This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/Xj0PZjPK0RU2SfivoTAJWcwycX0.roa File: Xj0PZjPK0RU2SfivoTAJWcwycX0.roa (raw, json) Hash identifier: Ar0sJAdRtbgHuGtFPdebLx8F1m4THn6pyvxz8KE1pEQ= Subject key identifier: 5E:3D:0F:66:33:CA:D1:15:36:49:F8:AF:A1:30:09:59:CC:32:71:7D Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Certificate serial: 019ACBF082C155B0314B68E98F96AC0D1626 Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/Xj0PZjPK0RU2SfivoTAJWcwycX0.roa Signing time: Fri 28 Nov 2025 19:28:48 +0000 ROA not before: Fri 28 Nov 2025 19:28:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 47950 IP address blocks: 193.41.244.0/24 maxlen: 24 2a0d:f400::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cb:f0:82:c1:55:b0:31:4b:68:e9:8f:96:ac:0d:16:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Validity Not Before: Nov 28 19:28:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5e3d0f6633cad1153649f8afa1300959cc32717d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d1:12:ed:f1:8a:68:f0:66:97:fd:50:7b:d3: b6:8a:4b:5a:cc:02:d1:0f:1e:92:4d:a9:e6:a5:ce: 23:11:16:92:e7:b6:23:15:fe:70:c4:ed:ae:7c:e7: f3:ee:41:ab:af:c1:8b:51:60:2e:ed:1b:b3:6c:c7: 1b:3d:df:d2:5c:90:93:20:7c:67:88:de:60:ae:d7: 9b:2c:25:f0:bd:90:82:59:3c:71:59:07:66:41:b4: 32:52:7b:73:7f:eb:f1:60:9d:69:af:7a:4b:ed:b2: d3:5e:cc:0b:1a:2f:ce:4d:82:a1:5e:38:42:d1:32: c3:8b:0f:72:cb:01:d9:8e:2b:88:f2:41:71:5d:78: 0e:e2:ec:bb:40:ed:44:94:17:7e:40:c5:ff:00:21: d7:2b:b1:09:da:94:ca:63:28:a4:7f:2f:9f:5d:d7: 71:95:64:07:e0:f7:4e:89:6e:f2:e5:5e:a8:5a:d7: 53:e9:8d:aa:7f:6e:cf:09:23:db:a7:3f:9c:c9:a7: 75:37:5b:2d:70:58:a4:e8:e6:dd:27:92:d7:be:ce: 2f:3b:d4:7e:89:c5:e5:95:f8:97:b2:46:28:0a:c7: 0b:1d:25:b4:41:91:5e:2b:46:63:b4:69:54:ad:11: 64:78:f5:48:7d:fa:84:52:16:f7:de:03:92:e3:31: 29:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:3D:0F:66:33:CA:D1:15:36:49:F8:AF:A1:30:09:59:CC:32:71:7D X509v3 Authority Key Identifier: keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/Xj0PZjPK0RU2SfivoTAJWcwycX0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.41.244.0/24 IPv6: 2a0d:f400::/32 Signature Algorithm: sha256WithRSAEncryption 63:a7:90:df:5f:b6:40:42:e8:d1:e9:14:b8:a0:97:2a:91:9e: bb:2d:bf:76:a5:6d:24:d3:30:1e:0e:02:b2:7a:40:67:10:79: f5:9b:ad:b9:77:12:ef:c6:64:b5:6e:3e:24:93:80:19:b8:36: 49:a0:71:1d:b0:39:18:d8:f4:29:db:06:82:a5:de:dd:86:b2: a2:15:37:64:9f:b4:e4:50:10:f3:eb:4f:d4:85:e3:d0:10:d8: 61:f1:84:5b:ee:18:d9:21:ac:9d:b0:95:66:e1:d5:a8:d2:41: 33:fa:a7:06:67:36:97:7f:41:34:d4:81:79:bb:67:c1:e7:5e: c1:e7:dc:3a:76:32:c2:bb:69:f1:f5:e2:be:d8:6d:67:79:f8: d8:02:30:5f:99:5e:b5:c0:eb:00:b3:41:32:3e:4f:3e:ee:3f: 56:40:50:a9:e6:3f:a0:60:f9:08:d4:b8:e9:8c:90:81:0f:2f: 61:0f:37:5c:06:83:6f:0a:8d:7d:fc:a6:85:e0:2a:93:cb:57: 28:a0:e0:1f:6a:6d:2b:79:11:b2:77:81:fc:08:20:be:47:5e: 81:0d:2c:12:92:6f:2d:ec:77:2f:87:98:85:a8:c3:32:c9:50: da:29:5b:22:bc:7c:0d:85:b1:f4:ae:41:b2:09:22:45:8b:0f: df:50:0a:91 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZrL8ILBVbAxS2jpj5asDRYmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy NTFkYWQwHhcNMjUxMTI4MTkyODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTNkMGY2NjMzY2FkMTE1MzY0OWY4YWZhMTMwMDk1OWNjMzI3MTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNES7fGKaPBml/1Qe9O2iktazALR Dx6STanmpc4jERaS57YjFf5wxO2ufOfz7kGrr8GLUWAu7RuzbMcbPd/SXJCTIHxn iN5grtebLCXwvZCCWTxxWQdmQbQyUntzf+vxYJ1pr3pL7bLTXswLGi/OTYKhXjhC 0TLDiw9yywHZjiuI8kFxXXgO4uy7QO1ElBd+QMX/ACHXK7EJ2pTKYyikfy+fXddx lWQH4PdOiW7y5V6oWtdT6Y2qf27PCSPbpz+cyad1N1stcFik6ObdJ5LXvs4vO9R+ icXllfiXskYoCscLHSW0QZFeK0ZjtGlUrRFkePVIffqEUhb33gOS4zEphwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFF49D2YzytEVNkn4r6EwCVnMMnF9MB8GA1UdIwQY MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt YjdjNTc4Yjc0ZTM1LzEvWGowUFpqUEswUlUyU2Zpdm9UQUpXY3d5Y1gwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1 LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwSn0MA0E AgACMAcDBQAqDfQAMA0GCSqGSIb3DQEBCwUAA4IBAQBjp5DfX7ZAQujR6RS4oJcq kZ67Lb92pW0k0zAeDgKyekBnEHn1m625dxLvxmS1bj4kk4AZuDZJoHEdsDkY2PQp 2waCpd7dhrKiFTdkn7TkUBDz60/UhePQENhh8YRb7hjZIaydsJVm4dWo0kEz+qcG ZzaXf0E01IF5u2fB517B59w6djLCu2nx9eK+2G1nefjYAjBfmV61wOsAs0EyPk8+ 7j9WQFCp5j+gYPkI1LjpjJCBDy9hDzdcBoNvCo19/KaF4CqTy1cooOAfam0reRGy d4H8CCC+R16BDSwSkm8t7Hcvh5iFqMMyyVDaKVsivHwNhbH0rkGyCSJFiw/fUAqR -----END CERTIFICATE-----Generated at Sat Dec 6 08:55:30 2025 by rpki-client