This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1-xjm-RammFOYR1pOIceBM-QKnik.roa File: 1-xjm-RammFOYR1pOIceBM-QKnik.roa (raw, json) Hash identifier: n/cC291xvB0qp/a77E0EqERW7oNlvlpVMIzInbxTKI8= Subject key identifier: FB:18:E6:F9:16:A6:98:53:98:47:5A:4E:21:C7:81:33:E4:0A:9E:29 Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019AB78D82508AB369ECBDEA41D31D1E9953 Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1-xjm-RammFOYR1pOIceBM-QKnik.roa Signing time: Mon 24 Nov 2025 20:28:15 +0000 ROA not before: Mon 24 Nov 2025 20:28:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 61120 IP address blocks: 194.105.10.0/24 maxlen: 24 217.156.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b7:8d:82:50:8a:b3:69:ec:bd:ea:41:d3:1d:1e:99:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Nov 24 20:28:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fb18e6f916a6985398475a4e21c78133e40a9e29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:3c:68:b5:e3:92:20:8a:88:64:6c:a9:c5:dc: f9:df:75:48:46:07:e7:42:6d:99:d9:e1:fb:15:40: 51:00:40:ce:7e:9d:02:26:40:3d:d1:e6:01:b9:46: 85:1f:d2:4d:31:01:da:f4:8a:eb:8d:a8:8e:c6:70: b1:16:93:49:fd:27:33:c6:89:5b:15:43:63:34:dc: 9a:f6:ee:b1:0f:71:31:8e:5e:28:70:47:3e:38:8e: 28:c5:f5:a7:d2:5d:67:3b:02:93:2e:7d:49:71:4f: f3:6a:87:5d:cf:e0:f8:85:ff:ea:20:9a:f5:f6:48: ea:c6:b5:11:a2:3f:fe:77:5a:69:e3:ce:85:84:3c: d6:12:85:e2:38:f4:60:ea:a3:6a:37:fd:44:af:d0: 61:e2:c1:27:f0:31:d0:84:67:be:83:61:3e:8c:af: 93:0c:8c:31:f9:fb:2b:26:96:3e:7b:cd:e3:22:4c: 9d:e9:27:aa:3c:25:fd:03:a0:98:c6:d9:da:c2:41: b8:34:b6:8f:03:b1:a4:88:93:f5:ee:fc:d2:81:7c: 15:ac:a5:75:e0:3e:98:e7:fc:fc:64:5c:29:93:45: 6c:5d:ab:37:df:81:c4:7f:5c:5e:49:35:02:85:45: f8:25:41:16:90:fa:dd:c8:91:7d:37:92:3d:5d:bb: 0e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:18:E6:F9:16:A6:98:53:98:47:5A:4E:21:C7:81:33:E4:0A:9E:29 X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1-xjm-RammFOYR1pOIceBM-QKnik.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.105.10.0/24 217.156.77.0/24 Signature Algorithm: sha256WithRSAEncryption 78:fc:5e:8f:28:79:4b:14:ea:cd:37:49:7f:10:c0:60:4d:c7: f3:b9:88:d5:5b:41:1d:ab:e4:2b:40:bf:6e:29:37:e8:54:ba: e5:16:8c:30:74:43:da:80:aa:29:15:79:52:8b:b2:e9:06:d0: 99:ff:82:d3:a5:5f:43:3c:33:c5:7f:c7:62:c8:e5:15:10:82: a3:d7:34:c9:6b:92:16:e7:5d:b8:d1:1a:66:19:35:3b:4b:1b: 93:b1:0c:38:31:cd:3b:25:70:b7:1b:ca:bc:21:96:96:c9:e5: 4a:6f:97:75:04:00:d9:41:15:05:3e:9a:62:f2:ce:ff:65:e7: 85:86:40:f8:45:a9:9e:91:77:2d:e5:8b:fa:9a:ba:bc:a5:3b: 5e:72:d6:a0:11:29:3b:30:8b:b5:6c:e1:ce:8c:07:14:c4:8a: 0a:00:0a:80:e2:7a:ad:d8:bb:7b:7c:36:cc:8b:55:8c:86:03: bb:83:65:a0:f4:9b:e6:ba:76:6e:01:3c:dc:e6:ed:8b:5a:20: 7b:4d:c1:4a:32:b8:33:eb:03:72:f7:5e:ca:91:75:3f:58:31: 8e:b1:87:7a:e1:a1:28:9b:df:35:42:5b:44:12:4d:96:a5:b6: 6a:97:d6:80:b2:94:4d:fd:4c:9a:5a:3d:e8:6e:7b:74:cf:d1: d0:a8:41:52 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZq3jYJQirNp7L3qQdMdHplTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjUxMTI0MjAyODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjE4ZTZmOTE2YTY5ODUzOTg0NzVhNGUyMWM3ODEzM2U0MGE5ZTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jxoteOSIIqIZGypxdz533VIRgfn Qm2Z2eH7FUBRAEDOfp0CJkA90eYBuUaFH9JNMQHa9IrrjaiOxnCxFpNJ/Sczxolb FUNjNNya9u6xD3Exjl4ocEc+OI4oxfWn0l1nOwKTLn1JcU/zaoddz+D4hf/qIJr1 9kjqxrURoj/+d1pp486FhDzWEoXiOPRg6qNqN/1Er9Bh4sEn8DHQhGe+g2E+jK+T DIwx+fsrJpY+e83jIkyd6SeqPCX9A6CYxtnawkG4NLaPA7GkiJP17vzSgXwVrKV1 4D6Y5/z8ZFwpk0VsXas334HEf1xeSTUChUX4JUEWkPrdyJF9N5I9XbsO9wIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFPsY5vkWpphTmEdaTiHHgTPkCp4pMB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEvMS14am0tUmFtbUZPWVIxcE9JY2VCTS1RS25pay5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMTUvNzE5M2RiLTdmODUtNDJiYi1iMDlhLWY1MmM0N2MyMjVk Yi8xL01ZTjRXUmJObU5mSGNOYUZGRlNacUtDaFZ5SS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAMJpCgME ANmcTTANBgkqhkiG9w0BAQsFAAOCAQEAePxejyh5SxTqzTdJfxDAYE3H87mI1VtB HavkK0C/bik36FS65RaMMHRD2oCqKRV5Uouy6QbQmf+C06VfQzwzxX/HYsjlFRCC o9c0yWuSFudduNEaZhk1O0sbk7EMODHNOyVwtxvKvCGWlsnlSm+XdQQA2UEVBT6a YvLO/2XnhYZA+EWpnpF3LeWL+pq6vKU7XnLWoBEpOzCLtWzhzowHFMSKCgAKgOJ6 rdi7e3w2zItVjIYDu4NloPSb5rp2bgE83Obti1oge03BSjK4M+sDcvdeypF1P1gx jrGHeuGhKJvfNUJbRBJNlqW2apfWgLKUTf1Mmlo96G57dM/R0KhBUg== -----END CERTIFICATE-----Generated at Fri Dec 5 20:18:17 2025 by rpki-client