This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Xe-4mWERb5PHr2AhJjaGxTidUgs.roa File: Xe-4mWERb5PHr2AhJjaGxTidUgs.roa (raw, json) Hash identifier: ybXknStlWj+qLhCjK4USZdaFS8EYvl0Xy7zMkt7cfjc= Subject key identifier: 5D:EF:B8:99:61:11:6F:93:C7:AF:60:21:26:36:86:C5:38:9D:52:0B Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019A564F3654D1E5DCC995663E053AB31802 Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Xe-4mWERb5PHr2AhJjaGxTidUgs.roa Signing time: Wed 05 Nov 2025 23:17:03 +0000 ROA not before: Wed 05 Nov 2025 23:17:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207416 IP address blocks: 64.188.115.0/24 maxlen: 24 77.239.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:56:4f:36:54:d1:e5:dc:c9:95:66:3e:05:3a:b3:18:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Nov 5 23:17:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5defb89961116f93c7af6021263686c5389d520b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e3:cc:d1:00:21:de:1e:c4:30:58:94:ee:9f: 78:d3:aa:98:21:c2:f8:d6:71:94:18:3c:93:01:58: 80:62:86:02:37:4e:aa:8f:3d:05:59:b2:5c:33:2b: e2:a9:70:d7:53:10:e4:ef:24:b1:98:2d:df:27:ef: 45:42:c9:81:23:af:60:d8:1f:45:e6:19:25:6b:eb: e6:4e:08:c0:dd:07:11:bf:51:f7:82:67:68:50:be: a5:b6:ca:4e:26:6a:41:59:78:c1:e4:66:c0:49:f8: 4e:7d:fc:a1:de:df:ad:6c:cd:94:2c:85:20:37:5c: 55:bf:0b:72:dc:c1:74:53:fe:e2:2c:c8:68:6f:14: fc:fe:d2:8a:a8:83:9f:c9:d0:d0:c8:01:c6:40:30: 1e:89:cc:63:b9:b5:3f:59:e0:32:4f:53:fa:93:a7: 45:d8:0b:38:23:fa:2a:cf:e7:ac:23:14:a8:52:57: 29:ff:4f:d6:8c:68:70:3d:16:47:b9:87:1a:71:7b: f5:36:a6:72:d5:9f:57:08:ae:23:e2:3f:00:4c:6c: 70:4f:d6:7f:8f:82:9c:61:23:5c:f9:73:17:7b:16: 7d:f1:29:5f:06:f1:51:1c:44:c1:1e:a4:44:ae:c3: 92:a1:d5:9b:76:02:d5:a3:02:a4:5e:5e:2b:74:fa: ee:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:EF:B8:99:61:11:6F:93:C7:AF:60:21:26:36:86:C5:38:9D:52:0B X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Xe-4mWERb5PHr2AhJjaGxTidUgs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.188.115.0/24 77.239.127.0/24 Signature Algorithm: sha256WithRSAEncryption 54:34:3a:5c:ff:eb:94:67:dc:e5:b2:f4:cd:a2:eb:2d:9d:bd: 4a:64:cd:9f:ef:ad:38:0e:64:d5:3b:c8:9d:54:51:17:58:95: 43:7f:2d:82:d0:64:db:b2:1c:c5:f1:0c:00:de:fe:c6:4c:61: 95:26:fd:17:a0:9d:9f:b7:ff:df:9c:30:ee:85:03:f6:18:34: 8f:8c:a4:16:ae:cb:99:05:af:b7:ef:4c:dd:1e:1b:72:7b:7b: 20:c3:af:51:59:be:5d:c1:37:5c:59:1a:74:ef:d6:90:87:25: d0:fc:5c:30:dd:2a:62:b5:5e:ad:2a:9f:7f:44:92:29:13:18: c5:f6:4d:c3:e2:dc:9d:d8:88:22:a5:05:82:3a:a1:01:5c:b4: c4:a7:65:d2:a4:a5:30:d3:d3:4a:05:29:ed:13:22:3b:b7:5e: 42:3e:1d:c2:fe:13:c6:ee:44:09:6d:fe:dc:b0:f1:90:c1:80: 7f:6c:5a:4c:df:08:39:66:02:19:39:d8:13:6f:91:7f:74:32: 52:ad:2c:ba:f5:98:70:fb:62:40:0b:08:a0:81:73:92:54:d2: 4b:a9:af:6b:8f:92:67:29:b0:62:60:fc:a3:13:b2:9c:e7:dc: 1e:1a:20:cb:ee:11:10:b6:08:7f:55:98:14:33:0a:d7:b1:4a: 22:93:70:73 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZpWTzZU0eXcyZVmPgU6sxgCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjUxMTA1MjMxNzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZGVmYjg5OTYxMTE2ZjkzYzdhZjYwMjEyNjM2ODZjNTM4OWQ1MjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uPM0QAh3h7EMFiU7p9406qYIcL4 1nGUGDyTAViAYoYCN06qjz0FWbJcMyviqXDXUxDk7ySxmC3fJ+9FQsmBI69g2B9F 5hkla+vmTgjA3QcRv1H3gmdoUL6ltspOJmpBWXjB5GbASfhOffyh3t+tbM2ULIUg N1xVvwty3MF0U/7iLMhobxT8/tKKqIOfydDQyAHGQDAeicxjubU/WeAyT1P6k6dF 2As4I/oqz+esIxSoUlcp/0/WjGhwPRZHuYcacXv1NqZy1Z9XCK4j4j8ATGxwT9Z/ j4KcYSNc+XMXexZ98SlfBvFRHETBHqRErsOSodWbdgLVowKkXl4rdPruHwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFF3vuJlhEW+Tx69gISY2hsU4nVILMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvWGUtNG1XRVJiNVBIcjJBaEpqYUd4VGlkVWdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQLxzAwQA Te9/MA0GCSqGSIb3DQEBCwUAA4IBAQBUNDpc/+uUZ9zlsvTNoustnb1KZM2f7604 DmTVO8idVFEXWJVDfy2C0GTbshzF8QwA3v7GTGGVJv0XoJ2ft//fnDDuhQP2GDSP jKQWrsuZBa+370zdHhtye3sgw69RWb5dwTdcWRp079aQhyXQ/Fww3SpitV6tKp9/ RJIpExjF9k3D4tyd2IgipQWCOqEBXLTEp2XSpKUw09NKBSntEyI7t15CPh3C/hPG 7kQJbf7csPGQwYB/bFpM3wg5ZgIZOdgTb5F/dDJSrSy69Zhw+2JACwiggXOSVNJL qa9rj5JnKbBiYPyjE7Kc59weGiDL7hEQtgh/VZgUMwrXsUoik3Bz -----END CERTIFICATE-----Generated at Fri Dec 5 17:53:16 2025 by rpki-client