This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/gN0qOLXsEKvGtCzXxvLnvRO41fA.roa File: gN0qOLXsEKvGtCzXxvLnvRO41fA.roa (raw, json) Hash identifier: EwY/QphQofoROadpM26vOXPAJzLNi/lXA7YO8huN2DE= Subject key identifier: 80:DD:2A:38:B5:EC:10:AB:C6:B4:2C:D7:C6:F2:E7:BD:13:B8:D5:F0 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019B2CEB800008107DAC2355AFE7A0A89B46 Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/gN0qOLXsEKvGtCzXxvLnvRO41fA.roa Signing time: Wed 17 Dec 2025 15:26:29 +0000 ROA not before: Wed 17 Dec 2025 15:26:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215026 IP address blocks: 188.255.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 11:22:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:eb:80:00:08:10:7d:ac:23:55:af:e7:a0:a8:9b:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Dec 17 15:26:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=80dd2a38b5ec10abc6b42cd7c6f2e7bd13b8d5f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:0f:81:f4:c9:c8:57:f8:1c:b9:e1:91:89:e7: 34:c8:45:d3:ed:e0:1a:fc:c9:58:d7:30:6b:0a:c9: 1d:26:bf:57:fc:8f:f7:b9:76:d0:f6:c3:b2:b0:46: 0c:0e:d0:c3:45:5e:b1:dc:81:0a:90:0b:c0:b2:26: 7e:be:a1:27:44:dc:cd:f8:9a:74:85:60:aa:c4:5e: e1:25:94:6e:52:1e:e4:6a:34:3f:5e:2a:a5:b0:95: 79:d7:45:dd:c2:75:09:7c:4d:56:7b:e8:d1:fc:c2: 1d:e3:4c:e6:71:61:92:c9:bd:7e:94:a6:db:98:f7: 8c:ba:09:48:16:7b:83:b3:e7:e0:20:5b:60:b6:22: 08:78:76:93:76:e4:76:32:57:c0:95:d0:d2:57:e4: 28:93:f1:4c:7f:17:b9:50:ed:04:0e:ce:c5:8e:1f: a5:b9:32:22:ca:3e:36:09:f8:54:28:1f:cf:56:36: 80:87:32:cb:a5:99:ac:7a:86:98:e9:1a:60:ee:e7: 94:36:f2:e1:5f:a9:c0:af:ef:b9:23:80:1a:25:95: 6c:5f:7c:01:6e:b9:41:fa:d6:8b:4e:ba:a3:f0:64: 6d:29:cb:83:93:43:60:be:2d:22:72:ad:90:0b:90: b5:c1:04:9c:6a:bb:e9:68:38:d0:07:06:66:ec:8c: 9b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:DD:2A:38:B5:EC:10:AB:C6:B4:2C:D7:C6:F2:E7:BD:13:B8:D5:F0 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/gN0qOLXsEKvGtCzXxvLnvRO41fA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.255.170.0/24 Signature Algorithm: sha256WithRSAEncryption 52:a3:f6:e0:db:93:18:82:4e:98:1c:c4:ca:d6:d2:4b:11:49: b1:d7:ad:37:5d:d7:45:ad:6a:1f:bf:9b:c5:fa:c3:84:48:c4: 8b:b0:60:07:ad:04:a3:ab:f7:f8:66:21:c5:15:80:62:a7:81: 6d:a0:94:7e:aa:56:7c:8c:34:52:1b:d2:76:69:6a:33:cf:db: cc:8e:e3:7b:c8:4b:20:f5:2c:35:7c:0e:9a:f2:fb:23:6d:48: de:25:1e:37:4e:e9:52:b3:18:68:d7:e0:c4:23:5c:11:4e:ce: 26:44:3e:70:d9:c5:4f:f4:f2:97:8f:cd:5a:18:ba:2c:45:61: 55:0c:8f:ac:0d:5c:e3:f1:b9:64:cb:b8:fa:45:6e:5a:12:05: a0:0a:02:79:84:b9:d5:bb:9e:bd:2d:b6:be:8f:e0:c6:d4:97: c1:8f:bd:08:93:17:f1:61:c4:c8:3c:4e:27:1c:6c:31:5d:a4: 5e:07:ed:8f:26:da:7b:92:9d:e1:03:68:1f:8d:2a:cd:d4:26: c1:44:da:5c:0d:17:9b:5a:b4:07:ea:3f:ce:42:70:9a:ba:e4: a2:4e:c2:e8:70:4d:9d:10:25:3d:3f:fe:e3:f2:b7:ce:4f:85: 88:c1:a3:33:bd:74:35:2d:c4:01:f4:bf:60:aa:ec:4b:fd:3a: 7c:6a:5d:3f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZss64AACBB9rCNVr+egqJtGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjUxMjE3MTUyNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGRkMmEzOGI1ZWMxMGFiYzZiNDJjZDdjNmYyZTdiZDEzYjhkNWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6g+B9MnIV/gcueGRiec0yEXT7eAa /MlY1zBrCskdJr9X/I/3uXbQ9sOysEYMDtDDRV6x3IEKkAvAsiZ+vqEnRNzN+Jp0 hWCqxF7hJZRuUh7kajQ/XiqlsJV510XdwnUJfE1We+jR/MId40zmcWGSyb1+lKbb mPeMuglIFnuDs+fgIFtgtiIIeHaTduR2MlfAldDSV+Qok/FMfxe5UO0EDs7Fjh+l uTIiyj42CfhUKB/PVjaAhzLLpZmseoaY6Rpg7ueUNvLhX6nAr++5I4AaJZVsX3wB brlB+taLTrqj8GRtKcuDk0Ngvi0icq2QC5C1wQScarvpaDjQBwZm7IybcQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIDdKji17BCrxrQs18by570TuNXwMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvZ04wcU9MWHNFS3ZHdEN6WHh2TG52Uk80MWZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvP+qMA0G CSqGSIb3DQEBCwUAA4IBAQBSo/bg25MYgk6YHMTK1tJLEUmx1603XddFrWofv5vF +sOESMSLsGAHrQSjq/f4ZiHFFYBip4FtoJR+qlZ8jDRSG9J2aWozz9vMjuN7yEsg 9Sw1fA6a8vsjbUjeJR43TulSsxho1+DEI1wRTs4mRD5w2cVP9PKXj81aGLosRWFV DI+sDVzj8blky7j6RW5aEgWgCgJ5hLnVu569Lba+j+DG1JfBj70IkxfxYcTIPE4n HGwxXaReB+2PJtp7kp3hA2gfjSrN1CbBRNpcDRebWrQH6j/OQnCauuSiTsLocE2d ECU9P/7j8rfOT4WIwaMzvXQ1LcQB9L9gquxL/Tp8al0/ -----END CERTIFICATE-----Generated at Fri Dec 19 20:16:26 2025 by rpki-client