This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/xsBxTTHCu0M91jc-x-84709M1aw.roa File: xsBxTTHCu0M91jc-x-84709M1aw.roa (raw, json) Hash identifier: n7OhK3FL5HSbtyKHt6+A8Y5XXP+dcUu4LzkiF/oZmAY= Subject key identifier: C6:C0:71:4D:31:C2:BB:43:3D:D6:37:3E:C7:EF:38:EF:4F:4C:D5:AC Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17 Certificate serial: 019AC65A74AD009303634291D7FA8439D970 Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/xsBxTTHCu0M91jc-x-84709M1aw.roa Signing time: Thu 27 Nov 2025 17:26:48 +0000 ROA not before: Thu 27 Nov 2025 17:26:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44901 IP address blocks: 152.89.28.0/24 maxlen: 24 193.135.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c6:5a:74:ad:00:93:03:63:42:91:d7:fa:84:39:d9:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17 Validity Not Before: Nov 27 17:26:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c6c0714d31c2bb433dd6373ec7ef38ef4f4cd5ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d4:79:8a:80:9a:51:75:7c:ae:b4:ad:aa:e2: bf:f9:6b:53:9f:a7:94:51:c4:db:90:31:d0:bc:ef: 65:d3:69:d0:b0:51:e4:db:13:ab:9a:7c:cd:30:4c: 19:df:94:d4:ea:62:df:7c:9e:de:10:ad:71:35:0c: 23:ba:19:3d:86:87:a0:f0:4d:91:83:31:81:b5:cc: 96:16:46:1c:a0:c9:b5:ed:63:e5:f3:bf:98:e2:2a: 9e:fd:26:a4:9a:36:ad:2d:6d:90:44:d6:68:b5:a9: 1a:2a:b0:5a:4b:71:8b:47:a4:9c:f1:fd:1c:a1:da: 35:a5:2a:0c:b6:56:7f:89:2b:e5:6f:1e:7f:ac:96: f5:c1:3f:62:bd:9b:2c:9f:c5:26:a8:3f:23:79:2f: 1a:88:1a:7f:43:be:19:19:a7:2d:84:b0:5b:9c:b8: 92:86:99:ff:62:e2:19:71:66:40:cc:21:93:92:1f: 7f:00:55:12:59:7f:0c:1e:72:45:57:f4:0a:bc:43: e3:c1:25:a7:64:53:44:a7:16:ed:c7:e3:50:5a:96: e2:8b:0f:5e:a6:65:51:61:45:23:76:cd:67:fc:4e: cd:a2:3a:0f:d6:31:4e:0d:28:6e:1c:fb:d1:3e:ac: fa:ac:0b:93:b1:9f:fa:7f:db:46:c3:2d:77:73:9c: a0:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C0:71:4D:31:C2:BB:43:3D:D6:37:3E:C7:EF:38:EF:4F:4C:D5:AC X509v3 Authority Key Identifier: keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/xsBxTTHCu0M91jc-x-84709M1aw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.89.28.0/24 193.135.174.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:b7:0a:d9:1f:6e:af:a6:e1:dc:fd:ae:9e:fc:85:e7:95:00: b4:28:bf:cd:fe:c4:75:5e:ec:94:36:16:ca:4a:2b:1c:f5:81: d9:92:9c:1e:5d:3f:73:8a:c7:47:4b:37:e4:77:36:7b:91:13: 7d:28:bb:17:23:b5:e4:e4:c0:e4:7b:13:b3:6d:bf:24:c2:29: b0:90:73:50:d9:f2:ba:9d:4c:34:35:9a:de:8f:45:65:c4:07: 3a:21:d0:b2:70:08:53:6e:84:dd:99:a8:a0:63:a9:11:7d:42: fd:98:91:be:c5:f6:ea:59:7a:66:06:d8:95:bb:be:5c:54:5c: f5:68:44:56:03:75:25:e2:f9:2d:a5:fd:f8:a2:7a:4a:e9:69: 22:12:2d:f3:2e:6a:4a:10:c1:2e:15:a6:c7:ec:49:42:40:7d: e8:b4:16:9a:06:db:2f:d9:05:fc:44:04:b3:6b:c7:22:bb:03: 2e:93:4e:84:59:2d:8a:5c:19:da:8e:ff:ac:79:dd:96:ba:91: 91:13:88:7e:72:c9:51:46:6f:36:55:4c:dc:57:2e:b5:dd:e2: a3:d2:e3:2f:51:c9:45:aa:9b:85:75:da:41:24:77:e0:c0:19: 04:b3:5b:9b:1c:bc:bf:15:d0:0e:89:62:cf:59:7d:be:5c:fb: c6:fd:18:e6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrGWnStAJMDY0KR1/qEOdlwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ODZjNzM5OTRkMDJkOTFmYzk3ZDkxNmU5ODA5YTZkOTgx ZTZiMTcwHhcNMjUxMTI3MTcyNjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmMwNzE0ZDMxYzJiYjQzM2RkNjM3M2VjN2VmMzhlZjRmNGNkNWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dR5ioCaUXV8rrStquK/+WtTn6eU UcTbkDHQvO9l02nQsFHk2xOrmnzNMEwZ35TU6mLffJ7eEK1xNQwjuhk9hoeg8E2R gzGBtcyWFkYcoMm17WPl87+Y4iqe/SakmjatLW2QRNZotakaKrBaS3GLR6Sc8f0c odo1pSoMtlZ/iSvlbx5/rJb1wT9ivZssn8UmqD8jeS8aiBp/Q74ZGacthLBbnLiS hpn/YuIZcWZAzCGTkh9/AFUSWX8MHnJFV/QKvEPjwSWnZFNEpxbtx+NQWpbiiw9e pmVRYUUjds1n/E7NojoP1jFODShuHPvRPqz6rAuTsZ/6f9tGwy13c5ygzQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMbAcU0xwrtDPdY3PsfvOO9PTNWsMB8GA1UdIwQY MBaAFEmGxzmU0C2R/JfZFumAmm2YHmsXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS80NTdlMTMtNDFkMy00MGVmLWI1NzIt OWU4OTVkMGVmOGQyLzEveHNCeFRUSEN1ME05MWpjLXgtODQ3MDlNMWF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS80NTdlMTMtNDFkMy00MGVmLWI1NzItOWU4OTVkMGVmOGQy LzEvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAmFkcAwQA wYeuMA0GCSqGSIb3DQEBCwUAA4IBAQCbtwrZH26vpuHc/a6e/IXnlQC0KL/N/sR1 XuyUNhbKSisc9YHZkpweXT9zisdHSzfkdzZ7kRN9KLsXI7Xk5MDkexOzbb8kwimw kHNQ2fK6nUw0NZrej0VlxAc6IdCycAhTboTdmaigY6kRfUL9mJG+xfbqWXpmBtiV u75cVFz1aERWA3Ul4vktpf34onpK6WkiEi3zLmpKEMEuFabH7ElCQH3otBaaBtsv 2QX8RASza8ciuwMuk06EWS2KXBnajv+sed2WupGRE4h+cslRRm82VUzcVy613eKj 0uMvUclFqpuFddpBJHfgwBkEs1ubHLy/FdAOiWLPWX2+XPvG/Rjm -----END CERTIFICATE-----Generated at Sat Dec 6 20:13:45 2025 by rpki-client