This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/xnJga-iVwigHTsD-dtkf_nC-qeI.roa File: xnJga-iVwigHTsD-dtkf_nC-qeI.roa (raw, json) Hash identifier: GsXHxv2wkqRmHr0aWFfubv19P/bPTlYuX8bNACGOcog= Subject key identifier: C6:72:60:6B:E8:95:C2:28:07:4E:C0:FE:76:D9:1F:FE:70:BE:A9:E2 Certificate issuer: /CN=29390ec0adca5f0743d181145c7899f991fb65e0 Certificate serial: 019A5DD5182AD1A2D22FDB6D8DEA7D955B13 Authority key identifier: 29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/xnJga-iVwigHTsD-dtkf_nC-qeI.roa Signing time: Fri 07 Nov 2025 10:20:37 +0000 ROA not before: Fri 07 Nov 2025 10:20:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213630 IP address blocks: 195.151.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:5d:d5:18:2a:d1:a2:d2:2f:db:6d:8d:ea:7d:95:5b:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29390ec0adca5f0743d181145c7899f991fb65e0 Validity Not Before: Nov 7 10:20:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c672606be895c228074ec0fe76d91ffe70bea9e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:23:87:65:d7:22:e3:9d:a7:e0:93:4b:1a:ba: 5b:79:de:77:d5:e2:f5:85:30:39:cb:25:ce:ec:94: b6:d8:e3:35:71:89:aa:4d:9c:93:e3:74:04:32:5c: 98:4b:7b:ee:28:1a:e5:e6:76:e3:cc:3a:46:aa:88: a3:da:f7:a4:17:28:63:60:1a:ba:7a:c3:4e:f7:8b: 62:02:51:f8:16:73:b1:e7:f3:6f:98:f8:bd:68:0e: 76:92:0f:22:5a:8c:c4:c0:7e:ee:cf:7e:4f:74:f8: d8:02:6a:77:32:78:ab:4d:04:ac:28:f3:1a:23:2e: 5b:5c:69:0b:e7:26:2c:3e:32:05:da:26:d1:79:cb: 2d:9a:74:15:74:f3:7c:59:9b:03:f0:14:50:5c:8f: 96:8d:a9:02:90:d9:58:a5:ba:a3:b4:0d:2b:9e:9a: 81:a9:ed:7c:56:96:60:aa:17:df:72:63:e1:3f:99: 47:da:32:b9:a1:e9:54:ea:d0:34:2b:33:d7:98:11: f0:24:ad:21:cf:a1:2c:ae:35:da:4b:99:2d:00:59: 66:3e:ff:63:f4:b0:40:ad:25:2e:3e:cd:f1:f2:41: 7a:c6:61:a9:94:5a:a2:1e:00:98:21:cc:c0:a1:df: 44:70:c9:a2:28:03:c1:31:ff:50:9b:71:3e:b3:a8: 51:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:72:60:6B:E8:95:C2:28:07:4E:C0:FE:76:D9:1F:FE:70:BE:A9:E2 X509v3 Authority Key Identifier: keyid:29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/xnJga-iVwigHTsD-dtkf_nC-qeI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.151.14.0/24 Signature Algorithm: sha256WithRSAEncryption 65:9b:8b:5e:c0:59:4e:f5:c7:4d:8f:e0:d1:92:52:f2:0d:db: 3e:ac:4f:37:74:64:16:15:28:20:ae:9a:67:1e:bc:88:ca:3f: 3e:51:49:eb:15:fd:a4:05:10:64:f5:df:3d:8e:43:ff:f5:cc: 5c:77:68:a6:a1:ec:68:9a:10:5c:36:2e:41:a7:01:45:2a:0b: 26:3b:e6:e6:0e:40:ff:59:9a:dc:44:e2:a7:de:a3:8e:81:d0: 2e:95:13:cf:54:6b:4b:5a:1f:d4:14:0f:c7:c0:8c:e2:45:fc: eb:e2:4b:63:27:4c:70:63:1d:d6:e8:92:7b:5a:e5:a3:09:79: be:49:2b:b6:e8:c3:f2:e2:32:12:93:57:7f:99:09:c3:bb:1d: e3:2d:6a:84:91:0c:c9:62:96:0d:3c:87:b0:3f:69:c1:18:c6: 13:5b:c6:ae:43:df:25:d3:d9:c1:74:22:c9:bf:e6:44:1b:29: 49:f4:ef:79:b3:57:ba:50:26:8b:62:93:38:bb:8c:d2:9f:8b: ca:d9:d9:85:f4:5b:32:26:5d:94:b9:ba:2f:28:46:f6:28:24: 4f:35:92:cd:0e:83:47:71:fe:6b:ef:4a:c6:70:4c:f7:45:5e: 8a:45:09:79:7f:11:e9:3c:2b:bb:c2:4f:21:a4:0d:c6:5f:27: 9c:e3:08:2a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpd1Rgq0aLSL9ttjep9lVsTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MzkwZWMwYWRjYTVmMDc0M2QxODExNDVjNzg5OWY5OTFm YjY1ZTAwHhcNMjUxMTA3MTAyMDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjcyNjA2YmU4OTVjMjI4MDc0ZWMwZmU3NmQ5MWZmZTcwYmVhOWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCOHZdci452n4JNLGrpbed531eL1 hTA5yyXO7JS22OM1cYmqTZyT43QEMlyYS3vuKBrl5nbjzDpGqoij2vekFyhjYBq6 esNO94tiAlH4FnOx5/NvmPi9aA52kg8iWozEwH7uz35PdPjYAmp3MnirTQSsKPMa Iy5bXGkL5yYsPjIF2ibRecstmnQVdPN8WZsD8BRQXI+WjakCkNlYpbqjtA0rnpqB qe18VpZgqhffcmPhP5lH2jK5oelU6tA0KzPXmBHwJK0hz6EsrjXaS5ktAFlmPv9j 9LBArSUuPs3x8kF6xmGplFqiHgCYIczAod9EcMmiKAPBMf9Qm3E+s6hRLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMZyYGvolcIoB07A/nbZH/5wvqniMB8GA1UdIwQY MBaAFCk5DsCtyl8HQ9GBFFx4mfmR+2XgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9iMzEzOTItMmQxYy00OTM0LWE1OWUt ZWQ0MzNhYWM3ODI4LzEveG5KZ2EtaVZ3aWdIVHNELWR0a2ZfbkMtcWVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9iMzEzOTItMmQxYy00OTM0LWE1OWUtZWQ0MzNhYWM3ODI4 LzEvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw5cOMA0G CSqGSIb3DQEBCwUAA4IBAQBlm4tewFlO9cdNj+DRklLyDds+rE83dGQWFSggrppn HryIyj8+UUnrFf2kBRBk9d89jkP/9cxcd2imoexomhBcNi5BpwFFKgsmO+bmDkD/ WZrcROKn3qOOgdAulRPPVGtLWh/UFA/HwIziRfzr4ktjJ0xwYx3W6JJ7WuWjCXm+ SSu26MPy4jISk1d/mQnDux3jLWqEkQzJYpYNPIewP2nBGMYTW8auQ98l09nBdCLJ v+ZEGylJ9O95s1e6UCaLYpM4u4zSn4vK2dmF9FsyJl2UubovKEb2KCRPNZLNDoNH cf5r70rGcEz3RV6KRQl5fxHpPCu7wk8hpA3GXyec4wgq -----END CERTIFICATE-----Generated at Sat Dec 6 20:51:20 2025 by rpki-client