This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/bILti74BmcnDi60nnP5YmRW_4YI.roa File: bILti74BmcnDi60nnP5YmRW_4YI.roa (raw, json) Hash identifier: SKNKoAevXbwiaBrXZGICe9faIc3F84ucz3yTC1zuIy0= Subject key identifier: 6C:82:ED:8B:BE:01:99:C9:C3:8B:AD:27:9C:FE:58:99:15:BF:E1:82 Certificate issuer: /CN=ef1535978be6b0ad7a9cb70eb0522f8c950982a9 Certificate serial: 019B0CFA01BACF894FDA16F01DEBD436B238 Authority key identifier: EF:15:35:97:8B:E6:B0:AD:7A:9C:B7:0E:B0:52:2F:8C:95:09:82:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xU1l4vmsK16nLcOsFIvjJUJgqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/bILti74BmcnDi60nnP5YmRW_4YI.roa Signing time: Thu 11 Dec 2025 10:34:29 +0000 ROA not before: Thu 11 Dec 2025 10:34:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 14618 IP address blocks: 81.172.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.mft rsync://rpki.ripe.net/repository/DEFAULT/7xU1l4vmsK16nLcOsFIvjJUJgqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:fa:01:ba:cf:89:4f:da:16:f0:1d:eb:d4:36:b2:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef1535978be6b0ad7a9cb70eb0522f8c950982a9 Validity Not Before: Dec 11 10:34:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6c82ed8bbe0199c9c38bad279cfe589915bfe182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b1:64:1a:6a:71:f9:98:c2:6b:ff:e7:de:bf: f5:95:22:82:28:c7:39:3c:72:12:65:d7:7e:3f:c2: 26:af:5f:cd:c7:7d:65:f5:6d:45:3f:ac:70:a6:e4: 0f:56:aa:ff:18:92:9d:fc:81:95:5b:9e:84:07:9d: ec:5f:4c:b7:92:d8:f0:15:85:ab:fd:3f:99:ec:06: 84:fa:2b:2f:66:88:90:8a:6c:3d:33:c7:35:56:c8: ef:5a:b9:02:ea:fc:ad:b9:9e:60:80:21:41:31:0e: 11:ba:7a:ca:44:89:ff:ed:f5:f7:af:96:fc:57:ce: f6:f6:2c:0f:11:26:28:58:21:80:7d:0d:af:27:5f: a2:49:40:3d:3e:73:3e:77:08:95:09:2d:aa:b5:cb: ec:5a:0f:53:d3:90:ac:3e:7a:36:7d:19:57:ce:9c: 94:15:e1:f8:76:58:36:bf:6e:61:2e:d6:15:cb:d1: 95:f4:0a:b2:d1:ec:74:3b:29:c3:cf:0c:49:ca:0d: 7d:f5:82:e3:c3:25:4a:0c:a4:12:99:a6:db:44:9c: 5e:ee:78:d5:84:5e:93:be:96:c1:be:7c:79:0c:e8: dd:d7:5d:b5:3b:71:ef:d5:a6:d7:60:29:66:c6:c1: ea:90:c6:5b:0c:86:25:cd:91:6c:55:e8:68:cc:ec: dc:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:82:ED:8B:BE:01:99:C9:C3:8B:AD:27:9C:FE:58:99:15:BF:E1:82 X509v3 Authority Key Identifier: keyid:EF:15:35:97:8B:E6:B0:AD:7A:9C:B7:0E:B0:52:2F:8C:95:09:82:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xU1l4vmsK16nLcOsFIvjJUJgqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/bILti74BmcnDi60nnP5YmRW_4YI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.172.99.0/24 Signature Algorithm: sha256WithRSAEncryption 57:b6:8e:29:d0:96:9c:21:33:44:3a:98:c6:88:77:d5:d5:11: 4d:31:a5:88:34:22:2a:a7:91:2f:b9:dd:c1:68:a0:a9:9d:73: 25:60:49:d5:f1:40:1e:e8:8d:27:7f:bf:65:5b:f7:60:eb:96: 1d:25:03:f3:6b:da:f6:39:d6:01:9c:b7:7c:ba:d2:76:fe:ad: 9e:ec:1a:9a:2b:58:2f:16:2a:af:42:14:94:12:33:b6:99:b8: 48:c9:79:b3:41:e0:cc:3c:bc:69:3f:91:c8:f9:e4:b3:b5:f7: 6a:6d:3e:e4:a0:11:f3:25:41:19:02:d3:19:0c:30:19:d0:c0: 06:b9:56:72:9a:0a:a9:43:97:0e:b7:6d:d9:dd:46:2e:58:4f: b7:87:2e:35:fd:8e:53:3e:6e:6f:97:89:f2:62:4e:f0:07:7d: 36:5e:bf:fa:21:15:c9:ee:7d:07:2b:08:f5:2e:05:a0:b3:0f: 4f:85:15:e8:80:74:89:ca:9e:93:72:60:d7:c6:fa:d8:5e:7b: df:a0:e2:7f:23:ba:9e:36:d3:20:f5:77:b8:e6:d3:03:86:64: 7f:a1:a0:e7:94:a7:44:d4:5a:6e:04:02:9c:6b:da:42:14:35: a9:1a:87:7c:c6:09:7e:e8:2b:08:62:72:4c:d4:2a:bc:dd:34: b9:9d:03:e6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsM+gG6z4lP2hbwHevUNrI4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMTUzNTk3OGJlNmIwYWQ3YTljYjcwZWIwNTIyZjhjOTUw OTgyYTkwHhcNMjUxMjExMTAzNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzgyZWQ4YmJlMDE5OWM5YzM4YmFkMjc5Y2ZlNTg5OTE1YmZlMTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrFkGmpx+ZjCa//n3r/1lSKCKMc5 PHISZdd+P8Imr1/Nx31l9W1FP6xwpuQPVqr/GJKd/IGVW56EB53sX0y3ktjwFYWr /T+Z7AaE+isvZoiQimw9M8c1VsjvWrkC6vytuZ5ggCFBMQ4RunrKRIn/7fX3r5b8 V8729iwPESYoWCGAfQ2vJ1+iSUA9PnM+dwiVCS2qtcvsWg9T05CsPno2fRlXzpyU FeH4dlg2v25hLtYVy9GV9Aqy0ex0OynDzwxJyg199YLjwyVKDKQSmabbRJxe7njV hF6TvpbBvnx5DOjd1121O3Hv1abXYClmxsHqkMZbDIYlzZFsVehozOzcdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGyC7Yu+AZnJw4utJ5z+WJkVv+GCMB8GA1UdIwQY MBaAFO8VNZeL5rCtepy3DrBSL4yVCYKpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3hVMWw0dm1zSzE2bkxjT3NGSXZqSlVKZ3FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8zYjZlYWItZjkwOS00MmM5LWI1ODgt MTVjNjVmZjI1OGU4LzEvYklMdGk3NEJtY25EaTYwbm5QNVltUldfNFlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8zYjZlYWItZjkwOS00MmM5LWI1ODgtMTVjNjVmZjI1OGU4 LzEvN3hVMWw0dm1zSzE2bkxjT3NGSXZqSlVKZ3FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUaxjMA0G CSqGSIb3DQEBCwUAA4IBAQBXto4p0JacITNEOpjGiHfV1RFNMaWINCIqp5Evud3B aKCpnXMlYEnV8UAe6I0nf79lW/dg65YdJQPza9r2OdYBnLd8utJ2/q2e7BqaK1gv FiqvQhSUEjO2mbhIyXmzQeDMPLxpP5HI+eSztfdqbT7koBHzJUEZAtMZDDAZ0MAG uVZymgqpQ5cOt23Z3UYuWE+3hy41/Y5TPm5vl4nyYk7wB302Xr/6IRXJ7n0HKwj1 LgWgsw9PhRXogHSJyp6TcmDXxvrYXnvfoOJ/I7qeNtMg9Xe45tMDhmR/oaDnlKdE 1FpuBAKca9pCFDWpGod8xgl+6CsIYnJM1Cq83TS5nQPm -----END CERTIFICATE-----Generated at Sat Dec 20 06:07:58 2025 by rpki-client