This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/6gAVVBnBFI99gmTKuXdphvLR0XU.roa File: 6gAVVBnBFI99gmTKuXdphvLR0XU.roa (raw, json) Hash identifier: vlJsg4BJszpHBmGgI+aYkItFrFEqJ3gqvAjz+o+3YjA= Subject key identifier: EA:00:15:54:19:C1:14:8F:7D:82:64:CA:B9:77:69:86:F2:D1:D1:75 Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Certificate serial: 019B2D29C13823D6DA4DA48C6EDF99BA72D4 Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/6gAVVBnBFI99gmTKuXdphvLR0XU.roa Signing time: Wed 17 Dec 2025 16:34:29 +0000 ROA not before: Wed 17 Dec 2025 16:34:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209990 IP address blocks: 217.147.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:29:c1:38:23:d6:da:4d:a4:8c:6e:df:99:ba:72:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Validity Not Before: Dec 17 16:34:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ea00155419c1148f7d8264cab9776986f2d1d175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7e:24:62:6c:3b:4f:8d:8d:f0:84:01:8b:6f: 25:3a:04:2b:ce:10:11:e7:99:cf:3f:c4:4b:7e:12: a1:a5:6a:b0:92:86:a7:fb:69:c7:c5:71:11:d0:e7: 47:a4:09:3e:e1:ab:25:1c:20:a5:58:2f:d8:85:24: 00:3b:12:3c:16:61:a8:5f:93:b2:82:07:33:53:be: ad:e7:ca:57:c1:c8:2c:d4:71:b2:45:29:41:4e:17: e1:5a:aa:80:7e:6d:ea:c2:8e:ff:ca:85:42:d2:29: f5:f7:96:da:4a:37:6c:c3:3b:f3:98:99:9e:fa:cf: 2d:10:23:24:56:83:61:74:ac:83:d8:4d:82:df:2e: 52:2d:ae:1a:ec:b8:25:7c:bc:26:8e:53:5d:97:4a: d9:53:c6:9d:cb:60:f1:d2:96:17:6a:f2:41:c0:50: d7:80:73:86:2c:1c:af:67:03:e9:c6:23:30:a8:1a: a0:aa:1e:99:b1:92:80:d8:1a:72:94:ab:73:a1:1c: ec:16:c6:5a:43:54:ed:cc:33:ea:e4:24:3b:cc:bc: 36:5f:19:17:9e:16:72:f0:00:6c:37:01:04:e6:84: 5d:2c:3e:df:c3:31:ba:ef:8c:42:70:68:71:fd:f5: 0d:7f:24:3a:62:84:60:91:bf:90:f1:a9:82:98:17: 1a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:00:15:54:19:C1:14:8F:7D:82:64:CA:B9:77:69:86:F2:D1:D1:75 X509v3 Authority Key Identifier: keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/6gAVVBnBFI99gmTKuXdphvLR0XU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.147.14.0/24 Signature Algorithm: sha256WithRSAEncryption 89:b4:36:50:fe:c6:97:ae:67:ed:65:33:72:fb:c9:1f:22:bb: fe:86:3b:2a:f4:0e:77:2a:e6:0c:3e:e0:3e:dc:e2:f6:b9:6d: 4c:2e:87:5b:2c:4c:63:49:1f:e3:1d:a6:02:6c:73:a4:38:f2: 9e:d5:66:17:77:00:66:e6:5d:82:67:40:78:a5:b7:0c:36:28: 53:e1:fb:f8:e7:17:d3:93:39:be:c1:73:37:b5:62:7b:0b:bd: 87:1b:81:a3:97:d6:9c:69:c7:42:63:0b:77:ad:ac:cb:c1:b9: 29:a4:6c:d5:85:a7:69:2d:cf:a1:f5:79:91:20:93:62:d8:07: 7d:6e:6a:4f:de:b8:c3:f2:7b:b2:94:02:a1:af:ac:80:78:5b: 16:83:ce:ea:f6:58:b6:98:b8:b5:1c:a8:a4:91:95:64:29:1b: 91:cf:92:31:78:d6:e1:e1:cc:e9:90:85:51:2b:0f:fb:14:74: 28:58:1b:f3:55:e0:8f:c1:3b:b3:54:96:3d:66:f0:e9:30:31: 18:ee:1e:c8:26:31:09:aa:09:28:3a:fd:96:2e:33:4f:9a:9e: db:68:74:08:92:9d:59:06:63:be:60:bc:13:ec:47:07:cf:ee: df:1f:a3:1e:ba:77:9f:ea:d7:bd:f4:dd:e4:88:85:75:6f:64: f4:26:dc:f4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZstKcE4I9baTaSMbt+ZunLUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw MjNlYmUwHhcNMjUxMjE3MTYzNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTAwMTU1NDE5YzExNDhmN2Q4MjY0Y2FiOTc3Njk4NmYyZDFkMTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxH4kYmw7T42N8IQBi28lOgQrzhAR 55nPP8RLfhKhpWqwkoan+2nHxXER0OdHpAk+4aslHCClWC/YhSQAOxI8FmGoX5Oy ggczU76t58pXwcgs1HGyRSlBThfhWqqAfm3qwo7/yoVC0in195baSjdswzvzmJme +s8tECMkVoNhdKyD2E2C3y5SLa4a7LglfLwmjlNdl0rZU8ady2Dx0pYXavJBwFDX gHOGLByvZwPpxiMwqBqgqh6ZsZKA2BpylKtzoRzsFsZaQ1TtzDPq5CQ7zLw2XxkX nhZy8ABsNwEE5oRdLD7fwzG674xCcGhx/fUNfyQ6YoRgkb+Q8amCmBcajQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOoAFVQZwRSPfYJkyrl3aYby0dF1MB8GA1UdIwQY MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt OTlhY2I5OWNlNzU0LzEvNmdBVlZCbkJGSTk5Z21US3VYZHBodkxSMFhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0 LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2ZMOMA0G CSqGSIb3DQEBCwUAA4IBAQCJtDZQ/saXrmftZTNy+8kfIrv+hjsq9A53KuYMPuA+ 3OL2uW1MLodbLExjSR/jHaYCbHOkOPKe1WYXdwBm5l2CZ0B4pbcMNihT4fv45xfT kzm+wXM3tWJ7C72HG4Gjl9acacdCYwt3razLwbkppGzVhadpLc+h9XmRIJNi2Ad9 bmpP3rjD8nuylAKhr6yAeFsWg87q9li2mLi1HKikkZVkKRuRz5IxeNbh4czpkIVR Kw/7FHQoWBvzVeCPwTuzVJY9ZvDpMDEY7h7IJjEJqgkoOv2WLjNPmp7baHQIkp1Z BmO+YLwT7EcHz+7fH6Meunef6te99N3kiIV1b2T0Jtz0 -----END CERTIFICATE-----Generated at Fri Dec 19 09:55:35 2025 by rpki-client