This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xT-SGBLAM2nWCLJOtMPdVSbE_sk.roa File: xT-SGBLAM2nWCLJOtMPdVSbE_sk.roa (raw, json) Hash identifier: G6Lhjb29J9WvUElk97c0LAVpT7iA/Ofn+/NeNjSGG2s= Subject key identifier: C5:3F:92:18:12:C0:33:69:D6:08:B2:4E:B4:C3:DD:55:26:C4:FE:C9 Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019AA4A089504DE94A8E6541CEA485565B1D Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xT-SGBLAM2nWCLJOtMPdVSbE_sk.roa Signing time: Fri 21 Nov 2025 04:16:15 +0000 ROA not before: Fri 21 Nov 2025 04:16:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48678 IP address blocks: 62.76.224.0/24 maxlen: 24 193.124.95.0/24 maxlen: 24 193.124.200.0/24 maxlen: 24 193.124.202.0/24 maxlen: 24 194.87.66.0/24 maxlen: 24 194.87.67.0/24 maxlen: 24 194.87.81.0/24 maxlen: 24 194.87.149.0/24 maxlen: 24 194.87.170.0/24 maxlen: 24 194.87.172.0/24 maxlen: 24 194.135.32.0/24 maxlen: 24 195.58.60.0/24 maxlen: 24 212.192.244.0/24 maxlen: 24 212.192.252.0/24 maxlen: 24 212.193.12.0/24 maxlen: 24 212.193.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a4:a0:89:50:4d:e9:4a:8e:65:41:ce:a4:85:56:5b:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Nov 21 04:16:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c53f921812c03369d608b24eb4c3dd5526c4fec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:af:69:ad:1d:52:e6:29:5c:88:15:81:ca:92: 6c:5c:7e:9c:7b:97:46:07:05:4e:f2:46:ef:cd:0d: f8:5b:b5:80:1e:63:98:55:05:d2:73:71:5c:bc:54: 8d:f7:b1:5c:ab:a6:90:18:7d:c4:e8:58:bd:78:f1: b8:64:02:b8:dd:2e:16:54:84:27:5e:7f:31:26:42: a4:5e:69:7d:3b:9e:84:8d:50:e5:67:2a:17:da:4c: ad:2b:a6:97:52:08:66:de:bb:99:5e:a8:3d:5e:e6: 40:47:94:cb:cc:05:03:d8:8d:9e:38:34:4e:c3:be: 6b:f9:f1:54:2c:51:03:0e:29:b2:64:c8:60:ec:72: c5:a6:ac:e3:e1:9d:ba:09:69:33:89:ed:93:57:f1: a1:6a:78:07:f9:11:a5:81:24:28:4b:93:a0:98:d2: 6e:1d:01:48:87:99:78:e1:4e:f2:c1:d5:d5:5d:98: 5f:b7:a2:a3:98:28:e7:13:bb:6b:08:4c:7a:c6:73: 13:75:8c:f4:23:35:d4:90:cd:27:0c:23:b1:a6:4e: 92:95:81:b2:c0:9d:b8:09:2e:43:f2:c1:f3:4b:3d: cb:46:d5:de:28:85:2e:66:6e:8d:e1:49:2f:0f:59: 13:f3:5b:3f:9b:f7:af:13:c9:d6:ae:93:81:9f:04: a9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:3F:92:18:12:C0:33:69:D6:08:B2:4E:B4:C3:DD:55:26:C4:FE:C9 X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xT-SGBLAM2nWCLJOtMPdVSbE_sk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.76.224.0/24 193.124.95.0/24 193.124.200.0/24 193.124.202.0/24 194.87.66.0/23 194.87.81.0/24 194.87.149.0/24 194.87.170.0/24 194.87.172.0/24 194.135.32.0/24 195.58.60.0/24 212.192.244.0/24 212.192.252.0/24 212.193.12.0/23 Signature Algorithm: sha256WithRSAEncryption 6f:63:b7:04:f9:e7:b7:1e:8e:5b:a0:60:01:53:3f:e7:29:b2: b3:07:a5:0f:e6:18:22:ef:8e:ff:5d:a7:9c:08:94:b0:60:3d: ce:59:90:cf:e7:30:c4:d7:cd:d7:2b:0c:f3:23:3d:f5:ee:60: 47:77:e8:da:93:03:c9:b8:76:4a:5b:28:7b:1f:93:0b:5d:39: 14:7d:6a:5d:51:66:57:7b:9d:40:e3:ab:44:fa:bf:0d:c8:73: bc:85:4c:9e:d1:63:d4:f0:ca:04:ce:30:59:85:74:6f:42:06: 90:ea:73:91:c1:4b:b9:89:1f:f4:4b:d6:42:4c:37:82:9c:fd: c2:40:fa:af:f9:27:39:81:fd:45:0c:b5:6a:25:a4:cc:b7:b4: d1:c3:1f:ab:57:3d:01:ee:24:64:0f:14:4f:18:7d:9e:46:be: dc:ab:ed:bf:bb:68:50:fe:4f:43:df:80:36:f6:2e:ac:73:55: 9d:ba:d3:30:16:58:04:0d:03:e4:08:a5:90:66:a5:0a:cf:9f: bc:97:44:6e:3e:c3:21:e8:5a:e1:19:ce:39:5d:0a:2b:19:da: 57:a0:46:fe:6c:45:10:6a:6a:07:f3:e0:d6:bb:4d:de:06:20: 7f:94:1b:0f:d5:7a:ef:6c:16:0c:2c:b6:32:89:1f:08:7a:73: 3f:16:b3:9c -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgISAZqkoIlQTelKjmVBzqSFVlsdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjUxMTIxMDQxNjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTNmOTIxODEyYzAzMzY5ZDYwOGIyNGViNGMzZGQ1NTI2YzRmZWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvK9prR1S5ilciBWBypJsXH6ce5dG BwVO8kbvzQ34W7WAHmOYVQXSc3FcvFSN97Fcq6aQGH3E6Fi9ePG4ZAK43S4WVIQn Xn8xJkKkXml9O56EjVDlZyoX2kytK6aXUghm3ruZXqg9XuZAR5TLzAUD2I2eODRO w75r+fFULFEDDimyZMhg7HLFpqzj4Z26CWkzie2TV/GhangH+RGlgSQoS5OgmNJu HQFIh5l44U7ywdXVXZhft6KjmCjnE7trCEx6xnMTdYz0IzXUkM0nDCOxpk6SlYGy wJ24CS5D8sHzSz3LRtXeKIUuZm6N4UkvD1kT81s/m/evE8nWrpOBnwSpEQIDAQAB o4ICVzCCAlMwHQYDVR0OBBYEFMU/khgSwDNp1giyTrTD3VUmxP7JMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEveFQtU0dCTEFNMm5XQ0xKT3RNUGRWU2JFX3NrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQAPkzgAwQA wXxfAwQAwXzIAwQAwXzKAwQBwldCAwQAwldRAwQAwleVAwQAwleqAwQAwlesAwQA wocgAwQAwzo8AwQA1MD0AwQA1MD8AwQB1MEMMA0GCSqGSIb3DQEBCwUAA4IBAQBv Y7cE+ee3Ho5boGABUz/nKbKzB6UP5hgi747/XaecCJSwYD3OWZDP5zDE183XKwzz Iz317mBHd+jakwPJuHZKWyh7H5MLXTkUfWpdUWZXe51A46tE+r8NyHO8hUye0WPU 8MoEzjBZhXRvQgaQ6nORwUu5iR/0S9ZCTDeCnP3CQPqv+Sc5gf1FDLVqJaTMt7TR wx+rVz0B7iRkDxRPGH2eRr7cq+2/u2hQ/k9D34A29i6sc1WdutMwFlgEDQPkCKWQ ZqUKz5+8l0RuPsMh6FrhGc45XQorGdpXoEb+bEUQamoH8+DWu03eBiB/lBsP1Xrv bBYMLLYyiR8IenM/FrOc -----END CERTIFICATE-----Generated at Fri Dec 5 09:26:45 2025 by rpki-client