This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/p6pR2sVZIib8Cy9IAbRIMpW09ng.roa File: p6pR2sVZIib8Cy9IAbRIMpW09ng.roa (raw, json) Hash identifier: wVG14xqI26ImVNoE/wkia6KvIe7FCAvc+FGMDYGgFqE= Subject key identifier: A7:AA:51:DA:C5:59:22:26:FC:0B:2F:48:01:B4:48:32:95:B4:F6:78 Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a Certificate serial: 019B0B931EB3B34247A30A978CB5FE319282 Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/p6pR2sVZIib8Cy9IAbRIMpW09ng.roa Signing time: Thu 11 Dec 2025 04:02:29 +0000 ROA not before: Thu 11 Dec 2025 04:02:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9009 IP address blocks: 85.28.32.0/20 maxlen: 24 85.28.32.0/23 maxlen: 23 85.28.32.0/24 maxlen: 24 85.28.33.0/24 maxlen: 24 85.28.34.0/24 maxlen: 24 85.28.48.0/20 maxlen: 24 85.28.56.0/22 maxlen: 22 85.28.56.0/24 maxlen: 24 85.28.58.0/24 maxlen: 24 109.238.192.0/20 maxlen: 24 109.238.192.0/22 maxlen: 24 109.238.196.0/23 maxlen: 23 109.238.201.0/24 maxlen: 24 109.238.202.0/24 maxlen: 24 109.238.203.0/24 maxlen: 24 109.238.204.0/24 maxlen: 24 109.238.206.0/24 maxlen: 24 109.238.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0b:93:1e:b3:b3:42:47:a3:0a:97:8c:b5:fe:31:92:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a Validity Not Before: Dec 11 04:02:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a7aa51dac5592226fc0b2f4801b4483295b4f678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1a:63:c8:66:81:4f:28:70:d2:61:82:65:f0: 54:20:13:d8:e4:e8:0f:44:22:d0:41:24:30:b3:cf: be:09:0b:ca:e2:3e:2c:c5:3a:06:90:62:49:1d:19: 10:16:23:a1:16:ad:da:1f:df:08:90:ef:86:b1:37: 6f:fa:ea:2a:3e:25:a9:6a:10:9b:87:27:02:ee:ae: 56:1b:5b:9b:5a:32:f0:61:c5:5f:13:57:54:12:18: ea:54:41:a3:3a:f3:0b:b5:b0:6f:5d:27:3a:7b:66: aa:3f:4c:69:f0:1f:ee:4b:1e:21:84:9c:8c:e2:c2: 2b:de:9e:17:10:61:b6:88:da:18:4c:dc:36:2d:9f: fa:1b:3a:f8:a0:aa:97:f3:00:0c:ae:ae:2c:b4:f7: 41:69:32:4e:15:49:e9:3e:c6:d0:a6:41:47:bc:24: 6d:11:7b:3a:36:1e:9e:2a:dc:88:82:f4:40:aa:62: 6c:42:e6:bf:d4:2d:e7:69:51:4c:66:2c:62:7a:92: 28:b8:ad:44:00:7e:43:23:22:82:82:d1:79:13:cb: c1:8e:db:8b:b8:a9:cc:1a:01:bc:75:5f:a9:7a:48: 09:9c:5b:66:71:fc:e0:5d:83:45:59:70:58:3c:09: 06:56:c4:e1:80:93:d3:b3:5d:d9:fc:a8:df:e8:b7: 73:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:AA:51:DA:C5:59:22:26:FC:0B:2F:48:01:B4:48:32:95:B4:F6:78 X509v3 Authority Key Identifier: keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/p6pR2sVZIib8Cy9IAbRIMpW09ng.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.28.32.0/19 109.238.192.0/20 Signature Algorithm: sha256WithRSAEncryption 6a:df:f6:a8:ca:bb:6a:fa:a8:1e:64:27:30:4b:18:b0:6b:3e: d0:e4:1f:0b:35:bc:59:29:86:ab:99:03:92:0d:5a:2f:ab:81: 41:1a:5e:93:9e:44:47:f5:42:cf:a3:ab:be:0e:fc:d8:8c:72: 7a:68:b8:18:06:60:72:e4:01:1f:1f:f3:ea:d9:46:ce:bc:db: bf:d6:52:04:ab:5c:b4:2e:a5:cd:08:95:cc:bf:7f:87:3a:82: c5:96:2a:0b:55:66:d8:91:5b:54:53:5d:ea:3a:61:69:5e:a5: 5d:49:86:d4:60:d2:8d:ec:f1:f3:16:fa:21:cf:54:16:88:37: 85:78:21:c9:4f:f4:6d:20:ea:83:c9:68:3d:b8:c4:72:43:38: bc:2c:75:eb:a9:7b:b3:28:27:f0:f1:13:21:24:be:58:91:5e: 3f:80:5b:e1:69:7b:82:72:85:5a:64:39:55:1b:fb:ad:d7:cd: 2e:0d:ff:32:01:4f:da:67:ac:32:35:2c:c8:f8:01:4e:45:ab: de:02:b9:8d:d5:81:66:81:bf:c0:ec:65:07:3e:ef:86:2c:aa: b4:8e:d4:39:d7:5e:48:3d:eb:d6:5f:d8:c6:03:c7:26:de:05: 4a:2e:0a:3e:28:2c:ef:09:a5:06:dd:68:c1:54:13:1a:37:49: b1:11:dd:ad -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsLkx6zs0JHowqXjLX+MZKCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjM0NGE2M2RjYjcwZTg5MDU3ZGViOGUyNzYxZGM0NTE2 NTg4MWEwHhcNMjUxMjExMDQwMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2FhNTFkYWM1NTkyMjI2ZmMwYjJmNDgwMWI0NDgzMjk1YjRmNjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBpjyGaBTyhw0mGCZfBUIBPY5OgP RCLQQSQws8++CQvK4j4sxToGkGJJHRkQFiOhFq3aH98IkO+GsTdv+uoqPiWpahCb hycC7q5WG1ubWjLwYcVfE1dUEhjqVEGjOvMLtbBvXSc6e2aqP0xp8B/uSx4hhJyM 4sIr3p4XEGG2iNoYTNw2LZ/6Gzr4oKqX8wAMrq4stPdBaTJOFUnpPsbQpkFHvCRt EXs6Nh6eKtyIgvRAqmJsQua/1C3naVFMZixiepIouK1EAH5DIyKCgtF5E8vBjtuL uKnMGgG8dV+pekgJnFtmcfzgXYNFWXBYPAkGVsThgJPTs13Z/Kjf6LdzyQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKeqUdrFWSIm/AsvSAG0SDKVtPZ4MB8GA1UdIwQY MBaAFCLzRKY9y3DokFfeuOJ2HcRRZYgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5Yzct ZmViYjY0YjVlMTY0LzEvcDZwUjJzVlpJaWI4Q3k5SUFiUklNcFcwOW5nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5YzctZmViYjY0YjVlMTY0 LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFVRwgAwQE be7AMA0GCSqGSIb3DQEBCwUAA4IBAQBq3/aoyrtq+qgeZCcwSxiwaz7Q5B8LNbxZ KYarmQOSDVovq4FBGl6TnkRH9ULPo6u+DvzYjHJ6aLgYBmBy5AEfH/Pq2UbOvNu/ 1lIEq1y0LqXNCJXMv3+HOoLFlioLVWbYkVtUU13qOmFpXqVdSYbUYNKN7PHzFvoh z1QWiDeFeCHJT/RtIOqDyWg9uMRyQzi8LHXrqXuzKCfw8RMhJL5YkV4/gFvhaXuC coVaZDlVG/ut180uDf8yAU/aZ6wyNSzI+AFORaveArmN1YFmgb/A7GUHPu+GLKq0 jtQ5115IPevWX9jGA8cm3gVKLgo+KCzvCaUG3WjBVBMaN0mxEd2t -----END CERTIFICATE-----Generated at Sat Dec 20 07:43:17 2025 by rpki-client