This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/xrWOE_nW0Gwg8_uXXdLjv5S3bsk.roa File: xrWOE_nW0Gwg8_uXXdLjv5S3bsk.roa (raw, json) Hash identifier: LG+6VKhGHvSGTVuGjhuxo2fqbg4w3RjW0n+axpRLJ0E= Subject key identifier: C6:B5:8E:13:F9:D6:D0:6C:20:F3:FB:97:5D:D2:E3:BF:94:B7:6E:C9 Certificate issuer: /CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a Certificate serial: 019AB070853AEEF25F5919053CCF768F7950 Authority key identifier: 60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/xrWOE_nW0Gwg8_uXXdLjv5S3bsk.roa Signing time: Sun 23 Nov 2025 11:19:15 +0000 ROA not before: Sun 23 Nov 2025 11:19:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 6205 IP address blocks: 185.121.124.0/24 maxlen: 24 185.121.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b0:70:85:3a:ee:f2:5f:59:19:05:3c:cf:76:8f:79:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a Validity Not Before: Nov 23 11:19:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c6b58e13f9d6d06c20f3fb975dd2e3bf94b76ec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:80:d8:09:d1:bd:83:f2:c3:31:00:09:c5:cd: df:bf:5e:ea:bd:86:58:5e:5f:fc:15:2b:72:6b:e0: f8:2a:14:d6:d5:ce:fc:9e:71:08:30:1d:ca:ee:cc: f7:24:3e:d2:31:83:88:1f:a7:b3:be:74:9f:e0:28: f0:eb:f6:21:7b:ed:be:d5:3d:c3:61:4d:eb:4b:61: 48:a2:57:f3:c6:e5:2e:08:f2:6e:66:60:26:66:2a: 98:c7:9e:fa:97:99:22:2d:8e:35:3e:62:a9:7f:e1: 92:44:79:39:c2:6a:6c:2b:d8:a3:46:8f:8d:e0:e1: c3:d6:7f:cf:28:52:52:4d:04:56:10:ff:72:44:94: a8:5d:ea:f6:be:88:9f:10:61:ca:bc:6b:24:a6:dd: 49:12:d5:73:31:ea:77:83:b9:8a:06:54:c8:4d:2e: 26:c9:f7:81:69:0a:07:a2:19:a3:5b:d6:e3:57:c1: 27:36:86:f0:db:ce:39:31:06:72:81:74:0b:f1:86: 5d:e1:0c:9a:03:17:11:5b:c0:32:04:b2:17:b3:ca: ca:08:4b:52:00:31:ea:99:04:d6:6c:6e:d6:46:4f: 9c:d0:69:16:42:42:c5:18:32:6b:fd:72:1d:d5:a3: e3:2b:9f:39:1b:bc:76:70:36:97:a9:b6:2b:fb:fe: 58:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:B5:8E:13:F9:D6:D0:6C:20:F3:FB:97:5D:D2:E3:BF:94:B7:6E:C9 X509v3 Authority Key Identifier: keyid:60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/xrWOE_nW0Gwg8_uXXdLjv5S3bsk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.121.124.0/23 Signature Algorithm: sha256WithRSAEncryption 35:12:10:0b:52:0e:a2:1b:60:2b:5f:2d:65:85:8d:62:99:fd: 3c:63:e5:aa:cb:70:37:3d:c1:24:2b:6b:cb:99:0c:a7:83:62: ff:41:a3:52:a6:9b:93:69:4c:2e:e5:04:eb:af:5d:6d:b3:e4: e4:02:36:a2:a2:f5:bf:dd:8d:01:e6:c1:bb:36:d4:80:92:6e: 0a:a3:84:4f:dd:f6:16:7d:35:5b:33:7f:4b:7a:b0:36:b2:03: 87:df:a9:96:6c:1b:db:90:f5:34:58:fb:c9:40:52:dc:a4:a6: 62:fe:3b:3c:3d:02:e3:e6:5c:f1:0e:a2:3d:63:2d:95:43:d4: ab:80:4a:9d:0c:1d:a8:29:a5:0b:87:52:97:19:2e:67:9d:9b: 34:28:36:92:6f:d6:04:c8:7b:30:fe:7a:04:59:2d:00:d9:f7: 2d:81:ee:bc:64:05:27:84:7c:d7:14:e1:ab:38:98:3a:8b:07: ef:0c:9c:2c:51:73:6c:6f:39:0e:b4:18:de:bc:60:f5:61:f7: 0d:01:f3:fa:aa:8d:da:22:19:b3:77:4d:a4:e9:04:dd:c7:e8: e4:fd:6e:58:ed:44:fd:2c:69:3e:65:b7:bc:f7:7e:57:fb:28: c7:5b:f5:fe:22:66:89:a0:8a:e4:33:ce:40:dc:71:fe:a4:89: 44:75:37:6c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqwcIU67vJfWRkFPM92j3lQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwYjk2MTVkZjhjNjU5ZGFjOGNjMDg3YmQwMTFkNGI1ZmYz NzNlMmEwHhcNMjUxMTIzMTExOTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmI1OGUxM2Y5ZDZkMDZjMjBmM2ZiOTc1ZGQyZTNiZjk0Yjc2ZWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoDYCdG9g/LDMQAJxc3fv17qvYZY Xl/8FStya+D4KhTW1c78nnEIMB3K7sz3JD7SMYOIH6ezvnSf4Cjw6/Yhe+2+1T3D YU3rS2FIolfzxuUuCPJuZmAmZiqYx576l5kiLY41PmKpf+GSRHk5wmpsK9ijRo+N 4OHD1n/PKFJSTQRWEP9yRJSoXer2voifEGHKvGskpt1JEtVzMep3g7mKBlTITS4m yfeBaQoHohmjW9bjV8EnNobw2845MQZygXQL8YZd4QyaAxcRW8AyBLIXs8rKCEtS ADHqmQTWbG7WRk+c0GkWQkLFGDJr/XId1aPjK585G7x2cDaXqbYr+/5YowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMa1jhP51tBsIPP7l13S47+Ut27JMB8GA1UdIwQY MBaAFGC5YV34xlnayMwIe9AR1LX/Nz4qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUxsaFhmakdXZHJJekFoNzBCSFV0ZjgzUGlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS85YThhZDgtYjZjOS00YzZjLWFjMjct NjJkODgxYWE5MDZmLzEveHJXT0VfblcwR3dnOF91WFhkTGp2NVMzYnNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS85YThhZDgtYjZjOS00YzZjLWFjMjctNjJkODgxYWE5MDZm LzEvWUxsaFhmakdXZHJJekFoNzBCSFV0ZjgzUGlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuXl8MA0G CSqGSIb3DQEBCwUAA4IBAQA1EhALUg6iG2ArXy1lhY1imf08Y+Wqy3A3PcEkK2vL mQyng2L/QaNSppuTaUwu5QTrr11ts+TkAjaiovW/3Y0B5sG7NtSAkm4Ko4RP3fYW fTVbM39LerA2sgOH36mWbBvbkPU0WPvJQFLcpKZi/js8PQLj5lzxDqI9Yy2VQ9Sr gEqdDB2oKaULh1KXGS5nnZs0KDaSb9YEyHsw/noEWS0A2fctge68ZAUnhHzXFOGr OJg6iwfvDJwsUXNsbzkOtBjevGD1YfcNAfP6qo3aIhmzd02k6QTdx+jk/W5Y7UT9 LGk+Zbe8935X+yjHW/X+ImaJoIrkM85A3HH+pIlEdTds -----END CERTIFICATE-----Generated at Sat Dec 6 12:53:17 2025 by rpki-client