This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/xxKb55B9WLoEJirJH7JGF6IrAL4.roa File: xxKb55B9WLoEJirJH7JGF6IrAL4.roa (raw, json) Hash identifier: 5hoP5Org5aRnswAlN4c1hFFtAfdxx1e1Hty8r4pQTw8= Subject key identifier: C7:12:9B:E7:90:7D:58:BA:04:26:2A:C9:1F:B2:46:17:A2:2B:00:BE Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Certificate serial: 019B21DD9A89D3BD7423566D2DE8488B2FD4 Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/xxKb55B9WLoEJirJH7JGF6IrAL4.roa Signing time: Mon 15 Dec 2025 11:55:29 +0000 ROA not before: Mon 15 Dec 2025 11:55:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 82.206.2.0/23 maxlen: 23 82.206.4.0/22 maxlen: 24 82.206.8.0/23 maxlen: 24 82.206.16.0/22 maxlen: 22 82.206.16.0/23 maxlen: 23 82.206.16.0/24 maxlen: 24 82.206.18.0/24 maxlen: 24 82.206.72.0/21 maxlen: 21 82.206.81.0/24 maxlen: 24 82.206.82.0/23 maxlen: 23 82.206.84.0/22 maxlen: 24 82.206.88.0/21 maxlen: 21 82.206.96.0/21 maxlen: 21 82.206.104.0/22 maxlen: 22 82.206.108.0/24 maxlen: 24 82.206.109.0/24 maxlen: 24 82.206.110.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 11:58:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:dd:9a:89:d3:bd:74:23:56:6d:2d:e8:48:8b:2f:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Validity Not Before: Dec 15 11:55:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c7129be7907d58ba04262ac91fb24617a22b00be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:52:bc:e4:a1:40:50:23:d8:3a:ab:5c:62:77: 87:ea:15:90:c9:4d:6b:6a:9c:e3:ef:67:8e:a2:bd: 4f:34:04:96:32:a4:fa:44:76:25:df:85:51:57:41: 8f:7e:c5:5e:59:30:55:b8:31:b0:ef:9e:4a:e2:08: 8d:1f:84:50:80:1d:bb:fe:f0:fc:0f:e6:31:b9:69: 5a:15:b2:65:5f:e7:86:fd:8b:c8:15:9a:25:4e:74: a3:01:be:7e:84:f2:cb:b6:d5:a3:5e:02:a8:c3:81: 93:4b:99:52:01:7f:18:2e:4b:5c:bf:22:6c:cb:cd: c0:cc:b5:35:7e:31:4d:62:d3:93:c1:36:cf:a4:2d: b4:a7:eb:49:e9:1e:c8:3e:fc:6a:85:78:da:93:7f: ef:cb:09:a0:7c:fa:cd:ec:2b:47:24:2a:33:a1:c1: 35:2f:27:75:eb:6f:4d:d8:db:25:61:01:bb:e6:15: 1d:46:cd:f5:36:5e:a4:07:80:c0:cf:00:ff:c5:1d: f2:da:89:5b:92:49:c1:01:64:a4:cd:a5:62:24:fe: ac:61:e3:40:9f:fe:3e:d5:a5:31:d7:9a:97:17:d6: 88:22:6f:88:78:46:07:f2:22:23:fc:74:d3:9b:5f: 04:90:8f:17:14:09:b4:fd:d9:41:5d:41:f8:59:17: 14:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:12:9B:E7:90:7D:58:BA:04:26:2A:C9:1F:B2:46:17:A2:2B:00:BE X509v3 Authority Key Identifier: keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/xxKb55B9WLoEJirJH7JGF6IrAL4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.206.2.0-82.206.9.255 82.206.16.0/22 82.206.72.0/21 82.206.81.0-82.206.111.255 Signature Algorithm: sha256WithRSAEncryption 07:b5:b3:2e:86:9e:12:66:99:01:8f:31:c4:5d:0c:0a:de:ba: d6:d6:a3:e6:8b:bf:ea:1e:7b:e3:aa:34:f0:5f:78:32:0f:28: 5b:08:87:9f:3b:d4:26:f5:a4:cc:de:1f:fe:9e:db:12:8b:fb: bf:11:02:c2:b2:3e:5f:a1:fa:9c:7f:07:f7:46:de:f7:e7:48: 84:7b:85:89:c0:90:63:12:43:0b:b9:00:01:bf:e0:1e:85:9d: 38:05:5a:3e:cf:42:59:d8:09:39:9c:01:77:e6:0d:54:a2:e5: 80:9d:56:28:bd:b6:31:1f:e0:e3:fa:0a:85:c5:c7:95:a5:b0: 3d:a5:d9:33:c2:e3:b3:21:07:14:0f:67:a7:2c:f9:b2:6f:50: 00:94:b4:9d:38:de:71:78:94:7d:1d:32:8c:62:8b:3d:d9:21: d3:98:9d:36:b6:81:a7:94:a7:8e:e8:ee:d3:65:d0:66:2c:a7: 42:e3:55:8d:7e:ae:86:ac:19:3a:f5:28:2b:a6:e3:cf:5a:37: 09:03:4f:9a:04:f6:f7:4c:a6:83:83:f0:55:1b:b4:2e:8d:89: 34:71:a3:f9:a3:c0:29:fe:70:a2:e8:0d:4b:a6:f3:ff:4c:c9: 5c:07:1d:fc:f8:b2:a0:f9:f8:4a:94:b3:3b:40:8f:6b:57:89: 70:fe:10:54 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZsh3ZqJ0710I1ZtLehIiy/UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2 ZmQ5YjUwHhcNMjUxMjE1MTE1NTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzEyOWJlNzkwN2Q1OGJhMDQyNjJhYzkxZmIyNDYxN2EyMmIwMGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFK85KFAUCPYOqtcYneH6hWQyU1r apzj72eOor1PNASWMqT6RHYl34VRV0GPfsVeWTBVuDGw755K4giNH4RQgB27/vD8 D+YxuWlaFbJlX+eG/YvIFZolTnSjAb5+hPLLttWjXgKow4GTS5lSAX8YLktcvyJs y83AzLU1fjFNYtOTwTbPpC20p+tJ6R7IPvxqhXjak3/vywmgfPrN7CtHJCozocE1 Lyd1629N2NslYQG75hUdRs31Nl6kB4DAzwD/xR3y2olbkknBAWSkzaViJP6sYeNA n/4+1aUx15qXF9aIIm+IeEYH8iIj/HTTm18EkI8XFAm0/dlBXUH4WRcUFwIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFMcSm+eQfVi6BCYqyR+yRheiKwC+MB8GA1UdIwQY MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt NTk1OTE5YmUwZjUyLzEveHhLYjU1QjlXTG9FSmlySkg3SkdGNklyQUw0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBAFSzgID BAFSzggDBAJSzhADBANSzkgwDAMEAFLOUQMEBFLOYDANBgkqhkiG9w0BAQsFAAOC AQEAB7WzLoaeEmaZAY8xxF0MCt661taj5ou/6h5746o08F94Mg8oWwiHnzvUJvWk zN4f/p7bEov7vxECwrI+X6H6nH8H90be9+dIhHuFicCQYxJDC7kAAb/gHoWdOAVa Ps9CWdgJOZwBd+YNVKLlgJ1WKL22MR/g4/oKhcXHlaWwPaXZM8LjsyEHFA9npyz5 sm9QAJS0nTjecXiUfR0yjGKLPdkh05idNraBp5Snjuju02XQZiynQuNVjX6uhqwZ OvUoK6bjz1o3CQNPmgT290ymg4PwVRu0Lo2JNHGj+aPAKf5wougNS6bz/0zJXAcd /PiyoPn4SpSzO0CPa1eJcP4QVA== -----END CERTIFICATE-----Generated at Mon Dec 15 17:27:24 2025 by rpki-client