This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/xAvwjMwo9Fp6y1PvKbJ6RRt6G3w.roa File: xAvwjMwo9Fp6y1PvKbJ6RRt6G3w.roa (raw, json) Hash identifier: fJlab6oLHx5C5SCjDs4c/EMoaSWfL71TwFXzs0YH4ws= Subject key identifier: C4:0B:F0:8C:CC:28:F4:5A:7A:CB:53:EF:29:B2:7A:45:1B:7A:1B:7C Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Certificate serial: 019A9D771237D2CAA90DBC48F7E6CB6F15E2 Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/xAvwjMwo9Fp6y1PvKbJ6RRt6G3w.roa Signing time: Wed 19 Nov 2025 18:53:37 +0000 ROA not before: Wed 19 Nov 2025 18:53:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9304 IP address blocks: 77.246.220.0/24 maxlen: 24 88.80.137.0/24 maxlen: 24 185.58.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 21:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9d:77:12:37:d2:ca:a9:0d:bc:48:f7:e6:cb:6f:15:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Validity Not Before: Nov 19 18:53:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c40bf08ccc28f45a7acb53ef29b27a451b7a1b7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:56:91:81:18:21:5a:21:5c:00:8a:51:07:68: 73:39:a6:87:18:f6:5d:a6:8d:18:85:40:e9:1c:fe: c3:2d:0d:c4:eb:2c:5c:73:bb:c5:68:56:2a:b2:83: cc:9f:6d:63:b4:de:a6:57:8b:57:19:9d:de:17:c4: 42:98:a9:1c:c8:d6:38:fe:43:3d:85:ee:3b:a5:05: 53:e5:74:c9:63:09:fb:83:80:de:69:ed:e9:9e:59: 3c:ab:09:da:17:26:0f:30:32:8d:b2:81:60:57:0a: 50:57:cc:bb:44:f7:e8:d4:26:2a:56:95:38:b9:cc: 7f:95:46:d5:48:8e:15:ed:b7:23:eb:89:25:7b:96: 3b:c7:c1:6d:0a:d8:47:7f:37:64:f1:a8:d5:61:f5: 7a:fb:d1:6c:de:e4:48:24:f3:0c:c7:c9:69:34:68: 97:52:88:ff:f5:b4:09:77:ef:7e:18:0c:d4:05:7e: 90:cc:a7:99:86:eb:41:b6:cd:b5:78:76:17:b3:ae: c3:c6:4e:77:16:16:ff:cb:0f:2b:3f:6c:03:4d:73: 9a:c4:dd:28:54:6e:51:f7:a3:02:51:4f:e2:3f:de: 89:c0:ed:d1:ee:f1:b0:4a:ff:a2:13:64:c0:41:b3: 6d:c0:fc:8b:f2:b4:4f:e4:08:8e:9f:94:74:e5:1e: 50:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:0B:F0:8C:CC:28:F4:5A:7A:CB:53:EF:29:B2:7A:45:1B:7A:1B:7C X509v3 Authority Key Identifier: keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/xAvwjMwo9Fp6y1PvKbJ6RRt6G3w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.246.220.0/24 88.80.137.0/24 185.58.23.0/24 Signature Algorithm: sha256WithRSAEncryption 20:2e:dd:19:87:5e:f1:a4:3f:31:14:a2:78:dc:6a:8b:a1:60: f0:8c:e1:d4:16:cf:52:0f:a6:88:28:84:0c:9f:ba:58:9b:0d: aa:08:4b:56:de:fd:c7:b0:5e:74:48:6d:e0:57:61:28:39:16: e9:fb:bc:33:26:85:0e:56:fc:a7:88:14:70:74:f2:54:66:99: eb:dc:da:fd:09:25:28:c9:0a:e8:27:ce:32:e6:cd:01:16:13: d1:17:a0:c8:83:1e:f4:8d:47:1d:10:08:84:c5:00:e1:e4:4d: bc:8f:db:d6:f9:95:2c:30:f7:f1:1f:e8:2c:a4:44:7b:d0:5d: 07:d7:ec:d6:c0:60:3b:a8:1b:cc:16:46:55:cb:77:b2:2d:8f: 14:47:23:90:e8:3b:45:a9:c9:00:08:57:16:93:1f:4e:2a:15: 6e:d8:cf:6d:2f:5f:9b:3e:00:ea:b7:c3:b7:f7:1f:fa:f4:5b: ac:af:de:6a:c0:fa:47:cc:9e:c2:32:d3:ff:92:4b:37:e6:d8: 29:5c:a7:13:7d:e1:bc:38:88:48:3f:1a:2e:9d:42:6f:ab:97: 0a:02:16:83:e3:d4:4e:7a:e7:dd:03:a0:33:2a:65:19:24:35: e8:84:9d:a6:39:04:50:20:41:2a:1f:2c:e3:dc:d9:90:0d:32: 21:ed:6d:1f -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZqddxI30sqpDbxI9+bLbxXiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2 MzFiZmIwHhcNMjUxMTE5MTg1MzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDBiZjA4Y2NjMjhmNDVhN2FjYjUzZWYyOWIyN2E0NTFiN2ExYjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVaRgRghWiFcAIpRB2hzOaaHGPZd po0YhUDpHP7DLQ3E6yxcc7vFaFYqsoPMn21jtN6mV4tXGZ3eF8RCmKkcyNY4/kM9 he47pQVT5XTJYwn7g4Deae3pnlk8qwnaFyYPMDKNsoFgVwpQV8y7RPfo1CYqVpU4 ucx/lUbVSI4V7bcj64kle5Y7x8FtCthHfzdk8ajVYfV6+9Fs3uRIJPMMx8lpNGiX Uoj/9bQJd+9+GAzUBX6QzKeZhutBts21eHYXs67Dxk53Fhb/yw8rP2wDTXOaxN0o VG5R96MCUU/iP96JwO3R7vGwSv+iE2TAQbNtwPyL8rRP5AiOn5R05R5QywIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMQL8IzMKPRaestT7ymyekUbeht8MB8GA1UdIwQY MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt YWI4ZjFmMzM4N2VlLzEveEF2d2pNd285RnA2eTFQdktiSjZSUnQ2RzN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATfbcAwQA WFCJAwQAuToXMA0GCSqGSIb3DQEBCwUAA4IBAQAgLt0Zh17xpD8xFKJ43GqLoWDw jOHUFs9SD6aIKIQMn7pYmw2qCEtW3v3HsF50SG3gV2EoORbp+7wzJoUOVvyniBRw dPJUZpnr3Nr9CSUoyQroJ84y5s0BFhPRF6DIgx70jUcdEAiExQDh5E28j9vW+ZUs MPfxH+gspER70F0H1+zWwGA7qBvMFkZVy3eyLY8URyOQ6DtFqckACFcWkx9OKhVu 2M9tL1+bPgDqt8O39x/69Fusr95qwPpHzJ7CMtP/kks35tgpXKcTfeG8OIhIPxou nUJvq5cKAhaD49ROeufdA6AzKmUZJDXohJ2mOQRQIEEqHyzj3NmQDTIh7W0f -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:42 2025 by rpki-client