This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Xt9P7XiWeDos7_XxK6quIJZc5D4.roa File: Xt9P7XiWeDos7_XxK6quIJZc5D4.roa (raw, json) Hash identifier: zdg/hXWnH0qZOYk9nnau3eqHJ/hyfqKiUTmrAaZWKik= Subject key identifier: 5E:DF:4F:ED:78:96:78:3A:2C:EF:F5:F1:2B:AA:AE:20:96:5C:E4:3E Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Certificate serial: 019AEEA6579BD41B0B286C80F70792B88DB0 Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Xt9P7XiWeDos7_XxK6quIJZc5D4.roa Signing time: Fri 05 Dec 2025 13:14:30 +0000 ROA not before: Fri 05 Dec 2025 13:14:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 146.19.21.0/24 maxlen: 24 185.244.104.0/24 maxlen: 24 212.46.37.0/24 maxlen: 24 2a05:9a40::/29 maxlen: 29 2a06:5fc0::/29 maxlen: 29 2a0b:ac00::/29 maxlen: 29 2a0f:9b40::/29 maxlen: 29 2a10:3f80::/29 maxlen: 29 2a10:77c0::/29 maxlen: 29 2a13:b4c1::/32 maxlen: 32 2a13:b9c0::/29 maxlen: 29 2a13:bb40::/29 maxlen: 29 2a13:c240::/29 maxlen: 29 2a13:c340::/29 maxlen: 29 2a14:1100::/32 maxlen: 32 2a14:1101::/32 maxlen: 32 2a14:1102::/32 maxlen: 32 2a14:1103::/32 maxlen: 32 2a14:1104::/32 maxlen: 32 2a14:1105::/32 maxlen: 32 2a14:1106::/32 maxlen: 32 2a14:1107::/32 maxlen: 32 2a14:42c0::/29 maxlen: 29 2a14:62c0::/29 maxlen: 29 2a14:6a40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:a6:57:9b:d4:1b:0b:28:6c:80:f7:07:92:b8:8d:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Validity Not Before: Dec 5 13:14:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5edf4fed7896783a2ceff5f12baaae20965ce43e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b7:71:36:17:6e:04:96:99:91:a3:13:90:b8: f0:70:4a:ad:e8:1f:1f:ec:4c:c4:21:8b:6d:1d:24: 3f:64:bc:f3:53:13:b1:53:55:59:76:e3:4d:bf:f7: 99:2e:f8:56:65:03:ee:34:be:66:20:c0:46:45:05: 37:9b:fb:e3:25:0b:06:7b:f2:7d:19:78:99:d9:28: e9:45:79:11:0e:ea:71:08:31:f9:42:87:c7:7b:81: 68:25:b0:5e:1d:f6:f9:17:92:2c:82:f8:36:d5:1f: a9:9e:13:f2:d1:05:7b:d6:39:0f:75:ce:fd:05:d7: 34:67:83:3a:3c:a8:b7:85:88:67:3a:c5:db:8a:bb: 62:e1:62:3c:39:9a:4e:17:7b:a5:7f:97:a2:00:50: bf:8b:7b:b7:7c:65:0a:c2:98:9e:5f:36:02:0a:1d: 6f:96:83:19:e4:eb:3f:05:42:31:b4:a7:0a:5e:20: 40:46:6e:64:9c:b9:4c:d6:a7:b9:ba:98:81:65:99: e4:f8:7d:2d:1b:af:7b:b5:95:4f:36:62:bb:fc:13: 51:ad:f3:1a:48:2b:5e:48:cb:50:7d:4f:5f:a0:b6: 9e:f1:d6:35:61:1a:6c:76:42:e5:aa:30:52:77:0c: aa:1e:bc:27:86:bb:45:cb:ff:28:2f:3c:d8:1f:8e: 47:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:DF:4F:ED:78:96:78:3A:2C:EF:F5:F1:2B:AA:AE:20:96:5C:E4:3E X509v3 Authority Key Identifier: keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Xt9P7XiWeDos7_XxK6quIJZc5D4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.21.0/24 185.244.104.0/24 212.46.37.0/24 IPv6: 2a05:9a40::/29 2a06:5fc0::/29 2a0b:ac00::/29 2a0f:9b40::/29 2a10:3f80::/29 2a10:77c0::/29 2a13:b4c1::/32 2a13:b9c0::/29 2a13:bb40::/29 2a13:c240::/29 2a13:c340::/29 2a14:1100::/29 2a14:42c0::/29 2a14:62c0::/29 2a14:6a40::/32 Signature Algorithm: sha256WithRSAEncryption 06:d9:31:ac:a0:f3:d3:4b:bd:29:a4:1e:67:2c:4b:50:71:14: ed:5b:f1:36:ea:46:68:0c:9a:db:bb:a1:4c:7f:04:b2:44:ba: 22:56:55:f8:f1:9a:ef:ac:c6:70:8d:b6:71:cf:fe:7f:22:92: 9d:4b:4d:fb:32:a8:c5:c2:36:3e:e1:d7:6e:79:06:09:4e:f9: 34:23:3c:bb:46:da:b2:cd:6e:b4:97:4c:f5:04:54:db:f4:b4: c5:28:fb:99:7c:42:b3:78:8d:29:d7:2b:33:1c:57:8d:08:04: 7a:48:0a:95:38:15:cd:d4:ce:2a:de:be:39:3f:aa:e2:33:75: a2:8f:c1:99:ee:5d:73:96:ce:ea:76:4a:4e:07:e8:df:cb:74: 02:a6:22:9f:26:7c:bc:f8:aa:23:e3:8d:1d:10:33:55:03:b6: 5b:79:e9:36:24:ec:61:22:34:6e:a7:7b:19:8f:eb:c9:e7:2f: 65:e0:64:49:b8:b1:bc:1b:fd:38:ae:8f:50:a6:34:8b:34:13: 1d:e2:7e:5c:c6:a9:98:53:fc:3b:40:f5:7c:c1:77:f4:07:de: 9d:c5:5d:af:0c:54:cd:5d:65:bc:5d:84:97:59:3b:68:4c:74: 9f:eb:71:3e:82:cb:d2:4d:c4:97:15:64:b4:98:05:08:6d:a1: ca:d3:63:0a -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgISAZrupleb1BsLKGyA9weSuI2wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0 ZGIwYTUwHhcNMjUxMjA1MTMxNDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZWRmNGZlZDc4OTY3ODNhMmNlZmY1ZjEyYmFhYWUyMDk2NWNlNDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLdxNhduBJaZkaMTkLjwcEqt6B8f 7EzEIYttHSQ/ZLzzUxOxU1VZduNNv/eZLvhWZQPuNL5mIMBGRQU3m/vjJQsGe/J9 GXiZ2SjpRXkRDupxCDH5QofHe4FoJbBeHfb5F5Isgvg21R+pnhPy0QV71jkPdc79 Bdc0Z4M6PKi3hYhnOsXbirti4WI8OZpOF3ulf5eiAFC/i3u3fGUKwpieXzYCCh1v loMZ5Os/BUIxtKcKXiBARm5knLlM1qe5upiBZZnk+H0tG697tZVPNmK7/BNRrfMa SCteSMtQfU9foLae8dY1YRpsdkLlqjBSdwyqHrwnhrtFy/8oLzzYH45HUQIDAQAB o4ICiTCCAoUwHQYDVR0OBBYEFF7fT+14lng6LO/18SuqriCWXOQ+MB8GA1UdIwQY MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt YmFmYmRmYzgxMzJhLzEvWHQ5UDdYaVdlRG9zN19YeEs2cXVJSlpjNUQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGeBggrBgEFBQcBBwEB/wSBjjCBizAYBAIAATASAwQAkhMV AwQAufRoAwQA1C4lMG8EAgACMGkDBQMqBZpAAwUDKgZfwAMFAyoLrAADBQMqD5tA AwUDKhA/gAMFAyoQd8ADBQAqE7TBAwUDKhO5wAMFAyoTu0ADBQMqE8JAAwUDKhPD QAMFAyoUEQADBQMqFELAAwUDKhRiwAMFACoUakAwDQYJKoZIhvcNAQELBQADggEB AAbZMayg89NLvSmkHmcsS1BxFO1b8TbqRmgMmtu7oUx/BLJEuiJWVfjxmu+sxnCN tnHP/n8ikp1LTfsyqMXCNj7h1255BglO+TQjPLtG2rLNbrSXTPUEVNv0tMUo+5l8 QrN4jSnXKzMcV40IBHpICpU4Fc3Uzirevjk/quIzdaKPwZnuXXOWzup2Sk4H6N/L dAKmIp8mfLz4qiPjjR0QM1UDtlt56TYk7GEiNG6nexmP68nnL2XgZEm4sbwb/Tiu j1CmNIs0Ex3iflzGqZhT/DtA9XzBd/QH3p3FXa8MVM1dZbxdhJdZO2hMdJ/rcT6C y9JNxJcVZLSYBQhtocrTYwo= -----END CERTIFICATE-----Generated at Sat Dec 6 13:19:47 2025 by rpki-client