This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/6sJ-wQpiS25QBcOh2j3bL4cTD-A.roa File: 6sJ-wQpiS25QBcOh2j3bL4cTD-A.roa (raw, json) Hash identifier: F4TG4ne94PDnc8s48JSfw2AY/j+2ggMyoyRrmuq/iWY= Subject key identifier: EA:C2:7E:C1:0A:62:4B:6E:50:05:C3:A1:DA:3D:DB:2F:87:13:0F:E0 Certificate issuer: /CN=ce2bcc10d16b0fed2855e9295fc409d6507b43d6 Certificate serial: 019ADEE6A386D47522FD480D29439257A4D0 Authority key identifier: CE:2B:CC:10:D1:6B:0F:ED:28:55:E9:29:5F:C4:09:D6:50:7B:43:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/6sJ-wQpiS25QBcOh2j3bL4cTD-A.roa Signing time: Tue 02 Dec 2025 11:50:48 +0000 ROA not before: Tue 02 Dec 2025 11:50:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 50281 IP address blocks: 193.46.89.0/24 maxlen: 24 193.106.60.0/22 maxlen: 22 193.106.60.0/24 maxlen: 24 193.106.61.0/24 maxlen: 24 193.106.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:de:e6:a3:86:d4:75:22:fd:48:0d:29:43:92:57:a4:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce2bcc10d16b0fed2855e9295fc409d6507b43d6 Validity Not Before: Dec 2 11:50:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=eac27ec10a624b6e5005c3a1da3ddb2f87130fe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8f:ec:91:6f:29:9a:07:b4:82:5a:96:a9:f0: cc:e4:14:99:59:0d:98:e6:ec:3e:d1:a3:b7:5d:e2: ca:df:4b:f2:2b:a6:16:7f:a1:ac:02:a3:32:63:f4: 56:51:8e:e8:fb:77:50:84:90:4e:fa:15:c9:f7:cf: 02:27:49:0f:f3:4b:ad:cd:b2:ea:3b:01:a6:93:35: e6:31:36:dc:ff:ad:d9:77:be:1c:ba:12:27:15:2c: 9b:44:0e:31:b7:c0:f6:d0:9c:c7:6f:73:91:aa:57: 78:d7:97:04:f0:25:be:b6:6d:6e:55:f2:bf:3b:63: c6:0d:77:d6:3f:83:ed:99:d3:2e:79:bb:5d:9d:06: 00:91:7e:05:22:3d:bb:8f:70:92:47:cc:5e:96:ac: 8d:8d:b1:93:a0:39:86:04:bb:c7:c7:bf:89:12:0b: af:99:cd:51:d2:db:bb:0a:7e:62:e5:b0:6e:da:07: 4d:44:ad:a5:ba:de:72:2c:2a:04:74:c0:d7:77:37: 67:8d:d6:40:a6:55:e4:ab:89:2d:95:ca:48:fa:42: dd:bd:5c:09:b0:8b:af:bc:bd:d9:18:13:65:7a:e8: d2:94:1e:b9:5d:b0:9e:9f:bf:b6:fa:c2:0b:9d:d5: 01:16:07:a0:45:f3:f7:70:37:31:a5:5f:c6:0c:bc: 3d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C2:7E:C1:0A:62:4B:6E:50:05:C3:A1:DA:3D:DB:2F:87:13:0F:E0 X509v3 Authority Key Identifier: keyid:CE:2B:CC:10:D1:6B:0F:ED:28:55:E9:29:5F:C4:09:D6:50:7B:43:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/6sJ-wQpiS25QBcOh2j3bL4cTD-A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.46.89.0/24 193.106.60.0/22 Signature Algorithm: sha256WithRSAEncryption 48:1c:0a:09:db:3c:c8:ec:94:64:d7:27:00:8c:0e:88:ab:f4: dc:dd:1a:0d:5f:48:1f:09:7b:42:ce:b8:82:0d:c5:4f:6c:62: 12:75:4a:9e:04:ea:25:80:55:b6:2c:c9:16:80:05:21:4e:38: fb:6b:cd:27:f6:f8:3e:c6:03:a8:df:5c:71:48:4b:61:62:1e: ef:3a:8a:51:4d:1f:2f:91:18:ec:51:3e:6e:d2:f7:88:7a:96: c5:75:1d:e5:ad:47:2d:20:fa:24:c2:e9:25:04:66:35:cd:79: 23:6a:35:0b:2f:6c:cc:54:b9:56:a7:3f:c7:ff:38:3e:36:47: 72:e3:2d:cf:da:b5:a0:a9:f8:c0:31:13:d7:f3:59:90:eb:93: d4:69:93:24:a9:45:36:27:11:b2:82:4d:3b:19:c8:c1:f1:43: f5:a6:7e:f3:2b:4f:14:4b:76:2b:4f:fd:bb:02:6d:15:98:76: 71:ce:2b:26:75:85:ba:dd:ed:04:d2:76:f9:1c:e0:2a:f1:f9: 69:e4:17:15:9d:c5:f9:e8:c0:ee:1c:67:87:45:35:b6:67:61: 08:dd:3b:ed:01:45:97:64:57:b7:eb:75:dd:ba:f8:11:65:f6: bc:76:aa:e7:17:75:8b:17:bc:f4:ec:68:be:f2:2b:14:1c:5c: b9:7a:df:3a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZre5qOG1HUi/UgNKUOSV6TQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlMmJjYzEwZDE2YjBmZWQyODU1ZTkyOTVmYzQwOWQ2NTA3 YjQzZDYwHhcNMjUxMjAyMTE1MDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWMyN2VjMTBhNjI0YjZlNTAwNWMzYTFkYTNkZGIyZjg3MTMwZmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqI/skW8pmge0glqWqfDM5BSZWQ2Y 5uw+0aO3XeLK30vyK6YWf6GsAqMyY/RWUY7o+3dQhJBO+hXJ988CJ0kP80utzbLq OwGmkzXmMTbc/63Zd74cuhInFSybRA4xt8D20JzHb3ORqld415cE8CW+tm1uVfK/ O2PGDXfWP4PtmdMuebtdnQYAkX4FIj27j3CSR8xelqyNjbGToDmGBLvHx7+JEguv mc1R0tu7Cn5i5bBu2gdNRK2lut5yLCoEdMDXdzdnjdZAplXkq4ktlcpI+kLdvVwJ sIuvvL3ZGBNleujSlB65XbCen7+2+sILndUBFgegRfP3cDcxpV/GDLw9UQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOrCfsEKYktuUAXDodo92y+HEw/gMB8GA1UdIwQY MBaAFM4rzBDRaw/tKFXpKV/ECdZQe0PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveml2TUVORnJELTBvVmVrcFg4UUoxbEI3UTlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kZjc1N2MtNDk5ZC00MDIwLWE1YzMt NjExNjFhNjVkM2Q2LzEvNnNKLXdRcGlTMjVRQmNPaDJqM2JMNGNURC1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9kZjc1N2MtNDk5ZC00MDIwLWE1YzMtNjExNjFhNjVkM2Q2 LzEveml2TUVORnJELTBvVmVrcFg4UUoxbEI3UTlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwS5ZAwQC wWo8MA0GCSqGSIb3DQEBCwUAA4IBAQBIHAoJ2zzI7JRk1ycAjA6Iq/Tc3RoNX0gf CXtCzriCDcVPbGISdUqeBOolgFW2LMkWgAUhTjj7a80n9vg+xgOo31xxSEthYh7v OopRTR8vkRjsUT5u0veIepbFdR3lrUctIPokwuklBGY1zXkjajULL2zMVLlWpz/H /zg+Nkdy4y3P2rWgqfjAMRPX81mQ65PUaZMkqUU2JxGygk07GcjB8UP1pn7zK08U S3YrT/27Am0VmHZxzismdYW63e0E0nb5HOAq8flp5BcVncX56MDuHGeHRTW2Z2EI 3TvtAUWXZFe363XduvgRZfa8dqrnF3WLF7z07Gi+8isUHFy5et86 -----END CERTIFICATE-----Generated at Sat Dec 6 16:34:01 2025 by rpki-client