This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/XU5of-sO5C2kcDo6tI15PQJLpSE.roa File: XU5of-sO5C2kcDo6tI15PQJLpSE.roa (raw, json) Hash identifier: yMviCrZaaiQvFu0zaMoGhkE3HEZqEZ5DgntX+OnEfio= Subject key identifier: 5D:4E:68:7F:EB:0E:E4:2D:A4:70:3A:3A:B4:8D:79:3D:02:4B:A5:21 Certificate issuer: /CN=6f7b35c08ba49301a6cc430ada9493ced7ed4218 Certificate serial: 019A4F483358178FF83B738EA44CA6285EED Authority key identifier: 6F:7B:35:C0:8B:A4:93:01:A6:CC:43:0A:DA:94:93:CE:D7:ED:42:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3s1wIukkwGmzEMK2pSTztftQhg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/XU5of-sO5C2kcDo6tI15PQJLpSE.roa Signing time: Tue 04 Nov 2025 14:32:03 +0000 ROA not before: Tue 04 Nov 2025 14:32:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 14618 IP address blocks: 217.118.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.mft rsync://rpki.ripe.net/repository/DEFAULT/b3s1wIukkwGmzEMK2pSTztftQhg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:48:33:58:17:8f:f8:3b:73:8e:a4:4c:a6:28:5e:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f7b35c08ba49301a6cc430ada9493ced7ed4218 Validity Not Before: Nov 4 14:32:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5d4e687feb0ee42da4703a3ab48d793d024ba521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9e:32:d9:bf:b8:82:f9:f5:af:7e:02:be:20: e1:0f:7d:3a:a0:4b:b9:fb:7f:b9:da:0a:29:fe:b3: 34:69:3a:bf:63:e5:f2:74:8c:4d:3d:32:b4:a7:06: 21:c0:2f:4c:16:63:88:80:60:7f:8b:bd:b7:3d:d5: 1b:f9:40:16:39:f9:05:47:e6:84:31:a2:25:c9:fc: c1:21:1d:2c:fa:da:08:b7:31:f8:85:b4:98:b7:b2: 6c:61:2c:d6:39:66:ec:1f:fe:37:86:d5:68:78:96: 81:eb:22:cf:bf:00:8c:6c:20:f8:b6:b5:87:69:29: ee:92:42:69:30:6a:67:d8:da:fb:76:1a:32:d6:01: 66:b4:12:4a:0b:c6:b8:3f:47:22:8a:99:3b:f4:04: 7c:63:4d:2f:c1:4f:cd:a0:7f:92:61:6f:bb:c7:29: cb:5f:21:a8:53:ee:06:80:23:1a:b8:ba:70:a0:fb: a4:9b:b4:1b:d6:97:76:d2:78:d0:1a:f8:d1:58:18: 96:fb:ba:ab:1e:88:0d:2d:5d:b5:3d:a6:71:6d:44: e6:ad:b7:53:a2:6a:4f:8d:7e:74:f5:74:35:34:79: 06:85:3e:5c:e1:55:8e:7e:9c:bc:80:ab:a0:9d:67: 6b:f3:91:48:55:0c:ff:b0:54:c1:f9:74:b4:2e:7b: 77:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:4E:68:7F:EB:0E:E4:2D:A4:70:3A:3A:B4:8D:79:3D:02:4B:A5:21 X509v3 Authority Key Identifier: keyid:6F:7B:35:C0:8B:A4:93:01:A6:CC:43:0A:DA:94:93:CE:D7:ED:42:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3s1wIukkwGmzEMK2pSTztftQhg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/XU5of-sO5C2kcDo6tI15PQJLpSE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.118.242.0/24 Signature Algorithm: sha256WithRSAEncryption 81:c1:6e:82:93:52:ef:b5:18:a1:3a:0a:e9:7c:8d:8a:8b:c6: 63:4b:de:17:76:60:08:41:b2:04:86:22:a3:98:35:13:0b:1c: 94:da:51:74:68:5c:8f:fc:80:2b:f6:be:56:44:5f:c4:86:53: 90:8e:0b:0c:e6:e8:b7:02:8f:41:92:3e:2e:a2:75:a0:c7:21: 17:68:c4:13:da:82:3a:1e:61:12:9a:57:f1:ba:52:69:9a:f2: f2:5b:98:d9:83:22:0c:16:22:08:9e:23:8a:9f:c0:c4:dd:a4: df:d8:1b:cd:c0:e5:9c:a0:ea:15:81:f6:92:ce:cf:dd:07:80: 45:07:10:1b:06:8a:60:70:c9:20:4e:ef:e9:c9:88:f2:0f:04: 0e:2f:0d:57:f5:63:13:53:79:ad:b8:3c:9f:79:d4:c7:7c:8c: dd:1d:66:d7:32:20:82:71:22:73:08:ef:31:89:c8:ff:12:18: 64:6c:72:dc:45:5f:3f:db:f7:b0:44:24:60:fa:6e:21:48:db: bf:7b:2a:6d:f4:87:d6:f5:f2:c2:28:7a:09:3a:7a:74:93:cb: e4:3b:fc:d8:16:fc:03:21:73:77:bd:8c:b5:3a:31:77:2d:0e: 33:38:f9:77:ca:c5:9b:f4:47:b6:a8:9d:ac:ee:14:d7:89:0c: d0:4e:27:1a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpPSDNYF4/4O3OOpEymKF7tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmN2IzNWMwOGJhNDkzMDFhNmNjNDMwYWRhOTQ5M2NlZDdl ZDQyMTgwHhcNMjUxMTA0MTQzMjAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDRlNjg3ZmViMGVlNDJkYTQ3MDNhM2FiNDhkNzkzZDAyNGJhNTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu54y2b+4gvn1r34CviDhD306oEu5 +3+52gop/rM0aTq/Y+XydIxNPTK0pwYhwC9MFmOIgGB/i723PdUb+UAWOfkFR+aE MaIlyfzBIR0s+toItzH4hbSYt7JsYSzWOWbsH/43htVoeJaB6yLPvwCMbCD4trWH aSnukkJpMGpn2Nr7dhoy1gFmtBJKC8a4P0ciipk79AR8Y00vwU/NoH+SYW+7xynL XyGoU+4GgCMauLpwoPukm7Qb1pd20njQGvjRWBiW+7qrHogNLV21PaZxbUTmrbdT ompPjX509XQ1NHkGhT5c4VWOfpy8gKugnWdr85FIVQz/sFTB+XS0Lnt3qQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF1OaH/rDuQtpHA6OrSNeT0CS6UhMB8GA1UdIwQY MBaAFG97NcCLpJMBpsxDCtqUk87X7UIYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjNzMXdJdWtrd0dtekVNSzJwU1R6dGZ0UWhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy81OGQwNjAtOThmMi00MDAzLThmZjEt ZDI0YzM1ZGZhYzk0LzEvWFU1b2Ytc081QzJrY0RvNnRJMTVQUUpMcFNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy81OGQwNjAtOThmMi00MDAzLThmZjEtZDI0YzM1ZGZhYzk0 LzEvYjNzMXdJdWtrd0dtekVNSzJwU1R6dGZ0UWhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2XbyMA0G CSqGSIb3DQEBCwUAA4IBAQCBwW6Ck1LvtRihOgrpfI2Ki8ZjS94XdmAIQbIEhiKj mDUTCxyU2lF0aFyP/IAr9r5WRF/EhlOQjgsM5ui3Ao9Bkj4uonWgxyEXaMQT2oI6 HmESmlfxulJpmvLyW5jZgyIMFiIIniOKn8DE3aTf2BvNwOWcoOoVgfaSzs/dB4BF BxAbBopgcMkgTu/pyYjyDwQOLw1X9WMTU3mtuDyfedTHfIzdHWbXMiCCcSJzCO8x icj/EhhkbHLcRV8/2/ewRCRg+m4hSNu/eypt9IfW9fLCKHoJOnp0k8vkO/zYFvwD IXN3vYy1OjF3LQ4zOPl3ysWb9Ee2qJ2s7hTXiQzQTica -----END CERTIFICATE-----Generated at Sat Dec 6 11:46:42 2025 by rpki-client