This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6QFpJODiBsz86t0oTU06dHabNcQ.roa File: 6QFpJODiBsz86t0oTU06dHabNcQ.roa (raw, json) Hash identifier: f9F80pi+TPZBxDcJD1vtiFl2q18KInNLQ7vPPVScD98= Subject key identifier: E9:01:69:24:E0:E2:06:CC:FC:EA:DD:28:4D:4D:3A:74:76:9B:35:C4 Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B1210CFD609BBC4C3BB25069CAB08AB75 Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6QFpJODiBsz86t0oTU06dHabNcQ.roa Signing time: Fri 12 Dec 2025 10:17:30 +0000 ROA not before: Fri 12 Dec 2025 10:17:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214238 IP address blocks: 62.76.226.0/24 maxlen: 24 62.76.231.0/24 maxlen: 24 62.76.235.0/24 maxlen: 24 192.124.181.0/24 maxlen: 24 192.124.183.0/24 maxlen: 24 192.124.188.0/24 maxlen: 24 193.124.3.0/24 maxlen: 24 193.124.6.0/24 maxlen: 24 193.124.91.0/24 maxlen: 24 194.58.60.0/24 maxlen: 24 194.58.67.0/24 maxlen: 24 194.87.3.0/24 maxlen: 24 194.87.7.0/24 maxlen: 24 194.87.16.0/24 maxlen: 24 194.87.24.0/24 maxlen: 24 194.87.36.0/24 maxlen: 24 194.87.90.0/24 maxlen: 24 194.87.165.0/24 maxlen: 24 194.87.166.0/24 maxlen: 24 194.135.23.0/24 maxlen: 24 195.58.55.0/24 maxlen: 24 195.133.12.0/24 maxlen: 24 195.133.56.0/24 maxlen: 24 195.133.60.0/24 maxlen: 24 195.133.61.0/24 maxlen: 24 212.193.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:10:cf:d6:09:bb:c4:c3:bb:25:06:9c:ab:08:ab:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Dec 12 10:17:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e9016924e0e206ccfceadd284d4d3a74769b35c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:74:4d:3b:02:0f:d5:1e:b3:86:b4:68:4c:d6: 25:23:1a:23:81:48:04:b5:f3:13:32:f3:bf:8c:9e: 6f:74:64:e0:34:ff:f5:d4:f1:f3:c4:55:6b:a7:21: 63:30:ff:45:56:88:39:8e:ef:79:07:53:97:39:99: 78:42:43:56:bd:af:ab:5d:9a:82:ac:cd:2a:44:bc: bb:22:1a:1a:12:2a:60:5e:67:45:2d:b2:4a:66:f9: c8:38:ac:c5:db:49:b5:ab:c8:e3:d0:67:c8:8e:6c: 65:34:93:90:9d:cf:e3:49:9a:ec:5b:8c:30:9f:11: e3:a7:6d:32:43:3c:dc:9c:a0:75:a3:71:1b:35:2e: 76:a3:df:5e:ed:39:79:f4:1b:f2:a1:9e:6a:20:46: 8d:57:8e:8c:a8:0e:f3:0f:40:de:ae:ec:03:f8:85: fc:df:5d:fa:b8:69:42:91:fe:41:10:b0:cf:e4:0d: da:89:da:cf:5f:bb:5e:b6:f4:58:35:eb:c1:f7:58: 37:00:51:8b:0d:6b:d4:27:6c:f8:c3:37:0c:4d:44: ce:e1:98:07:ef:a6:bc:72:2b:e8:33:0a:91:1b:eb: 54:82:57:0a:93:d0:82:91:b3:55:56:78:ad:83:4a: 71:ad:15:b7:41:cf:d3:6a:0c:13:d6:50:50:de:d9: 02:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:01:69:24:E0:E2:06:CC:FC:EA:DD:28:4D:4D:3A:74:76:9B:35:C4 X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6QFpJODiBsz86t0oTU06dHabNcQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.76.226.0/24 62.76.231.0/24 62.76.235.0/24 192.124.181.0/24 192.124.183.0/24 192.124.188.0/24 193.124.3.0/24 193.124.6.0/24 193.124.91.0/24 194.58.60.0/24 194.58.67.0/24 194.87.3.0/24 194.87.7.0/24 194.87.16.0/24 194.87.24.0/24 194.87.36.0/24 194.87.90.0/24 194.87.165.0-194.87.166.255 194.135.23.0/24 195.58.55.0/24 195.133.12.0/24 195.133.56.0/24 195.133.60.0/23 212.193.15.0/24 Signature Algorithm: sha256WithRSAEncryption 89:09:2f:71:32:f7:51:d9:c0:38:73:07:da:1b:76:96:43:00: f8:37:c5:16:9f:35:56:12:09:db:08:16:ad:b7:04:20:2d:81: a6:7d:ac:96:05:b8:b4:ef:45:0e:e4:cd:0b:11:e5:5f:4d:00: 36:83:b4:03:78:ee:5b:36:72:08:4a:db:78:d4:ff:e1:67:54: 09:75:ba:55:38:db:c6:87:7a:e2:76:5d:77:60:ad:f6:38:cc: fd:08:43:a3:a5:eb:3a:6c:9a:4a:b1:f1:5f:23:cd:83:11:97: e3:c7:92:70:7a:7c:a0:64:dc:92:de:aa:0b:05:dd:e3:1e:77: e3:cf:50:48:f8:79:34:77:78:d1:15:03:da:0b:60:7a:46:6c: 63:5b:56:e3:ef:d3:e8:68:62:f0:7a:45:e2:eb:c2:3a:98:89: 7f:e1:fb:da:32:21:e6:14:6e:3f:5e:d3:ab:d4:c8:ad:aa:91: 8e:6f:17:eb:e0:f2:3f:6a:6b:02:de:b2:2a:ee:dd:33:8a:c1: c7:12:6f:36:46:e7:5e:4d:08:ad:da:de:84:57:5e:14:91:18: 12:80:63:41:89:4a:67:53:a0:21:10:f8:47:04:a2:05:84:6a: 7e:60:5d:14:b4:ab:3b:12:2c:80:fc:98:32:03:7f:4f:4e:8f: e7:c8:bd:86 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZsSEM/WCbvEw7slBpyrCKt1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjUxMjEyMTAxNzMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTAxNjkyNGUwZTIwNmNjZmNlYWRkMjg0ZDRkM2E3NDc2OWIzNWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3RNOwIP1R6zhrRoTNYlIxojgUgE tfMTMvO/jJ5vdGTgNP/11PHzxFVrpyFjMP9FVog5ju95B1OXOZl4QkNWva+rXZqC rM0qRLy7IhoaEipgXmdFLbJKZvnIOKzF20m1q8jj0GfIjmxlNJOQnc/jSZrsW4ww nxHjp20yQzzcnKB1o3EbNS52o99e7Tl59BvyoZ5qIEaNV46MqA7zD0DeruwD+IX8 3136uGlCkf5BELDP5A3aidrPX7tetvRYNevB91g3AFGLDWvUJ2z4wzcMTUTO4ZgH 76a8civoMwqRG+tUglcKk9CCkbNVVnitg0pxrRW3Qc/TagwT1lBQ3tkCIwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFOkBaSTg4gbM/OrdKE1NOnR2mzXEMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvNlFGcEpPRGlCc3o4NnQwb1RVMDZkSGFiTmNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG1BggrBgEFBQcBBwEB/wSBpTCBojCBnwQCAAEwgZgDBAA+ TOIDBAA+TOcDBAA+TOsDBADAfLUDBADAfLcDBADAfLwDBADBfAMDBADBfAYDBADB fFsDBADCOjwDBADCOkMDBADCVwMDBADCVwcDBADCVxADBADCVxgDBADCVyQDBADC V1owDAMEAMJXpQMEAMJXpgMEAMKHFwMEAMM6NwMEAMOFDAMEAMOFOAMEAcOFPAME ANTBDzANBgkqhkiG9w0BAQsFAAOCAQEAiQkvcTL3UdnAOHMH2ht2lkMA+DfFFp81 VhIJ2wgWrbcEIC2Bpn2slgW4tO9FDuTNCxHlX00ANoO0A3juWzZyCErbeNT/4WdU CXW6VTjbxod64nZdd2Ct9jjM/QhDo6XrOmyaSrHxXyPNgxGX48eScHp8oGTckt6q CwXd4x53489QSPh5NHd40RUD2gtgekZsY1tW4+/T6Ghi8HpF4uvCOpiJf+H72jIh 5hRuP17Tq9TIraqRjm8X6+DyP2prAt6yKu7dM4rBxxJvNkbnXk0IrdrehFdeFJEY EoBjQYlKZ1OgIRD4RwSiBYRqfmBdFLSrOxIsgPyYMgN/T06P58i9hg== -----END CERTIFICATE-----Generated at Fri Dec 19 19:48:34 2025 by rpki-client