This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/tZ6_AVQU3BiTBS_MyBk79R6xPwI.roa File: tZ6_AVQU3BiTBS_MyBk79R6xPwI.roa (raw, json) Hash identifier: zRJivCXmKrs8wsSC2rZQ/n4mSM6xKvjfm8CnRdaRKp4= Subject key identifier: B5:9E:BF:01:54:14:DC:18:93:05:2F:CC:C8:19:3B:F5:1E:B1:3F:02 Certificate issuer: /CN=947320d030930178e6f7ceef91d2ab8784d3dc16 Certificate serial: 019B3728A7D5C86E018BE7865A32808BDA33 Authority key identifier: 94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/tZ6_AVQU3BiTBS_MyBk79R6xPwI.roa Signing time: Fri 19 Dec 2025 15:09:29 +0000 ROA not before: Fri 19 Dec 2025 15:09:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 62240 IP address blocks: 45.86.230.0/24 maxlen: 24 91.231.186.0/24 maxlen: 24 194.213.18.0/24 maxlen: 24 195.54.161.0/24 maxlen: 24 2a10:1fc0:7::/48 maxlen: 48 2a10:1fc0:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:23:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:28:a7:d5:c8:6e:01:8b:e7:86:5a:32:80:8b:da:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=947320d030930178e6f7ceef91d2ab8784d3dc16 Validity Not Before: Dec 19 15:09:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b59ebf015414dc1893052fccc8193bf51eb13f02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:07:6d:a3:35:81:d9:a6:77:03:60:f4:ae:e9: 10:ae:54:e4:16:53:6b:08:07:a8:6f:0c:94:53:8d: 8d:0b:53:4d:0e:7a:11:91:6c:ce:ac:34:00:fe:4e: 9b:d5:9f:1e:3f:5e:56:80:28:4c:dd:cb:a6:8a:19: 9c:4c:82:02:7a:4b:bc:bf:a7:bd:06:56:fa:93:19: 0d:12:69:ba:a0:bd:f1:56:0e:93:59:7d:ae:eb:dc: c9:fe:64:ad:5c:f0:eb:e0:d8:97:b1:2d:c7:51:ad: b7:2a:ee:b2:f9:a2:12:79:3b:3b:4b:5b:39:a7:f6: 55:81:c0:81:1d:1c:b1:e2:48:17:1c:08:5c:79:d3: c5:fc:b7:16:31:8f:d2:4b:e5:a7:c9:80:9d:34:9e: 0f:7f:5b:e3:ab:94:fb:1f:b7:08:ca:f3:51:53:45: 4f:e9:af:3f:ab:1c:ad:80:dd:14:4a:05:63:85:58: 60:3d:4a:b8:08:01:a1:aa:88:a7:57:0d:5f:5b:88: 1b:9c:6d:45:85:c3:e7:f6:b3:d4:52:44:03:c7:da: d5:89:06:ef:40:46:77:c7:47:57:48:03:41:58:0f: d1:1a:82:ea:9e:c9:ff:ab:a7:2b:e3:f4:a2:c6:17: c0:2e:47:80:bc:ac:b3:5c:75:6a:11:15:4d:32:91: 34:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:9E:BF:01:54:14:DC:18:93:05:2F:CC:C8:19:3B:F5:1E:B1:3F:02 X509v3 Authority Key Identifier: keyid:94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/tZ6_AVQU3BiTBS_MyBk79R6xPwI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.230.0/24 91.231.186.0/24 194.213.18.0/24 195.54.161.0/24 IPv6: 2a10:1fc0:7::/48 2a10:1fc0:a::/48 Signature Algorithm: sha256WithRSAEncryption ad:14:89:29:88:a8:72:2e:30:b8:25:51:c3:15:14:53:5a:25: 58:7a:c6:cf:42:f3:7a:2c:89:cd:4e:c0:a6:31:99:18:a0:4e: 5b:b9:58:85:d3:18:95:41:af:0f:42:f6:ee:c8:c8:cb:4d:02: 56:9e:82:68:37:7a:a6:34:f1:ef:12:36:a0:bc:a9:ec:19:b5: 29:0f:8e:ad:ab:68:0a:02:b6:bf:ba:55:eb:1b:ea:27:5a:c5: db:6a:6d:44:08:ab:5e:ad:b8:c2:da:db:53:ad:6f:ce:da:37: 2c:f0:37:ea:15:ff:e3:40:2d:67:d8:cc:e1:4c:3d:1c:8e:9d: 45:4c:9f:47:0b:38:e4:78:08:8c:99:f5:d4:a4:5f:b5:58:cd: 8f:b8:74:9a:47:38:87:e2:a3:88:77:17:c7:6b:ab:4a:72:df: 9f:4e:0a:79:ce:52:80:c5:35:cf:08:8c:82:7e:a8:78:d5:c0: de:96:9d:df:90:75:ab:d4:47:09:c2:0c:c1:6b:eb:32:7e:c0: 6b:ed:b0:8c:6e:b1:4c:c0:2a:d9:90:97:e9:75:e8:9b:8a:59: de:cc:75:2d:3c:e3:ea:74:da:fc:c9:8c:e2:5e:9c:d9:5e:24: f8:40:bd:73:5c:a1:b2:e7:ee:57:ec:1f:50:e8:e0:99:88:60: 82:38:e9:f7 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZs3KKfVyG4Bi+eGWjKAi9ozMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0NzMyMGQwMzA5MzAxNzhlNmY3Y2VlZjkxZDJhYjg3ODRk M2RjMTYwHhcNMjUxMjE5MTUwOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTllYmYwMTU0MTRkYzE4OTMwNTJmY2NjODE5M2JmNTFlYjEzZjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwdtozWB2aZ3A2D0rukQrlTkFlNr CAeobwyUU42NC1NNDnoRkWzOrDQA/k6b1Z8eP15WgChM3cumihmcTIICeku8v6e9 Blb6kxkNEmm6oL3xVg6TWX2u69zJ/mStXPDr4NiXsS3HUa23Ku6y+aISeTs7S1s5 p/ZVgcCBHRyx4kgXHAhcedPF/LcWMY/SS+WnyYCdNJ4Pf1vjq5T7H7cIyvNRU0VP 6a8/qxytgN0USgVjhVhgPUq4CAGhqoinVw1fW4gbnG1FhcPn9rPUUkQDx9rViQbv QEZ3x0dXSANBWA/RGoLqnsn/q6cr4/SixhfALkeAvKyzXHVqERVNMpE0AwIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFLWevwFUFNwYkwUvzMgZO/UesT8CMB8GA1UdIwQY MBaAFJRzINAwkwF45vfO75HSq4eE09wWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEhNZzBEQ1RBWGptOTg3dmtkS3JoNFRUM0JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84MmU4NzYtYzk5Ny00NjA1LTg3YWEt OGFjNGEyMTkzOGI0LzEvdFo2X0FWUVUzQmlUQlNfTXlCazc5UjZ4UHdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC84MmU4NzYtYzk5Ny00NjA1LTg3YWEtOGFjNGEyMTkzOGI0 LzEvbEhNZzBEQ1RBWGptOTg3dmtkS3JoNFRUM0JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjAeBAIAATAYAwQALVbmAwQA W+e6AwQAwtUSAwQAwzahMBgEAgACMBIDBwAqEB/AAAcDBwAqEB/AAAowDQYJKoZI hvcNAQELBQADggEBAK0UiSmIqHIuMLglUcMVFFNaJVh6xs9C83osic1OwKYxmRig Tlu5WIXTGJVBrw9C9u7IyMtNAlaegmg3eqY08e8SNqC8qewZtSkPjq2raAoCtr+6 Vesb6idaxdtqbUQIq16tuMLa21Otb87aNyzwN+oV/+NALWfYzOFMPRyOnUVMn0cL OOR4CIyZ9dSkX7VYzY+4dJpHOIfio4h3F8drq0py359OCnnOUoDFNc8IjIJ+qHjV wN6Wnd+QdavURwnCDMFr6zJ+wGvtsIxusUzAKtmQl+l16JuKWd7MdS084+p02vzJ jOJenNleJPhAvXNcobLn7lfsH1Do4JmIYII46fc= -----END CERTIFICATE-----Generated at Fri Dec 19 22:49:58 2025 by rpki-client