This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/XJe2gU23YUGOxXd4dW9WhHKvluw.roa File: XJe2gU23YUGOxXd4dW9WhHKvluw.roa (raw, json) Hash identifier: Q+SQJucGqW6rIja8KJZssTGYrJnKb9Ykl1UhxgaGr0g= Subject key identifier: 5C:97:B6:81:4D:B7:61:41:8E:C5:77:78:75:6F:56:84:72:AF:96:EC Certificate issuer: /CN=bb7ccb1a6e3bcab6319d317f62c74bf1e1f41473 Certificate serial: 019AE986FBA4FB57449FB21C10C1CC66A173 Authority key identifier: BB:7C:CB:1A:6E:3B:CA:B6:31:9D:31:7F:62:C7:4B:F1:E1:F4:14:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3zLGm47yrYxnTF_YsdL8eH0FHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/XJe2gU23YUGOxXd4dW9WhHKvluw.roa Signing time: Thu 04 Dec 2025 13:22:08 +0000 ROA not before: Thu 04 Dec 2025 13:22:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49223 IP address blocks: 45.14.24.0/22 maxlen: 22 109.108.224.0/19 maxlen: 19 109.108.224.0/20 maxlen: 20 109.108.240.0/20 maxlen: 20 141.138.96.0/19 maxlen: 19 178.74.192.0/18 maxlen: 18 178.74.192.0/19 maxlen: 19 178.74.240.0/20 maxlen: 20 185.16.124.0/22 maxlen: 22 185.43.236.0/22 maxlen: 22 185.77.100.0/22 maxlen: 22 185.119.212.0/22 maxlen: 22 185.181.36.0/22 maxlen: 22 193.106.20.0/22 maxlen: 22 193.148.88.0/22 maxlen: 22 213.226.92.0/22 maxlen: 22 217.30.192.0/20 maxlen: 20 2a04:100::/29 maxlen: 29 2a04:100::/36 maxlen: 36 2a04:100:1000::/36 maxlen: 36 2a04:100:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.mft rsync://rpki.ripe.net/repository/DEFAULT/u3zLGm47yrYxnTF_YsdL8eH0FHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e9:86:fb:a4:fb:57:44:9f:b2:1c:10:c1:cc:66:a1:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb7ccb1a6e3bcab6319d317f62c74bf1e1f41473 Validity Not Before: Dec 4 13:22:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5c97b6814db761418ec57778756f568472af96ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0e:ed:97:24:d3:c4:8b:43:e3:21:32:dd:5d: 03:c8:5e:b6:cd:05:cb:ac:79:b1:59:b6:74:7e:19: 75:c4:3c:c1:c8:86:7f:14:be:4e:6b:aa:13:a5:cd: 65:06:79:57:04:33:22:a8:08:e7:5a:6f:33:b8:2b: 9c:94:2b:ce:72:cd:57:27:5b:9e:8e:df:78:66:35: df:2d:70:ad:2b:b8:b4:21:47:78:fb:ed:85:cc:57: f4:19:75:e1:7e:f8:e2:26:9d:5f:67:b1:dc:18:e7: 0e:d3:96:15:de:67:e1:6d:d5:ce:af:e9:bb:c6:fe: 77:57:96:00:6a:82:78:56:8d:12:1d:f9:f8:49:33: 87:93:79:a3:1e:f2:ff:4e:9d:5f:7e:eb:42:c0:3e: bf:ef:c8:e6:1b:20:e4:74:b6:5e:9c:73:9c:39:38: 73:ac:8c:c2:17:be:a2:11:f3:96:13:71:b1:66:24: 20:7d:f7:73:bb:d8:07:12:9a:08:00:84:2e:17:54: 49:c8:e4:10:fe:1e:13:57:2d:cf:74:8c:b7:5d:ea: eb:c1:40:50:04:33:f4:cd:0d:7b:d5:df:1f:17:07: cd:17:5c:1c:24:94:fa:4b:a2:0f:55:3f:49:6d:23: 74:11:39:09:be:bb:25:1c:7f:2b:ea:ca:ac:bc:6e: 2b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:97:B6:81:4D:B7:61:41:8E:C5:77:78:75:6F:56:84:72:AF:96:EC X509v3 Authority Key Identifier: keyid:BB:7C:CB:1A:6E:3B:CA:B6:31:9D:31:7F:62:C7:4B:F1:E1:F4:14:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3zLGm47yrYxnTF_YsdL8eH0FHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/XJe2gU23YUGOxXd4dW9WhHKvluw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.14.24.0/22 109.108.224.0/19 141.138.96.0/19 178.74.192.0/18 185.16.124.0/22 185.43.236.0/22 185.77.100.0/22 185.119.212.0/22 185.181.36.0/22 193.106.20.0/22 193.148.88.0/22 213.226.92.0/22 217.30.192.0/20 IPv6: 2a04:100::/29 Signature Algorithm: sha256WithRSAEncryption 09:db:d0:8d:e1:db:d9:3a:88:a6:33:c9:8c:17:d8:6f:d4:f1: 6d:af:c1:ad:90:21:d7:54:14:70:ed:a0:3e:7e:11:da:af:eb: 08:15:4b:4d:ad:ba:4c:59:81:5a:58:cc:6b:3a:58:fc:90:04: 4e:0b:73:8d:14:ae:e0:bd:5a:d3:31:35:19:f8:14:8f:9c:93: b5:29:49:2b:1e:8a:7b:0f:c4:2f:9a:08:27:a8:ed:b5:15:62: 26:9b:a7:5b:ab:15:7a:29:77:65:bf:62:05:dd:0c:25:3e:c6: e9:54:38:fe:f2:8e:81:d2:97:ac:2c:3b:7d:84:49:2b:b9:6d: 68:e9:1a:d8:eb:ec:3a:d6:4e:5d:9b:7a:a0:d2:88:52:82:5a: f3:70:ab:60:b2:20:b2:40:ff:47:17:5d:70:9e:ec:7e:11:05: 29:ae:7f:dc:22:99:70:14:5a:04:52:43:35:92:06:d3:c8:67: 77:43:8e:68:81:2e:97:a4:f0:d0:ac:91:d0:0e:92:0b:73:87: 2d:18:fc:dc:80:83:a0:c2:6c:82:39:47:3c:ec:6d:be:27:0c: 8c:17:08:d5:a3:f0:a3:e4:85:a4:44:64:11:38:d2:48:0b:80: e3:14:f1:54:c0:0b:71:57:7d:96:56:05:53:8c:c4:79:e0:e5: 8d:6f:d5:a7 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgISAZrphvuk+1dEn7IcEMHMZqFzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiN2NjYjFhNmUzYmNhYjYzMTlkMzE3ZjYyYzc0YmYxZTFm NDE0NzMwHhcNMjUxMjA0MTMyMjA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Yzk3YjY4MTRkYjc2MTQxOGVjNTc3Nzg3NTZmNTY4NDcyYWY5NmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmw7tlyTTxItD4yEy3V0DyF62zQXL rHmxWbZ0fhl1xDzByIZ/FL5Oa6oTpc1lBnlXBDMiqAjnWm8zuCuclCvOcs1XJ1ue jt94ZjXfLXCtK7i0IUd4++2FzFf0GXXhfvjiJp1fZ7HcGOcO05YV3mfhbdXOr+m7 xv53V5YAaoJ4Vo0SHfn4STOHk3mjHvL/Tp1ffutCwD6/78jmGyDkdLZenHOcOThz rIzCF76iEfOWE3GxZiQgffdzu9gHEpoIAIQuF1RJyOQQ/h4TVy3PdIy3XerrwUBQ BDP0zQ171d8fFwfNF1wcJJT6S6IPVT9JbSN0ETkJvrslHH8r6sqsvG4rSQIDAQAB o4ICYDCCAlwwHQYDVR0OBBYEFFyXtoFNt2FBjsV3eHVvVoRyr5bsMB8GA1UdIwQY MBaAFLt8yxpuO8q2MZ0xf2LHS/Hh9BRzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTN6TEdtNDd5cll4blRGX1lzZEw4ZUgwRkhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xYmY3YjAtNDUxOC00MTQxLWJkNmMt NjRiMGU2MTRkMDA0LzEvWEplMmdVMjNZVUdPeFhkNGRXOVdoSEt2bHV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8xYmY3YjAtNDUxOC00MTQxLWJkNmMtNjRiMGU2MTRkMDA0 LzEvdTN6TEdtNDd5cll4blRGX1lzZEw4ZUgwRkhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHYGCCsGAQUFBwEHAQH/BGcwZTBUBAIAATBOAwQCLQ4YAwQF bWzgAwQFjYpgAwQGskrAAwQCuRB8AwQCuSvsAwQCuU1kAwQCuXfUAwQCubUkAwQC wWoUAwQCwZRYAwQC1eJcAwQE2R7AMA0EAgACMAcDBQMqBAEAMA0GCSqGSIb3DQEB CwUAA4IBAQAJ29CN4dvZOoimM8mMF9hv1PFtr8GtkCHXVBRw7aA+fhHar+sIFUtN rbpMWYFaWMxrOlj8kAROC3ONFK7gvVrTMTUZ+BSPnJO1KUkrHop7D8QvmggnqO21 FWImm6dbqxV6KXdlv2IF3QwlPsbpVDj+8o6B0pesLDt9hEkruW1o6RrY6+w61k5d m3qg0ohSglrzcKtgsiCyQP9HF11wnux+EQUprn/cIplwFFoEUkM1kgbTyGd3Q45o gS6XpPDQrJHQDpILc4ctGPzcgIOgwmyCOUc87G2+JwyMFwjVo/Cj5IWkRGQRONJI C4DjFPFUwAtxV32WVgVTjMR54OWNb9Wn -----END CERTIFICATE-----Generated at Sat Dec 6 16:52:17 2025 by rpki-client