This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/XVShdfy7p69BNPB9g5FQ-IZgkOk.roa File: XVShdfy7p69BNPB9g5FQ-IZgkOk.roa (raw, json) Hash identifier: AZnVOq1KQkfInnQGJeHql31V7MK2NnwP8XHrEzIvxe0= Subject key identifier: 5D:54:A1:75:FC:BB:A7:AF:41:34:F0:7D:83:91:50:F8:86:60:90:E9 Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a Certificate serial: 019AB0FC98255F295B3C607B393BB424A7C4 Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/XVShdfy7p69BNPB9g5FQ-IZgkOk.roa Signing time: Sun 23 Nov 2025 13:52:15 +0000 ROA not before: Sun 23 Nov 2025 13:52:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 91.109.40.0/24 maxlen: 24 91.109.41.0/24 maxlen: 24 91.109.42.0/24 maxlen: 24 91.109.46.0/24 maxlen: 24 147.185.197.0/24 maxlen: 24 193.168.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 19:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b0:fc:98:25:5f:29:5b:3c:60:7b:39:3b:b4:24:a7:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a Validity Not Before: Nov 23 13:52:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5d54a175fcbba7af4134f07d839150f8866090e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:59:f8:1f:b9:ff:66:a4:fc:3a:22:2c:32:16: 8c:51:aa:4b:2a:c6:7a:b4:54:20:2c:c3:f2:75:8e: 74:52:81:36:9b:64:b5:03:f8:96:c7:48:6c:40:c9: 49:76:eb:e1:3f:49:a1:45:06:ea:26:2e:97:b1:ae: 73:e0:cf:eb:ea:67:68:69:12:3b:cc:76:67:88:66: e5:b6:f2:fd:dd:cd:94:95:85:c0:64:e9:e9:b1:90: 2e:70:c0:4d:07:d2:80:6b:85:61:fe:ba:7d:6a:b8: 55:4e:03:87:01:e1:da:b6:5b:35:e6:8f:9b:6f:9d: 2c:cd:4e:7a:6b:d6:75:aa:ab:4e:4c:6a:6e:a3:cf: 1a:54:0e:9e:08:7a:4e:1b:5c:87:98:f2:91:b2:37: 53:d2:6d:72:80:d6:03:a3:fe:15:44:e4:b2:21:01: 3e:49:2a:e0:39:6d:8d:93:de:d7:e1:7b:41:fe:0f: ad:da:5d:63:89:74:f4:09:43:c3:e3:51:7a:b2:f1: 18:e3:e8:86:ea:08:30:e8:9c:07:48:9c:87:aa:3d: 4f:ff:12:15:46:3f:f0:5f:99:e4:6d:b3:11:42:b7: 23:bd:97:a2:da:22:7e:d9:a7:bf:a1:76:77:a0:02: 95:31:53:ac:6b:0f:77:08:ce:c6:70:df:7d:87:67: 0b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:54:A1:75:FC:BB:A7:AF:41:34:F0:7D:83:91:50:F8:86:60:90:E9 X509v3 Authority Key Identifier: keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/XVShdfy7p69BNPB9g5FQ-IZgkOk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.109.40.0-91.109.42.255 91.109.46.0/24 147.185.197.0/24 193.168.200.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:3f:74:d0:99:cd:3e:7b:a7:7e:e0:7a:68:95:0a:8a:1b:35: f5:a1:e4:be:65:41:1d:1a:ba:24:51:d3:fc:02:22:11:45:58: a3:86:94:2e:c5:91:1b:2b:5e:c5:91:d6:7a:af:bd:fd:28:c9: 0d:22:1d:3a:52:b4:55:41:00:bb:83:93:48:4f:cf:57:7d:98: 33:0a:22:63:c0:79:45:7f:f5:d0:fd:f6:a8:4d:69:d4:fc:c8: 0a:77:66:53:e2:f4:cc:79:17:09:d6:0d:a6:c1:d9:f6:ea:31: e3:bd:cd:eb:70:6d:f2:cc:56:2a:58:b9:c1:fc:ba:84:36:4a: 41:69:88:11:fd:89:ac:2f:4a:20:63:27:70:fc:3f:73:19:6a: d4:09:81:1e:8f:96:b9:62:e8:13:27:9b:2b:9b:5b:81:77:0f: 5a:58:fd:d6:c7:66:0a:ee:0d:25:97:8f:c2:3a:a4:05:69:e0: 76:fb:ac:23:4a:23:d0:01:24:73:0a:ee:bd:b9:67:3e:cc:e9: 7e:6f:f9:0e:ce:88:20:f5:ca:d1:fc:14:a3:b9:db:34:59:a9: 43:50:a7:5a:ed:b9:e0:85:b4:4a:2a:95:53:ad:68:34:96:80: 87:08:68:a2:0e:7d:c3:71:b4:b7:93:b7:63:d9:ec:78:d9:30: 2e:07:10:56 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZqw/JglXylbPGB7OTu0JKfEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk ZjM1NGEwHhcNMjUxMTIzMTM1MjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDU0YTE3NWZjYmJhN2FmNDEzNGYwN2Q4MzkxNTBmODg2NjA5MGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyln4H7n/ZqT8OiIsMhaMUapLKsZ6 tFQgLMPydY50UoE2m2S1A/iWx0hsQMlJduvhP0mhRQbqJi6Xsa5z4M/r6mdoaRI7 zHZniGbltvL93c2UlYXAZOnpsZAucMBNB9KAa4Vh/rp9arhVTgOHAeHatls15o+b b50szU56a9Z1qqtOTGpuo88aVA6eCHpOG1yHmPKRsjdT0m1ygNYDo/4VROSyIQE+ SSrgOW2Nk97X4XtB/g+t2l1jiXT0CUPD41F6svEY4+iG6ggw6JwHSJyHqj1P/xIV Rj/wX5nkbbMRQrcjvZei2iJ+2ae/oXZ3oAKVMVOsaw93CM7GcN99h2cLbwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFF1UoXX8u6evQTTwfYORUPiGYJDpMB8GA1UdIwQY MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt MjBlMTk3ODBjYjJlLzEvWFZTaGRmeTdwNjlCTlBCOWc1RlEtSVpna09rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBANbbSgD BABbbSoDBABbbS4DBACTucUDBADBqMgwDQYJKoZIhvcNAQELBQADggEBAH4/dNCZ zT57p37gemiVCoobNfWh5L5lQR0auiRR0/wCIhFFWKOGlC7FkRsrXsWR1nqvvf0o yQ0iHTpStFVBALuDk0hPz1d9mDMKImPAeUV/9dD99qhNadT8yAp3ZlPi9Mx5FwnW DabB2fbqMeO9zetwbfLMVipYucH8uoQ2SkFpiBH9iawvSiBjJ3D8P3MZatQJgR6P lrli6BMnmyubW4F3D1pY/dbHZgruDSWXj8I6pAVp4Hb7rCNKI9ABJHMK7r25Zz7M 6X5v+Q7OiCD1ytH8FKO52zRZqUNQp1rtueCFtEoqlVOtaDSWgIcIaKIOfcNxtLeT t2PZ7HjZMC4HEFY= -----END CERTIFICATE-----Generated at Fri Dec 5 04:56:19 2025 by rpki-client