This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/F6MPUcQNDKHw2bq3oVN_CGo8zFY.roa File: F6MPUcQNDKHw2bq3oVN_CGo8zFY.roa (raw, json) Hash identifier: vT+AkHQSKlQP3frZkuRLI9yF+aC1K32hPaZY72XJWqQ= Subject key identifier: 17:A3:0F:51:C4:0D:0C:A1:F0:D9:BA:B7:A1:53:7F:08:6A:3C:CC:56 Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819 Certificate serial: 019B2D27EC07CE95B05BAA5B9E1FA9C31A21 Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/F6MPUcQNDKHw2bq3oVN_CGo8zFY.roa Signing time: Wed 17 Dec 2025 16:32:29 +0000 ROA not before: Wed 17 Dec 2025 16:32:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212749 IP address blocks: 82.199.204.0/24 maxlen: 24 185.86.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:27:ec:07:ce:95:b0:5b:aa:5b:9e:1f:a9:c3:1a:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819 Validity Not Before: Dec 17 16:32:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=17a30f51c40d0ca1f0d9bab7a1537f086a3ccc56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a4:eb:ec:50:b5:39:93:c0:52:47:d2:4d:28: 38:24:ef:4c:b1:b6:e8:10:c6:57:6a:db:2d:0f:b8: 45:32:d2:ae:f7:15:bc:8c:94:6f:1c:da:bc:1c:54: da:99:23:32:b0:33:af:55:72:3b:1e:f6:ee:78:05: fa:18:83:28:b8:68:a6:9c:84:19:09:1a:9c:5b:65: 21:ee:67:27:db:cb:5a:1d:59:ee:e8:f2:30:10:ac: 4e:56:d4:de:34:71:50:22:17:83:4a:c3:41:17:82: 14:b7:c8:1c:d9:85:44:12:2f:c0:2a:30:12:e4:6c: 10:47:b3:12:de:e6:f4:38:d7:d1:fe:8d:bf:48:81: 20:eb:10:d7:83:b8:71:46:de:eb:21:d2:c8:1c:1d: d0:b3:93:f4:72:24:64:9e:d6:3e:16:31:5f:b4:ab: 28:72:fe:45:05:5e:00:aa:8f:dc:1a:67:ff:a9:e8: 66:1e:8a:f0:a1:e4:44:01:87:d5:e6:b7:b5:aa:66: 12:4d:03:7c:e0:47:1a:3c:e9:a6:ec:9b:25:2e:3a: df:71:8a:59:46:43:7a:c1:54:f0:59:dd:42:b4:4e: fc:14:58:39:f6:ea:f1:cc:43:0e:9d:58:80:46:63: 33:e6:0f:2b:8b:05:cf:0e:ec:ba:7a:91:31:d5:6f: df:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A3:0F:51:C4:0D:0C:A1:F0:D9:BA:B7:A1:53:7F:08:6A:3C:CC:56 X509v3 Authority Key Identifier: keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/F6MPUcQNDKHw2bq3oVN_CGo8zFY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.199.204.0/24 185.86.194.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:52:48:13:b5:92:df:bd:bb:ea:c1:08:95:e4:ff:35:5b:a9: 81:b0:f3:57:30:99:8f:b0:d9:32:f5:0f:85:a5:24:d3:cc:50: 49:40:69:58:2a:c2:f0:cb:47:d9:00:a8:67:3c:75:f5:0b:40: cb:c2:db:82:c7:f0:20:74:d9:17:ad:7a:ae:c3:c6:1e:21:7b: 3e:3e:cb:79:77:0e:00:f9:cd:87:b7:78:80:0e:a5:5c:f2:3d: cb:c9:5e:70:31:87:d3:86:6f:0b:5c:5e:cd:c5:de:09:e2:d0: 4a:95:a8:df:1b:2b:31:16:e9:19:30:84:a5:a4:b5:bc:a5:0b: 6c:24:80:47:12:f8:6c:1d:58:a4:f0:f2:dc:8b:10:b0:b1:aa: f9:26:fe:99:74:bb:3b:9f:26:8b:4e:14:21:dc:4f:d8:7b:ce: 67:61:82:ff:a5:8b:04:ad:92:b2:32:ca:7b:f0:f3:64:ef:4f: 97:ba:6e:6a:3d:9c:4c:7d:71:d7:ef:22:cd:97:78:b3:93:e1: 95:a3:e0:33:b5:bb:1d:a3:91:50:93:94:f7:9c:69:a5:80:51: 59:aa:3f:98:0b:ba:fc:da:3b:e9:88:d7:1e:ba:ff:19:46:28: 1a:f5:37:04:43:06:4e:e5:14:b2:e8:f0:15:fa:06:93:cd:56: 11:29:27:69 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZstJ+wHzpWwW6pbnh+pwxohMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjOTBjMzU2ZTI4NjRmNDM4OTQ4NTc0NDM1NTVkOGI1YzAz NTI4MTkwHhcNMjUxMjE3MTYzMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxN2EzMGY1MWM0MGQwY2ExZjBkOWJhYjdhMTUzN2YwODZhM2NjYzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqTr7FC1OZPAUkfSTSg4JO9Msbbo EMZXatstD7hFMtKu9xW8jJRvHNq8HFTamSMysDOvVXI7HvbueAX6GIMouGimnIQZ CRqcW2Uh7mcn28taHVnu6PIwEKxOVtTeNHFQIheDSsNBF4IUt8gc2YVEEi/AKjAS 5GwQR7MS3ub0ONfR/o2/SIEg6xDXg7hxRt7rIdLIHB3Qs5P0ciRkntY+FjFftKso cv5FBV4Aqo/cGmf/qehmHorwoeREAYfV5re1qmYSTQN84EcaPOmm7JslLjrfcYpZ RkN6wVTwWd1CtE78FFg59urxzEMOnViARmMz5g8riwXPDuy6epEx1W/f/wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBejD1HEDQyh8Nm6t6FTfwhqPMxWMB8GA1UdIwQY MBaAFAyQw1bihk9DiUhXRDVV2LXANSgZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDct ZTM3OTlhZGU5ZGZlLzEvRjZNUFVjUU5ES0h3MmJxM29WTl9DR284ekZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDctZTM3OTlhZGU5ZGZl LzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUsfMAwQA uVbCMA0GCSqGSIb3DQEBCwUAA4IBAQCLUkgTtZLfvbvqwQiV5P81W6mBsPNXMJmP sNky9Q+FpSTTzFBJQGlYKsLwy0fZAKhnPHX1C0DLwtuCx/AgdNkXrXquw8YeIXs+ Pst5dw4A+c2Ht3iADqVc8j3LyV5wMYfThm8LXF7Nxd4J4tBKlajfGysxFukZMISl pLW8pQtsJIBHEvhsHVik8PLcixCwsar5Jv6ZdLs7nyaLThQh3E/Ye85nYYL/pYsE rZKyMsp78PNk70+Xum5qPZxMfXHX7yLNl3izk+GVo+Aztbsdo5FQk5T3nGmlgFFZ qj+YC7r82jvpiNceuv8ZRiga9TcEQwZO5RSy6PAV+gaTzVYRKSdp -----END CERTIFICATE-----Generated at Sat Dec 20 19:07:50 2025 by rpki-client