This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/xGT7f1yz0oOuqABfbGti4wD4D3s.roa File: xGT7f1yz0oOuqABfbGti4wD4D3s.roa (raw, json) Hash identifier: J+lIBSZRZBhEjrU06xcunhlHb1vFZR3PRfSda8JyHCQ= Subject key identifier: C4:64:FB:7F:5C:B3:D2:83:AE:A8:00:5F:6C:6B:62:E3:00:F8:0F:7B Certificate issuer: /CN=aa358cc061e36be03a4ed92ad671780f06589be3 Certificate serial: 019AE95A1F2EED49FC806931E03BF02A0C22 Authority key identifier: AA:35:8C:C0:61:E3:6B:E0:3A:4E:D9:2A:D6:71:78:0F:06:58:9B:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjWMwGHja-A6Ttkq1nF4DwZYm-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/xGT7f1yz0oOuqABfbGti4wD4D3s.roa Signing time: Thu 04 Dec 2025 12:33:08 +0000 ROA not before: Thu 04 Dec 2025 12:33:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 198183 IP address blocks: 130.255.88.0/24 maxlen: 24 130.255.89.0/24 maxlen: 24 130.255.90.0/24 maxlen: 24 130.255.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/qjWMwGHja-A6Ttkq1nF4DwZYm-M.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/qjWMwGHja-A6Ttkq1nF4DwZYm-M.mft rsync://rpki.ripe.net/repository/DEFAULT/qjWMwGHja-A6Ttkq1nF4DwZYm-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e9:5a:1f:2e:ed:49:fc:80:69:31:e0:3b:f0:2a:0c:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa358cc061e36be03a4ed92ad671780f06589be3 Validity Not Before: Dec 4 12:33:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c464fb7f5cb3d283aea8005f6c6b62e300f80f7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:85:64:0b:6e:61:11:60:4f:8b:d6:e7:ab:f0: bc:49:c7:20:59:9b:f7:bd:01:af:6c:71:d4:c7:a6: 57:cd:b8:57:2f:31:8e:76:8c:74:44:f4:b4:22:01: d8:16:26:b3:53:19:b4:28:ac:92:a9:dd:92:03:fd: de:d3:f7:e0:b8:0b:f5:9b:cc:4d:0c:45:b4:56:38: 43:45:a5:32:f7:45:65:f2:e7:22:e3:a3:21:bb:d4: e0:31:3b:75:ce:ae:fb:d8:94:95:30:47:64:7a:ec: 9d:08:57:eb:22:f7:b2:7c:7a:39:af:dc:07:3c:af: 8c:88:ae:9e:fe:58:c8:7d:cc:09:43:35:cf:b3:a9: 93:10:14:43:c6:af:98:3d:8a:8f:4c:7a:d8:64:31: 51:50:52:93:b6:08:99:a4:e1:44:d7:df:35:7e:24: 86:38:7f:75:98:77:bf:8b:55:97:c9:0e:28:f9:d1: 52:e1:d4:e3:93:96:fa:3f:3c:37:f1:34:aa:23:99: 54:8e:3d:f9:ba:7c:1a:0f:56:95:ac:7e:c1:a4:4f: 42:0c:b6:2a:01:6d:f4:72:96:b8:50:e5:4c:b0:d3: 80:ce:32:fb:5d:cf:95:a7:0c:b4:92:52:f4:10:7f: 2a:06:ec:61:0e:d1:ba:3e:f7:05:7c:a0:f2:5c:31: b7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:64:FB:7F:5C:B3:D2:83:AE:A8:00:5F:6C:6B:62:E3:00:F8:0F:7B X509v3 Authority Key Identifier: keyid:AA:35:8C:C0:61:E3:6B:E0:3A:4E:D9:2A:D6:71:78:0F:06:58:9B:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjWMwGHja-A6Ttkq1nF4DwZYm-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/xGT7f1yz0oOuqABfbGti4wD4D3s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/qjWMwGHja-A6Ttkq1nF4DwZYm-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.255.88.0/22 Signature Algorithm: sha256WithRSAEncryption 2f:97:35:7a:78:2d:19:da:8b:05:6d:c8:03:1d:f1:ed:0e:ff: 55:e9:70:86:ce:f6:8d:9e:3d:68:1e:62:1f:e8:20:12:a8:83: 9e:ba:9c:d3:22:63:01:da:21:34:a2:49:ee:f7:e5:ea:cf:2a: 05:10:10:9a:77:4d:aa:84:ac:7c:82:09:e6:56:92:c4:57:6f: 06:45:c0:0f:7e:74:05:5d:c9:1b:43:7b:08:d9:1d:c1:56:84: 9c:94:78:0e:f7:c7:15:62:ee:f0:fe:af:4f:b8:38:71:9f:27: c3:fa:93:2c:2b:bf:6a:9a:ea:6a:84:0e:96:4e:bd:db:db:4b: 3a:e1:b4:bb:2a:81:15:7b:aa:a2:33:2b:13:8f:80:b1:33:99: 2d:e7:28:77:6c:bf:c8:30:0b:cc:38:c9:6a:17:0d:65:ae:5a: 52:0f:a9:a9:d1:c6:df:54:ab:16:16:91:02:a4:28:9a:7a:6d: b8:37:c5:cf:d7:a4:ee:8a:a2:19:ba:d6:9a:b4:eb:d5:df:39: 58:73:c1:d4:a9:5a:3e:1b:5f:63:ed:86:eb:b4:22:98:48:e8: 69:b8:40:fe:bb:fb:f3:05:27:05:17:80:1d:58:a1:a0:c2:dc: 05:1c:28:68:34:fb:e2:b1:29:8f:02:af:a7:ce:e9:fd:63:a2: 29:ad:39:20 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrpWh8u7Un8gGkx4DvwKgwiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhMzU4Y2MwNjFlMzZiZTAzYTRlZDkyYWQ2NzE3ODBmMDY1 ODliZTMwHhcNMjUxMjA0MTIzMzA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDY0ZmI3ZjVjYjNkMjgzYWVhODAwNWY2YzZiNjJlMzAwZjgwZjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYVkC25hEWBPi9bnq/C8SccgWZv3 vQGvbHHUx6ZXzbhXLzGOdox0RPS0IgHYFiazUxm0KKySqd2SA/3e0/fguAv1m8xN DEW0VjhDRaUy90Vl8uci46Mhu9TgMTt1zq772JSVMEdkeuydCFfrIveyfHo5r9wH PK+MiK6e/ljIfcwJQzXPs6mTEBRDxq+YPYqPTHrYZDFRUFKTtgiZpOFE1981fiSG OH91mHe/i1WXyQ4o+dFS4dTjk5b6Pzw38TSqI5lUjj35unwaD1aVrH7BpE9CDLYq AW30cpa4UOVMsNOAzjL7Xc+Vpwy0klL0EH8qBuxhDtG6PvcFfKDyXDG3EwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMRk+39cs9KDrqgAX2xrYuMA+A97MB8GA1UdIwQY MBaAFKo1jMBh42vgOk7ZKtZxeA8GWJvjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWpXTXdHSGphLUE2VHRrcTFuRjREd1pZbS1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8wOGIyYzctNTkwNy00MzVmLThlZTYt YWJkYWEyYmEyYzdmLzEveEdUN2YxeXowb091cUFCZmJHdGk0d0Q0RDNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC8wOGIyYzctNTkwNy00MzVmLThlZTYtYWJkYWEyYmEyYzdm LzEvcWpXTXdHSGphLUE2VHRrcTFuRjREd1pZbS1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgv9YMA0G CSqGSIb3DQEBCwUAA4IBAQAvlzV6eC0Z2osFbcgDHfHtDv9V6XCGzvaNnj1oHmIf 6CASqIOeupzTImMB2iE0oknu9+XqzyoFEBCad02qhKx8ggnmVpLEV28GRcAPfnQF XckbQ3sI2R3BVoSclHgO98cVYu7w/q9PuDhxnyfD+pMsK79qmupqhA6WTr3b20s6 4bS7KoEVe6qiMysTj4CxM5kt5yh3bL/IMAvMOMlqFw1lrlpSD6mp0cbfVKsWFpEC pCiaem24N8XP16TuiqIZutaatOvV3zlYc8HUqVo+G19j7YbrtCKYSOhpuED+u/vz BScFF4AdWKGgwtwFHChoNPvisSmPAq+nzun9Y6IprTkg -----END CERTIFICATE-----Generated at Sun Dec 7 00:10:24 2025 by rpki-client