This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/xgaU-VqbKsHRwTvqGsoaKEuGKow.roa File: xgaU-VqbKsHRwTvqGsoaKEuGKow.roa (raw, json) Hash identifier: KCD1gBpRuimmpVSq1QTev4WDGyQ/tSJP6ODD4Deta6c= Subject key identifier: C6:06:94:F9:5A:9B:2A:C1:D1:C1:3B:EA:1A:CA:1A:28:4B:86:2A:8C Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019A52A95FA0C5CCFA0BD06C3B0AE079B0EC Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/xgaU-VqbKsHRwTvqGsoaKEuGKow.roa Signing time: Wed 05 Nov 2025 06:17:03 +0000 ROA not before: Wed 05 Nov 2025 06:17:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 984 IP address blocks: 95.177.63.0/24 maxlen: 24 95.177.67.0/24 maxlen: 24 95.177.74.0/24 maxlen: 24 95.177.85.0/24 maxlen: 24 212.134.248.0/24 maxlen: 24 212.135.135.0/24 maxlen: 24 213.177.226.0/23 maxlen: 24 213.177.230.0/23 maxlen: 24 213.177.234.0/23 maxlen: 24 213.177.238.0/23 maxlen: 24 213.177.242.0/23 maxlen: 24 213.177.246.0/23 maxlen: 24 213.177.250.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 10:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:52:a9:5f:a0:c5:cc:fa:0b:d0:6c:3b:0a:e0:79:b0:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Nov 5 06:17:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c60694f95a9b2ac1d1c13bea1aca1a284b862a8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:cc:99:35:72:5b:e0:65:e8:77:c0:0e:5a:12: e7:2b:8c:9c:4c:61:3c:80:60:1d:ca:df:2d:23:17: bc:c5:87:0a:06:2d:10:a6:7a:20:7c:47:39:84:3b: 8f:4f:17:aa:92:b3:55:70:5c:6e:d2:db:4e:f0:03: 93:36:4b:04:40:a5:38:7c:a8:8d:1b:72:24:e6:0e: 85:7a:3b:87:02:e0:9c:d5:63:f1:27:2e:f4:7c:bb: a0:a7:f7:b2:ac:f7:59:74:79:91:bb:ba:2c:d0:94: 69:4c:60:08:05:71:4a:da:ac:79:60:5e:ac:e1:9e: c5:f5:a5:15:d0:69:48:63:81:dd:77:2a:1d:86:b4: 31:b8:4b:2c:65:03:45:93:9b:aa:55:1f:5a:3c:4b: 1c:02:55:ac:cb:8e:18:92:f2:c2:8c:91:26:2a:d6: d2:92:58:2b:34:c7:88:8a:0c:f0:5c:89:c2:8a:b2: 5e:a1:b4:32:6a:4e:57:fe:29:8e:74:62:4a:1b:6c: 6e:6d:93:7a:ea:2c:7e:9f:cc:02:29:e8:85:3d:82: ab:af:ec:51:2d:07:cc:d1:0b:3e:07:2a:fd:55:f7: 52:15:f1:87:78:e8:60:33:44:ac:af:0e:99:1c:75: a4:85:ac:d4:b8:0f:a6:a3:97:f1:44:f3:dc:75:48: ea:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:06:94:F9:5A:9B:2A:C1:D1:C1:3B:EA:1A:CA:1A:28:4B:86:2A:8C X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/xgaU-VqbKsHRwTvqGsoaKEuGKow.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.177.63.0/24 95.177.67.0/24 95.177.74.0/24 95.177.85.0/24 212.134.248.0/24 212.135.135.0/24 213.177.226.0/23 213.177.230.0/23 213.177.234.0/23 213.177.238.0/23 213.177.242.0/23 213.177.246.0/23 213.177.250.0/23 Signature Algorithm: sha256WithRSAEncryption 00:d9:fa:93:05:8f:a4:4a:54:ea:7c:68:f0:14:3c:92:ad:be: 63:3f:31:1d:8c:dc:6b:b9:d5:49:00:45:63:64:67:07:89:ac: c8:81:23:90:2b:76:db:40:96:a1:97:c4:b4:99:13:00:c5:45: b6:35:42:d7:3a:05:a8:4d:68:f2:ad:85:8b:4a:eb:4b:1d:48: eb:f4:be:3e:b0:b4:2e:df:b9:05:a7:b0:5a:54:c0:cf:52:b9: dd:1a:ed:c4:12:ad:de:6f:c0:02:4b:5d:a2:68:0a:18:b9:eb: 34:7e:59:6a:23:b2:be:20:29:3c:71:88:08:93:e4:2d:89:99: 14:32:33:23:d4:66:1b:6d:a1:8a:b9:fc:77:ac:7c:42:2a:65: 82:2a:00:6b:57:7d:be:83:1c:9f:0d:ee:3e:62:a6:7e:17:b0: fe:49:d8:6b:c2:36:98:71:19:5d:42:1b:48:c2:db:d3:09:eb: 4f:70:b0:c1:f6:cf:22:59:5c:50:10:af:0b:14:4f:13:e0:b5: 5b:02:23:eb:9b:75:39:7a:c1:1a:a2:42:7c:50:73:80:15:cb: fd:ab:ce:2b:5e:92:5e:7e:8f:90:09:79:2c:4d:17:c8:44:93: 04:56:40:2d:5a:84:20:f2:14:bd:7a:7d:57:d6:d3:19:af:21: ff:fb:0d:66 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgISAZpSqV+gxcz6C9BsOwrgebDsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjUxMTA1MDYxNzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjA2OTRmOTVhOWIyYWMxZDFjMTNiZWExYWNhMWEyODRiODYyYThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsyZNXJb4GXod8AOWhLnK4ycTGE8 gGAdyt8tIxe8xYcKBi0QpnogfEc5hDuPTxeqkrNVcFxu0ttO8AOTNksEQKU4fKiN G3Ik5g6FejuHAuCc1WPxJy70fLugp/eyrPdZdHmRu7os0JRpTGAIBXFK2qx5YF6s 4Z7F9aUV0GlIY4HddyodhrQxuEssZQNFk5uqVR9aPEscAlWsy44YkvLCjJEmKtbS klgrNMeIigzwXInCirJeobQyak5X/imOdGJKG2xubZN66ix+n8wCKeiFPYKrr+xR LQfM0Qs+Byr9VfdSFfGHeOhgM0Ssrw6ZHHWkhazUuA+mo5fxRPPcdUjqOwIDAQAB o4ICUTCCAk0wHQYDVR0OBBYEFMYGlPlamyrB0cE76hrKGihLhiqMMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEveGdhVS1WcWJLc0hSd1R2cUdzb2FLRXVHS293LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQAX7E/AwQA X7FDAwQAX7FKAwQAX7FVAwQA1Ib4AwQA1IeHAwQB1bHiAwQB1bHmAwQB1bHqAwQB 1bHuAwQB1bHyAwQB1bH2AwQB1bH6MA0GCSqGSIb3DQEBCwUAA4IBAQAA2fqTBY+k SlTqfGjwFDySrb5jPzEdjNxrudVJAEVjZGcHiazIgSOQK3bbQJahl8S0mRMAxUW2 NULXOgWoTWjyrYWLSutLHUjr9L4+sLQu37kFp7BaVMDPUrndGu3EEq3eb8ACS12i aAoYues0fllqI7K+ICk8cYgIk+QtiZkUMjMj1GYbbaGKufx3rHxCKmWCKgBrV32+ gxyfDe4+YqZ+F7D+SdhrwjaYcRldQhtIwtvTCetPcLDB9s8iWVxQEK8LFE8T4LVb AiPrm3U5esEaokJ8UHOAFcv9q84rXpJefo+QCXksTRfIRJMEVkAtWoQg8hS9en1X 1tMZryH/+w1m -----END CERTIFICATE-----Generated at Wed Dec 3 16:39:36 2025 by rpki-client