This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Xcm_15U7K3YOQYP9XULO0ezA_yo.roa File: Xcm_15U7K3YOQYP9XULO0ezA_yo.roa (raw, json) Hash identifier: 10sVoM13ARp/6yRlZ7fwP3oy6qBOkhj53vToB67jVWA= Subject key identifier: 5D:C9:BF:D7:95:3B:2B:76:0E:41:83:FD:5D:42:CE:D1:EC:C0:FF:2A Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Certificate serial: 019B2E869280F23F8169406BAF1EAFA2DE0D Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Xcm_15U7K3YOQYP9XULO0ezA_yo.roa Signing time: Wed 17 Dec 2025 22:55:29 +0000 ROA not before: Wed 17 Dec 2025 22:55:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 198584 IP address blocks: 46.249.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 11:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:86:92:80:f2:3f:81:69:40:6b:af:1e:af:a2:de:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Validity Not Before: Dec 17 22:55:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5dc9bfd7953b2b760e4183fd5d42ced1ecc0ff2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e6:d4:c1:1d:36:6e:0e:e0:c2:75:58:39:e9: 8a:54:01:4b:42:39:75:a6:a4:cc:9a:a7:93:ca:6f: cb:7d:37:c9:9d:f0:78:6a:15:4a:80:68:4f:ab:4a: d6:27:b4:40:69:7b:27:91:9a:7e:c0:9c:df:cf:a1: 67:0c:c0:53:cc:36:5f:72:29:db:d0:62:94:1f:93: f0:c8:56:da:22:b6:33:d3:49:5d:38:92:34:bc:02: 90:54:42:d7:03:3d:75:de:6b:81:18:21:07:a8:f9: dd:89:3e:7f:92:91:d7:46:55:a2:13:77:a8:b4:09: 4d:34:b5:cd:f3:ea:22:d3:6f:23:95:63:bd:2e:c0: 52:37:d9:7e:9c:50:a6:a0:14:65:96:4b:b7:24:67: 2f:08:a8:9f:ea:94:cf:94:10:71:fb:01:5f:4d:74: 6e:0c:16:1a:72:61:36:ee:6d:4b:fb:0e:fa:ba:f7: 68:27:2a:68:a0:f7:db:7d:10:8a:09:1f:5a:c5:12: e6:dc:7f:74:25:34:38:20:64:3b:9f:72:fe:66:21: 88:d7:64:9e:66:07:38:d5:f3:6a:61:41:a3:8c:08: 7b:c3:10:df:71:2b:76:a9:24:68:f2:fe:b4:5e:83: 31:25:03:a8:4d:e9:3b:bf:fe:87:d5:be:9a:e4:95: ae:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:C9:BF:D7:95:3B:2B:76:0E:41:83:FD:5D:42:CE:D1:EC:C0:FF:2A X509v3 Authority Key Identifier: keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Xcm_15U7K3YOQYP9XULO0ezA_yo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.249.110.0/24 Signature Algorithm: sha256WithRSAEncryption 61:b2:9b:e6:1d:6a:2d:77:28:f9:dc:e9:54:2f:e8:97:41:ae: e7:ec:b5:4b:82:c7:34:54:25:92:c0:e4:1e:71:e9:23:05:87: ae:74:63:52:f6:10:ef:8b:7a:9d:da:33:1b:4f:de:1e:98:9b: d0:6d:54:ca:67:04:d3:b3:1c:eb:33:d7:8a:60:fd:69:59:27: 8a:90:31:19:48:ab:10:93:65:59:21:9a:43:79:a2:29:34:75: 8a:4c:37:2c:bb:d1:3a:2b:81:10:9b:91:8a:99:51:c3:6a:7c: b0:12:cf:b4:22:7e:5e:c1:b4:19:77:5d:80:39:1c:ec:2c:cb: 8f:e3:6b:4d:d7:82:52:36:62:e5:e7:b7:5c:f0:34:7f:93:5b: 16:a0:f2:ad:ba:4d:62:05:8d:56:b0:e8:0e:61:de:f1:79:6c: 68:4c:32:be:24:2f:5b:1b:45:46:b1:04:a0:6d:40:2c:a0:55: 54:c8:5d:53:ac:6e:c3:61:b5:9e:08:9c:eb:e6:d2:d1:87:28: 20:43:ee:a8:f6:ca:27:a2:cf:4d:91:08:35:5f:7e:4c:e3:66: 10:1a:25:e3:97:e9:ab:01:bd:5d:5e:47:78:31:9d:95:a5:7c: d0:1d:22:60:28:e2:04:ea:22:02:3c:31:76:13:52:10:bc:25: d6:a5:2a:48 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsuhpKA8j+BaUBrrx6vot4NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2 NWE0NzgwHhcNMjUxMjE3MjI1NTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZGM5YmZkNzk1M2IyYjc2MGU0MTgzZmQ1ZDQyY2VkMWVjYzBmZjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArebUwR02bg7gwnVYOemKVAFLQjl1 pqTMmqeTym/LfTfJnfB4ahVKgGhPq0rWJ7RAaXsnkZp+wJzfz6FnDMBTzDZfcinb 0GKUH5PwyFbaIrYz00ldOJI0vAKQVELXAz113muBGCEHqPndiT5/kpHXRlWiE3eo tAlNNLXN8+oi028jlWO9LsBSN9l+nFCmoBRllku3JGcvCKif6pTPlBBx+wFfTXRu DBYacmE27m1L+w76uvdoJypooPfbfRCKCR9axRLm3H90JTQ4IGQ7n3L+ZiGI12Se Zgc41fNqYUGjjAh7wxDfcSt2qSRo8v60XoMxJQOoTek7v/6H1b6a5JWuiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF3Jv9eVOyt2DkGD/V1CztHswP8qMB8GA1UdIwQY MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt ZmUwNjU5MTc2YTU2LzEvWGNtXzE1VTdLM1lPUVlQOVhVTE8wZXpBX3lvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2 LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALvluMA0G CSqGSIb3DQEBCwUAA4IBAQBhspvmHWotdyj53OlUL+iXQa7n7LVLgsc0VCWSwOQe cekjBYeudGNS9hDvi3qd2jMbT94emJvQbVTKZwTTsxzrM9eKYP1pWSeKkDEZSKsQ k2VZIZpDeaIpNHWKTDcsu9E6K4EQm5GKmVHDanywEs+0In5ewbQZd12AORzsLMuP 42tN14JSNmLl57dc8DR/k1sWoPKtuk1iBY1WsOgOYd7xeWxoTDK+JC9bG0VGsQSg bUAsoFVUyF1TrG7DYbWeCJzr5tLRhyggQ+6o9sonos9NkQg1X35M42YQGiXjl+mr Ab1dXkd4MZ2VpXzQHSJgKOIE6iICPDF2E1IQvCXWpSpI -----END CERTIFICATE-----Generated at Thu Dec 18 18:51:44 2025 by rpki-client