This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xEHPuRtKNh1cx0pmZtFKCAwD8tE.roa File: xEHPuRtKNh1cx0pmZtFKCAwD8tE.roa (raw, json) Hash identifier: WAvx6Hy+W47QIz2zzgZFuwjDD2kR82o544608k2d39s= Subject key identifier: C4:41:CF:B9:1B:4A:36:1D:5C:C7:4A:66:66:D1:4A:08:0C:03:F2:D1 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019A718F27BF939D00A14011F44A8F527325 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xEHPuRtKNh1cx0pmZtFKCAwD8tE.roa Signing time: Tue 11 Nov 2025 06:16:38 +0000 ROA not before: Tue 11 Nov 2025 06:16:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49981 IP address blocks: 37.202.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:71:8f:27:bf:93:9d:00:a1:40:11:f4:4a:8f:52:73:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 11 06:16:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c441cfb91b4a361d5cc74a6666d14a080c03f2d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d9:14:8d:07:80:ff:5b:e4:56:8f:d5:3c:69: 20:7e:4c:e1:3b:54:a1:c7:ef:e1:ea:a2:c2:03:ac: 9c:e8:eb:81:4b:b2:b9:34:79:c5:c9:28:6d:b0:3c: 85:29:a4:14:f4:ba:b9:55:6b:29:8b:08:01:65:f5: d4:06:a9:37:fe:ea:ee:63:d6:91:b9:12:8d:f2:42: 80:c6:b4:15:62:ca:7d:d1:db:a5:90:4c:23:08:30: 0f:fa:fd:44:1b:05:c7:67:00:61:3f:d7:53:52:31: fe:a7:93:53:bc:86:d9:52:50:ed:85:73:28:9f:dc: ad:d3:2e:f6:00:f8:fc:ce:a4:23:4d:ba:b2:b1:4e: 7c:9c:a2:cd:64:63:87:36:71:55:5d:05:57:2d:ee: cd:20:f4:4c:a5:81:3a:50:d1:19:d9:19:a9:0f:b3: e0:62:98:a0:8a:bb:94:43:01:28:1f:12:8d:13:6c: 35:62:a6:b2:33:a6:c2:99:86:aa:2d:fd:e3:3d:85: 08:d7:83:41:1a:ab:11:f8:ec:b0:07:ea:2b:a9:b8: eb:02:41:c5:22:f2:22:77:5c:dd:63:91:08:14:e9: 47:97:26:b5:ca:66:19:fd:78:af:03:dc:49:c2:c6: 34:50:4c:40:54:7c:71:c4:f1:ee:2f:db:14:69:c8: 7d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:41:CF:B9:1B:4A:36:1D:5C:C7:4A:66:66:D1:4A:08:0C:03:F2:D1 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xEHPuRtKNh1cx0pmZtFKCAwD8tE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.202.210.0/24 Signature Algorithm: sha256WithRSAEncryption 42:22:b7:e0:71:b6:a2:41:df:a4:f0:56:61:d7:a7:c7:df:23: 0f:42:07:71:cb:01:e6:70:3b:ce:2b:9f:25:c1:93:b4:88:f6: 0b:e1:5d:a3:e5:69:88:e7:fd:f0:3a:41:14:de:a3:35:c4:0b: 8b:00:d2:b8:b7:41:c2:d7:83:22:68:56:a3:34:05:4d:78:88: 7a:11:21:db:02:a2:4b:2a:6f:68:f4:50:40:f7:d2:ba:3b:47: 4d:be:23:58:9c:c7:94:af:f3:2c:6e:e3:82:4f:53:0d:f2:e3: 34:09:5d:8f:29:60:b1:08:d3:bc:50:40:91:85:93:da:d0:a9: dc:ca:2e:56:d0:b3:fd:60:ee:3b:cf:65:c1:eb:c0:94:b6:54: b9:95:3f:f8:78:0c:fe:2f:76:67:1c:d3:ba:74:50:b9:c0:ca: 22:57:9c:fe:79:22:34:11:79:f4:da:b8:d4:7c:5d:c0:28:0f: a1:32:db:71:c8:24:c6:46:c8:0c:e7:58:15:d6:88:a4:e3:5c: 9b:da:73:d9:ec:63:07:63:5b:b8:6b:49:23:2f:46:6c:1c:49: 04:7c:2d:78:b7:19:8c:81:0c:fc:ce:12:51:0f:42:69:7f:34: 8e:c1:7e:c6:ed:79:5c:4d:fe:73:be:00:c8:48:05:16:ba:94: d0:32:05:d2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpxjye/k50AoUAR9EqPUnMlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTExMDYxNjM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDQxY2ZiOTFiNGEzNjFkNWNjNzRhNjY2NmQxNGEwODBjMDNmMmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9kUjQeA/1vkVo/VPGkgfkzhO1Sh x+/h6qLCA6yc6OuBS7K5NHnFyShtsDyFKaQU9Lq5VWspiwgBZfXUBqk3/uruY9aR uRKN8kKAxrQVYsp90dulkEwjCDAP+v1EGwXHZwBhP9dTUjH+p5NTvIbZUlDthXMo n9yt0y72APj8zqQjTbqysU58nKLNZGOHNnFVXQVXLe7NIPRMpYE6UNEZ2RmpD7Pg YpigiruUQwEoHxKNE2w1YqayM6bCmYaqLf3jPYUI14NBGqsR+OywB+orqbjrAkHF IvIid1zdY5EIFOlHlya1ymYZ/XivA9xJwsY0UExAVHxxxPHuL9sUach9QQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMRBz7kbSjYdXMdKZmbRSggMA/LRMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEveEVIUHVSdEtOaDFjeDBwbVp0RktDQXdEOHRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJcrSMA0G CSqGSIb3DQEBCwUAA4IBAQBCIrfgcbaiQd+k8FZh16fH3yMPQgdxywHmcDvOK58l wZO0iPYL4V2j5WmI5/3wOkEU3qM1xAuLANK4t0HC14MiaFajNAVNeIh6ESHbAqJL Km9o9FBA99K6O0dNviNYnMeUr/MsbuOCT1MN8uM0CV2PKWCxCNO8UECRhZPa0Knc yi5W0LP9YO47z2XB68CUtlS5lT/4eAz+L3ZnHNO6dFC5wMoiV5z+eSI0EXn02rjU fF3AKA+hMttxyCTGRsgM51gV1oik41yb2nPZ7GMHY1u4a0kjL0ZsHEkEfC14txmM gQz8zhJRD0JpfzSOwX7G7XlcTf5zvgDISAUWupTQMgXS -----END CERTIFICATE-----Generated at Wed Dec 3 09:42:31 2025 by rpki-client