This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/xsMFnUirGLrsIHVnOE89k-g_TNQ.roa File: xsMFnUirGLrsIHVnOE89k-g_TNQ.roa (raw, json) Hash identifier: +kCjATrNGMNDq1U+j1qAO+cqX9M0j46A6h5U99mLaHo= Subject key identifier: C6:C3:05:9D:48:AB:18:BA:EC:20:75:67:38:4F:3D:93:E8:3F:4C:D4 Certificate issuer: /CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a Certificate serial: 019A966B7AEAEB9CEFBC599DDB2D40F57EDE Authority key identifier: F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/xsMFnUirGLrsIHVnOE89k-g_TNQ.roa Signing time: Tue 18 Nov 2025 10:03:37 +0000 ROA not before: Tue 18 Nov 2025 10:03:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 200480 IP address blocks: 185.105.240.0/22 maxlen: 22 185.105.240.0/24 maxlen: 24 185.241.16.0/22 maxlen: 22 2a06:38c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:96:6b:7a:ea:eb:9c:ef:bc:59:9d:db:2d:40:f5:7e:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a Validity Not Before: Nov 18 10:03:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c6c3059d48ab18baec207567384f3d93e83f4cd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c2:05:93:4e:5a:da:ec:70:97:26:95:c1:0b: 04:f9:2b:ca:a9:50:0d:d2:07:79:56:2d:33:92:19: dc:96:50:a6:f1:3c:70:bd:a9:4b:e3:5f:a3:0f:dd: 4e:0a:b2:16:d2:94:02:eb:22:7c:c1:ae:cc:1e:60: 69:ad:37:a8:14:97:d5:3b:8b:90:ee:61:31:31:cf: ec:73:e3:c2:04:c7:85:41:9c:d0:3d:d1:90:80:d1: 83:a4:4e:ac:7b:63:e7:80:cd:91:a4:a7:d5:35:49: fe:fb:2d:10:46:9b:2d:1b:e9:de:55:56:3e:ea:f8: 51:77:38:2e:ab:57:19:ac:ad:02:df:24:7b:bc:4c: ad:81:e7:ee:c8:86:c5:03:b2:11:df:05:b4:1f:57: e2:14:50:9e:6f:18:66:92:d7:d5:8b:64:47:e7:ba: f5:2b:1e:77:cb:3c:19:50:13:45:36:07:61:5b:27: e6:6e:2d:0e:1a:ea:1f:c5:cd:c1:8c:0e:0e:b2:43: c4:09:05:c8:4b:92:28:d8:08:1d:34:72:21:5c:02: 0b:b4:3d:85:7f:4e:55:af:c0:9c:ee:e8:6d:f6:92: cc:7a:c9:66:6e:2b:d8:91:c7:b1:e8:fc:67:ea:e4: 78:f1:b4:10:af:4d:b3:14:89:92:b5:58:3f:03:b6: f9:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C3:05:9D:48:AB:18:BA:EC:20:75:67:38:4F:3D:93:E8:3F:4C:D4 X509v3 Authority Key Identifier: keyid:F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/xsMFnUirGLrsIHVnOE89k-g_TNQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.105.240.0/22 185.241.16.0/22 IPv6: 2a06:38c0::/29 Signature Algorithm: sha256WithRSAEncryption be:19:61:1c:3a:55:5c:bb:ba:f9:c4:09:65:32:00:ee:6c:41: 70:68:72:32:b9:2c:11:92:6c:7a:af:a6:ad:6c:4c:02:98:2b: 11:ab:0e:59:b0:39:09:07:18:51:4b:04:2f:01:15:98:c4:5e: 23:88:73:d2:4e:4c:ac:5b:72:06:27:56:9c:ec:60:89:06:7d: 83:b9:c3:17:45:c1:d8:86:b6:b9:47:06:7f:cb:5c:a9:25:66: d2:2b:e5:5c:35:ac:d1:88:91:6b:4e:0c:90:dc:f6:1e:6d:02: f2:45:71:41:01:4d:2e:fe:19:c6:f9:16:aa:4d:4b:a2:88:01: 18:ac:97:cf:4a:13:0a:28:09:94:a7:1e:77:e5:e2:41:78:ab: 9c:fb:10:e6:f4:45:b0:eb:5f:ca:23:e5:74:ea:36:4b:90:6d: 10:13:45:7d:bf:52:fc:a3:16:eb:f0:62:c0:a1:5a:fa:f2:05: 87:84:64:3f:92:3e:a5:db:a2:5d:0c:5d:5d:88:35:70:75:c2: 2b:52:92:e8:94:83:c0:3f:58:28:bc:1f:31:ef:71:3d:13:d7: 61:82:7f:b5:9a:b3:4b:7e:b0:ef:ac:e9:b4:74:22:24:b2:a6: 5b:84:f4:85:01:61:63:1d:1c:a1:82:0a:00:63:89:4c:f4:1f: ad:1a:ea:e2 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZqWa3rq65zvvFmd2y1A9X7eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZjQzMGQwODA1ZjQyZmZhM2JjZDBjMGI3YzU1MDgwNTEx NzkyM2EwHhcNMjUxMTE4MTAwMzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmMzMDU5ZDQ4YWIxOGJhZWMyMDc1NjczODRmM2Q5M2U4M2Y0Y2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMIFk05a2uxwlyaVwQsE+SvKqVAN 0gd5Vi0zkhncllCm8TxwvalL41+jD91OCrIW0pQC6yJ8wa7MHmBprTeoFJfVO4uQ 7mExMc/sc+PCBMeFQZzQPdGQgNGDpE6se2PngM2RpKfVNUn++y0QRpstG+neVVY+ 6vhRdzguq1cZrK0C3yR7vEytgefuyIbFA7IR3wW0H1fiFFCebxhmktfVi2RH57r1 Kx53yzwZUBNFNgdhWyfmbi0OGuofxc3BjA4OskPECQXIS5Io2AgdNHIhXAILtD2F f05Vr8Cc7uht9pLMeslmbivYkcex6Pxn6uR48bQQr02zFImStVg/A7b5awIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFMbDBZ1Iqxi67CB1ZzhPPZPoP0zUMB8GA1UdIwQY MBaAFPT0MNCAX0L/o7zQwLfFUIBRF5I6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVBRdzBJQmZRdi1qdk5EQXQ4VlFnRkVYa2pvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8yOGJkMTMtOGEzYi00NTUwLTk3MDAt ZjBmOTNjY2EyNDc5LzEveHNNRm5VaXJHTHJzSUhWbk9FODlrLWdfVE5RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8yOGJkMTMtOGEzYi00NTUwLTk3MDAtZjBmOTNjY2EyNDc5 LzEvOVBRdzBJQmZRdi1qdk5EQXQ4VlFnRkVYa2pvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuWnwAwQC ufEQMA0EAgACMAcDBQMqBjjAMA0GCSqGSIb3DQEBCwUAA4IBAQC+GWEcOlVcu7r5 xAllMgDubEFwaHIyuSwRkmx6r6atbEwCmCsRqw5ZsDkJBxhRSwQvARWYxF4jiHPS TkysW3IGJ1ac7GCJBn2DucMXRcHYhra5RwZ/y1ypJWbSK+VcNazRiJFrTgyQ3PYe bQLyRXFBAU0u/hnG+RaqTUuiiAEYrJfPShMKKAmUpx535eJBeKuc+xDm9EWw61/K I+V06jZLkG0QE0V9v1L8oxbr8GLAoVr68gWHhGQ/kj6l26JdDF1diDVwdcIrUpLo lIPAP1govB8x73E9E9dhgn+1mrNLfrDvrOm0dCIksqZbhPSFAWFjHRyhggoAY4lM 9B+tGuri -----END CERTIFICATE-----Generated at Sat Dec 6 13:11:03 2025 by rpki-client