This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/xuyQ4OmEvENqUeDHLKpnUaOgyho.roa File: xuyQ4OmEvENqUeDHLKpnUaOgyho.roa (raw, json) Hash identifier: IJ2zV3yTEN6osF2KnfgNnm/wtI1rUe+OVchbwoFZZYk= Subject key identifier: C6:EC:90:E0:E9:84:BC:43:6A:51:E0:C7:2C:AA:67:51:A3:A0:CA:1A Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Certificate serial: 019ADC9D9EA7D903B3103BA3A3D745F17D9E Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/xuyQ4OmEvENqUeDHLKpnUaOgyho.roa Signing time: Tue 02 Dec 2025 01:11:48 +0000 ROA not before: Tue 02 Dec 2025 01:11:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 83.147.194.0/24 maxlen: 24 91.186.194.0/23 maxlen: 24 91.186.220.0/22 maxlen: 22 94.241.160.0/23 maxlen: 24 178.253.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:dc:9d:9e:a7:d9:03:b3:10:3b:a3:a3:d7:45:f1:7d:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Validity Not Before: Dec 2 01:11:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c6ec90e0e984bc436a51e0c72caa6751a3a0ca1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:42:46:ac:d0:22:26:e4:4b:90:c4:3b:a0:90: 4d:17:08:e8:ed:82:e9:18:72:91:7e:2b:c5:ad:31: f3:88:ee:c8:57:43:95:20:37:ac:18:f4:bb:57:37: 51:9b:43:97:0d:16:dd:84:3e:f2:68:ee:ea:48:b4: 3c:bb:fe:cd:38:72:f4:32:ac:5e:4b:54:b8:de:32: ab:00:24:79:df:8f:00:de:25:40:2b:9a:02:ab:b4: ba:98:ff:8c:53:56:eb:47:3c:f5:2c:f3:97:c6:03: 6d:72:85:d1:b3:d4:d9:e9:a7:d9:b8:a3:95:56:64: 7e:7e:47:c9:04:46:61:38:4a:8c:dc:be:7f:9a:50: 0d:3e:a3:3c:bf:52:e7:75:1f:1d:67:41:27:32:3e: b9:29:09:ed:68:69:73:88:f3:eb:fe:ad:3f:c2:01: b7:00:6f:38:ef:ca:62:41:25:d3:c0:2c:60:45:4c: a8:05:a4:60:64:f9:23:3e:32:1e:bd:af:84:59:93: c2:a6:cc:87:91:d3:2e:42:d2:7e:d3:74:43:48:e8: fe:96:80:11:ee:fa:9a:23:08:89:98:be:85:01:68: 61:78:2d:6c:6f:70:62:a0:30:dc:ff:25:75:e5:3c: 2a:5c:70:c4:17:34:5a:a0:73:b7:5f:01:01:08:22: 56:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:EC:90:E0:E9:84:BC:43:6A:51:E0:C7:2C:AA:67:51:A3:A0:CA:1A X509v3 Authority Key Identifier: keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/xuyQ4OmEvENqUeDHLKpnUaOgyho.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.147.194.0/24 91.186.194.0/23 91.186.220.0/22 94.241.160.0/23 178.253.38.0/23 Signature Algorithm: sha256WithRSAEncryption 6c:6d:82:6f:77:7d:db:58:f2:1a:53:2c:fe:f3:96:0b:8e:35: 27:67:6e:76:d2:de:6e:e9:b9:3b:de:c4:99:26:f6:11:3d:51: 57:99:2d:16:b1:80:df:fd:4b:f9:e8:02:f9:5c:3a:d6:cb:50: 16:a5:dd:fa:98:c5:f9:03:ff:7b:6e:f9:53:94:e5:36:a2:6f: 6b:4f:12:bf:d5:70:fc:60:62:1c:50:e7:51:61:84:0c:25:19: 52:12:6f:5a:9e:6f:2c:70:1d:51:12:6a:d8:5c:c4:84:f6:b9: 5d:fc:0a:cd:e8:d3:73:27:c2:67:05:4d:ab:7d:e0:ff:d2:5e: 42:2f:96:e5:dc:f9:2c:e8:da:fd:a2:ea:a9:fc:53:78:ac:4c: 10:18:30:b4:e0:7e:13:5d:c5:f3:4e:f4:28:00:15:b0:bd:c6: da:b3:48:73:36:df:17:2c:b7:a4:bb:70:e1:9d:49:bb:f8:d1: ea:71:65:4f:97:b1:df:f0:9b:0e:db:76:1e:d0:e4:92:a4:3c: 87:54:63:79:e0:a4:77:bf:e0:ad:f7:62:c0:ca:ae:53:b4:db: df:3d:26:77:43:ae:30:18:58:fb:53:b0:7f:b4:c3:40:1d:43: 17:fb:d7:87:5f:30:b9:98:d9:3c:2e:c4:a6:ed:c2:5e:27:a6: 7b:5e:66:31 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZrcnZ6n2QOzEDujo9dF8X2eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YmFmMjY5Njc1MTBiM2M1MmU0NmQxZGM1OTM5NjdjZGYy OWY5YzkwHhcNMjUxMjAyMDExMTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmVjOTBlMGU5ODRiYzQzNmE1MWUwYzcyY2FhNjc1MWEzYTBjYTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0JGrNAiJuRLkMQ7oJBNFwjo7YLp GHKRfivFrTHziO7IV0OVIDesGPS7VzdRm0OXDRbdhD7yaO7qSLQ8u/7NOHL0Mqxe S1S43jKrACR5348A3iVAK5oCq7S6mP+MU1brRzz1LPOXxgNtcoXRs9TZ6afZuKOV VmR+fkfJBEZhOEqM3L5/mlANPqM8v1LndR8dZ0EnMj65KQntaGlziPPr/q0/wgG3 AG8478piQSXTwCxgRUyoBaRgZPkjPjIeva+EWZPCpsyHkdMuQtJ+03RDSOj+loAR 7vqaIwiJmL6FAWhheC1sb3BioDDc/yV15TwqXHDEFzRaoHO3XwEBCCJWoQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFMbskODphLxDalHgxyyqZ1GjoMoaMB8GA1UdIwQY MBaAFFW68mlnUQs8UuRtHcWTlnzfKfnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAt NDlmOTgxZWU1OTgxLzEveHV5UTRPbUV2RU5xVWVESExLcG5VYU9neWhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAtNDlmOTgxZWU1OTgx LzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAU5PCAwQB W7rCAwQCW7rcAwQBXvGgAwQBsv0mMA0GCSqGSIb3DQEBCwUAA4IBAQBsbYJvd33b WPIaUyz+85YLjjUnZ2520t5u6bk73sSZJvYRPVFXmS0WsYDf/Uv56AL5XDrWy1AW pd36mMX5A/97bvlTlOU2om9rTxK/1XD8YGIcUOdRYYQMJRlSEm9anm8scB1REmrY XMSE9rld/ArN6NNzJ8JnBU2rfeD/0l5CL5bl3Pks6Nr9ouqp/FN4rEwQGDC04H4T XcXzTvQoABWwvcbas0hzNt8XLLeku3DhnUm7+NHqcWVPl7Hf8JsO23Ye0OSSpDyH VGN54KR3v+Ct92LAyq5TtNvfPSZ3Q64wGFj7U7B/tMNAHUMX+9eHXzC5mNk8LsSm 7cJeJ6Z7XmYx -----END CERTIFICATE-----Generated at Fri Dec 5 20:49:19 2025 by rpki-client