This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/xqiEKTyhKuNrl68GGGDu_QWOqaQ.roa File: xqiEKTyhKuNrl68GGGDu_QWOqaQ.roa (raw, json) Hash identifier: ZLUbmXuAQc0QVjTQUIs5lv1W0eJjT/BryddjMTmQqOc= Subject key identifier: C6:A8:84:29:3C:A1:2A:E3:6B:97:AF:06:18:60:EE:FD:05:8E:A9:A4 Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Certificate serial: 019AB127348B8E062E6EC6C8E94EBEC6032C Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/xqiEKTyhKuNrl68GGGDu_QWOqaQ.roa Signing time: Sun 23 Nov 2025 14:38:47 +0000 ROA not before: Sun 23 Nov 2025 14:38:47 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203565 IP address blocks: 176.124.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b1:27:34:8b:8e:06:2e:6e:c6:c8:e9:4e:be:c6:03:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Validity Not Before: Nov 23 14:38:47 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c6a884293ca12ae36b97af061860eefd058ea9a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:77:1b:b2:b3:cd:80:3f:27:79:39:ce:51:cd: 36:70:fb:22:da:84:0a:f6:38:fb:7d:7f:97:39:8e: 71:31:d6:3d:ee:c0:2a:b5:44:c2:9e:d9:85:f3:8a: 3c:9b:f2:66:b3:ba:7b:50:ae:d6:31:ac:89:16:02: 58:17:2d:ec:b7:43:a3:81:a7:2a:73:74:6a:2a:af: 33:1f:eb:a5:9c:e0:23:8c:e4:55:80:73:16:22:cd: 18:29:b8:90:86:8e:f4:ab:ff:1d:e6:9f:b6:e2:4c: 65:73:6f:a0:a9:ff:23:e6:40:09:a8:0b:77:36:c3: 6b:7a:3a:eb:60:51:a6:2e:89:c9:e1:c7:2c:6a:96: db:28:5b:cd:af:4c:64:c9:e2:65:0b:07:e8:88:37: 7f:ad:31:f7:47:41:6f:b4:3d:b7:37:d5:3d:9b:97: 98:2b:de:d4:f7:8c:39:ed:32:8c:e9:f7:48:0a:4d: 29:d0:31:2c:c0:1d:9f:9f:1b:9f:d2:fc:12:cd:46: 9f:f1:00:f1:5f:89:f7:d0:4e:d8:88:e1:55:99:3b: 27:25:7e:74:6e:a6:a4:47:e1:ab:ac:10:63:da:7d: 37:a8:ea:e9:99:63:f5:41:8c:c7:85:4d:21:fd:16: 45:9d:16:b7:28:a5:dc:ab:d1:fe:6f:0a:bc:37:fc: 56:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:A8:84:29:3C:A1:2A:E3:6B:97:AF:06:18:60:EE:FD:05:8E:A9:A4 X509v3 Authority Key Identifier: keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/xqiEKTyhKuNrl68GGGDu_QWOqaQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.124.28.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:bc:22:fa:16:f4:35:1e:94:df:eb:b5:1f:18:26:e7:3c:4b: 57:78:25:62:6c:cf:33:ec:57:f0:f5:48:5e:f6:5c:49:bd:6e: ed:a8:a3:0d:d3:e6:38:33:7c:f2:b8:b1:a2:ca:af:78:e8:5d: d2:e3:61:8b:5b:c9:ac:4f:6c:dd:a6:ab:84:73:55:f3:9c:42: 5d:37:5d:7c:e6:18:ed:58:15:cd:b2:ca:56:c1:a2:3c:36:e0: 96:d6:f5:45:9d:8e:d4:f2:24:86:ba:59:20:45:eb:de:c5:14: 39:39:eb:73:ae:bd:9e:65:1b:6f:e0:b7:f4:76:44:c6:27:25: f1:fc:ab:97:fb:93:cf:b5:07:65:32:f6:fb:21:73:37:60:7c: 3e:60:d8:be:af:27:70:43:65:a9:aa:6b:16:8a:36:9b:83:39: 52:72:b1:8c:51:94:6d:b3:0a:9a:91:14:05:23:b9:c7:29:a0: d0:d3:b9:29:22:5c:5c:fd:24:43:df:02:55:05:78:c9:d1:18: bd:63:81:7b:f8:fb:f0:5c:45:90:74:8c:f1:96:74:da:13:b6: 6e:fc:98:0d:a4:97:24:3a:9e:24:4c:d1:ad:b4:b8:a1:eb:e1: 11:f3:69:6b:3b:62:e3:44:53:53:28:e0:81:c6:04:c9:65:70: 02:e8:f2:67 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqxJzSLjgYubsbI6U6+xgMsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNjRmOWQwNGVmZDVhOWZjMmUyM2I0MmQ1YjUxYWVmZDlh NTAyNTAwHhcNMjUxMTIzMTQzODQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmE4ODQyOTNjYTEyYWUzNmI5N2FmMDYxODYwZWVmZDA1OGVhOWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHcbsrPNgD8neTnOUc02cPsi2oQK 9jj7fX+XOY5xMdY97sAqtUTCntmF84o8m/Jms7p7UK7WMayJFgJYFy3st0Ojgacq c3RqKq8zH+ulnOAjjORVgHMWIs0YKbiQho70q/8d5p+24kxlc2+gqf8j5kAJqAt3 NsNrejrrYFGmLonJ4ccsapbbKFvNr0xkyeJlCwfoiDd/rTH3R0FvtD23N9U9m5eY K97U94w57TKM6fdICk0p0DEswB2fnxuf0vwSzUaf8QDxX4n30E7YiOFVmTsnJX50 bqakR+GrrBBj2n03qOrpmWP1QYzHhU0h/RZFnRa3KKXcq9H+bwq8N/xWrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMaohCk8oSrja5evBhhg7v0FjqmkMB8GA1UdIwQY MBaAFFxk+dBO/VqfwuI7QtW1Gu/ZpQJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUt YjY2ZmE0ZjQ3NjNhLzEveHFpRUtUeWhLdU5ybDY4R0dHRHVfUVdPcWFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUtYjY2ZmE0ZjQ3NjNh LzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsHwcMA0G CSqGSIb3DQEBCwUAA4IBAQBKvCL6FvQ1HpTf67UfGCbnPEtXeCVibM8z7Ffw9Uhe 9lxJvW7tqKMN0+Y4M3zyuLGiyq946F3S42GLW8msT2zdpquEc1XznEJdN1185hjt WBXNsspWwaI8NuCW1vVFnY7U8iSGulkgRevexRQ5Oetzrr2eZRtv4Lf0dkTGJyXx /KuX+5PPtQdlMvb7IXM3YHw+YNi+rydwQ2WpqmsWijabgzlScrGMUZRtswqakRQF I7nHKaDQ07kpIlxc/SRD3wJVBXjJ0Ri9Y4F7+PvwXEWQdIzxlnTaE7Zu/JgNpJck Op4kTNGttLih6+ER82lrO2LjRFNTKOCBxgTJZXAC6PJn -----END CERTIFICATE-----Generated at Sat Dec 6 08:17:24 2025 by rpki-client