This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/xPTlfZcqBmFHE8DqUkWLvX-OfrY.roa File: xPTlfZcqBmFHE8DqUkWLvX-OfrY.roa (raw, json) Hash identifier: hULrZXIf+9xvKQAU881NPQxtxECyTMfIWjcDLv4pIxI= Subject key identifier: C4:F4:E5:7D:97:2A:06:61:47:13:C0:EA:52:45:8B:BD:7F:8E:7E:B6 Certificate issuer: /CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1 Certificate serial: 019A6CF047F4FBDBEB30550098455143ADCB Authority key identifier: 58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/xPTlfZcqBmFHE8DqUkWLvX-OfrY.roa Signing time: Mon 10 Nov 2025 08:44:37 +0000 ROA not before: Mon 10 Nov 2025 08:44:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204372 IP address blocks: 195.246.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6c:f0:47:f4:fb:db:eb:30:55:00:98:45:51:43:ad:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1 Validity Not Before: Nov 10 08:44:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c4f4e57d972a06614713c0ea52458bbd7f8e7eb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:dc:41:02:e4:dc:86:44:e9:29:c3:b6:b3:b0: da:83:65:3d:91:20:65:c0:58:ad:6e:90:53:8d:ce: ae:2c:01:46:98:45:01:c2:31:a0:7e:7d:2a:f2:a7: b9:da:b8:70:62:3c:c8:03:c0:78:e8:84:a7:a3:41: 69:66:79:75:15:e7:7d:94:e2:47:36:e2:84:55:2f: c8:1f:8d:05:e0:14:8e:b3:a7:a1:ee:b0:0e:d6:37: 96:f0:8b:46:67:32:02:35:03:0c:89:d7:3a:38:99: 41:cc:fa:d6:e3:d4:b6:56:10:71:1b:01:f1:1a:be: 94:f2:40:14:06:b5:69:67:ad:58:b2:a2:f0:2a:9a: a9:e3:c9:04:b2:96:39:ac:f5:42:8a:56:d9:b9:12: 1a:87:fc:84:ea:a6:28:60:0b:ac:2e:8f:44:47:a2: 57:51:e0:52:00:ca:72:74:66:59:21:63:09:65:08: a9:ff:4e:28:23:ea:37:1e:7b:f1:22:35:34:57:12: d5:d6:51:ee:c8:b0:75:48:06:8b:8a:38:5b:28:65: ce:da:ec:93:f1:2e:c9:d0:fc:6c:e5:53:a1:2d:77: ca:17:65:45:0e:ed:b1:1d:f1:9c:cd:3d:d0:27:32: ee:5d:3a:09:c0:87:ca:81:f0:a5:2f:83:81:c5:9a: 5e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:F4:E5:7D:97:2A:06:61:47:13:C0:EA:52:45:8B:BD:7F:8E:7E:B6 X509v3 Authority Key Identifier: keyid:58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/xPTlfZcqBmFHE8DqUkWLvX-OfrY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.246.96.0/23 Signature Algorithm: sha256WithRSAEncryption 57:e3:30:f0:29:60:ea:6d:ba:cc:4a:b3:ec:1a:27:50:bc:d2: 4f:85:f2:e7:f6:a7:88:ca:a8:f8:d3:53:a0:0a:eb:cb:e4:16: 41:86:95:a5:61:b0:de:cb:0b:fc:02:8c:84:bf:2f:ee:34:0c: 04:cc:bd:7e:f6:07:72:4e:ec:b0:1d:82:d7:3a:05:fb:95:bb: e8:e9:f0:92:d8:d6:2f:94:55:74:d2:99:e6:66:7b:fb:36:98: eb:e0:29:f2:0e:cb:9a:79:59:25:90:02:3d:d6:2e:99:1f:8c: 4f:67:c2:f3:f8:4e:13:ab:41:f6:33:f4:5b:ad:df:dd:9c:09: 40:23:31:40:9e:83:50:73:7e:d1:d1:e1:c3:ba:67:3e:03:0d: 37:f9:36:dc:df:bd:63:c1:94:4a:41:a8:ca:85:f6:91:9d:c9: 77:54:6a:3f:4b:c8:e4:89:05:6e:f7:c0:92:f8:45:66:60:80: 0d:e6:2b:7c:a8:7c:41:98:34:2b:0f:ac:04:06:d3:ce:3b:89: c3:b4:01:2d:8c:f8:42:3c:8a:71:bd:8f:03:f4:2d:1a:43:e7: 25:24:7a:22:e2:e4:23:29:c1:4d:ad:ab:e0:fb:56:a1:57:e1: 95:5c:41:d8:b1:92:23:36:cd:59:ea:a5:86:9d:00:f4:da:95: 7a:6e:5d:49 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZps8Ef0+9vrMFUAmEVRQ63LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4NWU0ZjRiNGE5ZWY1NTMxZGZlNTBmNDE1NDFjOTEyYTMz NWZiZjEwHhcNMjUxMTEwMDg0NDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNGY0ZTU3ZDk3MmEwNjYxNDcxM2MwZWE1MjQ1OGJiZDdmOGU3ZWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdxBAuTchkTpKcO2s7Dag2U9kSBl wFitbpBTjc6uLAFGmEUBwjGgfn0q8qe52rhwYjzIA8B46ISno0FpZnl1Fed9lOJH NuKEVS/IH40F4BSOs6eh7rAO1jeW8ItGZzICNQMMidc6OJlBzPrW49S2VhBxGwHx Gr6U8kAUBrVpZ61YsqLwKpqp48kEspY5rPVCilbZuRIah/yE6qYoYAusLo9ER6JX UeBSAMpydGZZIWMJZQip/04oI+o3HnvxIjU0VxLV1lHuyLB1SAaLijhbKGXO2uyT 8S7J0Pxs5VOhLXfKF2VFDu2xHfGczT3QJzLuXToJwIfKgfClL4OBxZpeAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMT05X2XKgZhRxPA6lJFi71/jn62MB8GA1UdIwQY MBaAFFheT0tKnvVTHf5Q9BVByRKjNfvxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0Y1UFMwcWU5Vk1kX2xEMEZVSEpFcU0xLV9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9jZmM0YWYtMTdlNi00M2RlLTkyMWYt NmJhZjMwMDc5MDVjLzEveFBUbGZaY3FCbUZIRThEcVVrV0x2WC1PZnJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9jZmM0YWYtMTdlNi00M2RlLTkyMWYtNmJhZjMwMDc5MDVj LzEvV0Y1UFMwcWU5Vk1kX2xEMEZVSEpFcU0xLV9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw/ZgMA0G CSqGSIb3DQEBCwUAA4IBAQBX4zDwKWDqbbrMSrPsGidQvNJPhfLn9qeIyqj401Og CuvL5BZBhpWlYbDeywv8AoyEvy/uNAwEzL1+9gdyTuywHYLXOgX7lbvo6fCS2NYv lFV00pnmZnv7Npjr4CnyDsuaeVklkAI91i6ZH4xPZ8Lz+E4Tq0H2M/Rbrd/dnAlA IzFAnoNQc37R0eHDumc+Aw03+Tbc371jwZRKQajKhfaRncl3VGo/S8jkiQVu98CS +EVmYIAN5it8qHxBmDQrD6wEBtPOO4nDtAEtjPhCPIpxvY8D9C0aQ+clJHoi4uQj KcFNravg+1ahV+GVXEHYsZIjNs1Z6qWGnQD02pV6bl1J -----END CERTIFICATE-----Generated at Sat Dec 6 08:17:11 2025 by rpki-client