This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1Xcse1EIiOeCvlxBV6kTQrPgBZs.roa File: 1Xcse1EIiOeCvlxBV6kTQrPgBZs.roa (raw, json) Hash identifier: 0SQaCSQa8nAJVajqnut8u8xvco8a5qNxOipqL2amNTQ= Subject key identifier: D5:77:2C:7B:51:08:88:E7:82:BE:5C:41:57:A9:13:42:B3:E0:05:9B Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019ACADCF1D0E1AA64C206724CD0C8CBB614 Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1Xcse1EIiOeCvlxBV6kTQrPgBZs.roa Signing time: Fri 28 Nov 2025 14:27:48 +0000 ROA not before: Fri 28 Nov 2025 14:27:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 399468 IP address blocks: 195.162.224.0/21 maxlen: 24 195.162.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 13:12:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ca:dc:f1:d0:e1:aa:64:c2:06:72:4c:d0:c8:cb:b6:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Nov 28 14:27:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d5772c7b510888e782be5c4157a91342b3e0059b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:77:bb:10:9d:d2:cb:85:2a:32:1b:17:15:39: 03:fe:b9:74:3b:cf:98:41:b7:f2:f6:f7:cb:49:16: 36:7b:98:f3:a4:af:57:d2:87:da:2d:79:3e:06:34: e9:03:d2:04:f1:e9:20:de:22:5e:00:48:92:d9:4c: f4:a7:4e:eb:86:21:b0:3c:df:1a:f8:70:a1:9f:75: 04:90:8b:05:7c:2a:3f:97:20:fe:67:6e:8d:f6:40: 3d:12:bc:e9:b0:9f:77:e8:fd:92:2c:94:7c:74:0f: bc:d0:b8:9d:b9:06:97:96:96:69:02:d6:b4:b0:65: 17:ab:63:90:e5:d8:99:ed:5b:5c:ca:be:ba:3c:0a: 86:d2:a7:b7:c0:b0:23:4e:ac:58:06:37:95:37:a0: bc:2c:4e:97:7e:2f:ce:f3:d3:9e:7f:0d:39:0b:cd: fe:ee:11:96:7c:55:97:ec:9e:fe:43:71:e5:5e:dc: 7a:84:ad:74:b4:9a:c1:26:63:ee:79:f7:21:ac:75: 73:41:1b:a1:98:36:90:81:e2:93:78:f0:9d:42:83: 74:bf:46:55:85:ac:e7:35:2c:e1:a3:74:c7:77:a9: 0a:07:be:42:63:71:cc:ae:51:7b:63:15:fa:c0:de: cb:35:bd:06:96:a2:28:44:b6:cf:10:d4:19:72:bc: 2e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:77:2C:7B:51:08:88:E7:82:BE:5C:41:57:A9:13:42:B3:E0:05:9B X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1Xcse1EIiOeCvlxBV6kTQrPgBZs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.162.224.0/20 Signature Algorithm: sha256WithRSAEncryption 00:b5:5e:f5:ab:2d:b6:c9:7e:c0:69:86:cf:0e:9c:46:58:3b: 5d:14:51:06:cc:a2:cd:4f:4e:e0:33:c0:45:39:cc:de:4f:c2: 96:62:b4:2d:96:45:c7:93:d6:e9:50:31:89:97:3a:87:f9:94: 5a:79:5c:39:e0:65:42:9e:f6:42:d3:58:eb:31:33:a5:89:95: 04:79:c0:7c:8b:92:5a:af:06:a5:61:88:c2:aa:36:2c:b1:14: 6e:be:30:83:ff:96:9b:e8:cd:a3:51:b1:cb:54:67:c5:15:c3: a3:e4:8a:c9:64:fc:bc:8f:e3:c7:33:b9:6a:77:50:cb:ab:c8: 18:36:ee:61:0e:68:85:ca:12:ec:61:81:37:9a:18:91:f6:39: ab:dc:00:f4:23:b5:b0:a5:e2:ea:ac:72:df:52:71:d1:fe:09: 50:6f:be:70:db:4f:fb:62:e8:0a:3b:2b:bf:5e:50:6f:75:b4: 94:57:52:ec:ea:0a:95:e0:a1:cb:c9:85:30:b2:26:07:29:7f: 44:d7:cf:cc:85:2d:18:fc:9a:8b:86:ce:4f:7e:ca:87:14:99: 84:c8:f2:a5:2e:e2:1f:66:6f:a7:36:8e:60:65:31:76:5e:0d: f7:79:7d:1b:f7:f4:8c:63:fc:f5:ab:84:7f:c2:96:16:64:d8: e6:0a:cb:0b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrK3PHQ4apkwgZyTNDIy7YUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjUxMTI4MTQyNzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTc3MmM3YjUxMDg4OGU3ODJiZTVjNDE1N2E5MTM0MmIzZTAwNTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHe7EJ3Sy4UqMhsXFTkD/rl0O8+Y Qbfy9vfLSRY2e5jzpK9X0ofaLXk+BjTpA9IE8ekg3iJeAEiS2Uz0p07rhiGwPN8a +HChn3UEkIsFfCo/lyD+Z26N9kA9ErzpsJ936P2SLJR8dA+80LiduQaXlpZpAta0 sGUXq2OQ5diZ7Vtcyr66PAqG0qe3wLAjTqxYBjeVN6C8LE6Xfi/O89Oefw05C83+ 7hGWfFWX7J7+Q3HlXtx6hK10tJrBJmPuefchrHVzQRuhmDaQgeKTePCdQoN0v0ZV haznNSzho3THd6kKB75CY3HMrlF7YxX6wN7LNb0GlqIoRLbPENQZcrwukQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNV3LHtRCIjngr5cQVepE0Kz4AWbMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvMVhjc2UxRUlpT2VDdmx4QlY2a1RRclBnQlpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEw6LgMA0G CSqGSIb3DQEBCwUAA4IBAQAAtV71qy22yX7AaYbPDpxGWDtdFFEGzKLNT07gM8BF OczeT8KWYrQtlkXHk9bpUDGJlzqH+ZRaeVw54GVCnvZC01jrMTOliZUEecB8i5Ja rwalYYjCqjYssRRuvjCD/5ab6M2jUbHLVGfFFcOj5IrJZPy8j+PHM7lqd1DLq8gY Nu5hDmiFyhLsYYE3mhiR9jmr3AD0I7WwpeLqrHLfUnHR/glQb75w20/7YugKOyu/ XlBvdbSUV1Ls6gqV4KHLyYUwsiYHKX9E18/MhS0Y/JqLhs5PfsqHFJmEyPKlLuIf Zm+nNo5gZTF2Xg33eX0b9/SMY/z1q4R/wpYWZNjmCssL -----END CERTIFICATE-----Generated at Thu Dec 4 21:25:08 2025 by rpki-client