This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/xk24sUHQVb71yI2UfvmzcCtWHtc.roa File: xk24sUHQVb71yI2UfvmzcCtWHtc.roa (raw, json) Hash identifier: NCeertpXSMYB22IQmK4V1zrtFAhIOGm4D7paLxR3ljI= Subject key identifier: C6:4D:B8:B1:41:D0:55:BE:F5:C8:8D:94:7E:F9:B3:70:2B:56:1E:D7 Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Certificate serial: 019AB6BD1CE7ED141D3EC32244C9B36D3FFF Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/xk24sUHQVb71yI2UfvmzcCtWHtc.roa Signing time: Mon 24 Nov 2025 16:40:38 +0000 ROA not before: Mon 24 Nov 2025 16:40:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 8772 IP address blocks: 94.131.0.0/23 maxlen: 23 94.131.0.0/24 maxlen: 24 94.131.4.0/24 maxlen: 24 94.131.6.0/24 maxlen: 24 94.131.7.0/24 maxlen: 24 94.131.21.0/24 maxlen: 24 94.131.22.0/24 maxlen: 24 94.131.124.0/24 maxlen: 24 94.131.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b6:bd:1c:e7:ed:14:1d:3e:c3:22:44:c9:b3:6d:3f:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Validity Not Before: Nov 24 16:40:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c64db8b141d055bef5c88d947ef9b3702b561ed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:82:9a:eb:1b:ea:f6:b6:0b:43:7d:be:e7:94: f3:31:02:63:8b:d7:b8:25:a3:7f:e2:53:a7:8f:3c: 16:ef:97:40:20:3e:27:f0:e7:55:44:49:dd:64:8b: b8:77:75:31:e1:aa:97:3b:7b:ee:a5:d4:ec:9d:77: 5e:52:10:29:6b:57:2b:b0:36:78:21:93:9d:31:3d: b4:e0:2a:13:9d:d3:6b:46:f1:ab:1f:45:1a:41:1b: 73:19:97:ac:4b:0a:03:37:0a:57:8d:4e:88:f8:72: a1:ba:c6:04:49:9b:40:40:99:d7:ae:dd:6e:1e:95: 22:d3:95:43:e0:83:78:5b:22:88:77:9c:21:a9:19: 41:4f:05:31:4f:df:61:db:a2:dd:94:5d:f2:7a:40: 8d:2a:08:54:e4:64:00:42:cc:14:f3:e6:df:b3:86: 55:6c:b4:6a:8b:7f:3e:3f:ec:b6:c0:00:fe:e8:d3: 82:d8:93:3b:e7:fb:38:84:23:fc:c9:5e:be:e0:cf: 61:96:10:82:c7:23:30:c6:95:51:7b:8b:18:36:a5: 13:34:82:90:a1:db:23:9b:67:4a:21:29:31:82:ea: 3b:a0:63:dd:f9:17:16:f8:27:0f:97:dd:ab:a0:e5: e4:5b:b2:77:5c:55:d8:d2:97:ee:9c:f9:04:0a:cb: 31:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:4D:B8:B1:41:D0:55:BE:F5:C8:8D:94:7E:F9:B3:70:2B:56:1E:D7 X509v3 Authority Key Identifier: keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/xk24sUHQVb71yI2UfvmzcCtWHtc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.131.0.0/23 94.131.4.0/24 94.131.6.0/23 94.131.21.0-94.131.22.255 94.131.124.0/24 94.131.127.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:70:c4:d1:0c:07:99:a0:bd:b2:1b:64:62:41:3a:4f:71:40: 3c:7a:32:10:d5:c6:e5:e9:55:eb:e5:a2:27:7a:34:46:31:ba: 8a:6d:6e:ce:b3:05:43:7b:5d:c6:b2:14:f2:df:30:dc:05:d3: 34:4e:4f:91:71:7d:dc:49:31:91:03:8f:17:94:62:59:09:df: 04:fd:e7:1e:a9:24:ba:53:68:aa:e2:b0:1b:df:60:b1:aa:77: 9e:94:5b:47:bd:89:67:0b:49:d4:39:c0:cf:37:fd:f6:10:52: 80:0f:db:9e:56:14:b3:9e:96:37:34:8c:e9:9d:a0:64:53:63: ab:4d:d8:2a:af:48:30:00:d4:3e:d0:94:9a:54:06:34:4b:b7: 91:74:af:09:cb:78:ae:b4:e0:7a:1f:51:f7:fc:02:3f:09:d0: 14:3a:b0:00:05:a7:be:dc:e6:04:9b:65:0d:57:88:02:e9:2a: d3:e3:0c:a6:d6:28:58:b5:a3:cf:df:f7:aa:ad:48:b0:f5:57: 5e:f2:3f:db:db:5e:a4:60:df:ec:6e:87:96:65:67:ac:a0:f4: 4c:a8:fc:6a:d7:f3:8b:d7:6d:fa:fc:52:14:6d:cf:25:40:69: 64:f0:f6:39:15:21:bf:a8:78:1b:1b:e4:c4:70:ca:12:18:b8: bf:07:7a:40 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZq2vRzn7RQdPsMiRMmzbT//MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNzQzZWQ2M2U4NjhlZjUwZjZkODRjMDAwM2E4MzQ4M2Zj NjJhMDMwHhcNMjUxMTI0MTY0MDM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjRkYjhiMTQxZDA1NWJlZjVjODhkOTQ3ZWY5YjM3MDJiNTYxZWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoKa6xvq9rYLQ32+55TzMQJji9e4 JaN/4lOnjzwW75dAID4n8OdVREndZIu4d3Ux4aqXO3vupdTsnXdeUhApa1crsDZ4 IZOdMT204CoTndNrRvGrH0UaQRtzGZesSwoDNwpXjU6I+HKhusYESZtAQJnXrt1u HpUi05VD4IN4WyKId5whqRlBTwUxT99h26LdlF3yekCNKghU5GQAQswU8+bfs4ZV bLRqi38+P+y2wAD+6NOC2JM75/s4hCP8yV6+4M9hlhCCxyMwxpVRe4sYNqUTNIKQ odsjm2dKISkxguo7oGPd+RcW+CcPl92roOXkW7J3XFXY0pfunPkECssxZQIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFMZNuLFB0FW+9ciNlH75s3ArVh7XMB8GA1UdIwQY MBaAFG10PtY+ho71D22EwAA6g0g/xioDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQt ZTk3MjRhN2E2YmM4LzEveGsyNHNVSFFWYjcxeUkyVWZ2bXpjQ3RXSHRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQtZTk3MjRhN2E2YmM4 LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQBXoMAAwQA XoMEAwQBXoMGMAwDBABegxUDBABegxYDBABeg3wDBABeg38wDQYJKoZIhvcNAQEL BQADggEBAI9wxNEMB5mgvbIbZGJBOk9xQDx6MhDVxuXpVevloid6NEYxuoptbs6z BUN7XcayFPLfMNwF0zROT5FxfdxJMZEDjxeUYlkJ3wT95x6pJLpTaKrisBvfYLGq d56UW0e9iWcLSdQ5wM83/fYQUoAP255WFLOeljc0jOmdoGRTY6tN2CqvSDAA1D7Q lJpUBjRLt5F0rwnLeK604HofUff8Aj8J0BQ6sAAFp77c5gSbZQ1XiALpKtPjDKbW KFi1o8/f96qtSLD1V17yP9vbXqRg3+xuh5ZlZ6yg9Eyo/GrX84vXbfr8UhRtzyVA aWTw9jkVIb+oeBsb5MRwyhIYuL8HekA= -----END CERTIFICATE-----Generated at Sat Dec 6 16:18:37 2025 by rpki-client