This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/XvsimD_vMwygE8r08SZyeuZ8Q70.roa File: XvsimD_vMwygE8r08SZyeuZ8Q70.roa (raw, json) Hash identifier: ythpc5lZMC9teyOxod0+e00DuCJN7i/hGKSi655eunw= Subject key identifier: 5E:FB:22:98:3F:EF:33:0C:A0:13:CA:F4:F1:26:72:7A:E6:7C:43:BD Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Certificate serial: 019B229FB23447DE0498E57B8D20EF85E991 Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/XvsimD_vMwygE8r08SZyeuZ8Q70.roa Signing time: Mon 15 Dec 2025 15:27:29 +0000 ROA not before: Mon 15 Dec 2025 15:27:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213114 IP address blocks: 185.69.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:9f:b2:34:47:de:04:98:e5:7b:8d:20:ef:85:e9:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Validity Not Before: Dec 15 15:27:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5efb22983fef330ca013caf4f126727ae67c43bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:9e:33:50:08:e2:e8:69:df:00:65:c7:57:e6: b7:ae:c2:6e:36:02:4d:1c:78:37:e7:ca:13:3b:c6: c2:88:90:69:53:44:9d:dc:01:1c:b7:a0:81:92:28: 87:01:0e:32:8e:7d:96:53:41:e2:5e:27:db:69:f1: 72:c2:fc:a4:e5:23:34:02:32:b3:f2:26:f0:20:f7: b7:48:a5:78:ac:46:12:52:e4:b6:3c:96:36:81:87: 5e:1d:5e:23:97:41:9c:0f:66:8a:b1:6b:9b:1c:eb: 7d:83:38:e0:34:4a:dd:2f:5e:25:f6:7c:41:26:86: 42:ef:f7:c6:93:8a:7b:21:4a:82:12:b5:29:b5:49: 31:44:f1:fb:bb:6c:b1:4b:0c:24:3a:8c:4c:e2:22: f8:60:30:07:e5:b5:97:b4:89:fa:03:6e:e3:2c:bd: 6e:f5:08:3e:14:65:f4:17:29:10:5c:63:00:ad:65: 3d:88:ff:80:36:92:61:ee:9b:70:75:0c:ce:15:04: f7:2d:9c:db:ec:a2:56:45:73:11:98:b6:40:68:d6: b9:8e:9c:c1:bb:44:a8:46:bd:fc:59:7e:18:49:2e: 26:79:98:55:4b:74:e1:b3:3f:1f:33:aa:7e:0c:21: 74:c2:a9:da:db:7b:34:65:2d:2b:03:0d:93:2c:bc: 00:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:FB:22:98:3F:EF:33:0C:A0:13:CA:F4:F1:26:72:7A:E6:7C:43:BD X509v3 Authority Key Identifier: keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/XvsimD_vMwygE8r08SZyeuZ8Q70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.69.222.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:1a:fc:e6:68:39:67:d7:b3:61:3b:29:7a:ef:97:83:5b:09: fc:5c:36:d8:4b:22:c1:d0:47:1f:e3:9f:ba:f6:5a:13:57:0a: 4f:27:ec:ed:6e:b5:af:86:fc:49:9a:00:ec:49:a8:42:03:cb: 0a:93:bf:0d:4f:3e:24:62:ad:29:c5:ba:aa:c2:fe:b7:4c:7d: 86:f8:30:4f:69:1a:e7:da:70:06:00:61:33:c1:41:b3:e9:00: b9:16:d3:db:f3:45:f2:87:b9:cb:11:1d:2c:25:88:4b:e4:f6: 25:fd:a1:e3:77:a6:d4:04:46:64:85:71:f8:c7:6d:fa:99:f5: d7:23:2f:1e:c3:e2:e8:d6:76:db:49:68:66:95:9b:cd:c1:f4: 09:a6:a0:a8:65:75:c8:4c:fe:af:be:bb:1e:c4:b2:8a:af:02: 1a:b8:d5:ac:20:67:d9:f6:eb:18:2b:40:52:40:8b:e0:ee:22: 4a:5b:fb:b7:e9:c6:1c:02:c1:4e:52:f6:fd:ec:ab:5a:a8:c5: 5c:aa:e9:55:6c:25:1a:44:1d:85:59:2d:eb:76:ef:69:d7:a4: 00:f4:64:1c:f3:eb:c0:8d:4a:a7:01:38:6c:5b:6b:26:07:d2: 16:17:87:a0:80:44:44:6b:e4:c8:99:bb:b2:9a:9c:1d:a2:b5: cd:33:32:2e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsin7I0R94EmOV7jSDvhemRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZWE4OTM2ZjhlNTMwNjNiNGIzYmRmMGYzYjE1YjJhZTY2 N2VmMTMwHhcNMjUxMjE1MTUyNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZWZiMjI5ODNmZWYzMzBjYTAxM2NhZjRmMTI2NzI3YWU2N2M0M2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZ4zUAji6GnfAGXHV+a3rsJuNgJN HHg358oTO8bCiJBpU0Sd3AEct6CBkiiHAQ4yjn2WU0HiXifbafFywvyk5SM0AjKz 8ibwIPe3SKV4rEYSUuS2PJY2gYdeHV4jl0GcD2aKsWubHOt9gzjgNErdL14l9nxB JoZC7/fGk4p7IUqCErUptUkxRPH7u2yxSwwkOoxM4iL4YDAH5bWXtIn6A27jLL1u 9Qg+FGX0FykQXGMArWU9iP+ANpJh7ptwdQzOFQT3LZzb7KJWRXMRmLZAaNa5jpzB u0SoRr38WX4YSS4meZhVS3Thsz8fM6p+DCF0wqna23s0ZS0rAw2TLLwA+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF77Ipg/7zMMoBPK9PEmcnrmfEO9MB8GA1UdIwQY MBaAFLnqiTb45TBjtLO98POxWyrmZ+8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEt YjI1MDk5N2ZjNzVkLzEvWHZzaW1EX3ZNd3lnRThyMDhTWnlldVo4UTcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEtYjI1MDk5N2ZjNzVk LzEvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUXeMA0G CSqGSIb3DQEBCwUAA4IBAQAvGvzmaDln17NhOyl675eDWwn8XDbYSyLB0Ecf45+6 9loTVwpPJ+ztbrWvhvxJmgDsSahCA8sKk78NTz4kYq0pxbqqwv63TH2G+DBPaRrn 2nAGAGEzwUGz6QC5FtPb80Xyh7nLER0sJYhL5PYl/aHjd6bUBEZkhXH4x236mfXX Iy8ew+Lo1nbbSWhmlZvNwfQJpqCoZXXITP6vvrsexLKKrwIauNWsIGfZ9usYK0BS QIvg7iJKW/u36cYcAsFOUvb97KtaqMVcqulVbCUaRB2FWS3rdu9p16QA9GQc8+vA jUqnAThsW2smB9IWF4eggEREa+TImbuympwdorXNMzIu -----END CERTIFICATE-----Generated at Fri Dec 19 02:26:13 2025 by rpki-client