This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/b405QCs1aUgpVCYR4Gaf0mhpXUg.roa File: b405QCs1aUgpVCYR4Gaf0mhpXUg.roa (raw, json) Hash identifier: vr3hh37YG76cIiO+7+0A0llwbOl+y0kE8NKxOJZ/Pus= Subject key identifier: 6F:8D:39:40:2B:35:69:48:29:54:26:11:E0:66:9F:D2:68:69:5D:48 Certificate issuer: /CN=d3d56f07be184cba52f6fdc049e8114d2616c32a Certificate serial: 019B2CA24175B50B274C7355867C8409895C Authority key identifier: D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/b405QCs1aUgpVCYR4Gaf0mhpXUg.roa Signing time: Wed 17 Dec 2025 14:06:29 +0000 ROA not before: Wed 17 Dec 2025 14:06:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 20940 IP address blocks: 109.207.109.0/24 maxlen: 24 185.225.250.0/24 maxlen: 24 185.225.251.0/24 maxlen: 24 2a10:f783:23::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 08:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:a2:41:75:b5:0b:27:4c:73:55:86:7c:84:09:89:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3d56f07be184cba52f6fdc049e8114d2616c32a Validity Not Before: Dec 17 14:06:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6f8d39402b35694829542611e0669fd268695d48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a4:bb:63:5e:cf:ec:90:04:fb:b0:50:2b:f7: 18:81:62:40:e4:7b:9e:97:a5:fc:a7:5d:42:ea:24: d7:cb:52:52:75:99:d4:37:3c:bc:8d:ae:45:47:42: 80:a1:d2:85:8f:70:b1:20:61:f7:51:e6:7e:fe:b4: 3a:11:b3:53:60:4c:30:44:6b:27:5f:0d:08:72:83: 00:52:0f:ab:f4:b5:94:44:08:a9:61:d7:23:9c:9b: 5d:40:7c:09:dc:e7:bf:50:59:23:fc:a2:62:76:2a: b8:45:6c:d9:84:39:95:e6:87:fc:7d:df:c9:ec:63: b0:77:c6:fb:5b:be:b6:b6:25:60:71:7c:d9:04:62: bd:a2:08:0c:9a:00:73:f7:2a:01:1c:f9:ea:62:9e: 09:12:9a:7d:b9:a3:63:57:ab:bb:0a:76:92:dc:48: d2:5a:80:b7:25:25:d2:4a:2b:29:a4:b2:77:b8:0d: 27:4a:9e:8d:73:0d:3e:3d:fe:ae:2e:5e:72:58:dc: 84:86:f3:d9:b2:0f:00:a4:c3:c6:2d:11:c5:02:38: 85:44:cc:80:ff:58:27:c9:95:c4:21:1a:cc:c1:0d: 24:f7:80:4b:4c:c7:30:ed:61:6c:4a:ed:1c:58:e5: 39:3b:ba:13:c7:a0:5a:ed:9e:e9:31:ad:09:eb:c7: 84:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:8D:39:40:2B:35:69:48:29:54:26:11:E0:66:9F:D2:68:69:5D:48 X509v3 Authority Key Identifier: keyid:D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/b405QCs1aUgpVCYR4Gaf0mhpXUg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.207.109.0/24 185.225.250.0/23 IPv6: 2a10:f783:23::/48 Signature Algorithm: sha256WithRSAEncryption 55:17:4c:13:77:11:3e:04:15:83:70:ef:a3:ba:8e:2d:eb:a0: 74:92:32:09:84:47:ed:61:0a:e0:dd:0b:33:4f:be:ac:b6:f9: 61:51:0f:6b:fc:c4:95:73:57:09:fc:87:5e:2a:f5:06:c3:19: 03:d9:f4:60:a7:42:db:e5:7d:5e:19:ef:52:d8:40:1c:34:61: 4e:a9:85:22:a0:cd:49:ac:66:78:18:f3:79:6e:48:9d:ba:a4: 13:da:91:ff:f8:58:69:40:f5:de:44:3f:aa:e0:05:48:90:4c: 72:a1:7e:89:04:b2:6c:20:d9:21:59:e6:0a:d2:63:a8:5c:ef: 63:cc:69:07:fd:5d:16:66:7f:31:f4:44:be:02:85:d3:f4:2a: 9f:84:b4:ea:df:9d:4a:d0:18:2d:28:a5:d5:c1:f6:3d:60:fc: ff:e9:54:9e:6a:d7:55:bf:9e:9b:65:2e:c8:c7:45:c4:5f:c4: 2d:b8:20:2a:93:8a:2e:1d:c7:0f:7a:33:5f:8f:88:67:02:27: f2:4c:8e:79:30:97:d9:67:b7:66:32:e9:dd:62:49:25:45:b9: 52:d9:c3:1a:25:f7:24:93:07:6c:3e:27:6c:c0:76:cf:c0:32: 3a:ee:85:53:2a:6a:de:b2:02:47:16:a6:c3:98:93:7e:4a:ff: 44:f1:63:c7 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZssokF1tQsnTHNVhnyECYlcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZDU2ZjA3YmUxODRjYmE1MmY2ZmRjMDQ5ZTgxMTRkMjYx NmMzMmEwHhcNMjUxMjE3MTQwNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjhkMzk0MDJiMzU2OTQ4Mjk1NDI2MTFlMDY2OWZkMjY4Njk1ZDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKS7Y17P7JAE+7BQK/cYgWJA5Hue l6X8p11C6iTXy1JSdZnUNzy8ja5FR0KAodKFj3CxIGH3UeZ+/rQ6EbNTYEwwRGsn Xw0IcoMAUg+r9LWURAipYdcjnJtdQHwJ3Oe/UFkj/KJidiq4RWzZhDmV5of8fd/J 7GOwd8b7W762tiVgcXzZBGK9oggMmgBz9yoBHPnqYp4JEpp9uaNjV6u7CnaS3EjS WoC3JSXSSisppLJ3uA0nSp6Ncw0+Pf6uLl5yWNyEhvPZsg8ApMPGLRHFAjiFRMyA /1gnyZXEIRrMwQ0k94BLTMcw7WFsSu0cWOU5O7oTx6Ba7Z7pMa0J68eE4wIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFG+NOUArNWlIKVQmEeBmn9JoaV1IMB8GA1UdIwQY MBaAFNPVbwe+GEy6Uvb9wEnoEU0mFsMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYt MWIwNmQxYzcwNGMxLzEvYjQwNVFDczFhVWdwVkNZUjRHYWYwbWhwWFVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYtMWIwNmQxYzcwNGMx LzEvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAbc9tAwQB ueH6MA8EAgACMAkDBwAqEPeDACMwDQYJKoZIhvcNAQELBQADggEBAFUXTBN3ET4E FYNw76O6ji3roHSSMgmER+1hCuDdCzNPvqy2+WFRD2v8xJVzVwn8h14q9QbDGQPZ 9GCnQtvlfV4Z71LYQBw0YU6phSKgzUmsZngY83luSJ26pBPakf/4WGlA9d5EP6rg BUiQTHKhfokEsmwg2SFZ5grSY6hc72PMaQf9XRZmfzH0RL4ChdP0Kp+EtOrfnUrQ GC0opdXB9j1g/P/pVJ5q11W/nptlLsjHRcRfxC24ICqTii4dxw96M1+PiGcCJ/JM jnkwl9lnt2Yy6d1iSSVFuVLZwxol9ySTB2w+J2zAds/AMjruhVMqat6yAkcWpsOY k35K/0TxY8c= -----END CERTIFICATE-----Generated at Thu Dec 18 18:26:25 2025 by rpki-client