This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/XB-fsLFIuHXBl78yiHAD8W17p20.roa File: XB-fsLFIuHXBl78yiHAD8W17p20.roa (raw, json) Hash identifier: eAJmYSCU69qf+jIxMda4rWwPYuOaaZre9n7QYJX3uTE= Subject key identifier: 5C:1F:9F:B0:B1:48:B8:75:C1:97:BF:32:88:70:03:F1:6D:7B:A7:6D Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019AFFAA6B4D623B91CE00E83631E5FE5B4C Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/XB-fsLFIuHXBl78yiHAD8W17p20.roa Signing time: Mon 08 Dec 2025 20:32:29 +0000 ROA not before: Mon 08 Dec 2025 20:32:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214025 IP address blocks: 45.151.140.0/24 maxlen: 24 89.106.14.0/24 maxlen: 24 194.36.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 02:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ff:aa:6b:4d:62:3b:91:ce:00:e8:36:31:e5:fe:5b:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Dec 8 20:32:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5c1f9fb0b148b875c197bf32887003f16d7ba76d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a4:a1:e4:af:6d:26:e3:66:11:50:22:4f:91: 3b:74:6f:17:31:72:d4:9a:cc:cb:d0:03:04:bb:30: 3e:6d:98:a5:ce:86:fa:f9:f9:d6:11:af:0c:f2:40: cf:5a:38:0c:ad:94:68:04:94:c4:08:52:2b:6c:c8: de:15:2b:b4:35:5d:95:dc:b5:9b:a5:0f:14:e4:9d: 3f:ab:72:95:3c:ea:e8:38:f0:8b:2f:15:a9:b6:2a: 05:e2:6b:6c:50:11:5c:51:a2:41:19:91:81:87:6a: 10:1e:b0:b1:8f:6b:44:14:45:6e:ed:c7:9b:53:99: b4:a4:6f:39:f2:f1:88:94:9b:b6:57:b2:18:49:16: 86:0a:62:08:24:de:ca:c8:49:88:b4:c7:1c:58:cc: 88:25:93:81:19:de:8a:90:1f:0e:95:ba:f6:91:81: bf:fc:f3:6f:4b:3f:9b:86:9b:75:b1:fc:a1:9a:0b: d3:15:29:e3:d9:f9:2b:59:ce:88:8e:9b:8b:64:9d: 8b:2d:be:7a:1b:f5:c3:c2:66:d7:f0:48:e5:e8:4f: 94:a6:7a:63:3a:7f:8c:6d:9d:aa:80:f3:70:e6:d6: 04:5b:fd:89:31:31:86:32:8c:72:e4:5c:e9:a4:83: 6b:2c:fd:84:ef:48:ff:f2:6f:ca:a1:78:20:da:be: df:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:1F:9F:B0:B1:48:B8:75:C1:97:BF:32:88:70:03:F1:6D:7B:A7:6D X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/XB-fsLFIuHXBl78yiHAD8W17p20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.151.140.0/24 89.106.14.0/24 194.36.33.0/24 Signature Algorithm: sha256WithRSAEncryption 86:f6:37:e4:8c:07:b9:da:ae:51:20:44:a4:2d:5b:8a:8f:94: 32:5e:5d:c9:af:62:23:73:e0:23:93:09:62:fe:44:15:09:f8: f1:ec:12:ac:2f:9a:c6:b7:6a:1d:14:2c:39:a3:24:bf:db:84: cd:76:7a:d6:a0:3c:34:4f:2e:20:5e:0a:b8:6d:5a:bc:5d:69: 4d:01:df:08:a5:df:c7:8a:e6:05:ee:7a:dc:0a:64:da:90:2d: 38:08:ed:5a:b6:8e:51:b6:23:fe:0f:dd:ee:71:83:42:cd:e6: b6:9f:9a:19:3f:39:e1:df:91:6b:4d:29:40:31:19:bb:27:cb: 60:ee:82:74:4c:ad:c4:36:f4:85:fe:bd:1d:00:a3:43:d1:dc: f1:b6:b9:b7:b9:a4:c1:50:56:a9:5c:2d:57:89:b0:18:51:13: 3a:f5:09:af:47:e1:34:32:dd:bf:6e:bf:54:12:43:79:7b:8c: ac:cd:23:69:39:5b:61:ea:af:16:cc:5f:94:d5:43:47:62:b1: a3:86:5b:b2:6e:fc:eb:ad:5e:d6:b1:e7:d5:60:5b:b3:b0:4a: cf:11:74:b6:27:8f:f0:cc:e2:ee:14:e2:b1:74:d4:4b:23:19: c7:9f:8c:86:77:c3:34:4b:0c:3b:4c:4a:30:d5:9d:f5:1e:4d: 4a:c9:e3:a5 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZr/qmtNYjuRzgDoNjHl/ltMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjUxMjA4MjAzMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzFmOWZiMGIxNDhiODc1YzE5N2JmMzI4ODcwMDNmMTZkN2JhNzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKSh5K9tJuNmEVAiT5E7dG8XMXLU mszL0AMEuzA+bZilzob6+fnWEa8M8kDPWjgMrZRoBJTECFIrbMjeFSu0NV2V3LWb pQ8U5J0/q3KVPOroOPCLLxWptioF4mtsUBFcUaJBGZGBh2oQHrCxj2tEFEVu7ceb U5m0pG858vGIlJu2V7IYSRaGCmIIJN7KyEmItMccWMyIJZOBGd6KkB8Olbr2kYG/ /PNvSz+bhpt1sfyhmgvTFSnj2fkrWc6IjpuLZJ2LLb56G/XDwmbX8Ejl6E+Upnpj On+MbZ2qgPNw5tYEW/2JMTGGMoxy5FzppINrLP2E70j/8m/KoXgg2r7fqQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFwfn7CxSLh1wZe/MohwA/Fte6dtMB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEvWEItZnNMRkl1SFhCbDc4eWlIQUQ4VzE3cDIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALZeMAwQA WWoOAwQAwiQhMA0GCSqGSIb3DQEBCwUAA4IBAQCG9jfkjAe52q5RIESkLVuKj5Qy Xl3Jr2Ijc+Ajkwli/kQVCfjx7BKsL5rGt2odFCw5oyS/24TNdnrWoDw0Ty4gXgq4 bVq8XWlNAd8Ipd/HiuYF7nrcCmTakC04CO1ato5RtiP+D93ucYNCzea2n5oZPznh 35FrTSlAMRm7J8tg7oJ0TK3ENvSF/r0dAKND0dzxtrm3uaTBUFapXC1XibAYURM6 9QmvR+E0Mt2/br9UEkN5e4yszSNpOVth6q8WzF+U1UNHYrGjhluybvzrrV7WsefV YFuzsErPEXS2J4/wzOLuFOKxdNRLIxnHn4yGd8M0Sww7TEow1Z31Hk1KyeOl -----END CERTIFICATE-----Generated at Tue Dec 16 12:06:49 2025 by rpki-client