This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/RXQQhNgKVihPcMVhthLhTg3n-Us.roa File: RXQQhNgKVihPcMVhthLhTg3n-Us.roa (raw, json) Hash identifier: kG2eozK8NJSfX7hFrfDKG75LYSNAeBB7F12dBSasppU= Subject key identifier: 45:74:10:84:D8:0A:56:28:4F:70:C5:61:B6:12:E1:4E:0D:E7:F9:4B Certificate issuer: /CN=b541558181f7863119bf4a1554c75dab1f6c5292 Certificate serial: 019AF4A9562AA0804E32053A79F832E4833A Authority key identifier: B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/RXQQhNgKVihPcMVhthLhTg3n-Us.roa Signing time: Sat 06 Dec 2025 17:15:29 +0000 ROA not before: Sat 06 Dec 2025 17:15:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 41745 IP address blocks: 83.217.210.0/24 maxlen: 24 83.217.211.0/24 maxlen: 24 89.169.15.0/24 maxlen: 24 195.93.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.mft rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:15:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:a9:56:2a:a0:80:4e:32:05:3a:79:f8:32:e4:83:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b541558181f7863119bf4a1554c75dab1f6c5292 Validity Not Before: Dec 6 17:15:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=45741084d80a56284f70c561b612e14e0de7f94b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9d:2d:6c:05:67:ec:31:02:3e:44:20:3a:11: a6:40:b6:05:16:83:8f:8b:24:60:4c:74:1a:1c:ef: 60:77:da:43:c2:c5:ae:e6:26:e0:f9:e1:37:4a:aa: 7e:61:19:40:f9:38:74:18:bd:ca:69:ff:04:e8:3c: 42:33:d3:6a:11:3e:dc:8b:10:73:1a:42:c4:6a:6c: b1:cd:01:eb:db:ff:28:2a:61:de:07:c1:a9:ce:73: 01:27:65:a4:c3:ec:98:55:2a:43:94:d0:57:33:e3: f9:ce:c6:f9:92:d6:33:d5:66:fe:c4:99:92:88:4f: c7:d4:f7:d1:c0:5d:c1:8a:11:2b:d9:93:47:99:11: 04:34:a6:b4:04:4f:30:98:2b:d1:65:49:49:c8:fb: 27:b5:c4:ad:73:ab:49:82:a6:2c:c9:df:30:62:e1: 87:1c:41:f9:12:a3:d4:27:06:5d:c7:96:2a:ab:9c: 46:52:1f:97:76:c9:e6:50:65:d4:c6:c7:67:b0:b6: 0a:b8:43:47:b3:53:d0:f0:a7:76:cf:bf:d7:b2:6a: 46:1a:02:55:ab:f7:b3:7e:0c:91:ba:52:5c:b4:f0: e7:33:81:75:01:b1:92:72:53:88:44:26:18:9e:ac: 20:ec:9f:fc:1d:0b:4b:2f:4a:6c:60:d3:13:51:55: 22:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:74:10:84:D8:0A:56:28:4F:70:C5:61:B6:12:E1:4E:0D:E7:F9:4B X509v3 Authority Key Identifier: keyid:B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/RXQQhNgKVihPcMVhthLhTg3n-Us.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.217.210.0/23 89.169.15.0/24 195.93.244.0/24 Signature Algorithm: sha256WithRSAEncryption 24:d5:93:06:3f:b0:fd:53:f2:83:e1:64:8c:a7:c1:fa:b7:31: 09:d1:cf:41:5b:e9:e5:c6:96:71:20:f4:39:54:81:18:c1:99: 6c:2e:b0:ed:0e:ca:c7:aa:b5:dc:2b:49:5d:6d:63:17:80:90: d0:86:35:8a:7f:21:53:aa:2f:97:49:be:8a:78:f3:6c:1b:64: 06:86:41:0b:ea:da:f7:cf:f8:36:39:4f:da:14:ab:61:b6:c9: 57:a8:3f:27:d4:80:35:57:bc:53:fd:80:64:ad:28:71:ff:c5: 97:2b:2a:87:c6:5a:70:5a:73:09:27:27:8c:fa:5f:89:c9:1f: 39:83:73:2f:ef:ba:16:02:14:5e:97:08:d3:37:a6:3b:71:0d: 6d:0d:a2:46:a6:00:e3:7f:65:2a:f7:7e:bd:00:f9:06:50:6f: 44:02:49:15:c3:68:8c:35:3d:94:60:62:75:36:0f:c8:8c:83: 3e:07:3b:82:91:64:39:73:73:df:58:19:60:df:f2:a3:76:1a: 45:84:8a:f6:70:23:95:49:f4:ae:c6:9b:16:d4:b3:99:b1:83: a8:63:57:2a:47:2b:a7:27:23:7a:5f:65:43:a3:8b:22:be:c4: 55:25:34:13:67:e7:30:5f:0d:01:52:fb:85:ee:7b:25:35:76: 13:11:e7:44 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZr0qVYqoIBOMgU6efgy5IM6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NDE1NTgxODFmNzg2MzExOWJmNGExNTU0Yzc1ZGFiMWY2 YzUyOTIwHhcNMjUxMjA2MTcxNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTc0MTA4NGQ4MGE1NjI4NGY3MGM1NjFiNjEyZTE0ZTBkZTdmOTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZ0tbAVn7DECPkQgOhGmQLYFFoOP iyRgTHQaHO9gd9pDwsWu5ibg+eE3Sqp+YRlA+Th0GL3Kaf8E6DxCM9NqET7cixBz GkLEamyxzQHr2/8oKmHeB8GpznMBJ2Wkw+yYVSpDlNBXM+P5zsb5ktYz1Wb+xJmS iE/H1PfRwF3BihEr2ZNHmREENKa0BE8wmCvRZUlJyPsntcStc6tJgqYsyd8wYuGH HEH5EqPUJwZdx5Yqq5xGUh+XdsnmUGXUxsdnsLYKuENHs1PQ8Kd2z7/XsmpGGgJV q/ezfgyRulJctPDnM4F1AbGSclOIRCYYnqwg7J/8HQtLL0psYNMTUVUi2wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEV0EITYClYoT3DFYbYS4U4N5/lLMB8GA1UdIwQY MBaAFLVBVYGB94YxGb9KFVTHXasfbFKSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFVGVmdZSDNoakVadjBvVlZNZGRxeDlzVXBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi80ZGQxNjktOGRjYi00NjUzLThhMDMt NTcxYjZjNjEyYmVjLzEvUlhRUWhOZ0tWaWhQY01WaHRoTGhUZzNuLVVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi80ZGQxNjktOGRjYi00NjUzLThhMDMtNTcxYjZjNjEyYmVj LzEvdFVGVmdZSDNoakVadjBvVlZNZGRxeDlzVXBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBU9nSAwQA WakPAwQAw130MA0GCSqGSIb3DQEBCwUAA4IBAQAk1ZMGP7D9U/KD4WSMp8H6tzEJ 0c9BW+nlxpZxIPQ5VIEYwZlsLrDtDsrHqrXcK0ldbWMXgJDQhjWKfyFTqi+XSb6K ePNsG2QGhkEL6tr3z/g2OU/aFKthtslXqD8n1IA1V7xT/YBkrShx/8WXKyqHxlpw WnMJJyeM+l+JyR85g3Mv77oWAhRelwjTN6Y7cQ1tDaJGpgDjf2Uq9369APkGUG9E AkkVw2iMNT2UYGJ1Ng/IjIM+BzuCkWQ5c3PfWBlg3/KjdhpFhIr2cCOVSfSuxpsW 1LOZsYOoY1cqRyunJyN6X2VDo4sivsRVJTQTZ+cwXw0BUvuF7nslNXYTEedE -----END CERTIFICATE-----Generated at Sun Dec 7 02:05:53 2025 by rpki-client