This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/D6H-GKq8tc0xYCfZeSJnHhqwmxQ.roa File: D6H-GKq8tc0xYCfZeSJnHhqwmxQ.roa (raw, json) Hash identifier: zPH92biKQzpesgl+Hffj3v9/PYJSkwuaBf7ivuoTNzI= Subject key identifier: 0F:A1:FE:18:AA:BC:B5:CD:31:60:27:D9:79:22:67:1E:1A:B0:9B:14 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019B264A1D94DF59E3A111C22902D1669AC5 Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/D6H-GKq8tc0xYCfZeSJnHhqwmxQ.roa Signing time: Tue 16 Dec 2025 08:32:29 +0000 ROA not before: Tue 16 Dec 2025 08:32:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 174 IP address blocks: 79.175.93.0/24 maxlen: 24 79.175.103.0/24 maxlen: 24 79.175.105.0/24 maxlen: 24 79.175.110.0/24 maxlen: 24 178.219.1.0/24 maxlen: 24 188.255.162.0/24 maxlen: 24 188.255.163.0/24 maxlen: 24 188.255.164.0/24 maxlen: 24 188.255.165.0/24 maxlen: 24 188.255.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:4a:1d:94:df:59:e3:a1:11:c2:29:02:d1:66:9a:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Dec 16 08:32:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0fa1fe18aabcb5cd316027d97922671e1ab09b14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:69:51:fd:c6:e7:00:c1:ab:25:82:25:48:7f: b5:8e:6f:69:b5:1e:2b:35:31:e9:1d:fb:7b:b9:47: ba:5f:e5:63:a2:c0:3b:7f:75:64:1c:a2:9d:f0:e7: 7e:c9:e9:43:25:0e:27:d5:50:36:7e:51:ca:82:8a: b5:e0:70:c0:84:59:a3:20:ca:2e:e0:68:e6:3f:e1: 97:19:d6:12:d9:ee:50:43:1b:94:2e:9f:97:f5:5b: 3d:be:9c:81:1c:5c:e5:89:10:03:69:70:94:07:bf: 91:32:24:51:04:d2:08:33:51:8b:11:d5:5e:b9:d6: f7:10:00:03:35:13:a8:73:16:b8:df:9e:14:47:a7: f8:60:a0:1d:af:04:09:ca:ba:7c:41:99:89:cd:b2: 25:0e:b3:4b:46:e3:01:83:20:0e:6c:5f:b0:f0:d2: 1c:c7:5c:4f:df:a0:1a:c0:83:3b:20:bd:b0:d2:f4: e1:d9:d8:14:73:a1:6a:a9:a5:06:dd:55:ca:cd:b5: 32:3c:67:d2:26:d0:88:91:25:e4:04:67:45:46:f2: 50:cd:18:1f:54:f0:2f:b0:8f:b9:cc:93:ba:0c:57: 43:b6:5a:fe:1e:87:9d:20:b0:3b:3b:9c:b6:3b:6d: 0e:8e:34:a7:32:09:b2:fc:f5:22:8e:da:9f:66:ce: c5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:A1:FE:18:AA:BC:B5:CD:31:60:27:D9:79:22:67:1E:1A:B0:9B:14 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/D6H-GKq8tc0xYCfZeSJnHhqwmxQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.175.93.0/24 79.175.103.0/24 79.175.105.0/24 79.175.110.0/24 178.219.1.0/24 188.255.162.0-188.255.165.255 188.255.242.0/24 Signature Algorithm: sha256WithRSAEncryption 63:22:b9:27:c6:38:a7:0f:6a:ca:b9:70:48:eb:bf:8d:b9:08: 88:4a:16:78:23:18:5c:06:da:5d:0d:c7:b5:03:3f:72:2d:f4: b3:3b:39:f0:83:2f:92:3e:90:a0:b9:e4:15:0f:66:49:d6:62: 9a:87:12:b5:48:02:54:98:31:f8:8e:f2:be:94:b0:5e:2a:ae: d6:e6:59:5a:a1:3b:61:78:b5:fb:4f:9a:03:4f:ed:8c:56:1d: ab:8d:5a:88:29:7a:a6:de:7a:6f:d0:7c:a5:50:42:f3:e1:0e: 1a:d3:f4:ad:6a:41:2d:5a:75:8f:2b:1c:1d:58:ad:3b:dd:84: 81:b4:1a:5a:1b:b3:78:35:45:0b:0e:e3:17:9a:f8:0a:ed:3b: ee:ba:fd:c4:92:72:9e:7c:59:7c:3f:35:e2:09:bd:2d:cf:6d: f2:4f:04:05:cc:63:56:0b:50:b6:1c:b3:f9:55:83:bb:bd:7e: 5f:91:4e:8d:12:40:38:c5:1a:06:61:61:4a:f4:0b:37:b3:4f: 33:01:c3:08:5b:12:5b:b7:a5:41:43:55:33:da:c4:74:00:96: e3:cb:9d:c6:4a:fa:f2:78:50:95:fe:74:01:2b:3c:fb:fe:b9: 37:8f:1e:a7:3e:cf:cc:b8:e9:bf:f0:4b:c3:fb:54:da:ad:0c: f9:1a:09:d8 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZsmSh2U31njoRHCKQLRZprFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjUxMjE2MDgzMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZmExZmUxOGFhYmNiNWNkMzE2MDI3ZDk3OTIyNjcxZTFhYjA5YjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGlR/cbnAMGrJYIlSH+1jm9ptR4r NTHpHft7uUe6X+VjosA7f3VkHKKd8Od+yelDJQ4n1VA2flHKgoq14HDAhFmjIMou 4GjmP+GXGdYS2e5QQxuULp+X9Vs9vpyBHFzliRADaXCUB7+RMiRRBNIIM1GLEdVe udb3EAADNROocxa4354UR6f4YKAdrwQJyrp8QZmJzbIlDrNLRuMBgyAObF+w8NIc x1xP36AawIM7IL2w0vTh2dgUc6FqqaUG3VXKzbUyPGfSJtCIkSXkBGdFRvJQzRgf VPAvsI+5zJO6DFdDtlr+HoedILA7O5y2O20OjjSnMgmy/PUijtqfZs7FzQIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFA+h/hiqvLXNMWAn2XkiZx4asJsUMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvRDZILUdLcTh0YzB4WUNmWmVTSm5IaHF3bXhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQAT69dAwQA T69nAwQAT69pAwQAT69uAwQAstsBMAwDBAG8/6IDBAG8/6QDBAC8//IwDQYJKoZI hvcNAQELBQADggEBAGMiuSfGOKcPasq5cEjrv425CIhKFngjGFwG2l0Nx7UDP3It 9LM7OfCDL5I+kKC55BUPZknWYpqHErVIAlSYMfiO8r6UsF4qrtbmWVqhO2F4tftP mgNP7YxWHauNWogpeqbeem/QfKVQQvPhDhrT9K1qQS1adY8rHB1YrTvdhIG0Glob s3g1RQsO4xea+ArtO+66/cSScp58WXw/NeIJvS3PbfJPBAXMY1YLULYcs/lVg7u9 fl+RTo0SQDjFGgZhYUr0CzezTzMBwwhbElu3pUFDVTPaxHQAluPLncZK+vJ4UJX+ dAErPPv+uTePHqc+z8y46b/wS8P7VNqtDPkaCdg= -----END CERTIFICATE-----Generated at Fri Dec 19 21:46:37 2025 by rpki-client