This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/XnGZ66-CBM6AanoZtbTkP2XKLFM.roa File: XnGZ66-CBM6AanoZtbTkP2XKLFM.roa (raw, json) Hash identifier: NEjz50aooPpr0huS+T0fDzjSNr5LaNMTdlmfkWqxVlk= Subject key identifier: 5E:71:99:EB:AF:82:04:CE:80:6A:7A:19:B5:B4:E4:3F:65:CA:2C:53 Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Certificate serial: 019B21509C8F05858EFC53269D7AF2BF0A90 Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/XnGZ66-CBM6AanoZtbTkP2XKLFM.roa Signing time: Mon 15 Dec 2025 09:21:29 +0000 ROA not before: Mon 15 Dec 2025 09:21:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 89.251.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 09:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:50:9c:8f:05:85:8e:fc:53:26:9d:7a:f2:bf:0a:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Validity Not Before: Dec 15 09:21:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5e7199ebaf8204ce806a7a19b5b4e43f65ca2c53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:37:61:ef:b0:a4:76:a8:52:ea:6d:f6:d9:2a: 5f:00:63:d8:2e:cc:9d:d7:98:51:df:6c:14:d3:98: c2:cb:08:d4:80:2c:7c:e8:d3:0d:b6:22:9c:3c:1a: 6a:8e:27:f7:00:ce:6e:84:06:11:4a:5b:c4:98:aa: a8:fb:4e:30:04:0c:ef:8c:01:91:59:82:b0:41:1b: 9d:7f:e7:19:07:e5:a5:f3:72:92:14:d6:c6:ca:a2: 62:80:5b:8e:90:19:c2:59:86:0c:37:3e:8a:60:f3: 46:b1:4e:3c:80:23:25:e2:4c:af:89:9f:48:23:14: 6a:14:49:32:14:40:96:38:45:52:d0:8c:69:0a:7c: 41:29:89:fe:f6:fe:b3:aa:ed:73:f7:ec:da:fd:b3: 75:45:af:b4:c5:d2:db:a9:3b:57:49:31:67:1b:0a: 2f:ae:e0:05:ce:44:4c:4d:a4:98:d8:c4:a3:f2:e6: 86:46:4b:c7:e4:a5:e9:02:35:35:5c:ae:c5:b2:34: 6b:dc:06:b1:f6:31:7f:1a:ca:d1:2d:24:19:13:03: 13:ad:dd:da:f2:91:a0:8b:9e:0c:76:88:c8:df:d8: 2d:00:61:3b:42:f6:c5:40:0e:48:62:89:c7:ea:80: ef:ac:07:c2:c2:80:39:6c:5c:e2:8a:54:ad:71:5c: 78:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:71:99:EB:AF:82:04:CE:80:6A:7A:19:B5:B4:E4:3F:65:CA:2C:53 X509v3 Authority Key Identifier: keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/XnGZ66-CBM6AanoZtbTkP2XKLFM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.251.23.0/24 Signature Algorithm: sha256WithRSAEncryption 95:ec:56:80:3f:22:c5:30:50:7c:97:ec:9d:c2:fd:31:18:e9: ba:be:b1:85:cf:b6:33:d6:11:8f:7d:2e:c5:fc:a4:dd:fe:ee: d3:0f:fa:b0:d3:9c:57:e6:31:4b:b3:35:7a:2f:11:57:13:88: d7:a7:16:8b:ff:80:bd:fd:01:09:92:11:40:7c:5b:bf:96:b9: 76:b0:24:38:b8:4f:1d:01:ce:56:fd:94:a2:60:a7:86:27:40: 64:07:57:17:2b:cf:10:24:50:d2:a8:d3:ef:99:62:74:59:ad: dd:11:47:1f:2f:42:c1:14:40:7e:5c:34:b3:62:64:50:07:35: 24:ad:b3:75:1a:65:95:5e:ad:05:ba:ef:96:8e:2a:f3:24:9f: 0a:36:19:f8:e2:61:ff:7e:ae:30:4f:98:81:21:db:da:46:86: 5c:42:a8:32:55:9b:4c:fa:54:23:c3:b7:f5:79:b4:15:10:4b: 6c:c0:e7:12:65:ad:c6:f4:e9:e0:e2:28:26:61:64:fe:36:f0: 0d:96:2f:cd:32:0b:75:f5:14:56:28:c1:38:fb:e4:aa:72:34: c6:65:e4:8d:c1:59:1f:34:29:32:4b:bd:d7:78:be:f3:31:48: a9:46:74:8b:ad:3d:9d:fe:da:b8:e6:d8:09:d6:44:b8:f0:15: 28:18:5b:1b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZshUJyPBYWO/FMmnXryvwqQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj NWFjOGQwHhcNMjUxMjE1MDkyMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTcxOTllYmFmODIwNGNlODA2YTdhMTliNWI0ZTQzZjY1Y2EyYzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jdh77CkdqhS6m322SpfAGPYLsyd 15hR32wU05jCywjUgCx86NMNtiKcPBpqjif3AM5uhAYRSlvEmKqo+04wBAzvjAGR WYKwQRudf+cZB+Wl83KSFNbGyqJigFuOkBnCWYYMNz6KYPNGsU48gCMl4kyviZ9I IxRqFEkyFECWOEVS0IxpCnxBKYn+9v6zqu1z9+za/bN1Ra+0xdLbqTtXSTFnGwov ruAFzkRMTaSY2MSj8uaGRkvH5KXpAjU1XK7FsjRr3Aax9jF/GsrRLSQZEwMTrd3a 8pGgi54MdojI39gtAGE7QvbFQA5IYonH6oDvrAfCwoA5bFziilStcVx4iQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF5xmeuvggTOgGp6GbW05D9lyixTMB8GA1UdIwQY MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt MzE4YTI2ZDRhOGM5LzEvWG5HWjY2LUNCTTZBYW5vWnRiVGtQMlhLTEZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5 LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWfsXMA0G CSqGSIb3DQEBCwUAA4IBAQCV7FaAPyLFMFB8l+ydwv0xGOm6vrGFz7Yz1hGPfS7F /KTd/u7TD/qw05xX5jFLszV6LxFXE4jXpxaL/4C9/QEJkhFAfFu/lrl2sCQ4uE8d Ac5W/ZSiYKeGJ0BkB1cXK88QJFDSqNPvmWJ0Wa3dEUcfL0LBFEB+XDSzYmRQBzUk rbN1GmWVXq0Fuu+WjirzJJ8KNhn44mH/fq4wT5iBIdvaRoZcQqgyVZtM+lQjw7f1 ebQVEEtswOcSZa3G9Ong4igmYWT+NvANli/NMgt19RRWKME4++SqcjTGZeSNwVkf NCkyS73XeL7zMUipRnSLrT2d/tq45tgJ1kS48BUoGFsb -----END CERTIFICATE-----Generated at Mon Dec 15 17:27:25 2025 by rpki-client