This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/ROsXNePylLUlvq2qZOm58Y0ayN0.roa File: ROsXNePylLUlvq2qZOm58Y0ayN0.roa (raw, json) Hash identifier: SxIuezIqYo8ZloMUFGcUDY2o5JpRNOwLF2WY4gvLvzM= Subject key identifier: 44:EB:17:35:E3:F2:94:B5:25:BE:AD:AA:64:E9:B9:F1:8D:1A:C8:DD Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184 Certificate serial: 019A96FDF7C9755F55D1202E17BB8F18C941 Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/ROsXNePylLUlvq2qZOm58Y0ayN0.roa Signing time: Tue 18 Nov 2025 12:43:37 +0000 ROA not before: Tue 18 Nov 2025 12:43:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 58061 IP address blocks: 91.235.158.0/24 maxlen: 24 194.187.100.0/24 maxlen: 24 194.187.101.0/24 maxlen: 24 195.95.216.0/24 maxlen: 24 195.95.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:96:fd:f7:c9:75:5f:55:d1:20:2e:17:bb:8f:18:c9:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184 Validity Not Before: Nov 18 12:43:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=44eb1735e3f294b525beadaa64e9b9f18d1ac8dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:eb:91:b2:27:6a:0b:5b:4a:b0:7c:68:f2:0f: 40:20:07:91:e9:8b:c3:c6:5a:31:a2:55:4c:0c:a8: ee:38:53:4a:cf:0d:cc:41:da:87:fd:df:46:8d:3a: 68:01:d6:fd:c8:fd:55:8b:47:81:02:25:5a:7d:de: 8b:a5:09:4f:70:83:1a:93:1f:eb:a6:39:09:cd:14: 2c:ae:51:b5:ab:0d:9a:6f:29:6b:ce:ed:0d:dd:f7: 26:07:1a:de:01:23:7e:61:4a:dd:8d:50:95:e1:64: 2c:62:9b:c2:2f:be:82:90:95:1f:da:ec:61:1f:ab: 11:3a:7a:f5:e7:e8:e9:73:47:88:8e:45:0b:8f:38: 6f:95:8d:9d:54:60:e2:21:a7:39:87:a7:8c:41:d3: a1:85:e1:42:98:d5:50:fb:03:bd:7d:08:01:a4:47: 9b:23:63:14:33:85:e2:09:6b:ba:cb:5c:13:19:16: 12:2d:a1:26:35:37:00:25:e3:81:52:86:4c:e9:0e: 5b:15:e7:a6:35:92:6a:1f:ee:fb:e9:2f:cc:d6:28: 5b:b5:08:25:d3:3d:7b:08:eb:c3:ed:a5:c2:14:19: 88:06:b9:ca:c6:4d:62:7c:33:5d:f3:10:7f:08:8b: 7b:b9:08:c7:19:77:a9:89:ae:8f:bd:ae:24:be:c1: e5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:EB:17:35:E3:F2:94:B5:25:BE:AD:AA:64:E9:B9:F1:8D:1A:C8:DD X509v3 Authority Key Identifier: keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/ROsXNePylLUlvq2qZOm58Y0ayN0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.235.158.0/24 194.187.100.0/23 195.95.216.0/23 Signature Algorithm: sha256WithRSAEncryption 6f:94:82:ba:89:24:d4:0f:71:3b:f8:e9:78:85:1a:5f:a8:89: 1a:8e:34:38:f1:51:43:e6:fe:5f:5a:53:79:3b:03:18:63:7b: 41:5d:24:4f:4c:d1:ef:30:eb:b8:f4:43:7e:b5:75:d4:90:68: 9b:ed:d2:29:06:45:57:de:08:14:f2:c1:e3:aa:34:68:97:6a: 1a:42:a5:af:1e:72:7c:6e:58:e5:d2:88:3d:6b:ce:4e:c1:d0: 6e:7e:82:9e:49:b0:61:42:94:5a:16:aa:65:64:8d:66:30:e6: c2:34:2b:03:7e:65:43:3f:48:36:d3:d4:7c:14:2c:b9:56:98: 9c:db:f7:b7:f3:d6:90:97:73:4a:63:57:94:17:f3:a0:ea:53: 68:45:c2:84:00:1a:09:10:7a:f2:f7:14:ca:be:4b:d5:b2:ed: 71:17:b3:ab:1e:2a:15:35:4e:4a:bb:51:10:91:d0:2a:35:51: 56:43:bc:71:56:be:36:40:0d:db:60:76:4b:09:53:06:58:a2: 24:2d:b7:9a:71:bb:5b:11:07:9d:7d:08:29:12:b8:66:4e:30: d6:c5:96:11:5f:f2:34:3b:1b:6c:3d:df:a8:5e:40:e4:91:d0: 4f:af:fa:8c:a3:0b:c3:68:c5:eb:9e:8b:df:d0:c5:c4:45:78: 56:a7:88:57 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZqW/ffJdV9V0SAuF7uPGMlBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NWExZGExY2IxYzkyMGFlMmY5Yjc0ODI3MGZkZWQ4NzM3 YTkxODQwHhcNMjUxMTE4MTI0MzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NGViMTczNWUzZjI5NGI1MjViZWFkYWE2NGU5YjlmMThkMWFjOGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uuRsidqC1tKsHxo8g9AIAeR6YvD xloxolVMDKjuOFNKzw3MQdqH/d9GjTpoAdb9yP1Vi0eBAiVafd6LpQlPcIMakx/r pjkJzRQsrlG1qw2abylrzu0N3fcmBxreASN+YUrdjVCV4WQsYpvCL76CkJUf2uxh H6sROnr15+jpc0eIjkULjzhvlY2dVGDiIac5h6eMQdOhheFCmNVQ+wO9fQgBpEeb I2MUM4XiCWu6y1wTGRYSLaEmNTcAJeOBUoZM6Q5bFeemNZJqH+776S/M1ihbtQgl 0z17COvD7aXCFBmIBrnKxk1ifDNd8xB/CIt7uQjHGXepia6Pva4kvsHlmwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFETrFzXj8pS1Jb6tqmTpufGNGsjdMB8GA1UdIwQY MBaAFMZaHaHLHJIK4vm3SCcP3thzepGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAt MzZiYWM4ZDkxZTJlLzEvUk9zWE5lUHlsTFVsdnEycVpPbTU4WTBheU4wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAtMzZiYWM4ZDkxZTJl LzEveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW+ueAwQB wrtkAwQBw1/YMA0GCSqGSIb3DQEBCwUAA4IBAQBvlIK6iSTUD3E7+Ol4hRpfqIka jjQ48VFD5v5fWlN5OwMYY3tBXSRPTNHvMOu49EN+tXXUkGib7dIpBkVX3ggU8sHj qjRol2oaQqWvHnJ8bljl0og9a85OwdBufoKeSbBhQpRaFqplZI1mMObCNCsDfmVD P0g209R8FCy5Vpic2/e389aQl3NKY1eUF/Og6lNoRcKEABoJEHry9xTKvkvVsu1x F7OrHioVNU5Ku1EQkdAqNVFWQ7xxVr42QA3bYHZLCVMGWKIkLbeacbtbEQedfQgp ErhmTjDWxZYRX/I0OxtsPd+oXkDkkdBPr/qMowvDaMXrnovf0MXERXhWp4hX -----END CERTIFICATE-----Generated at Sat Dec 6 16:17:10 2025 by rpki-client