This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/T_IV_hcSAxdnrpqez3e8TLGo79Y.roa File: T_IV_hcSAxdnrpqez3e8TLGo79Y.roa (raw, json) Hash identifier: TPxnqLYMi4H51mczE+d5ClH8J9Q/VLXxqu8TcfkqVKY= Subject key identifier: 4F:F2:15:FE:17:12:03:17:67:AE:9A:9E:CF:77:BC:4C:B1:A8:EF:D6 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019B3658D48E17D54A6837917EDCE9A34299 Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/T_IV_hcSAxdnrpqez3e8TLGo79Y.roa Signing time: Fri 19 Dec 2025 11:22:29 +0000 ROA not before: Fri 19 Dec 2025 11:22:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 81.18.48.0/24 maxlen: 24 81.18.63.0/24 maxlen: 24 109.121.39.0/24 maxlen: 24 109.121.47.0/24 maxlen: 24 178.219.6.0/24 maxlen: 24 185.47.91.0/24 maxlen: 24 188.255.198.0/24 maxlen: 24 212.69.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 11:22:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:58:d4:8e:17:d5:4a:68:37:91:7e:dc:e9:a3:42:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Dec 19 11:22:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4ff215fe1712031767ae9a9ecf77bc4cb1a8efd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f2:6f:2e:62:8f:2a:d2:06:6c:70:91:86:78: a4:e2:70:46:be:03:3d:00:a0:54:1d:1c:01:9f:62: ad:2b:fe:4d:32:cb:dc:76:bb:a2:49:ee:21:1a:1d: 2e:1a:20:b5:07:c2:e6:62:70:f9:1c:86:0b:f2:8e: 04:33:a3:a1:2c:ec:7b:05:29:2e:3d:60:f2:2c:af: 75:e3:18:ca:e1:ae:c1:ce:03:7b:ff:31:4d:7f:8c: 0c:1f:37:82:50:fa:1b:d0:d4:32:ce:1e:23:34:b6: 73:c6:e3:79:5c:d6:40:23:d9:06:04:b2:2b:39:37: e3:91:b5:0e:e1:bd:16:af:2a:bc:8a:c9:c8:4f:dc: b0:31:f0:b6:20:20:7a:bf:e3:05:d7:5a:ee:f1:50: 6f:5e:6e:97:d5:4f:d0:65:96:ea:0e:7f:a4:6e:87: b9:87:6c:4e:21:e2:d7:9a:6a:06:aa:c7:4e:a4:7a: f2:11:1e:4d:a4:f6:db:6b:7d:1a:8b:3d:3d:ac:62: d5:97:6f:9b:77:e5:cb:2f:8d:6e:32:ae:36:7a:15: 12:a0:d4:29:27:f6:5b:8a:83:73:cd:53:66:d8:65: 9d:12:61:80:6e:cd:1b:a0:2c:d0:9a:9f:85:c6:07: a2:0e:c3:ef:d5:17:d3:b6:ff:ca:ce:d9:2f:97:97: 0c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:F2:15:FE:17:12:03:17:67:AE:9A:9E:CF:77:BC:4C:B1:A8:EF:D6 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/T_IV_hcSAxdnrpqez3e8TLGo79Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.18.48.0/24 81.18.63.0/24 109.121.39.0/24 109.121.47.0/24 178.219.6.0/24 185.47.91.0/24 188.255.198.0/24 212.69.11.0/24 Signature Algorithm: sha256WithRSAEncryption a5:21:31:84:92:70:91:18:27:70:6e:61:e9:96:49:74:3c:fa: d8:29:21:33:c0:f3:90:78:18:bc:49:a2:da:b3:d0:c1:ee:8e: dd:30:bc:bd:4e:32:fe:70:71:ee:b5:3f:b9:61:98:55:e7:31: 96:2e:cb:0f:5a:8f:69:54:f2:7d:5c:84:6a:66:8f:15:35:e8: 7c:f1:22:9f:35:91:26:15:cd:58:dc:be:45:04:6a:92:8f:33: a1:9f:d8:f5:39:37:28:97:ba:d9:bf:b1:02:76:77:57:48:72: 5a:ae:99:9f:a6:e9:46:38:88:eb:20:eb:13:20:7c:23:4d:21: 91:37:b6:bb:c7:f7:19:70:01:fb:af:02:90:43:4c:cd:a2:39: 0b:7c:02:d3:f2:10:53:dd:c4:ce:de:df:4b:18:75:14:21:f6: 48:c9:84:ac:18:7c:e2:57:ff:bb:cb:d8:a3:61:3a:06:63:eb: 3b:85:b7:54:0a:cb:fa:2c:49:43:41:9f:10:d2:4e:e4:b3:d3: 84:02:c2:1f:cb:c7:7d:3b:3a:68:84:e0:ec:93:51:75:34:68: 42:50:4c:61:34:43:6e:60:64:c0:62:c4:c8:f7:86:3f:a7:f4: b8:d8:2f:9f:d0:b2:64:9b:d1:81:92:28:f2:58:08:e2:a8:f8: d1:fc:8a:4b -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZs2WNSOF9VKaDeRftzpo0KZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjUxMjE5MTEyMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmYyMTVmZTE3MTIwMzE3NjdhZTlhOWVjZjc3YmM0Y2IxYThlZmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvJvLmKPKtIGbHCRhnik4nBGvgM9 AKBUHRwBn2KtK/5NMsvcdruiSe4hGh0uGiC1B8LmYnD5HIYL8o4EM6OhLOx7BSku PWDyLK914xjK4a7BzgN7/zFNf4wMHzeCUPob0NQyzh4jNLZzxuN5XNZAI9kGBLIr OTfjkbUO4b0Wryq8isnIT9ywMfC2ICB6v+MF11ru8VBvXm6X1U/QZZbqDn+kboe5 h2xOIeLXmmoGqsdOpHryER5NpPbba30aiz09rGLVl2+bd+XLL41uMq42ehUSoNQp J/ZbioNzzVNm2GWdEmGAbs0boCzQmp+FxgeiDsPv1RfTtv/Kztkvl5cMFQIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFE/yFf4XEgMXZ66ans93vEyxqO/WMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvVF9JVl9oY1NBeGRucnBxZXozZThUTEdvNzlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAURIwAwQA URI/AwQAbXknAwQAbXkvAwQAstsGAwQAuS9bAwQAvP/GAwQA1EULMA0GCSqGSIb3 DQEBCwUAA4IBAQClITGEknCRGCdwbmHplkl0PPrYKSEzwPOQeBi8SaLas9DB7o7d MLy9TjL+cHHutT+5YZhV5zGWLssPWo9pVPJ9XIRqZo8VNeh88SKfNZEmFc1Y3L5F BGqSjzOhn9j1OTcol7rZv7ECdndXSHJarpmfpulGOIjrIOsTIHwjTSGRN7a7x/cZ cAH7rwKQQ0zNojkLfALT8hBT3cTO3t9LGHUUIfZIyYSsGHziV/+7y9ijYToGY+s7 hbdUCsv6LElDQZ8Q0k7ks9OEAsIfy8d9OzpohODsk1F1NGhCUExhNENuYGTAYsTI 94Y/p/S42C+f0LJkm9GBkijyWAjiqPjR/IpL -----END CERTIFICATE-----Generated at Fri Dec 19 20:16:29 2025 by rpki-client