This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/STZKxSbzUYyXUyydQBoeh7f5WSU.roa File: STZKxSbzUYyXUyydQBoeh7f5WSU.roa (raw, json) Hash identifier: 2dXYIkhJ6cX4bMaIUv9yFeoHLF6wnyWKQlnhRKdn3WA= Subject key identifier: 49:36:4A:C5:26:F3:51:8C:97:53:2C:9D:40:1A:1E:87:B7:F9:59:25 Certificate issuer: /CN=5c43bdc0bb54fb869ee83a2bd8bd87739893a42c Certificate serial: 019B31E6D35E491CB33908F32D77145E323A Authority key identifier: 5C:43:BD:C0:BB:54:FB:86:9E:E8:3A:2B:D8:BD:87:73:98:93:A4:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/STZKxSbzUYyXUyydQBoeh7f5WSU.roa Signing time: Thu 18 Dec 2025 14:39:29 +0000 ROA not before: Thu 18 Dec 2025 14:39:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212485 IP address blocks: 193.163.12.0/24 maxlen: 24 2a0e:2140::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.mft rsync://rpki.ripe.net/repository/DEFAULT/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:e6:d3:5e:49:1c:b3:39:08:f3:2d:77:14:5e:32:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c43bdc0bb54fb869ee83a2bd8bd87739893a42c Validity Not Before: Dec 18 14:39:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=49364ac526f3518c97532c9d401a1e87b7f95925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:43:a7:76:be:7a:8a:ae:db:6d:6b:f7:b3:8d: 65:ec:12:63:aa:5f:df:5f:08:84:f7:82:43:56:a4: f8:01:77:da:c6:9b:38:78:2d:a3:24:26:fe:a1:03: 7d:3c:80:d1:2b:a8:40:8f:4f:50:a9:36:e2:02:73: 80:0f:6d:36:5a:11:be:bf:c3:12:05:b9:f6:98:40: b1:63:a2:f5:1e:44:a2:3e:cd:9f:99:c2:32:2d:d9: 45:19:bb:03:cc:0f:2c:e9:fb:41:07:29:ab:f5:3c: 1c:55:16:ba:36:e3:7e:0b:88:33:9c:41:11:de:45: 7b:75:5a:f4:69:df:71:12:14:1a:79:85:91:fc:65: 97:2e:5b:ea:01:8a:6d:24:fa:11:ce:ce:e5:da:2a: 40:c8:3f:55:60:ae:2c:84:26:36:0b:66:1a:21:4d: e8:51:8e:10:1b:09:f1:fa:73:aa:8f:f2:16:ed:4e: 1f:a3:5b:8e:e8:ed:f1:90:f1:6f:e2:c2:c7:2b:79: 95:fe:7b:a8:d8:92:60:f8:c5:b0:9d:08:5c:36:5c: 40:8b:1b:64:4e:83:05:78:98:a2:d2:7e:2d:47:32: b0:98:dc:4a:55:91:ff:2c:ed:a1:20:78:9b:18:02: 8e:21:46:38:75:65:08:11:0c:cf:a2:27:23:ed:ee: b3:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:36:4A:C5:26:F3:51:8C:97:53:2C:9D:40:1A:1E:87:B7:F9:59:25 X509v3 Authority Key Identifier: keyid:5C:43:BD:C0:BB:54:FB:86:9E:E8:3A:2B:D8:BD:87:73:98:93:A4:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/STZKxSbzUYyXUyydQBoeh7f5WSU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.163.12.0/24 IPv6: 2a0e:2140::/29 Signature Algorithm: sha256WithRSAEncryption 73:ae:e8:ea:de:21:8b:46:0d:56:4f:e9:46:48:d0:17:65:59: 85:d8:66:23:4c:cc:6a:3f:53:39:ed:01:8f:b4:d9:60:36:6a: 5c:e9:e2:d2:1c:0d:3e:f9:22:56:42:f0:2f:f6:0c:96:92:17: a0:fc:85:e8:59:32:f1:28:c4:f3:7b:21:5b:34:ce:41:9d:cb: 3d:b0:4f:e5:57:50:db:39:ae:3e:01:8b:e5:da:b9:a1:e4:3f: 31:b6:f7:e3:bf:2f:8d:43:7d:5c:b8:d5:e1:30:69:41:e0:af: 11:7e:52:35:f6:2e:fb:f7:d9:b7:dc:7d:4b:25:5d:28:90:e4: 84:a1:c5:0d:4a:f6:e5:2a:fa:38:14:21:98:68:ed:fa:0d:d6: e1:ea:1e:90:58:ad:8d:c3:7e:94:5b:1a:07:c8:40:a2:38:1d: 46:e9:26:49:a7:db:1f:8f:e9:92:85:7a:68:56:d2:9a:90:b4: 2a:9f:45:b0:70:86:60:73:0d:be:60:70:a6:f6:30:3a:77:81: c9:1d:d2:78:47:75:7a:4b:ad:ce:65:ac:bf:e9:be:0f:64:88: 08:32:bc:5f:f9:e4:6d:7d:b1:fc:97:67:c1:d6:7b:6e:e7:f4: 5e:9a:4f:af:e6:76:44:cd:d7:4f:82:20:cb:6e:be:81:3c:c7: 0e:0e:4a:e5 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZsx5tNeSRyzOQjzLXcUXjI6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNDNiZGMwYmI1NGZiODY5ZWU4M2EyYmQ4YmQ4NzczOTg5 M2E0MmMwHhcNMjUxMjE4MTQzOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTM2NGFjNTI2ZjM1MThjOTc1MzJjOWQ0MDFhMWU4N2I3Zjk1OTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0Ondr56iq7bbWv3s41l7BJjql/f XwiE94JDVqT4AXfaxps4eC2jJCb+oQN9PIDRK6hAj09QqTbiAnOAD202WhG+v8MS Bbn2mECxY6L1HkSiPs2fmcIyLdlFGbsDzA8s6ftBBymr9TwcVRa6NuN+C4gznEER 3kV7dVr0ad9xEhQaeYWR/GWXLlvqAYptJPoRzs7l2ipAyD9VYK4shCY2C2YaIU3o UY4QGwnx+nOqj/IW7U4fo1uO6O3xkPFv4sLHK3mV/nuo2JJg+MWwnQhcNlxAixtk ToMFeJii0n4tRzKwmNxKVZH/LO2hIHibGAKOIUY4dWUIEQzPoicj7e6zvQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEk2SsUm81GMl1MsnUAaHoe3+VklMB8GA1UdIwQY MBaAFFxDvcC7VPuGnug6K9i9h3OYk6QsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEVPOXdMdFUtNGFlNkRvcjJMMkhjNWlUcEN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9hYjZiN2YtNGYxOS00N2FkLTg4OTUt NDg5NmIyMjhmMTg3LzEvU1RaS3hTYnpVWXlYVXl5ZFFCb2VoN2Y1V1NVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9hYjZiN2YtNGYxOS00N2FkLTg4OTUtNDg5NmIyMjhmMTg3 LzEvWEVPOXdMdFUtNGFlNkRvcjJMMkhjNWlUcEN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwaMMMA0E AgACMAcDBQMqDiFAMA0GCSqGSIb3DQEBCwUAA4IBAQBzrujq3iGLRg1WT+lGSNAX ZVmF2GYjTMxqP1M57QGPtNlgNmpc6eLSHA0++SJWQvAv9gyWkheg/IXoWTLxKMTz eyFbNM5Bncs9sE/lV1DbOa4+AYvl2rmh5D8xtvfjvy+NQ31cuNXhMGlB4K8RflI1 9i7799m33H1LJV0okOSEocUNSvblKvo4FCGYaO36Ddbh6h6QWK2Nw36UWxoHyECi OB1G6SZJp9sfj+mShXpoVtKakLQqn0WwcIZgcw2+YHCm9jA6d4HJHdJ4R3V6S63O Zay/6b4PZIgIMrxf+eRtfbH8l2fB1ntu5/Remk+v5nZEzddPgiDLbr6BPMcODkrl -----END CERTIFICATE-----Generated at Fri Dec 19 13:10:03 2025 by rpki-client