This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/XMavxFEEdIcWyH28Yfn5CoMdsPI.roa File: XMavxFEEdIcWyH28Yfn5CoMdsPI.roa (raw, json) Hash identifier: TGSKaggogk6AsDC0c0SbxhACD2tCmQET3HeGr+lBTQQ= Subject key identifier: 5C:C6:AF:C4:51:04:74:87:16:C8:7D:BC:61:F9:F9:0A:83:1D:B0:F2 Certificate issuer: /CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Certificate serial: 019AE0B6D0811EBBDDDB9D534A6429F94E9C Authority key identifier: 0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/XMavxFEEdIcWyH28Yfn5CoMdsPI.roa Signing time: Tue 02 Dec 2025 20:17:48 +0000 ROA not before: Tue 02 Dec 2025 20:17:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16509 IP address blocks: 91.220.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e0:b6:d0:81:1e:bb:dd:db:9d:53:4a:64:29:f9:4e:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Validity Not Before: Dec 2 20:17:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5cc6afc45104748716c87dbc61f9f90a831db0f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0a:e0:32:58:7a:77:73:84:52:1c:db:79:a4: e5:5f:46:4f:73:88:1d:0c:37:a1:ac:92:1e:1d:5a: 29:b3:53:5e:66:ff:b7:c5:53:6e:d9:7b:96:10:ea: f3:25:b6:af:2a:8f:8e:2d:26:0f:19:3e:7a:10:9a: 37:2e:8f:f0:a2:52:a7:f8:a6:47:b9:59:9d:ed:e4: 97:05:ca:6e:e7:ed:b1:fd:be:61:b0:ef:72:5b:d7: c5:e3:76:9a:47:23:5c:ac:67:4b:3d:80:95:e5:29: 3f:91:fc:ee:13:15:f2:1c:0f:ba:fb:88:8a:f7:6b: 18:64:3f:5b:29:ad:f4:1b:a2:8c:d3:88:f0:41:ae: 20:79:c6:54:1e:4b:2b:18:67:53:30:5f:b7:48:3c: 92:33:a5:87:3a:ac:ce:af:97:ed:15:39:7c:7e:d7: 2a:5c:c0:6c:a5:9b:75:0e:8f:7d:ee:a3:58:58:f1: 3e:5c:d7:98:72:6c:a7:5f:6e:e6:e7:50:6e:38:21: 0a:c8:ed:3c:87:e0:9b:d7:07:f0:d2:72:7a:e9:8f: 3d:91:36:dd:3b:b4:ce:c8:91:e2:df:54:e5:25:6d: d0:8d:92:69:36:55:55:51:35:a2:dd:04:85:0f:4e: 70:9f:3a:40:5f:38:ba:a3:2c:29:ae:a3:9a:0e:4c: e2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:C6:AF:C4:51:04:74:87:16:C8:7D:BC:61:F9:F9:0A:83:1D:B0:F2 X509v3 Authority Key Identifier: keyid:0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/XMavxFEEdIcWyH28Yfn5CoMdsPI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.25.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:b0:77:df:d5:0c:d2:e6:0c:5e:ac:b6:8c:86:c6:b7:10:d4: 15:41:c3:8d:74:b0:c3:06:c0:70:71:31:63:c4:8a:50:94:d8: b4:29:e8:e6:67:c3:b2:5e:2c:a0:76:f7:d8:c9:3f:56:8d:9e: fb:39:7c:30:03:25:9c:d2:6d:e7:11:35:c0:a1:b3:af:46:02: 0e:f3:0b:19:a6:7a:3b:9e:a6:50:79:49:77:7f:8d:00:af:c1: e8:ca:c2:dc:71:1e:5e:d0:86:af:38:99:36:c8:fa:76:50:36: c4:02:7b:87:d0:62:c9:ad:9a:34:e1:58:e8:a4:b2:0e:77:40: ef:b2:26:b6:44:82:82:4b:92:ed:cf:a7:80:15:82:15:bb:ff: 7a:a0:39:0c:d9:ff:f5:a1:91:0b:6e:37:e6:dc:d8:61:57:a0: 70:aa:2c:0d:8e:65:ca:82:3d:1b:24:61:bc:1d:ba:c6:3d:d3: 46:f5:4e:5b:f3:b3:f6:04:f6:1a:81:0d:37:ea:51:0d:99:8b: fe:1e:a1:78:5d:9e:5d:3e:62:b8:74:6b:b0:9a:3e:b1:d5:54: b8:2e:0b:55:67:09:0d:5a:7b:e1:44:20:80:59:f6:55:1f:ae: 37:5d:ff:e0:dc:e6:b8:fa:71:85:43:11:b7:5e:da:c3:ae:b1: 58:b6:e5:24 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrgttCBHrvd251TSmQp+U6cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMTdiZjI0OThmMzY4MmQ3MTgzZTQ3Zjc1YjI4YWY0MWMy ODE1YjkwHhcNMjUxMjAyMjAxNzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2M2YWZjNDUxMDQ3NDg3MTZjODdkYmM2MWY5ZjkwYTgzMWRiMGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugrgMlh6d3OEUhzbeaTlX0ZPc4gd DDehrJIeHVops1NeZv+3xVNu2XuWEOrzJbavKo+OLSYPGT56EJo3Lo/wolKn+KZH uVmd7eSXBcpu5+2x/b5hsO9yW9fF43aaRyNcrGdLPYCV5Sk/kfzuExXyHA+6+4iK 92sYZD9bKa30G6KM04jwQa4gecZUHksrGGdTMF+3SDySM6WHOqzOr5ftFTl8ftcq XMBspZt1Do997qNYWPE+XNeYcmynX27m51BuOCEKyO08h+Cb1wfw0nJ66Y89kTbd O7TOyJHi31TlJW3QjZJpNlVVUTWi3QSFD05wnzpAXzi6oywprqOaDkzi2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFzGr8RRBHSHFsh9vGH5+QqDHbDyMB8GA1UdIwQY MBaAFA8XvySY82gtcYPkf3WyivQcKBW5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMt YTQ5Y2JiODRmOTgyLzEvWE1hdnhGRUVkSWNXeUgyOFlmbjVDb01kc1BJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMtYTQ5Y2JiODRmOTgy LzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9wZMA0G CSqGSIb3DQEBCwUAA4IBAQALsHff1QzS5gxerLaMhsa3ENQVQcONdLDDBsBwcTFj xIpQlNi0KejmZ8OyXiygdvfYyT9WjZ77OXwwAyWc0m3nETXAobOvRgIO8wsZpno7 nqZQeUl3f40Ar8HoysLccR5e0IavOJk2yPp2UDbEAnuH0GLJrZo04VjopLIOd0Dv sia2RIKCS5Ltz6eAFYIVu/96oDkM2f/1oZELbjfm3NhhV6BwqiwNjmXKgj0bJGG8 HbrGPdNG9U5b87P2BPYagQ036lENmYv+HqF4XZ5dPmK4dGuwmj6x1VS4LgtVZwkN WnvhRCCAWfZVH643Xf/g3Oa4+nGFQxG3XtrDrrFYtuUk -----END CERTIFICATE-----Generated at Wed Dec 3 13:10:27 2025 by rpki-client