This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/Xsy2oYgPGqda5js6z_t6zsg9nQw.roa File: Xsy2oYgPGqda5js6z_t6zsg9nQw.roa (raw, json) Hash identifier: a/ZpgfhLjFQ8tj0iRSFzFmybLSdeguZMKCjQwN9tD98= Subject key identifier: 5E:CC:B6:A1:88:0F:1A:A7:5A:E6:3B:3A:CF:FB:7A:CE:C8:3D:9D:0C Certificate issuer: /CN=c25c45ffa4a312460c00ffede32d4dc41fd2f7cf Certificate serial: 019B2CFD9FB55A5D2D6EA26BAA242F5F22C0 Authority key identifier: C2:5C:45:FF:A4:A3:12:46:0C:00:FF:ED:E3:2D:4D:C4:1F:D2:F7:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wlxF_6SjEkYMAP_t4y1NxB_S988.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/Xsy2oYgPGqda5js6z_t6zsg9nQw.roa Signing time: Wed 17 Dec 2025 15:46:17 +0000 ROA not before: Wed 17 Dec 2025 15:46:17 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203619 IP address blocks: 89.124.253.0/24 maxlen: 24 2a03:c040::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.crl rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.mft rsync://rpki.ripe.net/repository/DEFAULT/wlxF_6SjEkYMAP_t4y1NxB_S988.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:fd:9f:b5:5a:5d:2d:6e:a2:6b:aa:24:2f:5f:22:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c25c45ffa4a312460c00ffede32d4dc41fd2f7cf Validity Not Before: Dec 17 15:46:17 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5eccb6a1880f1aa75ae63b3acffb7acec83d9d0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:67:6e:b7:a4:15:16:b9:62:c9:6a:f9:aa:1f: d2:75:e7:91:a0:8c:11:2c:d5:dc:1e:19:ff:9f:d2: 72:03:33:e7:a9:fd:08:79:73:e0:d3:9c:f9:6f:8d: d6:fc:2a:66:95:1a:f6:89:d4:11:94:bb:f0:a8:9e: ed:88:ea:89:ca:05:89:0f:78:0a:f3:71:3d:7e:10: 13:c7:d8:43:bb:c9:91:87:16:a7:a2:27:ee:74:cd: 34:18:9b:e1:3e:ca:eb:0a:2b:e1:16:52:87:88:78: f2:28:ce:8d:5f:82:57:5d:b9:4d:d5:7e:2e:bf:ff: cd:9d:36:ab:4c:21:81:0a:0c:80:6f:31:7b:c6:58: 0a:c7:af:58:03:22:ec:e5:ff:9f:a1:3d:73:0f:db: c5:83:13:4e:1e:e0:49:ff:6f:87:79:9a:32:54:88: 33:90:8e:6e:51:24:d7:e8:4f:19:0f:88:fb:87:2f: c7:b4:9a:f4:9b:0d:2e:12:9d:e6:f1:05:91:b7:f9: a9:c6:bf:01:51:85:14:15:e8:ba:88:2f:dd:ab:1f: 5a:62:a5:1f:d8:32:a8:74:4a:00:5d:27:1c:62:2a: ca:5b:fe:b9:09:7e:d6:e6:38:83:95:a6:04:6d:e7: 63:47:97:28:69:56:27:27:5a:ad:3f:48:03:7b:ce: 41:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:CC:B6:A1:88:0F:1A:A7:5A:E6:3B:3A:CF:FB:7A:CE:C8:3D:9D:0C X509v3 Authority Key Identifier: keyid:C2:5C:45:FF:A4:A3:12:46:0C:00:FF:ED:E3:2D:4D:C4:1F:D2:F7:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlxF_6SjEkYMAP_t4y1NxB_S988.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/Xsy2oYgPGqda5js6z_t6zsg9nQw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.124.253.0/24 IPv6: 2a03:c040::/32 Signature Algorithm: sha256WithRSAEncryption 1a:31:71:73:e5:db:c6:20:b1:b7:74:c9:fd:ce:82:d7:4f:32: c4:f6:ba:c9:d3:fc:61:b0:7b:3c:91:52:a2:96:ca:a3:aa:da: 20:65:86:e4:69:9d:6f:73:21:2f:55:92:aa:a2:42:7f:00:2b: f4:1f:7d:d6:d3:79:04:6f:96:c0:e6:bd:bf:83:6e:e2:b5:7e: 70:eb:93:e3:d4:02:43:c0:df:1d:c1:c0:0f:32:f2:4c:72:3b: 44:e5:5f:ee:99:8c:03:71:c3:0b:4a:5a:c7:38:72:ab:2d:be: 81:22:64:c8:21:87:c0:18:9e:f2:2c:f6:ec:38:22:16:b8:4f: 7d:df:d5:0d:33:0a:99:2d:7f:c8:7a:e3:62:1a:12:e6:2d:03: 5c:1e:1e:29:8a:fb:f0:17:e6:00:45:f9:80:10:fd:ff:0a:37: 03:3f:5f:c6:c0:73:52:ae:57:4d:67:9a:7f:c4:1f:8e:89:40: db:b3:8f:42:73:ce:74:77:ab:f3:01:97:50:2e:1d:b2:e6:95: 73:45:a2:2f:72:b5:27:f3:64:e5:c7:0f:fa:58:9c:7f:31:79: 5c:8b:8e:a1:9f:29:e1:b0:7d:3c:c0:68:5f:9e:81:a8:7c:7e: e4:df:23:30:e0:da:2e:f7:2d:8e:ed:71:d8:46:cb:cc:aa:f1: f2:40:c3:e5 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZss/Z+1Wl0tbqJrqiQvXyLAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNWM0NWZmYTRhMzEyNDYwYzAwZmZlZGUzMmQ0ZGM0MWZk MmY3Y2YwHhcNMjUxMjE3MTU0NjE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZWNjYjZhMTg4MGYxYWE3NWFlNjNiM2FjZmZiN2FjZWM4M2Q5ZDBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mdut6QVFrliyWr5qh/SdeeRoIwR LNXcHhn/n9JyAzPnqf0IeXPg05z5b43W/CpmlRr2idQRlLvwqJ7tiOqJygWJD3gK 83E9fhATx9hDu8mRhxanoifudM00GJvhPsrrCivhFlKHiHjyKM6NX4JXXblN1X4u v//NnTarTCGBCgyAbzF7xlgKx69YAyLs5f+foT1zD9vFgxNOHuBJ/2+HeZoyVIgz kI5uUSTX6E8ZD4j7hy/HtJr0mw0uEp3m8QWRt/mpxr8BUYUUFei6iC/dqx9aYqUf 2DKodEoAXSccYirKW/65CX7W5jiDlaYEbedjR5coaVYnJ1qtP0gDe85BIQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFF7MtqGIDxqnWuY7Os/7es7IPZ0MMB8GA1UdIwQY MBaAFMJcRf+koxJGDAD/7eMtTcQf0vfPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2x4Rl82U2pFa1lNQVBfdDR5MU54Ql9TOTg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9hNGJmMjMtNjUxMS00NDkzLTk4ZjAt NzAxOWJkYmIxMTc3LzEvWHN5Mm9ZZ1BHcWRhNWpzNnpfdDZ6c2c5blF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9hNGJmMjMtNjUxMS00NDkzLTk4ZjAtNzAxOWJkYmIxMTc3 LzEvd2x4Rl82U2pFa1lNQVBfdDR5MU54Ql9TOTg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAWXz9MA0E AgACMAcDBQAqA8BAMA0GCSqGSIb3DQEBCwUAA4IBAQAaMXFz5dvGILG3dMn9zoLX TzLE9rrJ0/xhsHs8kVKilsqjqtogZYbkaZ1vcyEvVZKqokJ/ACv0H33W03kEb5bA 5r2/g27itX5w65Pj1AJDwN8dwcAPMvJMcjtE5V/umYwDccMLSlrHOHKrLb6BImTI IYfAGJ7yLPbsOCIWuE9939UNMwqZLX/IeuNiGhLmLQNcHh4pivvwF+YARfmAEP3/ CjcDP1/GwHNSrldNZ5p/xB+OiUDbs49Cc850d6vzAZdQLh2y5pVzRaIvcrUn82Tl xw/6WJx/MXlci46hnynhsH08wGhfnoGofH7k3yMw4Nou9y2O7XHYRsvMqvHyQMPl -----END CERTIFICATE-----Generated at Wed Dec 17 20:07:21 2025 by rpki-client