This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/xBLcc2AhQCKdlLPVE7OecNCDHAk.roa File: xBLcc2AhQCKdlLPVE7OecNCDHAk.roa (raw, json) Hash identifier: KULQbNfVs2hH3SWd6cCFH6Kq1uuNhfPkvbV/MNFA8As= Subject key identifier: C4:12:DC:73:60:21:40:22:9D:94:B3:D5:13:B3:9E:70:D0:83:1C:09 Certificate issuer: /CN=2588b1b560f998eccd3a6eff40543b59204d67b8 Certificate serial: 019AE6DDD6B5911AF506A52C73F61E1538E4 Authority key identifier: 25:88:B1:B5:60:F9:98:EC:CD:3A:6E:FF:40:54:3B:59:20:4D:67:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/xBLcc2AhQCKdlLPVE7OecNCDHAk.roa Signing time: Thu 04 Dec 2025 00:58:09 +0000 ROA not before: Thu 04 Dec 2025 00:58:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16276 IP address blocks: 94.185.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.mft rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e6:dd:d6:b5:91:1a:f5:06:a5:2c:73:f6:1e:15:38:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2588b1b560f998eccd3a6eff40543b59204d67b8 Validity Not Before: Dec 4 00:58:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c412dc73602140229d94b3d513b39e70d0831c09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4e:bd:30:9d:1e:0b:b6:57:d6:60:5e:38:d7: 1d:df:b2:1b:04:34:0e:4a:5d:fc:30:dc:f3:39:a1: 28:33:f5:b1:d8:cb:8b:6f:a2:f4:71:71:51:85:f3: a3:e9:4f:05:83:89:7b:18:2c:73:cc:3b:24:17:78: 96:d5:71:44:9d:71:99:58:22:4a:f0:de:b8:84:78: 16:1c:85:cd:db:c1:e1:96:e8:0a:5a:62:39:af:1a: 50:a1:92:88:01:2f:cf:72:ca:7d:76:c2:a2:f8:ba: f0:28:17:4c:dd:dc:d7:0d:5e:6b:6a:89:d9:24:8a: c8:1a:f2:d3:ee:f8:d9:b3:54:f5:03:cd:7d:19:21: e2:5a:55:77:fa:9f:c3:f6:f8:52:67:49:2e:15:c3: 99:f9:f9:78:3a:83:64:4b:f1:99:01:d3:77:b8:d8: 1a:fc:16:79:7e:6e:7a:e4:19:91:33:dd:ca:5b:c6: 9f:7b:38:56:86:7e:e0:d8:5e:26:ab:9f:63:61:8f: ef:75:28:e5:e2:ff:47:76:3c:ff:5e:cd:75:8f:64: 94:0f:5c:5e:d5:16:54:09:28:09:c9:33:b4:d0:76: e9:68:3f:f0:63:ba:11:40:10:b6:63:05:29:45:69: f6:8b:7f:a2:59:00:f5:f4:f1:87:64:d8:83:c5:ef: 8d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:12:DC:73:60:21:40:22:9D:94:B3:D5:13:B3:9E:70:D0:83:1C:09 X509v3 Authority Key Identifier: keyid:25:88:B1:B5:60:F9:98:EC:CD:3A:6E:FF:40:54:3B:59:20:4D:67:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/xBLcc2AhQCKdlLPVE7OecNCDHAk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.185.115.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:73:26:05:e4:d2:d0:db:50:91:34:c0:73:e9:73:31:5b:df: 2c:f9:9c:4f:60:47:ca:b8:36:67:9f:b3:78:fa:06:29:c9:f1: f5:ab:e9:43:80:60:9b:4b:c4:d5:b3:c9:5b:8a:b7:32:1a:cb: 9e:ee:dc:75:e1:db:bc:0c:ee:3c:57:68:c5:8e:b4:10:96:c4: 94:83:42:cf:01:85:0c:a2:a6:a4:4b:5f:4b:74:28:23:bb:1b: 97:28:a8:2d:87:2c:09:d5:71:84:ca:73:27:c9:35:11:39:56: c1:38:a7:11:7b:17:4c:e8:c3:fb:b1:73:4b:db:c5:e6:17:0b: 03:d9:05:a7:9a:c3:c4:70:4b:23:41:d6:1a:2e:82:a6:f6:ef: da:3a:79:c3:33:9f:6e:fd:d7:53:2e:18:ed:45:f4:b5:5a:b9: 2d:53:3e:72:7a:89:04:f5:9a:03:5a:2b:cb:94:3a:71:3b:0c: 25:7c:cc:c7:99:27:ef:88:58:1e:26:d0:c9:22:46:f8:4a:af: 70:c8:07:c6:d2:7d:40:fc:4c:03:9d:b0:33:d8:d0:97:b5:19: 37:39:0f:9d:8a:6a:01:32:ce:8a:84:46:7b:9e:e8:e6:d6:bd: d9:db:6d:e0:30:1b:9a:82:38:c1:83:66:81:8f:1f:11:62:c3: d4:e7:66:6f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrm3da1kRr1BqUsc/YeFTjkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ODhiMWI1NjBmOTk4ZWNjZDNhNmVmZjQwNTQzYjU5MjA0 ZDY3YjgwHhcNMjUxMjA0MDA1ODA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDEyZGM3MzYwMjE0MDIyOWQ5NGIzZDUxM2IzOWU3MGQwODMxYzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnU69MJ0eC7ZX1mBeONcd37IbBDQO Sl38MNzzOaEoM/Wx2MuLb6L0cXFRhfOj6U8Fg4l7GCxzzDskF3iW1XFEnXGZWCJK 8N64hHgWHIXN28HhlugKWmI5rxpQoZKIAS/Pcsp9dsKi+LrwKBdM3dzXDV5raonZ JIrIGvLT7vjZs1T1A819GSHiWlV3+p/D9vhSZ0kuFcOZ+fl4OoNkS/GZAdN3uNga /BZ5fm565BmRM93KW8afezhWhn7g2F4mq59jYY/vdSjl4v9Hdjz/Xs11j2SUD1xe 1RZUCSgJyTO00HbpaD/wY7oRQBC2YwUpRWn2i3+iWQD19PGHZNiDxe+NQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMQS3HNgIUAinZSz1ROznnDQgxwJMB8GA1UdIwQY MBaAFCWIsbVg+ZjszTpu/0BUO1kgTWe4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSllpeHRXRDVtT3pOT203X1FGUTdXU0JOWjdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8xOGQ2ZDUtNmM4Ni00MmMxLTg0ZjEt OTlhMDE4OTg4OGI1LzEveEJMY2MyQWhRQ0tkbExQVkU3T2VjTkNESEFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS8xOGQ2ZDUtNmM4Ni00MmMxLTg0ZjEtOTlhMDE4OTg4OGI1 LzEvSllpeHRXRDVtT3pOT203X1FGUTdXU0JOWjdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXrlzMA0G CSqGSIb3DQEBCwUAA4IBAQAecyYF5NLQ21CRNMBz6XMxW98s+ZxPYEfKuDZnn7N4 +gYpyfH1q+lDgGCbS8TVs8lbircyGsue7tx14du8DO48V2jFjrQQlsSUg0LPAYUM oqakS19LdCgjuxuXKKgthywJ1XGEynMnyTUROVbBOKcRexdM6MP7sXNL28XmFwsD 2QWnmsPEcEsjQdYaLoKm9u/aOnnDM59u/ddTLhjtRfS1WrktUz5yeokE9ZoDWivL lDpxOwwlfMzHmSfviFgeJtDJIkb4Sq9wyAfG0n1A/EwDnbAz2NCXtRk3OQ+dimoB Ms6KhEZ7nujm1r3Z223gMBuagjjBg2aBjx8RYsPU52Zv -----END CERTIFICATE-----Generated at Fri Dec 5 04:28:04 2025 by rpki-client