This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/XpJtq4XHP5fpiMQ6GSi2GrEqYxk.roa File: XpJtq4XHP5fpiMQ6GSi2GrEqYxk.roa (raw, json) Hash identifier: 49wnBYuiBte8eMcvL4ww79TThcyrVZ34/yKUowKGLHw= Subject key identifier: 5E:92:6D:AB:85:C7:3F:97:E9:88:C4:3A:19:28:B6:1A:B1:2A:63:19 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B2BDD6E6260DF8C01162BB7883B8DC9CE Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/XpJtq4XHP5fpiMQ6GSi2GrEqYxk.roa Signing time: Wed 17 Dec 2025 10:31:30 +0000 ROA not before: Wed 17 Dec 2025 10:31:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 36530 IP address blocks: 185.206.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:dd:6e:62:60:df:8c:01:16:2b:b7:88:3b:8d:c9:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Dec 17 10:31:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5e926dab85c73f97e988c43a1928b61ab12a6319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:01:7a:a7:7a:d0:ef:16:6f:43:c4:38:78:de: f0:76:e4:30:f3:e8:54:e4:35:2f:7a:7e:f8:bf:b4: 19:40:75:48:41:7a:9c:8c:b2:e7:bb:2c:c7:9a:3e: 04:b7:9c:97:b8:45:77:41:f9:ce:5f:7a:b8:39:9d: b6:77:81:02:49:0d:3a:b8:7c:fd:45:0f:6c:75:66: 55:ed:74:3e:8f:5b:68:a8:a3:68:c1:1c:e0:7f:52: 94:59:7d:e0:60:d1:67:b0:c4:1c:52:74:b0:fc:13: f7:45:55:b9:6c:af:90:69:85:ed:1c:6c:31:b0:63: d5:3d:1e:81:a6:29:c1:2b:95:86:36:fb:11:08:22: 3c:be:91:bb:dd:06:d0:b0:6c:c5:2e:36:33:ab:30: 4c:f2:f4:7d:c5:fc:71:4e:42:23:84:25:ef:9a:8a: fb:84:64:3c:39:5e:65:06:1a:a7:7a:e3:c4:27:40: 59:6c:64:13:4f:f7:f6:72:6b:96:f0:ee:bf:d5:4c: 48:7b:b9:82:79:80:a2:fc:e1:49:46:c8:61:f3:34: ca:72:ae:0e:d0:aa:98:9b:59:a2:0e:7f:f9:c9:54: e4:e1:14:25:4a:d7:98:56:80:4b:7a:c7:e8:aa:8f: b8:e6:ac:04:79:86:29:eb:b1:16:e1:ba:0a:ab:27: 60:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:92:6D:AB:85:C7:3F:97:E9:88:C4:3A:19:28:B6:1A:B1:2A:63:19 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/XpJtq4XHP5fpiMQ6GSi2GrEqYxk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.206.250.0/24 Signature Algorithm: sha256WithRSAEncryption aa:9f:dd:76:06:08:37:ad:57:c6:42:0e:b4:a9:0d:41:22:99: 8f:5d:79:cb:27:7d:6b:66:87:6e:d2:fd:be:49:9d:f6:47:57: 92:79:19:d9:58:d3:ab:6a:56:91:46:b4:ce:ef:e3:e6:69:50: 0c:ea:84:23:da:0e:f4:02:a8:db:7c:25:70:41:e4:40:a0:ba: 29:07:4e:c8:90:7b:31:f0:43:19:cd:4c:ae:80:f0:13:60:11: 8f:78:85:fc:41:cc:88:23:ca:fc:26:0e:c5:84:3c:72:0f:83: eb:e2:18:8a:14:e9:f1:1c:37:cf:bb:48:1b:a9:1d:a2:8c:99: 04:4a:65:88:31:99:b2:84:9f:3e:52:a3:d8:67:79:4c:e5:e8: 1d:9d:d4:e7:07:f9:a8:6c:8e:79:82:c1:6a:b9:2e:15:18:8b: dc:3e:6c:a1:46:16:31:f2:0e:c3:72:5d:0f:21:e0:66:43:42: c6:89:2c:1c:dc:25:ce:07:33:7c:94:28:35:31:f1:a5:55:69: 73:13:db:3e:3c:f8:ff:15:03:00:3b:a9:97:ef:fc:ba:5e:eb: af:21:19:15:fc:e5:a1:d7:b9:d1:50:40:c3:9b:23:57:81:b9: 50:64:45:82:dd:60:41:a1:0d:fc:2e:2d:53:aa:ea:e4:26:5f: 5f:25:8e:ae -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsr3W5iYN+MARYrt4g7jcnOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjUxMjE3MTAzMTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTkyNmRhYjg1YzczZjk3ZTk4OGM0M2ExOTI4YjYxYWIxMmE2MzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogF6p3rQ7xZvQ8Q4eN7wduQw8+hU 5DUven74v7QZQHVIQXqcjLLnuyzHmj4Et5yXuEV3QfnOX3q4OZ22d4ECSQ06uHz9 RQ9sdWZV7XQ+j1toqKNowRzgf1KUWX3gYNFnsMQcUnSw/BP3RVW5bK+QaYXtHGwx sGPVPR6BpinBK5WGNvsRCCI8vpG73QbQsGzFLjYzqzBM8vR9xfxxTkIjhCXvmor7 hGQ8OV5lBhqneuPEJ0BZbGQTT/f2cmuW8O6/1UxIe7mCeYCi/OFJRshh8zTKcq4O 0KqYm1miDn/5yVTk4RQlSteYVoBLesfoqo+45qwEeYYp67EW4boKqydgIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF6SbauFxz+X6YjEOhkothqxKmMZMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvWHBKdHE0WEhQNWZwaU1RNkdTaTJHckVxWXhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuc76MA0G CSqGSIb3DQEBCwUAA4IBAQCqn912Bgg3rVfGQg60qQ1BIpmPXXnLJ31rZodu0v2+ SZ32R1eSeRnZWNOralaRRrTO7+PmaVAM6oQj2g70AqjbfCVwQeRAoLopB07IkHsx 8EMZzUyugPATYBGPeIX8QcyII8r8Jg7FhDxyD4Pr4hiKFOnxHDfPu0gbqR2ijJkE SmWIMZmyhJ8+UqPYZ3lM5egdndTnB/mobI55gsFquS4VGIvcPmyhRhYx8g7Dcl0P IeBmQ0LGiSwc3CXOBzN8lCg1MfGlVWlzE9s+PPj/FQMAO6mX7/y6XuuvIRkV/OWh 17nRUEDDmyNXgblQZEWC3WBBoQ38Li1TqurkJl9fJY6u -----END CERTIFICATE-----Generated at Thu Dec 18 09:35:50 2025 by rpki-client