This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1ac3a0-4716-4be0-8ba2-fa84f3974990/1/06EJyalnsYZndusaE_4AMc563fU.roa File: 06EJyalnsYZndusaE_4AMc563fU.roa (raw, json) Hash identifier: zok3sDaWrSAVanDhqY6piMCfghJFn1OjbeGQ5zbS4cc= Subject key identifier: D3:A1:09:C9:A9:67:B1:86:67:76:EB:1A:13:FE:00:31:CE:7A:DD:F5 Certificate issuer: /CN=43b8b13f7e2e497ed1c7b0a3417bddf19bcc611a Certificate serial: 019B2250FBBAA6D90F9AEE89B0FAFA654416 Authority key identifier: 43:B8:B1:3F:7E:2E:49:7E:D1:C7:B0:A3:41:7B:DD:F1:9B:CC:61:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q7ixP34uSX7Rx7CjQXvd8ZvMYRo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1ac3a0-4716-4be0-8ba2-fa84f3974990/1/06EJyalnsYZndusaE_4AMc563fU.roa Signing time: Mon 15 Dec 2025 14:01:31 +0000 ROA not before: Mon 15 Dec 2025 14:01:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 42691 IP address blocks: 192.109.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1ac3a0-4716-4be0-8ba2-fa84f3974990/1/Q7ixP34uSX7Rx7CjQXvd8ZvMYRo.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/1ac3a0-4716-4be0-8ba2-fa84f3974990/1/Q7ixP34uSX7Rx7CjQXvd8ZvMYRo.mft rsync://rpki.ripe.net/repository/DEFAULT/Q7ixP34uSX7Rx7CjQXvd8ZvMYRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:50:fb:ba:a6:d9:0f:9a:ee:89:b0:fa:fa:65:44:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43b8b13f7e2e497ed1c7b0a3417bddf19bcc611a Validity Not Before: Dec 15 14:01:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d3a109c9a967b1866776eb1a13fe0031ce7addf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d4:6e:31:9d:9c:03:c8:ef:6d:cb:db:7a:57: b8:ac:b2:36:1b:94:6d:62:6b:ce:c5:79:3f:d9:9f: 45:9f:95:f1:1f:fc:f4:4d:da:e7:a8:f9:45:1e:38: b0:c0:87:4f:a7:35:af:40:bf:4c:cc:fb:61:43:32: 2f:ec:b9:91:03:4a:cf:50:2e:bb:24:00:cb:c8:f1: 37:9f:f0:82:c1:47:26:c5:1f:12:b9:1b:7a:d0:31: 33:ec:7c:70:26:60:25:32:57:b3:1d:40:0a:51:a7: ac:24:4f:82:9b:1e:25:e5:4d:56:d4:3f:bb:d5:c7: 06:f0:0b:2d:f5:1b:91:3f:9c:4e:b4:55:90:0b:c4: dc:02:a7:e7:2a:e9:fa:a5:e0:e8:a6:dd:c4:47:2a: 68:94:c4:d8:6c:4a:77:3d:41:5b:15:41:c7:b8:77: 5a:df:19:57:7d:f2:64:e7:98:79:bb:04:e8:c9:8b: 68:db:a4:88:5f:be:65:2c:6b:01:17:d1:40:c1:6a: 77:3d:b9:fc:3c:c7:16:95:8c:8a:dd:32:de:de:6d: 31:44:e3:e4:bb:ba:70:09:0c:16:b2:ed:09:06:c0: b9:e7:74:be:c0:51:94:56:b5:71:36:f8:23:1b:ee: d7:0d:c4:26:e5:e4:a9:e8:55:66:85:3f:73:1b:d9: 69:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:A1:09:C9:A9:67:B1:86:67:76:EB:1A:13:FE:00:31:CE:7A:DD:F5 X509v3 Authority Key Identifier: keyid:43:B8:B1:3F:7E:2E:49:7E:D1:C7:B0:A3:41:7B:DD:F1:9B:CC:61:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q7ixP34uSX7Rx7CjQXvd8ZvMYRo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1ac3a0-4716-4be0-8ba2-fa84f3974990/1/06EJyalnsYZndusaE_4AMc563fU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1ac3a0-4716-4be0-8ba2-fa84f3974990/1/Q7ixP34uSX7Rx7CjQXvd8ZvMYRo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.109.246.0/24 Signature Algorithm: sha256WithRSAEncryption 62:48:85:90:f6:2a:de:d8:55:b8:81:bf:be:14:f0:62:fe:54: 6f:47:ab:3c:04:d5:89:b9:04:96:dc:96:82:b2:8d:5c:43:5c: ef:a1:c8:bb:c3:30:2b:90:74:da:0b:33:b4:c6:99:17:f7:5a: ad:10:6f:b4:44:ff:79:8f:8c:74:2d:0c:f1:39:c2:b3:74:9a: 1a:d1:76:85:92:5c:f3:57:63:9b:6e:52:b5:98:e6:df:42:9e: e4:4f:a7:66:36:9f:74:10:c4:66:2f:92:04:6f:cb:9e:0a:eb: d3:0a:b1:23:e0:43:bc:cf:d4:0e:77:8d:17:81:05:e2:47:dc: f6:07:c3:0f:c1:ab:45:ec:17:eb:54:c6:ac:57:37:fe:c9:4e: 3e:73:26:d6:e2:2b:57:53:7d:2f:7b:30:61:c6:f8:10:86:dc: a8:92:1f:34:9f:aa:58:fb:c1:aa:e3:04:08:18:6e:e4:84:1c: 7e:c0:e4:74:31:03:5f:92:94:f9:de:a6:37:ed:33:21:49:2e: b6:75:6f:80:d5:a9:35:39:6b:ae:4e:64:3f:f0:3f:d0:96:dd: ef:26:26:49:67:28:c4:5e:7d:a9:25:c5:67:bd:86:0f:d0:b1: c9:e1:b3:a3:3b:7b:d8:34:18:5b:41:b8:72:36:5a:3a:22:25: 94:c1:db:7a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsiUPu6ptkPmu6JsPr6ZUQWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzYjhiMTNmN2UyZTQ5N2VkMWM3YjBhMzQxN2JkZGYxOWJj YzYxMWEwHhcNMjUxMjE1MTQwMTMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2ExMDljOWE5NjdiMTg2Njc3NmViMWExM2ZlMDAzMWNlN2FkZGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9RuMZ2cA8jvbcvbele4rLI2G5Rt YmvOxXk/2Z9Fn5XxH/z0TdrnqPlFHjiwwIdPpzWvQL9MzPthQzIv7LmRA0rPUC67 JADLyPE3n/CCwUcmxR8SuRt60DEz7HxwJmAlMlezHUAKUaesJE+Cmx4l5U1W1D+7 1ccG8Ast9RuRP5xOtFWQC8TcAqfnKun6peDopt3ERypolMTYbEp3PUFbFUHHuHda 3xlXffJk55h5uwToyYto26SIX75lLGsBF9FAwWp3Pbn8PMcWlYyK3TLe3m0xROPk u7pwCQwWsu0JBsC553S+wFGUVrVxNvgjG+7XDcQm5eSp6FVmhT9zG9lpKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNOhCcmpZ7GGZ3brGhP+ADHOet31MB8GA1UdIwQY MBaAFEO4sT9+Lkl+0cewo0F73fGbzGEaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTdpeFAzNHVTWDdSeDdDalFYdmQ4WnZNWVJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8xYWMzYTAtNDcxNi00YmUwLThiYTIt ZmE4NGYzOTc0OTkwLzEvMDZFSnlhbG5zWVpuZHVzYUVfNEFNYzU2M2ZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8xYWMzYTAtNDcxNi00YmUwLThiYTItZmE4NGYzOTc0OTkw LzEvUTdpeFAzNHVTWDdSeDdDalFYdmQ4WnZNWVJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG32MA0G CSqGSIb3DQEBCwUAA4IBAQBiSIWQ9ire2FW4gb++FPBi/lRvR6s8BNWJuQSW3JaC so1cQ1zvoci7wzArkHTaCzO0xpkX91qtEG+0RP95j4x0LQzxOcKzdJoa0XaFklzz V2ObblK1mObfQp7kT6dmNp90EMRmL5IEb8ueCuvTCrEj4EO8z9QOd40XgQXiR9z2 B8MPwatF7BfrVMasVzf+yU4+cybW4itXU30vezBhxvgQhtyokh80n6pY+8Gq4wQI GG7khBx+wOR0MQNfkpT53qY37TMhSS62dW+A1ak1OWuuTmQ/8D/Qlt3vJiZJZyjE Xn2pJcVnvYYP0LHJ4bOjO3vYNBhbQbhyNlo6IiWUwdt6 -----END CERTIFICATE-----Generated at Sun Dec 21 19:01:42 2025 by rpki-client