This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/xwPdgKNx4fzmiwN9p2kqP8qdVM4.roa File: xwPdgKNx4fzmiwN9p2kqP8qdVM4.roa (raw, json) Hash identifier: pSmFSPFPnvksBu4SvGKoZQ5volYSiLUkmE8oJVIgJnY= Subject key identifier: C7:03:DD:80:A3:71:E1:FC:E6:8B:03:7D:A7:69:2A:3F:CA:9D:54:CE Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430 Certificate serial: 019AC06945F45617DB01C4A07027D197C0D1 Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/xwPdgKNx4fzmiwN9p2kqP8qdVM4.roa Signing time: Wed 26 Nov 2025 13:45:15 +0000 ROA not before: Wed 26 Nov 2025 13:45:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48678 IP address blocks: 46.38.141.0/24 maxlen: 24 185.143.74.0/24 maxlen: 24 185.143.75.0/24 maxlen: 24 212.16.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c0:69:45:f4:56:17:db:01:c4:a0:70:27:d1:97:c0:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430 Validity Not Before: Nov 26 13:45:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c703dd80a371e1fce68b037da7692a3fca9d54ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d2:28:ea:a9:3e:42:b1:13:25:21:0a:10:fd: 29:4b:84:de:4f:96:fa:c9:bc:75:40:95:67:f1:4a: b8:fb:5d:93:1b:9d:57:2e:da:c4:11:6a:8b:fe:41: dd:d9:a5:fc:13:96:fb:e5:a6:1a:08:6a:60:4b:13: b8:3e:6f:62:8f:03:76:56:68:d6:c7:c6:be:cb:ba: e6:89:6f:0c:c6:1b:8e:57:eb:8e:8d:c8:ad:1f:9d: 26:44:9e:26:23:da:47:8c:46:08:7b:b4:9e:aa:df: 79:83:90:18:64:e0:7e:8e:a1:ec:4e:b7:e5:21:75: 76:05:6b:94:f2:b1:30:9a:f9:6e:6c:c0:d8:ca:c4: 62:6e:c2:84:16:c4:a8:de:c3:03:6e:0c:ab:73:43: 7d:7d:27:d3:b7:c7:b7:1c:d5:40:eb:4a:ec:ac:d2: 78:0b:1b:a8:e4:6d:fc:e8:34:6e:c1:df:72:6b:f4: e3:cc:32:93:8c:7a:af:50:8f:bc:0d:73:77:5d:69: a8:93:45:09:63:03:78:f0:07:21:c5:2e:53:e4:fb: 51:b8:54:83:82:57:f6:47:0d:87:1e:d8:39:78:e5: 96:d3:4e:09:a0:b9:e2:c4:de:34:97:c3:49:28:0a: b5:52:60:30:b0:49:49:87:f9:f0:89:07:1a:2c:74: ed:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:03:DD:80:A3:71:E1:FC:E6:8B:03:7D:A7:69:2A:3F:CA:9D:54:CE X509v3 Authority Key Identifier: keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/xwPdgKNx4fzmiwN9p2kqP8qdVM4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.38.141.0/24 185.143.74.0/23 212.16.85.0/24 Signature Algorithm: sha256WithRSAEncryption 61:96:7a:71:5a:03:09:76:39:e2:9e:a3:b3:ce:90:76:48:83: 9d:9a:3a:f5:4d:f0:d3:3d:3e:dd:76:d6:db:47:b5:a0:f4:b9: 9e:4b:bc:e4:6e:24:d5:68:1d:d7:1b:8d:3f:0b:5d:1b:23:98: e3:ea:a4:2f:57:bd:39:d8:56:4c:a0:a5:69:8b:6f:c6:9a:37: 25:4a:8a:5f:bc:63:e8:de:2f:31:d4:f8:b9:02:7d:db:8e:17: c3:32:02:17:6e:5e:45:89:fb:c2:49:f3:b3:06:e8:7e:8a:a2: 9b:6e:a0:d2:d9:6e:7b:c9:35:eb:1a:ac:25:24:20:ea:8e:06: 0b:ef:ce:ff:36:85:aa:27:6d:50:09:77:22:4d:60:e2:69:44: 8e:65:fc:e5:d5:9b:8a:0b:9a:90:88:d4:d1:80:28:64:d4:87: f7:2c:6c:7c:d2:05:9e:6c:d9:e7:0a:41:f3:41:b5:c8:7a:66: d5:d4:18:84:ae:f0:9b:a3:e6:ac:f7:da:51:fe:52:a0:cd:11: 8f:3f:ff:81:0e:51:cc:19:2d:6e:b7:b3:a4:f5:7f:d1:65:8d: 73:e5:ca:36:c6:9c:05:73:a5:28:58:d0:54:62:a5:e9:24:3c: f9:d8:7c:84:85:68:3e:99:26:c8:ac:7f:f9:70:ac:0d:fa:6e: a9:f5:b1:1e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZrAaUX0VhfbAcSgcCfRl8DRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj NWY0MzAwHhcNMjUxMTI2MTM0NTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzAzZGQ4MGEzNzFlMWZjZTY4YjAzN2RhNzY5MmEzZmNhOWQ1NGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5tIo6qk+QrETJSEKEP0pS4TeT5b6 ybx1QJVn8Uq4+12TG51XLtrEEWqL/kHd2aX8E5b75aYaCGpgSxO4Pm9ijwN2VmjW x8a+y7rmiW8MxhuOV+uOjcitH50mRJ4mI9pHjEYIe7Seqt95g5AYZOB+jqHsTrfl IXV2BWuU8rEwmvlubMDYysRibsKEFsSo3sMDbgyrc0N9fSfTt8e3HNVA60rsrNJ4 Cxuo5G386DRuwd9ya/TjzDKTjHqvUI+8DXN3XWmok0UJYwN48AchxS5T5PtRuFSD glf2Rw2HHtg5eOWW004JoLnixN40l8NJKAq1UmAwsElJh/nwiQcaLHTt9wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMcD3YCjceH85osDfadpKj/KnVTOMB8GA1UdIwQY MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt MmEwOWNjNTNhODA1LzEveHdQZGdLTng0ZnptaXdOOXAya3FQOHFkVk00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1 LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALiaNAwQB uY9KAwQA1BBVMA0GCSqGSIb3DQEBCwUAA4IBAQBhlnpxWgMJdjninqOzzpB2SIOd mjr1TfDTPT7ddtbbR7Wg9LmeS7zkbiTVaB3XG40/C10bI5jj6qQvV7052FZMoKVp i2/GmjclSopfvGPo3i8x1Pi5An3bjhfDMgIXbl5FifvCSfOzBuh+iqKbbqDS2W57 yTXrGqwlJCDqjgYL787/NoWqJ21QCXciTWDiaUSOZfzl1ZuKC5qQiNTRgChk1If3 LGx80gWebNnnCkHzQbXIembV1BiErvCbo+as99pR/lKgzRGPP/+BDlHMGS1ut7Ok 9X/RZY1z5co2xpwFc6UoWNBUYqXpJDz52HyEhWg+mSbIrH/5cKwN+m6p9bEe -----END CERTIFICATE-----Generated at Fri Dec 5 09:28:54 2025 by rpki-client