This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/xb1kVRlCQrmq1sbFvHc33VvZGro.roa File: xb1kVRlCQrmq1sbFvHc33VvZGro.roa (raw, json) Hash identifier: CEs6PByMtOt5At4V7XecqYH809kjf4RyY/2+5ubAMkk= Subject key identifier: C5:BD:64:55:19:42:42:B9:AA:D6:C6:C5:BC:77:37:DD:5B:D9:1A:BA Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Certificate serial: 019AB4A8D9861098A2675100297F1512DABB Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/xb1kVRlCQrmq1sbFvHc33VvZGro.roa Signing time: Mon 24 Nov 2025 06:59:15 +0000 ROA not before: Mon 24 Nov 2025 06:59:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 21859 IP address blocks: 89.37.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 07:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b4:a8:d9:86:10:98:a2:67:51:00:29:7f:15:12:da:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Validity Not Before: Nov 24 06:59:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c5bd6455194242b9aad6c6c5bc7737dd5bd91aba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:80:bb:7f:48:a1:fb:f5:83:c9:07:0c:00:89: 5a:ae:f5:c1:12:92:06:fa:73:3a:6b:f2:c2:ee:27: fc:a9:f8:c0:c2:3c:ed:cf:98:49:73:3a:d1:8f:9b: 9a:5c:1f:71:0f:b7:fb:59:12:dd:66:50:2c:08:d3: f9:3d:06:d7:50:49:09:09:e4:55:22:d7:4b:f9:ec: cf:da:97:d8:d6:5f:f5:f9:2d:8a:4c:60:4a:c5:ea: 63:7a:e5:48:9d:cb:b1:a9:2c:33:05:e2:a1:ee:1d: 3e:b1:0b:23:a5:9a:88:d5:5b:6a:22:d5:b5:51:9f: 3e:08:44:c1:b4:0a:63:ef:9a:8a:06:f8:17:36:26: 0b:05:7c:17:d7:0f:ea:01:70:16:5d:7c:64:f1:4a: 0c:0f:e8:ba:af:d9:80:27:90:d9:fd:69:12:ca:18: bd:d6:e0:65:67:fb:6f:3d:10:57:cb:ad:67:38:72: 8e:16:0c:8f:4f:5a:68:ac:3f:7f:e9:67:f4:16:84: 6a:c7:10:ac:07:24:fa:94:a9:94:f9:8b:36:6a:43: e1:ee:5b:f1:f0:d0:72:e9:20:2f:ef:7a:d6:e0:fa: 14:0c:c0:44:6a:47:4d:4e:a9:e5:39:81:74:d6:3d: 14:00:a9:4d:2f:6b:4b:f8:4e:de:08:71:84:47:19: 5a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:BD:64:55:19:42:42:B9:AA:D6:C6:C5:BC:77:37:DD:5B:D9:1A:BA X509v3 Authority Key Identifier: keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/xb1kVRlCQrmq1sbFvHc33VvZGro.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.37.196.0/24 Signature Algorithm: sha256WithRSAEncryption 64:1e:76:bf:b4:24:6c:60:e2:3e:97:e6:19:84:3e:ea:2d:9b: 9d:e2:34:31:d4:f3:d1:ea:ea:b6:ea:e5:e5:98:98:b5:fa:0a: 6b:78:85:46:72:ec:9a:bd:f2:62:2d:db:03:ca:a6:b3:a1:95: 52:07:6d:d7:43:c1:d9:29:67:0b:7e:f4:31:92:63:f9:16:af: 42:9d:4d:3f:70:e8:f4:c3:f2:c6:d8:6b:0b:32:88:b5:08:40: f7:c7:c9:0c:24:34:97:24:4d:1e:9a:b1:69:3c:0a:50:b5:2e: 09:e2:05:07:c3:1d:c4:6c:50:c8:69:65:68:c7:76:77:9b:10: 1c:34:42:d2:aa:01:f0:e7:7a:4f:fd:09:95:88:0e:42:29:9b: 82:47:b3:92:44:67:92:bd:8f:54:99:08:e2:92:28:2b:01:ca: ce:a0:7f:dc:9f:45:6d:fc:e1:b3:bf:6f:b3:97:1e:72:04:02: 5c:00:6d:4b:c6:f1:2d:76:8b:30:7a:b0:eb:2a:bf:3e:a8:91: ea:44:16:fb:32:6c:1b:37:2a:35:a8:0b:52:54:97:88:11:cf: 14:dd:cd:c9:f7:0c:04:41:4a:d0:0b:dd:81:a9:d5:9e:95:e7: c8:04:29:1c:84:cb:bf:c0:46:8d:df:31:65:30:79:4b:dc:48: 3b:73:28:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq0qNmGEJiiZ1EAKX8VEtq7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm MDFjMWQwHhcNMjUxMTI0MDY1OTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNWJkNjQ1NTE5NDI0MmI5YWFkNmM2YzViYzc3MzdkZDViZDkxYWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04C7f0ih+/WDyQcMAIlarvXBEpIG +nM6a/LC7if8qfjAwjztz5hJczrRj5uaXB9xD7f7WRLdZlAsCNP5PQbXUEkJCeRV ItdL+ezP2pfY1l/1+S2KTGBKxepjeuVIncuxqSwzBeKh7h0+sQsjpZqI1VtqItW1 UZ8+CETBtApj75qKBvgXNiYLBXwX1w/qAXAWXXxk8UoMD+i6r9mAJ5DZ/WkSyhi9 1uBlZ/tvPRBXy61nOHKOFgyPT1porD9/6Wf0FoRqxxCsByT6lKmU+Ys2akPh7lvx 8NBy6SAv73rW4PoUDMBEakdNTqnlOYF01j0UAKlNL2tL+E7eCHGERxlafwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMW9ZFUZQkK5qtbGxbx3N91b2Rq6MB8GA1UdIwQY MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt YjQyZjIzZDgyOGMzLzEveGIxa1ZSbENRcm1xMXNiRnZIYzMzVnZaR3JvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSXEMA0G CSqGSIb3DQEBCwUAA4IBAQBkHna/tCRsYOI+l+YZhD7qLZud4jQx1PPR6uq26uXl mJi1+gpreIVGcuyavfJiLdsDyqazoZVSB23XQ8HZKWcLfvQxkmP5Fq9CnU0/cOj0 w/LG2GsLMoi1CED3x8kMJDSXJE0emrFpPApQtS4J4gUHwx3EbFDIaWVox3Z3mxAc NELSqgHw53pP/QmViA5CKZuCR7OSRGeSvY9UmQjikigrAcrOoH/cn0Vt/OGzv2+z lx5yBAJcAG1LxvEtdoswerDrKr8+qJHqRBb7MmwbNyo1qAtSVJeIEc8U3c3J9wwE QUrQC92BqdWelefIBCkchMu/wEaN3zFlMHlL3Eg7cyiR -----END CERTIFICATE-----Generated at Fri Dec 5 17:19:31 2025 by rpki-client