This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/XfJ11DBspe-UVtdSTCFu-Op8vIw.roa File: XfJ11DBspe-UVtdSTCFu-Op8vIw.roa (raw, json) Hash identifier: BvKnL2Eb2Ti7qczQR5RHyZqHVoGXj6vd2a8NySFq6Og= Subject key identifier: 5D:F2:75:D4:30:6C:A5:EF:94:56:D7:52:4C:21:6E:F8:EA:7C:BC:8C Certificate issuer: /CN=a1dc0630e96096de4822d1f51ef80c6fff54191b Certificate serial: 019A773FBF050F567A3C1EABD1EBD6478760 Authority key identifier: A1:DC:06:30:E9:60:96:DE:48:22:D1:F5:1E:F8:0C:6F:FF:54:19:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/XfJ11DBspe-UVtdSTCFu-Op8vIw.roa Signing time: Wed 12 Nov 2025 08:47:37 +0000 ROA not before: Wed 12 Nov 2025 08:47:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 91.227.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.crl rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:77:3f:bf:05:0f:56:7a:3c:1e:ab:d1:eb:d6:47:87:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1dc0630e96096de4822d1f51ef80c6fff54191b Validity Not Before: Nov 12 08:47:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5df275d4306ca5ef9456d7524c216ef8ea7cbc8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:43:0b:04:39:a3:90:57:c8:77:cf:1f:61:09: 0c:8b:b8:20:6a:45:b0:ae:6e:fb:55:13:4f:c8:e6: 00:3f:d6:0e:51:d8:41:d1:33:b7:f8:d3:f7:4c:62: 98:01:74:a9:e1:4d:b6:9c:c9:56:29:1e:f3:c5:60: 4d:3c:41:4c:e8:88:28:dd:7c:5c:64:a3:c2:66:23: 41:c1:e4:53:9b:7a:09:95:db:17:8e:69:ae:79:2d: a8:fd:66:49:62:b3:71:fb:88:9e:ce:d9:fc:3a:30: eb:3f:ca:ca:47:e8:3a:08:d9:c8:cc:46:fa:19:cf: cf:43:8e:3b:96:4d:dd:bc:62:49:af:d9:0e:c6:f1: 34:bd:e5:77:a5:34:4c:25:99:c2:1f:f6:21:c4:69: 66:d0:96:ed:e3:89:16:62:2e:f9:e9:24:f6:91:97: 41:34:0a:4b:5e:3c:c2:a0:35:72:2b:1f:d6:ca:4a: 13:bd:cc:8c:33:11:d1:f3:aa:3c:c3:26:9d:31:fe: 3b:30:cf:a0:6c:a7:64:c3:9e:3a:eb:69:72:a9:e8: 8a:9e:a3:85:ba:27:43:e5:2b:cc:7d:9c:7f:e6:10: b3:8f:ad:c3:dc:1c:26:c2:b9:be:1b:80:8f:50:b2: ec:39:1c:23:c6:ac:1c:ef:9d:0d:7c:33:bc:f7:7a: ab:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:F2:75:D4:30:6C:A5:EF:94:56:D7:52:4C:21:6E:F8:EA:7C:BC:8C X509v3 Authority Key Identifier: keyid:A1:DC:06:30:E9:60:96:DE:48:22:D1:F5:1E:F8:0C:6F:FF:54:19:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/XfJ11DBspe-UVtdSTCFu-Op8vIw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.227.62.0/24 Signature Algorithm: sha256WithRSAEncryption 51:eb:2b:46:d5:e4:15:f2:0a:30:5f:9d:ed:e6:6d:3a:85:b4: 16:b0:b0:25:a1:d7:12:a5:6f:4c:10:6c:be:3a:41:47:94:09: e1:40:3e:db:86:06:b9:5f:bc:f8:e9:93:01:4c:dc:20:f2:a7: 0c:7a:a8:9b:a4:1c:32:5c:49:e6:82:61:83:37:c4:d9:8d:84: 26:d7:f5:c2:da:da:84:9f:47:c0:25:b8:2b:b8:b1:6e:8f:74: 7a:c4:d3:27:89:4f:12:4d:f1:da:5a:b2:63:d9:b8:a5:07:ed: 85:ac:b4:88:80:46:b7:2a:56:3d:07:b7:22:54:a3:3f:8e:43: d7:d7:af:85:74:01:92:88:61:c2:4f:a3:12:79:6a:39:55:b1: 88:79:26:61:9f:05:b5:20:02:a6:95:06:d7:55:e3:23:0e:51: dc:61:ca:9d:c4:5a:80:b2:b4:2b:0a:e3:23:e7:04:81:d4:55: 15:ea:c6:92:c0:26:45:8a:05:4d:b4:e1:d2:ae:bb:9c:26:f8: 30:39:a5:17:f6:08:dc:3b:3a:73:68:06:40:6e:69:5d:07:39: 64:a4:be:a7:cd:79:aa:f5:b1:dd:d0:2f:f7:33:d1:67:ef:c5: f3:49:58:78:9f:48:a2:8d:88:af:70:52:1d:55:18:a4:fc:4b: 55:05:0f:b8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZp3P78FD1Z6PB6r0evWR4dgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZGMwNjMwZTk2MDk2ZGU0ODIyZDFmNTFlZjgwYzZmZmY1 NDE5MWIwHhcNMjUxMTEyMDg0NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZGYyNzVkNDMwNmNhNWVmOTQ1NmQ3NTI0YzIxNmVmOGVhN2NiYzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUMLBDmjkFfId88fYQkMi7ggakWw rm77VRNPyOYAP9YOUdhB0TO3+NP3TGKYAXSp4U22nMlWKR7zxWBNPEFM6Igo3Xxc ZKPCZiNBweRTm3oJldsXjmmueS2o/WZJYrNx+4ieztn8OjDrP8rKR+g6CNnIzEb6 Gc/PQ447lk3dvGJJr9kOxvE0veV3pTRMJZnCH/YhxGlm0Jbt44kWYi756ST2kZdB NApLXjzCoDVyKx/WykoTvcyMMxHR86o8wyadMf47MM+gbKdkw54662lyqeiKnqOF uidD5SvMfZx/5hCzj63D3Bwmwrm+G4CPULLsORwjxqwc750NfDO893qrkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF3yddQwbKXvlFbXUkwhbvjqfLyMMB8GA1UdIwQY MBaAFKHcBjDpYJbeSCLR9R74DG//VBkbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2R3R01PbGdsdDVJSXRIMUh2Z01iXzlVR1JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zZjkxNTgtNmE5MC00ZTU3LWEyOGYt M2UwNmEwMTgyNjE0LzEvWGZKMTFEQnNwZS1VVnRkU1RDRnUtT3A4dkl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8zZjkxNTgtNmE5MC00ZTU3LWEyOGYtM2UwNmEwMTgyNjE0 LzEvb2R3R01PbGdsdDVJSXRIMUh2Z01iXzlVR1JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+M+MA0G CSqGSIb3DQEBCwUAA4IBAQBR6ytG1eQV8gowX53t5m06hbQWsLAlodcSpW9MEGy+ OkFHlAnhQD7bhga5X7z46ZMBTNwg8qcMeqibpBwyXEnmgmGDN8TZjYQm1/XC2tqE n0fAJbgruLFuj3R6xNMniU8STfHaWrJj2bilB+2FrLSIgEa3KlY9B7ciVKM/jkPX 16+FdAGSiGHCT6MSeWo5VbGIeSZhnwW1IAKmlQbXVeMjDlHcYcqdxFqAsrQrCuMj 5wSB1FUV6saSwCZFigVNtOHSrrucJvgwOaUX9gjcOzpzaAZAbmldBzlkpL6nzXmq 9bHd0C/3M9Fn78XzSVh4n0iijYivcFIdVRik/EtVBQ+4 -----END CERTIFICATE-----Generated at Sat Nov 22 21:34:45 2025 by rpki-client