This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/xXe9h3bQ_2_RWYOASuoBQRjgpog.roa File: xXe9h3bQ_2_RWYOASuoBQRjgpog.roa (raw, json) Hash identifier: /tBIZ8YQhjT2HB6ELP8C0O8JjNN4YTHn3pFevfO9JQ8= Subject key identifier: C5:77:BD:87:76:D0:FF:6F:D1:59:83:80:4A:EA:01:41:18:E0:A6:88 Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019B076E0724196BF27B489AAAE7D6F778F5 Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/xXe9h3bQ_2_RWYOASuoBQRjgpog.roa Signing time: Wed 10 Dec 2025 08:43:29 +0000 ROA not before: Wed 10 Dec 2025 08:43:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202813 IP address blocks: 5.154.6.0/24 maxlen: 24 5.154.69.0/24 maxlen: 24 5.154.83.0/24 maxlen: 24 89.43.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 11:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:6e:07:24:19:6b:f2:7b:48:9a:aa:e7:d6:f7:78:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Dec 10 08:43:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c577bd8776d0ff6fd15983804aea014118e0a688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:67:9b:26:3f:29:62:73:d1:8f:47:4b:cb:3e: 87:b6:a3:5d:3f:02:49:88:10:9e:69:92:c1:f7:4a: 19:ea:a1:09:d7:c6:c2:36:98:0e:73:11:68:8c:13: fc:92:4e:75:f9:ac:26:3a:d6:20:c2:ec:0f:59:d9: b6:b7:16:3a:72:4d:86:98:9d:16:65:d4:d5:e2:c1: 31:98:7e:56:1d:4e:89:00:5c:c6:69:d2:c0:f4:60: fa:0e:9f:f7:90:23:5f:4f:a2:18:78:f7:ad:d5:bf: b7:06:89:a6:09:35:50:2e:f0:6d:b3:19:a8:1c:1c: d5:a1:87:57:64:7f:c5:8d:61:cc:0f:ca:6b:2e:b4: ff:83:86:76:c0:01:0a:89:72:6d:4c:2f:5b:96:68: 6e:ea:a6:b8:45:82:3f:61:31:ca:ab:96:e5:ae:de: a1:53:e1:06:e0:b3:a1:87:4e:55:eb:f7:37:a4:d7: 79:ac:1d:1a:19:33:1e:99:3c:28:3a:51:cd:a5:bd: 39:10:68:35:70:54:53:11:73:da:b7:d8:9d:4f:6d: 85:c6:62:30:a7:d4:1e:d2:e9:b2:7f:d6:53:52:c8: 38:84:26:46:3a:cd:bc:fb:54:47:6b:98:db:78:4c: bd:85:0f:00:a8:2b:d1:ee:0d:79:5c:f3:a7:01:b2: 6d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:77:BD:87:76:D0:FF:6F:D1:59:83:80:4A:EA:01:41:18:E0:A6:88 X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/xXe9h3bQ_2_RWYOASuoBQRjgpog.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.154.6.0/24 5.154.69.0/24 5.154.83.0/24 89.43.85.0/24 Signature Algorithm: sha256WithRSAEncryption 21:90:8d:58:26:6d:b2:41:f0:b2:45:93:8d:ae:ff:2d:0b:b3: 77:46:0f:aa:32:f4:53:0a:f4:42:d1:75:4d:57:b6:9c:82:b8: 2b:51:8d:ec:7f:43:d5:c2:ad:e9:d4:a9:dd:ad:9b:bc:6e:1e: de:5e:61:83:f5:e4:de:60:78:d1:0d:4c:6c:e5:f0:d6:b0:2f: e0:d5:8e:94:b4:fc:7d:2f:4a:df:a6:c7:98:0c:a6:90:95:6d: bb:dc:75:9c:d5:d0:dc:59:ea:27:68:0c:cb:60:72:73:2a:96: 7b:8a:ec:af:50:49:07:c7:51:aa:8f:97:93:3c:a0:8f:92:6f: 15:b9:77:7f:9f:c2:ca:a5:3a:a7:61:a5:c4:e0:e6:9d:b6:dc: 9a:b6:ce:ed:4b:48:db:9b:e4:33:62:e8:17:5a:13:9f:48:f5: c4:03:69:ef:7b:23:47:49:bc:17:ca:c4:93:21:fe:5b:16:e0: 20:85:14:73:d2:fc:c2:5b:6f:4a:06:ae:c4:43:30:67:03:73: 21:f3:a2:dc:0f:32:82:30:3f:04:75:7c:5a:58:fd:3d:f8:0e: 0c:cc:43:0c:ee:78:02:41:06:79:49:ff:df:2c:b7:f1:6a:9e: f2:7d:b1:9a:a7:69:0f:09:7b:32:40:77:3e:14:a3:ea:20:71: a7:b3:00:c0 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZsHbgckGWvye0iaqufW93j1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjUxMjEwMDg0MzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTc3YmQ4Nzc2ZDBmZjZmZDE1OTgzODA0YWVhMDE0MTE4ZTBhNjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWebJj8pYnPRj0dLyz6HtqNdPwJJ iBCeaZLB90oZ6qEJ18bCNpgOcxFojBP8kk51+awmOtYgwuwPWdm2txY6ck2GmJ0W ZdTV4sExmH5WHU6JAFzGadLA9GD6Dp/3kCNfT6IYePet1b+3BommCTVQLvBtsxmo HBzVoYdXZH/FjWHMD8prLrT/g4Z2wAEKiXJtTC9blmhu6qa4RYI/YTHKq5blrt6h U+EG4LOhh05V6/c3pNd5rB0aGTMemTwoOlHNpb05EGg1cFRTEXPat9idT22FxmIw p9Qe0umyf9ZTUsg4hCZGOs28+1RHa5jbeEy9hQ8AqCvR7g15XPOnAbJthwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFMV3vYd20P9v0VmDgErqAUEY4KaIMB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEveFhlOWgzYlFfMl9SV1lPQVN1b0JRUmpncG9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABZoGAwQA BZpFAwQABZpTAwQAWStVMA0GCSqGSIb3DQEBCwUAA4IBAQAhkI1YJm2yQfCyRZON rv8tC7N3Rg+qMvRTCvRC0XVNV7acgrgrUY3sf0PVwq3p1KndrZu8bh7eXmGD9eTe YHjRDUxs5fDWsC/g1Y6UtPx9L0rfpseYDKaQlW273HWc1dDcWeonaAzLYHJzKpZ7 iuyvUEkHx1Gqj5eTPKCPkm8VuXd/n8LKpTqnYaXE4Oadttyats7tS0jbm+QzYugX WhOfSPXEA2nveyNHSbwXysSTIf5bFuAghRRz0vzCW29KBq7EQzBnA3Mh86LcDzKC MD8EdXxaWP09+A4MzEMM7ngCQQZ5Sf/fLLfxap7yfbGap2kPCXsyQHc+FKPqIHGn swDA -----END CERTIFICATE-----Generated at Thu Dec 11 16:42:12 2025 by rpki-client