6f:78:83:ea:8c:55:b8:73:bc:84:49:7c:18:9a:a3: a3:e5:40:7f:1b:97:0c:cc:a6:a4:07:44:2d:61:40: dc:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:13:1F:B4:B0:80:38:AA:D5:C1:5B:FA:35:40:0F:49:E9:D2:D3:D3 X509v3 Authority Key Identifier: keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/6xMftLCAOKrVwVv6NUAPSenS09M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.159.130.0/24 93.152.219.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:57:e0:98:38:e5:78:55:20:d6:b7:51:31:f3:fb:10:92:7c: 82:0a:07:6d:e8:72:cc:11:95:90:d0:ab:74:bd:85:1c:c3:30: 5f:ac:76:67:ae:82:fb:a2:53:e7:49:c3:c5:9a:d8:6b:eb:84: 85:ba:53:b1:e8:44:2e:c1:d3:7b:02:0b:c0:57:5f:33:9f:c2: aa:12:88:38:39:09:ab:54:35:39:1c:81:c2:81:fb:c4:30:5c: df:e0:a5:be:da:5b:c6:02:dd:fd:b0:e1:f2:35:47:4b:eb:26: 0e:4b:7e:a0:9f:33:f8:e2:08:8f:f5:b6:65:35:a9:d2:a6:80: db:75:fd:73:84:5e:36:e6:98:f5:0b:ba:9b:82:2c:40:6a:96: 25:e7:82:d5:e5:db:10:1c:df:a3:25:f3:26:10:2e:96:1d:e9: 0f:03:da:8d:15:52:b0:17:22:ca:e8:b2:09:79:04:8b:cc:78: a4:7a:85:ab:45:0b:72:89:53:d9:98:49:6b:75:7b:e2:45:ed: b3:c6:2f:ea:2d:5e:32:05:42:76:2b:63:84:0f:97:6d:0d:0c: 4a:bf:0d:6d:25:6e:dd:34:9e:d8:d2:74:26:00:f7:07:b4:4d: db:c4:03:3a:78:13:0f:62:2c:60:84:2b:26:e0:cc:fc:44:88: 37:f9:13:49 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqblJd7JH52LaJvy22t3/ttMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk MDAxOGMwHhcNMjUxMTE5MTAwNjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjEzMWZiNGIwODAzOGFhZDVjMTViZmEzNTQwMGY0OWU5ZDJkM2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDaWPgWMgoXmtWg0jdcByyVDS+sm ZhxUBRSG+UZctbqa9WA+2vRzBbgaweC6TNwfQ2spkL+UmHRqUnyiEzDW8pVk2814 bVASJm5jlGZ/AumX6mj+TydHibWVmupZmtzYLEClN43mPP+XgjjmAZFL7g5cofMu Ume+xuJMXDThdl6WBD3lsQM03XyynvmcdJ5xtU4KNgzodwQcKXF0xGhr7HwNJh4R jjCoNfJlqbMPnxiNP//mfnKy9ZAV8/556Wk/MObaK+iEZzfP4LMwyQ29ho9EdNag TiiOJOhQN/a/SmBveIPqjFW4c7yESXwYmqOj5UB/G5cMzKakB0QtYUDc5wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOsTH7SwgDiq1cFb+jVAD0np0tPTMB8GA1UdIwQY MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct MjliMDg1ZGQyM2FkLzEvNnhNZnRMQ0FPS3JWd1Z2Nk5VQVBTZW5TMDlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATp+CAwQA XZjbMA0GCSqGSIb3DQEBCwUAA4IBAQAuV+CYOOV4VSDWt1Ex8/sQknyCCgdt6HLM EZWQ0Kt0vYUcwzBfrHZnroL7olPnScPFmthr64SFulOx6EQuwdN7AgvAV18zn8Kq Eog4OQmrVDU5HIHCgfvEMFzf4KW+2lvGAt39sOHyNUdL6yYOS36gnzP44giP9bZl NanSpoDbdf1zhF425pj1C7qbgixAapYl54LV5dsQHN+jJfMmEC6WHekPA9qNFVKw FyLK6LIJeQSLzHikeoWrRQtyiVPZmElrdXviRe2zxi/qLV4yBUJ2K2OED5dtDQxK vw1tJW7dNJ7Y0nQmAPcHtE3bxAM6eBMPYixghCsm4Mz8RIg3+RNJ -----END CERTIFICATE-----Generated at Sat Dec 6 09:41:55 2025 by rpki-client