This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/xq2CqKVO94nQysFtjzk6_6Xp9pQ.roa File: xq2CqKVO94nQysFtjzk6_6Xp9pQ.roa (raw, json) Hash identifier: axb4sNwPK5zNXW5qco2WUzPUyUSSN70JjeefczEtdRg= Subject key identifier: C6:AD:82:A8:A5:4E:F7:89:D0:CA:C1:6D:8F:39:3A:FF:A5:E9:F6:94 Certificate issuer: /CN=2b936149657a62be32e0e1571827c2b2f35a0d3d Certificate serial: 019B134F67698F607001E42417E54DB5856C Authority key identifier: 2B:93:61:49:65:7A:62:BE:32:E0:E1:57:18:27:C2:B2:F3:5A:0D:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/xq2CqKVO94nQysFtjzk6_6Xp9pQ.roa Signing time: Fri 12 Dec 2025 16:05:29 +0000 ROA not before: Fri 12 Dec 2025 16:05:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 15830 IP address blocks: 80.247.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.crl rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft rsync://rpki.ripe.net/repository/DEFAULT/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 19:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:13:4f:67:69:8f:60:70:01:e4:24:17:e5:4d:b5:85:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b936149657a62be32e0e1571827c2b2f35a0d3d Validity Not Before: Dec 12 16:05:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c6ad82a8a54ef789d0cac16d8f393affa5e9f694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e7:0b:40:45:a6:78:fd:69:5c:f5:9d:a6:8e: b5:d3:aa:65:44:2f:a5:21:e1:76:c7:90:75:ea:9e: 9d:05:e1:2d:45:01:7b:9d:75:7b:31:93:cc:32:9b: ba:1b:e7:2b:30:fd:05:e3:07:f7:4f:30:69:c3:d5: c1:30:6d:f5:0e:35:f0:21:88:49:e5:8d:f4:55:41: 34:b3:c1:b3:a8:ef:bf:93:80:66:f2:f6:ef:bf:c1: 0a:16:f4:00:27:d2:a3:ae:1d:20:26:44:c6:78:4f: ca:1a:f5:f8:87:15:d6:5c:82:47:4b:a1:66:37:7b: 10:50:bf:de:a8:28:54:97:43:05:78:13:2b:35:d5: fa:1a:6b:19:48:c4:da:d1:98:b5:03:39:32:4c:d2: 36:4c:42:70:0a:71:e7:94:ed:de:3a:d1:9b:bf:34: 70:10:3f:6c:7a:d4:ec:ba:6d:3c:c5:9e:9c:5c:13: b1:0b:02:b0:6c:8d:f3:a1:17:c9:84:41:8c:8b:b8: 54:f6:02:01:f3:55:a2:83:c6:19:06:b1:a8:64:bb: f7:77:41:d6:38:d7:40:cc:88:02:e1:96:21:9c:54: 40:77:74:8a:5a:e8:1f:11:92:6f:8c:e2:de:25:20: 3a:70:30:53:97:42:d7:81:f9:80:42:3c:fa:15:53: 89:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:AD:82:A8:A5:4E:F7:89:D0:CA:C1:6D:8F:39:3A:FF:A5:E9:F6:94 X509v3 Authority Key Identifier: keyid:2B:93:61:49:65:7A:62:BE:32:E0:E1:57:18:27:C2:B2:F3:5A:0D:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/xq2CqKVO94nQysFtjzk6_6Xp9pQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.247.49.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:3f:04:96:40:76:db:c3:12:d9:28:cf:80:60:4b:b6:df:d7: ce:3f:ad:72:bb:92:dd:eb:d6:73:91:a1:6d:e0:cb:68:4d:a0: bb:83:6d:e9:aa:72:1e:49:82:3d:44:a8:05:fd:13:b6:65:23: d8:a4:cd:26:18:8c:0d:c1:2d:2b:7b:b0:eb:eb:2b:9f:25:71: fe:8e:75:9b:94:67:07:70:6a:f3:f2:1e:22:10:56:75:0c:5e: 71:14:e6:d0:2b:4a:4d:50:59:e4:f0:2f:9c:9e:83:17:3b:1a: c3:a6:8a:6f:d5:4d:e5:3e:57:4c:29:e7:a5:c4:9e:e6:65:0c: d3:d8:47:c5:3a:d6:24:53:46:6f:53:f7:5f:54:48:29:29:51: 99:e7:f8:56:a3:b9:10:f4:cb:37:82:0d:a5:83:18:44:bc:36: 0a:61:65:bf:94:29:67:c6:3b:de:93:cb:be:4f:7e:3e:c0:eb: c9:8b:84:fb:b9:70:18:0f:7c:39:c0:df:c1:02:52:5d:9f:c4: 9f:f7:6b:12:9e:99:fd:98:67:ec:26:06:6d:c3:30:6c:d4:fc: db:c3:6e:a3:35:65:a5:cb:31:7a:bf:6f:73:42:23:18:fe:ab: ed:e3:25:69:20:43:50:f2:11:6d:85:14:3d:13:20:87:c6:c6: 7a:91:ca:bb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsTT2dpj2BwAeQkF+VNtYVsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiOTM2MTQ5NjU3YTYyYmUzMmUwZTE1NzE4MjdjMmIyZjM1 YTBkM2QwHhcNMjUxMjEyMTYwNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmFkODJhOGE1NGVmNzg5ZDBjYWMxNmQ4ZjM5M2FmZmE1ZTlmNjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwucLQEWmeP1pXPWdpo6106plRC+l IeF2x5B16p6dBeEtRQF7nXV7MZPMMpu6G+crMP0F4wf3TzBpw9XBMG31DjXwIYhJ 5Y30VUE0s8GzqO+/k4Bm8vbvv8EKFvQAJ9Kjrh0gJkTGeE/KGvX4hxXWXIJHS6Fm N3sQUL/eqChUl0MFeBMrNdX6GmsZSMTa0Zi1AzkyTNI2TEJwCnHnlO3eOtGbvzRw ED9setTsum08xZ6cXBOxCwKwbI3zoRfJhEGMi7hU9gIB81Wig8YZBrGoZLv3d0HW ONdAzIgC4ZYhnFRAd3SKWugfEZJvjOLeJSA6cDBTl0LXgfmAQjz6FVOJ2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMatgqilTveJ0MrBbY85Ov+l6faUMB8GA1UdIwQY MBaAFCuTYUllemK+MuDhVxgnwrLzWg09MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzVOaFNXVjZZcjR5NE9GWEdDZkNzdk5hRFQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9jM2U0MTktODY5MC00NWUwLTg1NGIt NzgyMGE1MWVkODM0LzEveHEyQ3FLVk85NG5ReXNGdGp6azZfNlhwOXBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9jM2U0MTktODY5MC00NWUwLTg1NGItNzgyMGE1MWVkODM0 LzEvSzVOaFNXVjZZcjR5NE9GWEdDZkNzdk5hRFQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUPcxMA0G CSqGSIb3DQEBCwUAA4IBAQBNPwSWQHbbwxLZKM+AYEu239fOP61yu5Ld69ZzkaFt 4MtoTaC7g23pqnIeSYI9RKgF/RO2ZSPYpM0mGIwNwS0re7Dr6yufJXH+jnWblGcH cGrz8h4iEFZ1DF5xFObQK0pNUFnk8C+cnoMXOxrDpopv1U3lPldMKeelxJ7mZQzT 2EfFOtYkU0ZvU/dfVEgpKVGZ5/hWo7kQ9Ms3gg2lgxhEvDYKYWW/lClnxjvek8u+ T34+wOvJi4T7uXAYD3w5wN/BAlJdn8Sf92sSnpn9mGfsJgZtwzBs1Pzbw26jNWWl yzF6v29zQiMY/qvt4yVpIENQ8hFthRQ9EyCHxsZ6kcq7 -----END CERTIFICATE-----Generated at Wed Dec 17 01:27:11 2025 by rpki-client