This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/NXQyZ7LJ1ksDgEU_hgRTX0etaVg.roa File: NXQyZ7LJ1ksDgEU_hgRTX0etaVg.roa (raw, json) Hash identifier: 8PuVmfxVFf7vo/xJKb6oWLVQSaKkf4GGjcQwE3oi0H0= Subject key identifier: 35:74:32:67:B2:C9:D6:4B:03:80:45:3F:86:04:53:5F:47:AD:69:58 Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56 Certificate serial: 019B1DD7A36DA7B076D002FB0241E0193C18 Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/NXQyZ7LJ1ksDgEU_hgRTX0etaVg.roa Signing time: Sun 14 Dec 2025 17:10:29 +0000 ROA not before: Sun 14 Dec 2025 17:10:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213021 IP address blocks: 185.39.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 05:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:d7:a3:6d:a7:b0:76:d0:02:fb:02:41:e0:19:3c:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56 Validity Not Before: Dec 14 17:10:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=35743267b2c9d64b0380453f8604535f47ad6958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:af:bf:92:e1:bb:63:5a:8b:1f:7b:a0:4b:3c: 33:1e:57:a1:be:59:57:88:3e:d8:01:db:41:9e:86: fd:12:cd:88:0d:2c:99:16:2d:73:a5:cc:6d:00:ff: 42:66:ed:d7:1a:a3:69:15:70:e8:fd:57:0d:96:c8: a5:f1:74:11:11:7a:d9:e0:1c:67:a0:37:e7:67:2e: d5:fa:6a:18:0a:58:f3:e2:1d:e1:f8:0c:e6:ad:be: 20:d3:29:53:58:cc:d5:76:d4:4f:56:6f:9a:aa:56: 0e:c0:5b:0b:a9:a5:9b:50:99:b8:78:d3:a2:9c:b4: 66:28:d9:70:e8:ee:2e:a7:90:5e:f8:3e:a1:e9:c2: 43:51:08:56:9b:bc:2e:db:b2:ee:a6:a7:0b:39:a6: 80:bf:eb:e0:c4:ca:5b:e8:f5:87:09:76:50:b4:20: d7:80:a7:3a:fe:25:51:5c:80:20:cc:3f:1b:58:fe: 23:39:4c:e4:b4:36:4e:6f:26:17:2a:25:78:59:1e: f7:f0:ca:96:d8:37:c2:da:8a:ac:ce:10:8b:b0:a6: 0b:7d:bf:31:1b:09:cd:c5:e7:50:ba:94:f4:9f:77: f6:12:35:33:10:fa:ab:01:91:f9:65:17:36:ed:fa: 29:88:bb:0f:93:2c:62:6d:9b:03:65:5b:d8:8e:6c: 94:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:74:32:67:B2:C9:D6:4B:03:80:45:3F:86:04:53:5F:47:AD:69:58 X509v3 Authority Key Identifier: keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/NXQyZ7LJ1ksDgEU_hgRTX0etaVg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.39.19.0/24 Signature Algorithm: sha256WithRSAEncryption b8:0e:5e:a5:8a:cb:06:82:3c:4b:0e:b3:6e:9e:46:a1:82:69: 88:ea:3a:1c:07:d0:83:66:b7:32:9f:10:10:fd:f6:3a:6c:9d: 90:c8:c9:c5:19:de:47:63:db:bb:a4:96:62:ed:5a:52:e9:7c: 59:0a:64:67:83:2f:60:ed:6b:02:16:e5:4c:1e:fc:4a:b1:1d: 94:d1:a3:4e:e2:54:66:f2:ad:6c:bf:95:97:78:7f:a9:cb:e3: 80:59:f3:0c:65:1d:84:87:b5:89:f3:74:79:fd:f4:62:8c:64: 01:1a:95:c2:6b:c6:18:83:05:93:1c:35:5e:e4:24:dd:c6:d5: ff:6b:7e:44:9b:83:98:ab:5f:2d:32:7d:a5:cb:46:83:9a:9b: b8:7c:3b:60:1c:27:09:cf:64:7e:dc:60:74:34:db:9d:f8:ef: 75:cd:a7:df:d9:31:96:cb:12:5c:ef:07:b7:9f:b3:66:9e:c5: 90:ed:39:db:f5:47:4c:e8:3b:4a:ce:83:15:9f:72:0c:a2:f9: 04:6a:a8:d2:5a:f8:3a:7a:5f:75:dc:56:43:f7:ec:f5:cb:61: f4:4c:9c:69:c9:f7:48:20:06:3b:4d:92:29:65:52:df:17:2b: 13:54:7e:81:16:8f:bb:e5:90:86:2b:be:94:1e:e8:38:84:c7: 8c:91:06:23 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsd16Ntp7B20AL7AkHgGTwYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0 ZjVlNTYwHhcNMjUxMjE0MTcxMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTc0MzI2N2IyYzlkNjRiMDM4MDQ1M2Y4NjA0NTM1ZjQ3YWQ2OTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6+/kuG7Y1qLH3ugSzwzHlehvllX iD7YAdtBnob9Es2IDSyZFi1zpcxtAP9CZu3XGqNpFXDo/VcNlsil8XQREXrZ4Bxn oDfnZy7V+moYCljz4h3h+Azmrb4g0ylTWMzVdtRPVm+aqlYOwFsLqaWbUJm4eNOi nLRmKNlw6O4up5Be+D6h6cJDUQhWm7wu27LupqcLOaaAv+vgxMpb6PWHCXZQtCDX gKc6/iVRXIAgzD8bWP4jOUzktDZObyYXKiV4WR738MqW2DfC2oqszhCLsKYLfb8x GwnNxedQupT0n3f2EjUzEPqrAZH5ZRc27fopiLsPkyxibZsDZVvYjmyUyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDV0MmeyydZLA4BFP4YEU19HrWlYMB8GA1UdIwQY MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt YmE5OGYxMTIyMTIxLzEvTlhReVo3TEoxa3NEZ0VVX2hnUlRYMGV0YVZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuScTMA0G CSqGSIb3DQEBCwUAA4IBAQC4Dl6lissGgjxLDrNunkahgmmI6jocB9CDZrcynxAQ /fY6bJ2QyMnFGd5HY9u7pJZi7VpS6XxZCmRngy9g7WsCFuVMHvxKsR2U0aNO4lRm 8q1sv5WXeH+py+OAWfMMZR2Eh7WJ83R5/fRijGQBGpXCa8YYgwWTHDVe5CTdxtX/ a35Em4OYq18tMn2ly0aDmpu4fDtgHCcJz2R+3GB0NNud+O91zaff2TGWyxJc7we3 n7NmnsWQ7Tnb9UdM6DtKzoMVn3IMovkEaqjSWvg6el913FZD9+z1y2H0TJxpyfdI IAY7TZIpZVLfFysTVH6BFo+75ZCGK76UHug4hMeMkQYj -----END CERTIFICATE-----Generated at Tue Dec 16 11:55:33 2025 by rpki-client