This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6p5ZZiSmBOaEQ-I7WwewS4NGkGY.roa File: 6p5ZZiSmBOaEQ-I7WwewS4NGkGY.roa (raw, json) Hash identifier: mhFV3GpSAF1d4ZsZz4eINgYrsWL5V3d/b0gAR/BFjp4= Subject key identifier: EA:9E:59:66:24:A6:04:E6:84:43:E2:3B:5B:07:B0:4B:83:46:90:66 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B41354B3DDE72D30C67CE7E949464B874 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6p5ZZiSmBOaEQ-I7WwewS4NGkGY.roa Signing time: Sun 21 Dec 2025 13:59:30 +0000 ROA not before: Sun 21 Dec 2025 13:59:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215649 IP address blocks: 89.144.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:35:4b:3d:de:72:d3:0c:67:ce:7e:94:94:64:b8:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Dec 21 13:59:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ea9e596624a604e68443e23b5b07b04b83469066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2d:14:d2:4e:5e:e1:96:ba:9d:55:5e:ac:69: 0d:ea:97:c0:23:8f:d6:a3:a7:27:37:54:de:74:ab: b5:4c:02:d5:03:0a:f6:ce:c1:ad:1b:b9:cb:bc:ab: cc:54:c2:7c:06:db:15:8b:60:14:65:d6:8a:c7:ce: b2:11:dd:c9:87:fd:62:f5:bf:bc:a8:56:71:e4:6d: 33:b1:27:9b:b9:db:a5:70:08:0d:1a:19:30:98:cb: 3a:52:20:58:1b:28:ee:70:25:a3:b8:8d:f4:ba:99: a0:32:8a:b6:11:a9:fb:4d:7f:66:3d:f9:4b:79:4a: ef:4d:04:74:81:35:1a:33:4a:42:9e:dd:5a:01:03: 08:23:64:cf:f1:16:ff:b5:e6:17:f2:b6:ad:49:f5: 0d:06:65:3b:21:c5:da:68:83:26:60:86:84:74:d1: 5e:f6:e1:b8:45:74:c1:81:18:2a:f3:76:3b:f9:18: 0a:2e:df:6a:4b:de:92:0d:ea:32:7d:89:a5:92:88: c2:0b:1c:91:d9:9a:9e:91:d8:1f:66:1e:0c:95:de: eb:c0:d7:49:51:64:84:2e:3c:59:ff:cb:7b:24:5a: a7:4f:f7:18:85:2a:db:16:07:5f:4a:50:05:3a:9e: 88:a2:70:09:d1:78:e7:f9:b2:99:c5:3f:4c:b8:29: 51:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:9E:59:66:24:A6:04:E6:84:43:E2:3B:5B:07:B0:4B:83:46:90:66 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6p5ZZiSmBOaEQ-I7WwewS4NGkGY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.144.34.0/24 Signature Algorithm: sha256WithRSAEncryption df:55:23:5f:d4:b8:05:cf:b8:bb:94:40:70:03:e7:68:dc:4b: 7d:99:c9:10:8e:ff:1f:45:e6:a1:99:a0:61:b6:39:83:0a:14: bd:37:cc:8b:66:93:5a:ac:ac:8a:e3:fd:89:77:e0:30:4e:d2: cd:6c:08:87:de:7d:2b:10:03:c3:35:8f:5f:9b:2e:15:46:e5: 97:cb:a5:ed:4c:78:bc:c2:cf:32:50:90:47:ff:b2:be:2d:6b: 2f:40:6f:b6:a7:df:17:02:a7:61:18:96:ff:6f:d9:0b:90:e4: 74:ba:3e:4f:58:b0:74:fd:29:ee:89:5a:ed:33:28:6e:c1:3a: 15:90:e4:bb:bf:f5:80:5a:0c:5b:6c:03:95:8b:66:dd:55:c7: 34:68:ae:14:e6:72:e4:4b:45:57:0e:f5:a1:cb:1c:c0:b1:d4: 49:69:ba:4c:37:90:c3:b6:d9:cf:bd:b0:7e:7a:4f:02:75:67: bd:75:b2:14:c8:41:3b:fe:8c:eb:33:f6:4f:8d:53:ab:49:bc: 21:2e:10:be:66:f8:46:e9:77:b6:32:dd:2d:cb:c1:b4:31:a6: 59:dc:20:6f:8b:1a:34:8d:f7:8b:f4:dd:f3:a9:4a:1f:a2:01: c9:9b:ed:27:36:fe:1e:60:e0:62:1a:fa:bd:27:de:1e:e7:e0: 29:94:01:18 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZtBNUs93nLTDGfOfpSUZLh0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMjIxMTM1OTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTllNTk2NjI0YTYwNGU2ODQ0M2UyM2I1YjA3YjA0YjgzNDY5MDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnC0U0k5e4Za6nVVerGkN6pfAI4/W o6cnN1TedKu1TALVAwr2zsGtG7nLvKvMVMJ8BtsVi2AUZdaKx86yEd3Jh/1i9b+8 qFZx5G0zsSebudulcAgNGhkwmMs6UiBYGyjucCWjuI30upmgMoq2Ean7TX9mPflL eUrvTQR0gTUaM0pCnt1aAQMII2TP8Rb/teYX8ratSfUNBmU7IcXaaIMmYIaEdNFe 9uG4RXTBgRgq83Y7+RgKLt9qS96SDeoyfYmlkojCCxyR2ZqekdgfZh4Mld7rwNdJ UWSELjxZ/8t7JFqnT/cYhSrbFgdfSlAFOp6IonAJ0Xjn+bKZxT9MuClR5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOqeWWYkpgTmhEPiO1sHsEuDRpBmMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvNnA1WlppU21CT2FFUS1JN1d3ZXdTNE5Ha0dZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWZAiMA0G CSqGSIb3DQEBCwUAA4IBAQDfVSNf1LgFz7i7lEBwA+do3Et9mckQjv8fReahmaBh tjmDChS9N8yLZpNarKyK4/2Jd+AwTtLNbAiH3n0rEAPDNY9fmy4VRuWXy6XtTHi8 ws8yUJBH/7K+LWsvQG+2p98XAqdhGJb/b9kLkOR0uj5PWLB0/SnuiVrtMyhuwToV kOS7v/WAWgxbbAOVi2bdVcc0aK4U5nLkS0VXDvWhyxzAsdRJabpMN5DDttnPvbB+ ek8CdWe9dbIUyEE7/ozrM/ZPjVOrSbwhLhC+ZvhG6Xe2Mt0ty8G0MaZZ3CBvixo0 jfeL9N3zqUofogHJm+0nNv4eYOBiGvq9J94e5+AplAEY -----END CERTIFICATE-----Generated at Sun Dec 21 17:07:31 2025 by rpki-client