This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/X7jZyScmls8awghPjYY9NOVQ8Nc.roa File: X7jZyScmls8awghPjYY9NOVQ8Nc.roa (raw, json) Hash identifier: Q27vs6QdpcxTzMlenhQgDiMVe/i/UdEku/NlrWa4kYQ= Subject key identifier: 5F:B8:D9:C9:27:26:96:CF:1A:C2:08:4F:8D:86:3D:34:E5:50:F0:D7 Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346 Certificate serial: 019ABAEB03B5FD2F4D0BF6207B6F97BF7347 Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/X7jZyScmls8awghPjYY9NOVQ8Nc.roa Signing time: Tue 25 Nov 2025 12:09:15 +0000 ROA not before: Tue 25 Nov 2025 12:09:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 3319 IP address blocks: 185.143.57.0/24 maxlen: 24 195.178.132.0/24 maxlen: 24 195.178.133.0/24 maxlen: 24 195.178.134.0/24 maxlen: 24 195.178.135.0/24 maxlen: 24 195.178.144.0/23 maxlen: 23 195.178.147.0/24 maxlen: 24 212.111.207.0/24 maxlen: 24 212.111.216.0/24 maxlen: 24 212.111.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Nov 2025 22:51:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ba:eb:03:b5:fd:2f:4d:0b:f6:20:7b:6f:97:bf:73:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19426325acb8ce609a686fa655b058968809b346 Validity Not Before: Nov 25 12:09:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5fb8d9c9272696cf1ac2084f8d863d34e550f0d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:30:a7:ec:90:c8:ac:09:03:8a:ba:b8:85:ed: 14:7c:9b:fa:90:57:d7:00:36:ef:50:5e:d4:9f:fd: de:8b:5e:ed:8d:29:53:a4:f9:47:15:22:91:c8:d7: 76:ac:2e:95:3c:6d:14:ed:46:79:6d:b4:0b:2b:36: f7:2e:e3:ef:6b:a4:1c:de:0e:b9:64:08:cc:03:2b: 12:40:21:c2:be:02:f9:26:e4:85:99:66:ef:ab:d1: 05:95:4b:1e:cc:5f:4e:c6:1f:28:dd:1f:98:4a:10: b3:35:bb:9a:14:a2:55:07:5e:51:51:cc:a1:1b:cc: 0f:1f:01:32:20:ce:9e:60:0e:c9:db:c7:dc:3f:86: f0:cc:61:34:32:55:0a:e6:b6:03:b6:1e:54:af:91: 17:f9:39:44:62:94:0b:55:fe:8c:29:22:9e:4c:75: 9c:62:fe:62:ed:0e:6c:c9:9b:34:58:19:f2:1c:50: 5a:1b:46:f9:53:ad:ac:8e:c8:ee:f8:44:4e:d1:92: 05:b2:42:dc:de:c0:9b:91:89:2c:47:96:b5:d4:b9: 87:a0:dc:93:fc:7f:68:c6:44:67:08:b3:03:ad:1e: 74:02:88:26:63:9f:df:1b:ef:02:98:20:f9:33:54: 0d:03:2b:c5:bc:8d:b7:15:67:54:2d:47:77:ad:b6: fc:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:B8:D9:C9:27:26:96:CF:1A:C2:08:4F:8D:86:3D:34:E5:50:F0:D7 X509v3 Authority Key Identifier: keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/X7jZyScmls8awghPjYY9NOVQ8Nc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.143.57.0/24 195.178.132.0/22 195.178.144.0/23 195.178.147.0/24 212.111.207.0/24 212.111.216.0/23 Signature Algorithm: sha256WithRSAEncryption 5a:12:99:50:ef:c6:2b:6d:11:2f:ba:7e:6d:36:52:af:6d:68: a5:15:e1:df:33:f1:76:e2:c6:83:11:c0:ac:29:33:51:01:87: 8d:6d:7d:a1:a8:01:c3:e0:ff:11:e0:2d:f2:69:2a:47:79:be: 81:b7:61:d1:86:35:85:69:d0:fe:ef:09:7e:17:98:21:aa:af: 9b:c1:9e:9e:7e:2f:c8:e8:39:77:6e:ac:f9:a9:66:34:f3:3a: d8:60:3a:46:3c:b1:08:20:76:de:84:76:02:0b:5c:11:ae:da: f5:1c:d4:65:87:5f:58:93:1d:76:64:8a:b3:25:3b:fd:33:43: 87:3a:ff:4a:48:7a:81:cb:5f:e1:43:f9:4b:3b:26:9b:62:a5: 88:cc:e4:3a:c1:b9:fb:02:32:5d:fe:ee:35:11:21:8a:78:0d: a2:58:67:4e:34:63:3e:5e:c2:6d:23:09:96:a9:d3:78:5d:92: 08:76:f0:1a:7e:e4:e1:4b:0e:7c:ec:9d:cd:a8:d9:a8:d0:37: 38:48:6d:bf:f8:35:6d:9c:bd:5b:75:dc:05:f7:a7:be:49:c6: fd:44:db:22:2a:c9:c7:2d:99:25:69:71:70:0b:67:96:63:2c: 18:0c:63:0a:dc:68:b3:d4:0e:c0:f9:49:0f:e5:cf:99:55:01: d8:ac:02:b7 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZq66wO1/S9NC/Yge2+Xv3NHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw OWIzNDYwHhcNMjUxMTI1MTIwOTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmI4ZDljOTI3MjY5NmNmMWFjMjA4NGY4ZDg2M2QzNGU1NTBmMGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujCn7JDIrAkDirq4he0UfJv6kFfX ADbvUF7Un/3ei17tjSlTpPlHFSKRyNd2rC6VPG0U7UZ5bbQLKzb3LuPva6Qc3g65 ZAjMAysSQCHCvgL5JuSFmWbvq9EFlUsezF9Oxh8o3R+YShCzNbuaFKJVB15RUcyh G8wPHwEyIM6eYA7J28fcP4bwzGE0MlUK5rYDth5Ur5EX+TlEYpQLVf6MKSKeTHWc Yv5i7Q5syZs0WBnyHFBaG0b5U62sjsju+ERO0ZIFskLc3sCbkYksR5a11LmHoNyT /H9oxkRnCLMDrR50AogmY5/fG+8CmCD5M1QNAyvFvI23FWdULUd3rbb8UQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFF+42cknJpbPGsIIT42GPTTlUPDXMB8GA1UdIwQY MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt MDNmNGM3MTEzYzM0LzEvWDdqWnlTY21sczhhd2doUGpZWTlOT1ZROE5jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0 LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAuY85AwQC w7KEAwQBw7KQAwQAw7KTAwQA1G/PAwQB1G/YMA0GCSqGSIb3DQEBCwUAA4IBAQBa EplQ78YrbREvun5tNlKvbWilFeHfM/F24saDEcCsKTNRAYeNbX2hqAHD4P8R4C3y aSpHeb6Bt2HRhjWFadD+7wl+F5ghqq+bwZ6efi/I6Dl3bqz5qWY08zrYYDpGPLEI IHbehHYCC1wRrtr1HNRlh19Ykx12ZIqzJTv9M0OHOv9KSHqBy1/hQ/lLOyabYqWI zOQ6wbn7AjJd/u41ESGKeA2iWGdONGM+XsJtIwmWqdN4XZIIdvAafuThSw587J3N qNmo0Dc4SG2/+DVtnL1bddwF96e+Scb9RNsiKsnHLZklaXFwC2eWYywYDGMK3Giz 1A7A+UkP5c+ZVQHYrAK3 -----END CERTIFICATE-----Generated at Thu Nov 27 04:01:11 2025 by rpki-client