This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/XC_7D7UgpguexkTgo0NdimHoFCE.roa File: XC_7D7UgpguexkTgo0NdimHoFCE.roa (raw, json) Hash identifier: 6+lO6E5RpPzTRnt+venohOFXoncyjxcEdBuF7+Y7U/w= Subject key identifier: 5C:2F:FB:0F:B5:20:A6:0B:9E:C6:44:E0:A3:43:5D:8A:61:E8:14:21 Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B4C8A98428D08739150908FA49A124BDA Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/XC_7D7UgpguexkTgo0NdimHoFCE.roa Signing time: Tue 23 Dec 2025 18:48:29 +0000 ROA not before: Tue 23 Dec 2025 18:48:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204957 IP address blocks: 5.183.129.0/24 maxlen: 24 31.222.242.0/24 maxlen: 24 31.222.249.0/24 maxlen: 24 45.84.178.0/24 maxlen: 24 185.202.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:8a:98:42:8d:08:73:91:50:90:8f:a4:9a:12:4b:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Dec 23 18:48:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5c2ffb0fb520a60b9ec644e0a3435d8a61e81421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0a:b4:45:99:d0:9f:5b:b6:e7:ae:e7:0e:db: 05:fa:f0:62:8a:7d:d5:55:eb:55:39:f5:20:b0:0f: a4:f3:b6:98:f7:71:e6:ca:de:36:62:3d:8c:72:3a: ee:29:57:4d:e4:32:db:3d:be:59:d4:98:5e:e0:32: 12:c2:1d:b1:4d:3e:22:15:13:31:48:55:fc:d4:72: 76:7a:0f:fd:29:d2:b3:ef:44:48:d9:82:48:65:df: 1a:23:4c:6e:8b:b9:b1:c0:dd:0f:83:6b:77:65:a0: be:8c:ea:25:05:9f:85:94:ad:35:26:0a:98:ce:c0: f1:02:76:61:c7:a6:ae:c2:93:5d:ec:66:65:20:c4: 09:69:b0:36:4d:b7:19:71:af:9d:99:63:a2:a1:15: 77:62:3a:8e:54:d7:5e:fb:05:9c:e5:63:49:16:79: 6a:e1:82:6e:ae:f2:9c:b6:7d:27:b8:c8:c7:3a:81: fd:e6:50:3c:27:14:79:12:01:cd:3e:5f:ed:e5:85: 85:bd:5e:49:18:8f:46:8a:d2:d5:a3:d5:2f:61:e0: a6:d2:0c:da:76:82:e7:22:9b:46:00:a5:97:1e:fb: 8c:8b:a4:8b:c9:9b:3f:27:bc:3d:51:c7:96:95:7e: 0e:c0:6f:a2:35:5e:ad:8a:15:c1:f3:25:a1:0b:99: 77:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:2F:FB:0F:B5:20:A6:0B:9E:C6:44:E0:A3:43:5D:8A:61:E8:14:21 X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/XC_7D7UgpguexkTgo0NdimHoFCE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.183.129.0/24 31.222.242.0/24 31.222.249.0/24 45.84.178.0/24 185.202.107.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:5c:8b:cb:ee:8a:6e:65:39:5f:e5:66:45:1b:51:cf:d6:3d: d2:48:a9:99:b3:e7:d4:86:cc:14:5c:7e:2b:9a:70:3c:2c:25: b0:1a:a1:f7:05:a8:22:d1:0c:32:c4:3e:69:ac:d6:75:9e:66: e9:e4:ba:d9:35:bf:45:c5:62:90:e3:4e:91:39:76:bd:9c:7e: d2:f2:ed:ce:47:cc:de:eb:12:29:ac:3f:0d:8d:39:6e:63:4d: 6e:f1:bc:59:d4:11:34:50:53:b5:64:df:7e:45:c5:55:14:12: 8e:c4:76:e0:e1:d9:5f:b6:72:32:9f:59:4a:80:76:e8:75:45: f5:d4:a4:28:43:6e:41:28:cb:f5:7a:68:0f:39:14:55:da:76: fd:a7:6c:90:72:aa:9c:b5:01:28:fa:02:34:c0:92:4c:f7:a6: 3c:28:97:c8:f0:82:8d:32:34:c4:46:6b:cc:b0:21:6e:2a:a7: 5f:17:39:a9:d2:64:a1:f8:76:06:4e:79:ae:07:88:e4:61:8e: 97:01:d1:c2:d3:82:43:27:d9:a9:55:06:46:14:be:17:2b:43: 42:69:be:73:82:6b:37:5e:3b:c0:2a:cf:9f:79:3b:2a:c7:e9: 57:da:a4:09:ad:01:38:27:95:f6:23:0f:e3:76:3a:71:e6:ec: c8:c0:56:94 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZtMiphCjQhzkVCQj6SaEkvaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjUxMjIzMTg0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzJmZmIwZmI1MjBhNjBiOWVjNjQ0ZTBhMzQzNWQ4YTYxZTgxNDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgq0RZnQn1u2567nDtsF+vBiin3V VetVOfUgsA+k87aY93Hmyt42Yj2McjruKVdN5DLbPb5Z1Jhe4DISwh2xTT4iFRMx SFX81HJ2eg/9KdKz70RI2YJIZd8aI0xui7mxwN0Pg2t3ZaC+jOolBZ+FlK01JgqY zsDxAnZhx6auwpNd7GZlIMQJabA2TbcZca+dmWOioRV3YjqOVNde+wWc5WNJFnlq 4YJurvKctn0nuMjHOoH95lA8JxR5EgHNPl/t5YWFvV5JGI9GitLVo9UvYeCm0gza doLnIptGAKWXHvuMi6SLyZs/J7w9UceWlX4OwG+iNV6tihXB8yWhC5l3/QIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFFwv+w+1IKYLnsZE4KNDXYph6BQhMB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvWENfN0Q3VWdwZ3VleGtUZ28wTmRpbUhvRkNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQABbeBAwQA H97yAwQAH975AwQALVSyAwQAucprMA0GCSqGSIb3DQEBCwUAA4IBAQBqXIvL7opu ZTlf5WZFG1HP1j3SSKmZs+fUhswUXH4rmnA8LCWwGqH3Bagi0QwyxD5prNZ1nmbp 5LrZNb9FxWKQ406ROXa9nH7S8u3OR8ze6xIprD8NjTluY01u8bxZ1BE0UFO1ZN9+ RcVVFBKOxHbg4dlftnIyn1lKgHbodUX11KQoQ25BKMv1emgPORRV2nb9p2yQcqqc tQEo+gI0wJJM96Y8KJfI8IKNMjTERmvMsCFuKqdfFzmp0mSh+HYGTnmuB4jkYY6X AdHC04JDJ9mpVQZGFL4XK0NCab5zgms3XjvAKs+feTsqx+lX2qQJrQE4J5X2Iw/j djpx5uzIwFaU -----END CERTIFICATE-----Generated at Wed Dec 24 22:53:39 2025 by rpki-client