This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/wHh4Vm5aoSFIPfbXJszuCf84zpU.roa File: wHh4Vm5aoSFIPfbXJszuCf84zpU.roa (raw, json) Hash identifier: kDVTdUI4axjv8G9H8sYome+SU2iGUHufBvQXYhnxTYw= Subject key identifier: C0:78:78:56:6E:5A:A1:21:48:3D:F6:D7:26:CC:EE:09:FF:38:CE:95 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019B3657EA6FCB300F453FF0C58951BF9A8D Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/wHh4Vm5aoSFIPfbXJszuCf84zpU.roa Signing time: Fri 19 Dec 2025 11:21:29 +0000 ROA not before: Fri 19 Dec 2025 11:21:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9304 IP address blocks: 79.175.118.0/24 maxlen: 24 178.253.227.0/24 maxlen: 24 188.255.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 11:22:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:57:ea:6f:cb:30:0f:45:3f:f0:c5:89:51:bf:9a:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Dec 19 11:21:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c07878566e5aa121483df6d726ccee09ff38ce95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9f:0c:bc:bd:a6:4d:6e:99:96:83:17:99:76: aa:12:48:0c:c1:f0:d3:dc:28:c4:e4:5c:47:87:10: 5a:b7:e5:f6:aa:86:10:42:f1:70:38:1e:d9:eb:b6: 8f:44:1c:fa:8a:0e:ad:9d:ea:c9:95:d3:c9:8b:85: cc:7a:aa:fd:3a:75:4a:45:70:de:47:13:79:17:e4: e1:fd:69:5a:cd:8d:c1:0b:fe:4c:d1:45:28:a8:2a: ba:7a:15:cc:b1:57:ce:e9:97:aa:b6:1f:f6:f8:79: 50:3a:50:7e:3f:38:70:49:25:da:41:79:81:79:d9: 1c:55:7c:31:f1:ce:10:e2:3e:47:6a:8e:bd:44:90: 9b:a8:2b:10:0e:56:d6:2f:54:bd:a0:c7:ae:1f:f5: b4:a8:5a:3c:c4:b4:48:da:06:f7:5d:7b:60:0f:f6: d7:9e:a2:a3:f2:e8:df:34:e8:d8:d0:3d:5c:74:db: db:0c:bd:c0:3d:76:ac:8d:69:b7:ab:88:03:a8:00: 1b:c9:9c:0f:35:ca:f7:80:7f:d6:89:5c:b0:ca:97: e6:53:f3:b4:ad:e5:6b:c4:0a:b2:c3:35:ab:c7:20: 5f:a4:81:eb:2a:ec:8a:4b:90:f9:8c:63:57:aa:9f: 0e:f5:32:5a:52:b1:cd:47:ae:ad:17:c3:eb:f1:b9: 79:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:78:78:56:6E:5A:A1:21:48:3D:F6:D7:26:CC:EE:09:FF:38:CE:95 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/wHh4Vm5aoSFIPfbXJszuCf84zpU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.175.118.0/24 178.253.227.0/24 188.255.227.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:00:57:dd:79:b9:13:c3:0f:76:02:74:71:bc:5b:00:39:1a: 84:ef:f6:0c:3b:5c:19:b2:00:b6:46:69:89:00:41:db:bc:17: 6e:cd:e0:b8:67:fa:24:9a:4b:00:24:3a:61:2d:94:68:ba:fc: 3b:7f:bd:10:41:5f:b2:3b:50:55:9c:41:d7:a6:11:32:8b:36: 20:32:5f:37:68:0c:38:e8:c8:4b:f8:55:c2:0c:a8:3b:d1:6f: 02:d0:eb:d8:6b:17:87:14:15:2e:7a:e8:2b:17:c7:6c:7b:6d: 01:68:bd:81:be:75:60:dd:f7:75:33:96:17:56:52:4b:07:8e: 81:61:df:0f:20:e0:22:de:6d:db:d5:af:de:4b:0c:29:8c:e0: 95:cf:59:fc:a9:c5:b2:2e:74:a7:1f:3f:d9:85:eb:c4:2e:05: db:e4:74:e1:3c:e3:8b:d3:e5:af:f8:a5:8d:8b:75:05:93:51: 90:a0:d0:c1:d4:8f:a7:2d:19:7f:7b:e8:05:da:6f:ed:4a:e4: 2a:5a:a2:91:47:be:bc:ec:b9:ad:fa:76:6e:67:29:07:c2:63: 0d:fd:e6:61:c5:96:08:d8:05:4e:46:9c:c1:13:85:bc:44:d6: 78:7d:57:26:00:03:f6:c5:be:3e:3c:77:3d:cf:b7:ce:52:1c: c7:dc:89:0b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZs2V+pvyzAPRT/wxYlRv5qNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjUxMjE5MTEyMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDc4Nzg1NjZlNWFhMTIxNDgzZGY2ZDcyNmNjZWUwOWZmMzhjZTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAup8MvL2mTW6ZloMXmXaqEkgMwfDT 3CjE5FxHhxBat+X2qoYQQvFwOB7Z67aPRBz6ig6tnerJldPJi4XMeqr9OnVKRXDe RxN5F+Th/WlazY3BC/5M0UUoqCq6ehXMsVfO6Zeqth/2+HlQOlB+PzhwSSXaQXmB edkcVXwx8c4Q4j5Hao69RJCbqCsQDlbWL1S9oMeuH/W0qFo8xLRI2gb3XXtgD/bX nqKj8ujfNOjY0D1cdNvbDL3APXasjWm3q4gDqAAbyZwPNcr3gH/WiVywypfmU/O0 reVrxAqywzWrxyBfpIHrKuyKS5D5jGNXqp8O9TJaUrHNR66tF8Pr8bl5XwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMB4eFZuWqEhSD321ybM7gn/OM6VMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvd0hoNFZtNWFvU0ZJUGZiWEpzenVDZjg0enBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAT692AwQA sv3jAwQAvP/jMA0GCSqGSIb3DQEBCwUAA4IBAQBcAFfdebkTww92AnRxvFsAORqE 7/YMO1wZsgC2RmmJAEHbvBduzeC4Z/okmksAJDphLZRouvw7f70QQV+yO1BVnEHX phEyizYgMl83aAw46MhL+FXCDKg70W8C0OvYaxeHFBUueugrF8dse20BaL2BvnVg 3fd1M5YXVlJLB46BYd8PIOAi3m3b1a/eSwwpjOCVz1n8qcWyLnSnHz/ZhevELgXb 5HThPOOL0+Wv+KWNi3UFk1GQoNDB1I+nLRl/e+gF2m/tSuQqWqKRR7687Lmt+nZu ZykHwmMN/eZhxZYI2AVORpzBE4W8RNZ4fVcmAAP2xb4+PHc9z7fOUhzH3IkL -----END CERTIFICATE-----Generated at Fri Dec 19 20:16:32 2025 by rpki-client