This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/XNsjHZycs0kFISnA1XZxdBIrp9k.roa File: XNsjHZycs0kFISnA1XZxdBIrp9k.roa (raw, json) Hash identifier: YLmGqfJlXZHQYp/HyJS9bvCFVNHG3upIUqsvyy9BruQ= Subject key identifier: 5C:DB:23:1D:9C:9C:B3:49:05:21:29:C0:D5:76:71:74:12:2B:A7:D9 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019AC53F14357CB3EBD68A7A36EC4C5D010D Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/XNsjHZycs0kFISnA1XZxdBIrp9k.roa Signing time: Thu 27 Nov 2025 12:17:16 +0000 ROA not before: Thu 27 Nov 2025 12:17:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 20688 IP address blocks: 92.38.2.0/24 maxlen: 24 146.120.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c5:3f:14:35:7c:b3:eb:d6:8a:7a:36:ec:4c:5d:01:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Nov 27 12:17:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5cdb231d9c9cb349052129c0d5767174122ba7d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:06:46:4d:e2:fa:87:1f:b6:bc:74:bb:0b:45: 9c:43:fe:ad:37:fd:90:7a:65:26:30:f1:55:4c:33: b7:89:de:73:15:60:42:a8:a5:67:ec:72:d9:0d:38: 53:d5:d8:60:23:83:5f:e6:20:ef:22:87:a8:8a:87: a3:21:59:44:4e:6d:f4:cc:22:8a:aa:6a:e2:7d:6b: 40:40:44:05:f7:e2:13:cc:f2:6e:76:b4:53:b4:6b: 12:34:18:51:93:36:58:0f:6a:76:d9:1e:51:54:38: ad:bf:81:40:d7:8a:83:a6:e2:33:df:a7:7d:1e:e1: 57:c1:db:fc:10:fc:7a:97:c8:44:dd:5b:1b:f7:25: 3b:6b:0e:92:51:08:38:17:3f:25:a6:e0:34:a9:ba: 30:f4:b1:1a:df:4d:6c:9f:f7:9b:ef:14:71:bd:d4: e2:41:82:3d:6f:b0:f4:28:86:3b:68:cb:dd:b3:d1: ff:a3:bd:9d:dd:4c:bb:5c:ab:c3:39:6e:20:35:75: 0d:6e:13:09:8c:8e:4d:c1:22:0f:22:dc:18:87:20: 33:99:62:54:e4:17:38:b5:8e:06:2b:75:71:0e:b2: a7:f0:6b:c2:47:84:7c:bd:1f:db:6d:8e:52:e3:4d: f1:1c:55:17:b7:4e:f6:52:1f:f5:a7:1c:d4:b0:ae: f9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:DB:23:1D:9C:9C:B3:49:05:21:29:C0:D5:76:71:74:12:2B:A7:D9 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/XNsjHZycs0kFISnA1XZxdBIrp9k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.38.2.0/24 146.120.0.0/21 Signature Algorithm: sha256WithRSAEncryption 6e:47:33:f2:e9:03:0e:1d:0b:7c:af:1f:54:95:69:89:11:65: 99:c9:c2:8f:fc:3a:76:3a:75:dd:96:b7:0c:e5:d1:c1:05:a9: 1b:1d:94:cd:c3:b5:02:7f:f6:54:a2:e9:62:85:49:bc:84:53: 20:1c:9e:a8:c4:5b:6c:4d:c4:aa:c7:14:c7:9a:44:d4:4c:5d: c8:4e:64:c1:18:bf:b4:20:ab:04:47:2c:70:2c:9d:dc:5e:8f: 69:08:0b:4b:e3:b9:b8:2a:3a:c8:cd:6c:c3:fc:b2:9a:3a:16: 9f:e0:cf:cd:4a:3e:c0:04:a9:ba:e4:97:85:a6:f5:2b:8c:17: ea:f9:05:27:fb:58:84:3e:7b:14:8c:46:14:13:1b:59:2e:4c: 3a:05:a7:75:79:34:62:6f:7d:15:c0:44:0e:0e:2d:76:cc:47: ef:46:00:a8:c9:0f:bf:ec:34:fe:a3:fa:ca:5c:36:13:3c:f3: d6:43:b0:f6:30:7a:97:a6:0f:98:1f:37:f2:d5:36:88:43:4a: 8a:18:b7:f5:48:b6:51:fb:da:c8:ac:64:d4:ce:81:e3:3c:da: 6f:c1:8e:42:03:01:7a:ac:b3:e2:f6:dd:1d:d3:41:0b:92:82: 3f:13:d9:78:01:17:98:e2:c9:a2:c3:71:17:19:c4:32:16:4c: 13:7a:8b:ed -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrFPxQ1fLPr1op6NuxMXQENMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjUxMTI3MTIxNzE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2RiMjMxZDljOWNiMzQ5MDUyMTI5YzBkNTc2NzE3NDEyMmJhN2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwZGTeL6hx+2vHS7C0WcQ/6tN/2Q emUmMPFVTDO3id5zFWBCqKVn7HLZDThT1dhgI4Nf5iDvIoeoioejIVlETm30zCKK qmrifWtAQEQF9+ITzPJudrRTtGsSNBhRkzZYD2p22R5RVDitv4FA14qDpuIz36d9 HuFXwdv8EPx6l8hE3Vsb9yU7aw6SUQg4Fz8lpuA0qbow9LEa301sn/eb7xRxvdTi QYI9b7D0KIY7aMvds9H/o72d3Uy7XKvDOW4gNXUNbhMJjI5NwSIPItwYhyAzmWJU 5Bc4tY4GK3VxDrKn8GvCR4R8vR/bbY5S403xHFUXt072Uh/1pxzUsK75swIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFzbIx2cnLNJBSEpwNV2cXQSK6fZMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvWE5zakhaeWNzMGtGSVNuQTFYWnhkQklycDlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXCYCAwQD kngAMA0GCSqGSIb3DQEBCwUAA4IBAQBuRzPy6QMOHQt8rx9UlWmJEWWZycKP/Dp2 OnXdlrcM5dHBBakbHZTNw7UCf/ZUoulihUm8hFMgHJ6oxFtsTcSqxxTHmkTUTF3I TmTBGL+0IKsERyxwLJ3cXo9pCAtL47m4KjrIzWzD/LKaOhaf4M/NSj7ABKm65JeF pvUrjBfq+QUn+1iEPnsUjEYUExtZLkw6Bad1eTRib30VwEQODi12zEfvRgCoyQ+/ 7DT+o/rKXDYTPPPWQ7D2MHqXpg+YHzfy1TaIQ0qKGLf1SLZR+9rIrGTUzoHjPNpv wY5CAwF6rLPi9t0d00ELkoI/E9l4AReY4smiw3EXGcQyFkwTeovt -----END CERTIFICATE-----Generated at Sat Dec 6 15:39:09 2025 by rpki-client