This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/fbe883-03af-4172-9081-8c994d741956/1/x6KDSme9lw7Iu3AdtV7RMHoohyo.roa File: x6KDSme9lw7Iu3AdtV7RMHoohyo.roa (raw, json) Hash identifier: x8yF9hM40PgiB156NR78jocFOxbNtdv47CvO82Qo55k= Subject key identifier: C7:A2:83:4A:67:BD:97:0E:C8:BB:70:1D:B5:5E:D1:30:7A:28:87:2A Certificate issuer: /CN=7149c7e70231a8928fd5d04357aceb6cc0f4a69b Certificate serial: 019B30DF5700D997F2221890C2D7986431B5 Authority key identifier: 71:49:C7:E7:02:31:A8:92:8F:D5:D0:43:57:AC:EB:6C:C0:F4:A6:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cUnH5wIxqJKP1dBDV6zrbMD0pps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/fbe883-03af-4172-9081-8c994d741956/1/x6KDSme9lw7Iu3AdtV7RMHoohyo.roa Signing time: Thu 18 Dec 2025 09:51:41 +0000 ROA not before: Thu 18 Dec 2025 09:51:41 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202850 IP address blocks: 185.152.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/fbe883-03af-4172-9081-8c994d741956/1/cUnH5wIxqJKP1dBDV6zrbMD0pps.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/fbe883-03af-4172-9081-8c994d741956/1/cUnH5wIxqJKP1dBDV6zrbMD0pps.mft rsync://rpki.ripe.net/repository/DEFAULT/cUnH5wIxqJKP1dBDV6zrbMD0pps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:df:57:00:d9:97:f2:22:18:90:c2:d7:98:64:31:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7149c7e70231a8928fd5d04357aceb6cc0f4a69b Validity Not Before: Dec 18 09:51:41 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c7a2834a67bd970ec8bb701db55ed1307a28872a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:54:b0:6f:d7:d0:cb:13:65:79:be:c2:0f:f2: 34:57:1e:42:54:42:b5:0b:61:aa:65:7c:41:46:88: 86:04:47:e9:bb:8b:64:cf:f3:83:07:85:da:10:5d: 9d:13:e6:44:47:6c:2c:cd:5c:2e:33:8f:1a:fb:b1: 63:47:7a:d2:5e:1c:11:73:ca:16:bd:c9:31:d3:3f: a7:2d:19:18:f8:7d:8a:c0:b4:e6:1a:0d:ec:24:71: 5a:7d:10:8a:de:8a:18:45:e4:6e:f0:14:59:7e:bd: 2c:d0:c4:08:e5:d1:84:52:9e:03:25:df:87:96:7b: 5f:15:91:94:06:f3:63:16:69:f3:8f:23:2c:d3:04: ec:65:09:d3:b5:ff:42:89:c0:e0:5a:1c:3c:55:e4: 80:cf:ca:fe:91:78:d7:4d:88:96:98:aa:e0:be:3b: ba:2d:9b:22:80:08:9d:e7:6a:81:4c:06:1e:33:ee: c4:6d:de:d7:2a:2c:17:c8:4c:f0:9b:02:1e:b0:19: 32:3a:99:e5:2e:70:50:e7:d6:78:1c:2e:e8:de:f7: 6a:b6:dd:10:fa:b2:ac:58:c3:ac:78:a4:fa:02:5d: c9:2f:66:0b:f4:dd:4b:7e:d7:79:60:39:0d:b2:a6: 44:ed:f8:ba:16:86:c9:c7:76:2c:ef:79:c4:83:ee: ac:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:A2:83:4A:67:BD:97:0E:C8:BB:70:1D:B5:5E:D1:30:7A:28:87:2A X509v3 Authority Key Identifier: keyid:71:49:C7:E7:02:31:A8:92:8F:D5:D0:43:57:AC:EB:6C:C0:F4:A6:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cUnH5wIxqJKP1dBDV6zrbMD0pps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/fbe883-03af-4172-9081-8c994d741956/1/x6KDSme9lw7Iu3AdtV7RMHoohyo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/fbe883-03af-4172-9081-8c994d741956/1/cUnH5wIxqJKP1dBDV6zrbMD0pps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.152.168.0/22 Signature Algorithm: sha256WithRSAEncryption 4c:ed:63:6f:bf:a9:5e:84:08:17:72:92:6c:3d:92:a5:72:ce: 9d:15:05:15:8c:4a:a7:b0:b7:11:ea:18:c7:19:f7:26:b4:0b: 51:71:ba:f6:ac:e0:59:55:ae:1f:52:d5:f6:e3:38:c6:f6:4f: 59:6a:d9:0c:51:71:e6:43:3d:6b:74:45:7a:cf:97:81:ab:1b: d4:24:5e:f7:de:03:07:2a:54:f4:46:4d:53:d7:ef:15:60:33: d1:d8:42:43:8c:67:4a:5a:96:aa:3f:23:76:3f:f0:3f:56:53: 76:ae:f1:f8:18:1e:a1:a5:25:9e:f3:93:1f:0b:f6:de:ca:db: ab:ca:a7:fe:65:3f:a8:10:34:57:42:a3:42:42:74:c8:cf:0e: d8:68:c0:97:25:5b:af:ab:22:76:1e:1e:94:ba:aa:d6:7e:58: 81:94:b5:8a:c2:6e:cb:27:e1:d3:1f:bb:14:24:51:4b:f4:94: ed:8e:77:88:cb:77:41:fb:8d:a0:63:6f:83:04:0f:e9:14:c8: 72:ce:b8:23:02:d7:22:bf:1f:94:f8:cc:ea:84:d4:fc:d7:8e: 8a:0e:cc:d1:49:18:fd:a0:44:24:89:6a:2f:40:d8:24:26:b2: 49:81:cb:b7:d6:7a:d4:c8:32:33:35:46:2f:49:f8:09:62:12: 25:f5:87:9d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsw31cA2ZfyIhiQwteYZDG1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxNDljN2U3MDIzMWE4OTI4ZmQ1ZDA0MzU3YWNlYjZjYzBm NGE2OWIwHhcNMjUxMjE4MDk1MTQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjN2EyODM0YTY3YmQ5NzBlYzhiYjcwMWRiNTVlZDEzMDdhMjg4NzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1Swb9fQyxNleb7CD/I0Vx5CVEK1 C2GqZXxBRoiGBEfpu4tkz/ODB4XaEF2dE+ZER2wszVwuM48a+7FjR3rSXhwRc8oW vckx0z+nLRkY+H2KwLTmGg3sJHFafRCK3ooYReRu8BRZfr0s0MQI5dGEUp4DJd+H lntfFZGUBvNjFmnzjyMs0wTsZQnTtf9CicDgWhw8VeSAz8r+kXjXTYiWmKrgvju6 LZsigAid52qBTAYeM+7Ebd7XKiwXyEzwmwIesBkyOpnlLnBQ59Z4HC7o3vdqtt0Q +rKsWMOseKT6Al3JL2YL9N1Lftd5YDkNsqZE7fi6FobJx3Ys73nEg+6svwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMeig0pnvZcOyLtwHbVe0TB6KIcqMB8GA1UdIwQY MBaAFHFJx+cCMaiSj9XQQ1es62zA9KabMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1VuSDV3SXhxSktQMWRCRFY2enJiTUQwcHBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9mYmU4ODMtMDNhZi00MTcyLTkwODEt OGM5OTRkNzQxOTU2LzEveDZLRFNtZTlsdzdJdTNBZHRWN1JNSG9vaHlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9mYmU4ODMtMDNhZi00MTcyLTkwODEtOGM5OTRkNzQxOTU2 LzEvY1VuSDV3SXhxSktQMWRCRFY2enJiTUQwcHBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZioMA0G CSqGSIb3DQEBCwUAA4IBAQBM7WNvv6lehAgXcpJsPZKlcs6dFQUVjEqnsLcR6hjH GfcmtAtRcbr2rOBZVa4fUtX24zjG9k9ZatkMUXHmQz1rdEV6z5eBqxvUJF733gMH KlT0Rk1T1+8VYDPR2EJDjGdKWpaqPyN2P/A/VlN2rvH4GB6hpSWe85MfC/beytur yqf+ZT+oEDRXQqNCQnTIzw7YaMCXJVuvqyJ2Hh6UuqrWfliBlLWKwm7LJ+HTH7sU JFFL9JTtjneIy3dB+42gY2+DBA/pFMhyzrgjAtcivx+U+MzqhNT8146KDszRSRj9 oEQkiWovQNgkJrJJgcu31nrUyDIzNUYvSfgJYhIl9Yed -----END CERTIFICATE-----Generated at Fri Dec 26 17:24:49 2025 by rpki-client