This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/XrOaPAy06YrsxfZyp3nhSpd7dFM.roa File: XrOaPAy06YrsxfZyp3nhSpd7dFM.roa (raw, json) Hash identifier: p/Rz+Fd0ywWVc1lojSGDL/pVOVHW7+XSpXlj2UyJNzk= Subject key identifier: 5E:B3:9A:3C:0C:B4:E9:8A:EC:C5:F6:72:A7:79:E1:4A:97:7B:74:53 Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Certificate serial: 019ADE1FF7D7D601341CC0BC77ED7C3BE1E3 Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/XrOaPAy06YrsxfZyp3nhSpd7dFM.roa Signing time: Tue 02 Dec 2025 08:13:48 +0000 ROA not before: Tue 02 Dec 2025 08:13:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 30058 IP address blocks: 89.23.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:de:1f:f7:d7:d6:01:34:1c:c0:bc:77:ed:7c:3b:e1:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Validity Not Before: Dec 2 08:13:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5eb39a3c0cb4e98aecc5f672a779e14a977b7453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d0:b5:6e:51:0a:fe:69:4f:4c:e8:c9:26:09: a5:fd:ba:ef:a0:02:d1:d9:3b:25:28:90:ce:48:1d: 8a:aa:58:34:8d:5f:1f:f4:26:5a:32:b1:2c:57:f2: 4e:c7:13:48:cb:27:88:7d:ea:f5:2e:40:61:4f:51: 4e:4b:7b:bf:35:cc:d7:d7:78:65:ef:9d:83:a4:b4: a2:22:3d:9c:d8:a2:1a:6b:a6:e0:ab:f1:e1:98:0f: 73:18:f8:7c:cd:90:9f:72:3e:2c:0b:2d:8b:b7:c4: 45:bd:c0:d8:65:8f:89:dc:18:86:44:8a:8b:71:ba: 12:cf:bb:ac:2c:43:69:e8:7d:bf:20:28:e2:17:4b: a8:73:10:6c:c7:76:10:7f:a6:1d:1a:70:45:f7:7b: 9c:19:e0:bd:59:8b:82:50:2b:b7:6b:72:07:17:d8: 69:a6:6e:61:df:72:7b:ef:9e:0f:dc:83:2c:48:be: 79:70:19:ea:ea:da:c1:fc:f0:57:d3:ac:f5:22:df: 3a:ba:56:c1:50:1f:dc:f5:2d:ff:ac:47:bd:45:b9: cf:22:c8:27:eb:13:32:4e:a1:dc:31:a8:92:8e:8e: 9d:d8:ec:b1:59:15:1f:22:fe:dd:16:8e:fe:cb:bd: 8e:ad:47:0e:78:12:0a:89:2f:63:8e:d6:62:af:2c: 25:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:B3:9A:3C:0C:B4:E9:8A:EC:C5:F6:72:A7:79:E1:4A:97:7B:74:53 X509v3 Authority Key Identifier: keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/XrOaPAy06YrsxfZyp3nhSpd7dFM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.23.93.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:8c:14:50:0b:26:f4:cd:3b:88:8a:ae:d0:54:86:c1:f7:1d: fe:cc:6e:8a:9a:37:9c:27:06:fb:c7:9f:0c:1c:20:19:e9:a9: c3:e8:74:9e:07:70:a5:e4:0f:62:0f:09:16:b6:37:15:8f:b1: c8:95:1b:04:89:cd:3a:ae:bc:e8:19:de:b2:38:2e:72:93:1f: 26:12:10:13:cb:eb:fe:16:f4:52:93:b3:ed:0b:53:79:48:6c: ca:52:7e:ac:0c:94:20:ff:56:b4:a6:c6:60:35:4a:3c:25:dc: 4a:91:62:bb:d7:5a:1a:5c:87:42:dc:38:a2:b9:c4:5f:df:fc: 2b:2a:c9:4f:01:b4:16:35:a3:c9:8a:05:9f:03:cf:38:e8:d1: 81:50:68:c6:8e:fe:e9:b6:30:b3:02:c2:4b:5d:5b:1c:ed:57: 4e:88:a0:28:34:39:90:30:bb:b9:de:a1:56:a8:70:d1:92:50: 83:62:cd:c3:21:f0:6d:ef:28:75:86:a3:c3:57:1d:cf:e5:4d: 59:2b:6c:bd:7b:72:46:63:44:9b:5b:25:de:61:b8:1c:f0:ac: 1f:21:5b:60:fd:22:2c:24:b4:6c:e8:f6:f8:eb:5e:37:5c:1e: f0:f5:d6:3c:4d:1e:b0:28:7b:6f:8d:b3:b0:39:8c:36:27:d2: fb:08:14:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZreH/fX1gE0HMC8d+18O+HjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NzEzZWYyNTI3N2UxM2RkNzNmNDQxOTZmZGE1Y2VjMGZk OWNlMTYwHhcNMjUxMjAyMDgxMzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZWIzOWEzYzBjYjRlOThhZWNjNWY2NzJhNzc5ZTE0YTk3N2I3NDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NC1blEK/mlPTOjJJgml/brvoALR 2TslKJDOSB2Kqlg0jV8f9CZaMrEsV/JOxxNIyyeIfer1LkBhT1FOS3u/NczX13hl 752DpLSiIj2c2KIaa6bgq/HhmA9zGPh8zZCfcj4sCy2Lt8RFvcDYZY+J3BiGRIqL cboSz7usLENp6H2/ICjiF0uocxBsx3YQf6YdGnBF93ucGeC9WYuCUCu3a3IHF9hp pm5h33J7754P3IMsSL55cBnq6trB/PBX06z1It86ulbBUB/c9S3/rEe9RbnPIsgn 6xMyTqHcMaiSjo6d2OyxWRUfIv7dFo7+y72OrUcOeBIKiS9jjtZirywltwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF6zmjwMtOmK7MX2cqd54UqXe3RTMB8GA1UdIwQY MBaAFOlxPvJSd+E91z9EGW/aXOwP2c4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEt MGY2NmMxODg3OTE2LzEvWHJPYVBBeTA2WXJzeGZaeXAzbmhTcGQ3ZEZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEtMGY2NmMxODg3OTE2 LzEvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWRddMA0G CSqGSIb3DQEBCwUAA4IBAQAOjBRQCyb0zTuIiq7QVIbB9x3+zG6KmjecJwb7x58M HCAZ6anD6HSeB3Cl5A9iDwkWtjcVj7HIlRsEic06rrzoGd6yOC5ykx8mEhATy+v+ FvRSk7PtC1N5SGzKUn6sDJQg/1a0psZgNUo8JdxKkWK711oaXIdC3DiiucRf3/wr KslPAbQWNaPJigWfA8846NGBUGjGjv7ptjCzAsJLXVsc7VdOiKAoNDmQMLu53qFW qHDRklCDYs3DIfBt7yh1hqPDVx3P5U1ZK2y9e3JGY0SbWyXeYbgc8KwfIVtg/SIs JLRs6Pb46143XB7w9dY8TR6wKHtvjbOwOYw2J9L7CBQx -----END CERTIFICATE-----Generated at Sat Dec 6 06:14:05 2025 by rpki-client