This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/lO6Gh57x0BL059Rcsi5yzcWHcyM.roa File: lO6Gh57x0BL059Rcsi5yzcWHcyM.roa (raw, json) Hash identifier: 5S6aqT527KZmFwMUtpVotn8mFgen4R3SzqwJaCK8FCs= Subject key identifier: 94:EE:86:87:9E:F1:D0:12:F4:E7:D4:5C:B2:2E:72:CD:C5:87:73:23 Certificate issuer: /CN=eacdc1e247faa95318082a4ac5edbd80511f8df7 Certificate serial: 019B3854F1B4298CBA1AE32C7F0F718166B6 Authority key identifier: EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/lO6Gh57x0BL059Rcsi5yzcWHcyM.roa Signing time: Fri 19 Dec 2025 20:37:29 +0000 ROA not before: Fri 19 Dec 2025 20:37:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 6205 IP address blocks: 104.247.170.0/24 maxlen: 24 104.247.171.0/24 maxlen: 24 104.247.172.0/24 maxlen: 24 104.247.174.0/24 maxlen: 24 104.247.175.0/24 maxlen: 24 104.247.176.0/24 maxlen: 24 104.247.177.0/24 maxlen: 24 104.247.178.0/24 maxlen: 24 104.247.180.0/24 maxlen: 24 104.247.181.0/24 maxlen: 24 104.247.182.0/24 maxlen: 24 104.247.183.0/24 maxlen: 24 104.247.184.0/24 maxlen: 24 104.247.185.0/24 maxlen: 24 104.247.186.0/24 maxlen: 24 104.247.187.0/24 maxlen: 24 104.247.188.0/24 maxlen: 24 104.247.189.0/24 maxlen: 24 104.247.190.0/24 maxlen: 24 104.247.191.0/24 maxlen: 24 185.73.84.0/24 maxlen: 24 185.73.129.0/24 maxlen: 24 185.73.130.0/24 maxlen: 24 185.73.131.0/24 maxlen: 24 185.137.215.0/24 maxlen: 24 2a03:a5a0:1::/48 maxlen: 48 2a03:a5a0:2::/48 maxlen: 48 2a03:a5a0:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:54:f1:b4:29:8c:ba:1a:e3:2c:7f:0f:71:81:66:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eacdc1e247faa95318082a4ac5edbd80511f8df7 Validity Not Before: Dec 19 20:37:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=94ee86879ef1d012f4e7d45cb22e72cdc5877323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:28:e0:b8:e1:cc:a9:8a:d7:2b:ca:6e:d4:e2: 75:9c:b6:0f:d6:af:bc:e2:71:94:58:5f:38:93:6b: e9:50:9d:6a:5f:23:d9:ea:11:8f:7d:40:91:1c:00: 80:2a:42:c0:78:8c:79:da:90:9c:8b:44:5e:0d:54: bc:f7:ab:81:a7:40:a9:7c:bb:8b:66:5f:57:38:d3: bc:b9:44:b6:8f:87:76:53:b8:b4:02:95:a6:06:d6: 92:e9:65:cb:15:bf:e3:8c:4a:83:af:59:55:f8:1c: b8:e4:64:13:3e:03:25:00:f9:d9:67:08:17:e7:d7: 1f:69:94:10:04:c8:f6:f5:bb:96:9d:25:c7:df:7a: 52:83:65:1b:9f:fa:b3:a9:68:25:7e:21:95:5d:3e: dd:e0:48:80:ee:36:34:12:f5:08:85:a2:bd:f5:83: 5a:32:4d:8d:e1:6c:49:19:8e:db:05:4c:a1:40:6f: 09:68:bf:46:80:5e:82:f1:69:f2:9e:c4:5e:30:f6: b1:d2:c1:80:d6:22:64:37:c8:1f:bb:a2:31:fd:4b: 4e:96:41:b1:55:fc:41:92:fc:64:50:8c:3b:18:d8: 3e:5a:4b:52:57:92:ba:aa:7a:f4:14:15:c2:d4:2f: fc:99:8c:7f:12:16:0c:18:e3:b1:0d:ac:c7:12:e0: d9:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:EE:86:87:9E:F1:D0:12:F4:E7:D4:5C:B2:2E:72:CD:C5:87:73:23 X509v3 Authority Key Identifier: keyid:EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/lO6Gh57x0BL059Rcsi5yzcWHcyM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.247.170.0-104.247.172.255 104.247.174.0-104.247.178.255 104.247.180.0-104.247.191.255 185.73.84.0/24 185.73.129.0-185.73.131.255 185.137.215.0/24 IPv6: 2a03:a5a0:1::-2a03:a5a0:2:ffff:ffff:ffff:ffff:ffff 2a03:a5a0:4::/48 Signature Algorithm: sha256WithRSAEncryption a1:1a:61:9c:3a:e0:6d:16:58:65:e8:47:c1:32:c6:0d:b2:90: 31:da:12:2e:8f:e2:21:11:5e:d9:2c:8f:50:ab:27:b0:ff:45: b8:cb:3f:a7:0c:dc:0b:58:a8:87:04:71:58:c4:2a:30:49:9a: 9f:b3:ae:dc:05:15:8a:fb:74:9e:a5:c3:9d:a8:d4:34:cf:81: 52:b7:b4:48:5f:cd:3f:7d:d6:70:5c:84:68:12:77:30:f9:c9: d4:8e:83:01:d7:f9:f2:fc:39:f6:a3:16:09:ef:f7:09:65:54: ec:9c:38:75:9b:eb:60:8a:e8:09:87:6a:5e:21:f6:d5:d0:46: be:92:6b:f1:a0:fa:e3:76:6a:c9:71:7d:39:c7:cd:1b:de:fb: be:10:bd:ef:8c:8a:7e:ed:f6:7a:6b:c3:c1:de:33:31:49:ed: ae:78:23:a3:47:22:0d:8d:ae:da:e3:d0:19:dd:45:b1:06:09: 3b:65:1e:66:01:78:90:b0:02:12:65:a8:31:87:8b:97:25:20: b3:a1:41:b5:3a:83:22:e1:0f:ee:5d:f5:99:32:13:c1:21:2b: 0d:60:c7:59:a9:15:b1:a6:84:05:6a:20:e6:9a:48:b8:e3:65: db:70:7c:55:ca:de:f3:a3:60:92:40:54:a8:cd:e5:74:88:d4: 83:63:d2:68 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgISAZs4VPG0KYy6GuMsfw9xgWa2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhY2RjMWUyNDdmYWE5NTMxODA4MmE0YWM1ZWRiZDgwNTEx ZjhkZjcwHhcNMjUxMjE5MjAzNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NGVlODY4NzllZjFkMDEyZjRlN2Q0NWNiMjJlNzJjZGM1ODc3MzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSjguOHMqYrXK8pu1OJ1nLYP1q+8 4nGUWF84k2vpUJ1qXyPZ6hGPfUCRHACAKkLAeIx52pCci0ReDVS896uBp0CpfLuL Zl9XONO8uUS2j4d2U7i0ApWmBtaS6WXLFb/jjEqDr1lV+By45GQTPgMlAPnZZwgX 59cfaZQQBMj29buWnSXH33pSg2Ubn/qzqWglfiGVXT7d4EiA7jY0EvUIhaK99YNa Mk2N4WxJGY7bBUyhQG8JaL9GgF6C8WnynsReMPax0sGA1iJkN8gfu6Ix/UtOlkGx VfxBkvxkUIw7GNg+WktSV5K6qnr0FBXC1C/8mYx/EhYMGOOxDazHEuDZUQIDAQAB o4ICbTCCAmkwHQYDVR0OBBYEFJTuhoee8dAS9OfUXLIucs3Fh3MjMB8GA1UdIwQY MBaAFOrNweJH+qlTGAgqSsXtvYBRH433MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnMzQjRrZjZxVk1ZQ0NwS3hlMjlnRkVmamZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9lNmM0NGMtMzEyNS00ZmU2LWEwMGQt NjI4Y2NmMDBkZmJkLzEvbE82R2g1N3gwQkwwNTlSY3NpNXl6Y1dIY3lNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9lNmM0NGMtMzEyNS00ZmU2LWEwMGQtNjI4Y2NmMDBkZmJk LzEvNnMzQjRrZjZxVk1ZQ0NwS3hlMjlnRkVmamZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGCBggrBgEFBQcBBwEB/wRzMHEwSgQCAAEwRDAMAwQBaPeq AwQAaPesMAwDBAFo964DBABo97IwDAMEAmj3tAMEBmj3gAMEALlJVDAMAwQAuUmB AwQCuUmAAwQAuYnXMCMEAgACMB0wEgMHACoDpaAAAQMHACoDpaAAAgMHACoDpaAA BDANBgkqhkiG9w0BAQsFAAOCAQEAoRphnDrgbRZYZehHwTLGDbKQMdoSLo/iIRFe 2SyPUKsnsP9FuMs/pwzcC1iohwRxWMQqMEman7Ou3AUVivt0nqXDnajUNM+BUre0 SF/NP33WcFyEaBJ3MPnJ1I6DAdf58vw59qMWCe/3CWVU7Jw4dZvrYIroCYdqXiH2 1dBGvpJr8aD643ZqyXF9OcfNG977vhC974yKfu32emvDwd4zMUntrngjo0ciDY2u 2uPQGd1FsQYJO2UeZgF4kLACEmWoMYeLlyUgs6FBtTqDIuEP7l31mTITwSErDWDH WakVsaaEBWog5ppIuONl23B8Vcre86NgkkBUqM3ldIjUg2PSaA== -----END CERTIFICATE-----Generated at Sat Dec 20 21:26:49 2025 by rpki-client