This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/XSix0k71H2Zb9YIt04I-2-4I8sA.roa File: XSix0k71H2Zb9YIt04I-2-4I8sA.roa (raw, json) Hash identifier: tLM6K/svH3mdt3MnB92tM359DcHoAYR6hLSIdF3Sjb4= Subject key identifier: 5D:28:B1:D2:4E:F5:1F:66:5B:F5:82:2D:D3:82:3E:DB:EE:08:F2:C0 Certificate issuer: /CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027 Certificate serial: 019AA5A1CB5086F2BB3F81A46A8634B50741 Authority key identifier: 0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/XSix0k71H2Zb9YIt04I-2-4I8sA.roa Signing time: Fri 21 Nov 2025 08:57:15 +0000 ROA not before: Fri 21 Nov 2025 08:57:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211261 IP address blocks: 185.223.178.0/24 maxlen: 24 185.237.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a5:a1:cb:50:86:f2:bb:3f:81:a4:6a:86:34:b5:07:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027 Validity Not Before: Nov 21 08:57:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5d28b1d24ef51f665bf5822dd3823edbee08f2c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d3:b2:57:8b:73:b4:7b:49:64:e2:ef:2e:0a: 3a:40:48:a4:1a:19:d7:62:10:80:70:e5:67:b3:81: 1b:03:49:a3:74:31:ad:62:81:33:d7:79:13:c2:d1: 72:93:42:90:a7:ad:01:e1:16:e8:a2:d0:d8:a9:07: 99:b9:20:d1:da:dc:e2:01:08:73:d7:9a:29:b1:c8: df:b2:f1:f4:ed:55:98:bb:75:90:64:01:a2:67:f0: 7d:65:4d:66:ef:2b:87:90:e2:35:0d:e2:01:fc:9c: b8:30:c1:cc:fd:5b:35:50:01:ff:7f:32:cf:e7:85: ff:46:5a:f2:e0:b7:a0:05:28:69:a4:d4:ac:02:c9: 6a:3b:79:be:85:35:3f:c0:f8:34:96:d1:7a:c5:ca: 2a:8d:c1:53:5f:46:2d:17:53:fd:d5:8c:b6:84:e2: 19:79:3b:c9:e1:f4:e7:08:66:54:3f:54:38:b5:28: a8:36:f4:1e:46:60:d3:0e:a7:63:2d:66:c8:2c:2a: 58:59:8f:c1:c7:5f:aa:ae:2c:70:07:a8:34:3c:68: f6:c1:e5:13:c0:94:d8:29:f2:7e:1c:b4:46:59:df: a3:8d:82:67:9d:e4:5a:6d:85:4b:79:a8:20:ae:fc: bd:67:a1:4f:a6:4e:6c:14:bd:65:e7:61:5f:1c:ad: 27:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:28:B1:D2:4E:F5:1F:66:5B:F5:82:2D:D3:82:3E:DB:EE:08:F2:C0 X509v3 Authority Key Identifier: keyid:0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/XSix0k71H2Zb9YIt04I-2-4I8sA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.223.178.0/24 185.237.215.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:03:32:e7:3a:71:99:9b:f7:8c:eb:5d:49:63:0e:af:3b:15: b1:0c:cc:08:32:71:2a:f4:77:5e:40:c5:20:3b:2e:ce:73:59: 14:53:7a:d2:df:16:e1:a9:7e:6a:01:ca:1c:de:c8:3f:0f:bb: 52:4b:95:fa:ea:22:92:0c:f4:0b:e1:1e:c2:9e:ac:1a:5f:7a: 0d:c7:e5:d3:ed:35:52:5c:1e:21:a2:fc:64:78:3b:6b:cd:b1: c2:c1:e9:97:b3:8b:15:9f:2d:f4:29:91:50:c7:38:d8:18:8a: f0:35:c0:a3:69:3e:9d:68:6e:8c:4c:67:09:07:3a:8e:5f:fe: da:a0:89:8a:91:48:9c:26:5a:83:5a:a6:67:99:df:7b:2e:cf: a0:5e:56:1a:fe:64:5c:fe:8b:88:18:c1:1b:30:d5:4f:19:b2: 36:80:72:d6:28:7b:2e:83:16:92:34:ff:96:54:be:fd:44:84: 83:13:94:ac:a3:d6:12:73:aa:17:f0:e4:7d:2d:35:04:b7:85: 6c:a1:fe:95:af:ce:69:37:9c:a3:fc:58:2b:a3:11:ea:f6:d8: c2:b8:cf:20:a8:c0:47:07:f6:d4:08:e0:fd:c7:66:29:3b:b1: 1f:00:42:cb:62:66:95:98:d8:14:8a:ba:8e:55:48:23:0e:40: d1:8b:cf:c7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqloctQhvK7P4GkaoY0tQdBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMWU3MmYzZDA5NTdmNWE2ZTNiZDFiODQ0YTEyYTYxNDc0 NDkwMjcwHhcNMjUxMTIxMDg1NzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDI4YjFkMjRlZjUxZjY2NWJmNTgyMmRkMzgyM2VkYmVlMDhmMmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9OyV4tztHtJZOLvLgo6QEikGhnX YhCAcOVns4EbA0mjdDGtYoEz13kTwtFyk0KQp60B4RbootDYqQeZuSDR2tziAQhz 15opscjfsvH07VWYu3WQZAGiZ/B9ZU1m7yuHkOI1DeIB/Jy4MMHM/Vs1UAH/fzLP 54X/Rlry4LegBShppNSsAslqO3m+hTU/wPg0ltF6xcoqjcFTX0YtF1P91Yy2hOIZ eTvJ4fTnCGZUP1Q4tSioNvQeRmDTDqdjLWbILCpYWY/Bx1+qrixwB6g0PGj2weUT wJTYKfJ+HLRGWd+jjYJnneRabYVLeaggrvy9Z6FPpk5sFL1l52FfHK0nXwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFF0osdJO9R9mW/WCLdOCPtvuCPLAMB8GA1UdIwQY MBaAFAsecvPQlX9abjvRuEShKmFHRJAnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3g1eTg5Q1ZmMXB1TzlHNFJLRXFZVWRFa0NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8xYTVhOTYtZDM2ZS00ZjNhLTliMzQt MDU0OGQzODk1YTU1LzEvWFNpeDBrNzFIMlpiOVlJdDA0SS0yLTRJOHNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8xYTVhOTYtZDM2ZS00ZjNhLTliMzQtMDU0OGQzODk1YTU1 LzEvQ3g1eTg5Q1ZmMXB1TzlHNFJLRXFZVWRFa0NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAud+yAwQA ue3XMA0GCSqGSIb3DQEBCwUAA4IBAQBeAzLnOnGZm/eM611JYw6vOxWxDMwIMnEq 9HdeQMUgOy7Oc1kUU3rS3xbhqX5qAcoc3sg/D7tSS5X66iKSDPQL4R7CnqwaX3oN x+XT7TVSXB4hovxkeDtrzbHCwemXs4sVny30KZFQxzjYGIrwNcCjaT6daG6MTGcJ BzqOX/7aoImKkUicJlqDWqZnmd97Ls+gXlYa/mRc/ouIGMEbMNVPGbI2gHLWKHsu gxaSNP+WVL79RISDE5Sso9YSc6oX8OR9LTUEt4Vsof6Vr85pN5yj/FgroxHq9tjC uM8gqMBHB/bUCOD9x2YpO7EfAELLYmaVmNgUirqOVUgjDkDRi8/H -----END CERTIFICATE-----Generated at Sun Dec 7 01:06:16 2025 by rpki-client