This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/Xe3VgFT7EtpGV7uCq0Il_J4rlYU.roa File: Xe3VgFT7EtpGV7uCq0Il_J4rlYU.roa (raw, json) Hash identifier: S47j+2bOJp7lA10pUc1Yws3zG/K60JFDeZ0Ba+bM62o= Subject key identifier: 5D:ED:D5:80:54:FB:12:DA:46:57:BB:82:AB:42:25:FC:9E:2B:95:85 Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Certificate serial: 019AE3DBE11259B09DCD2B709607EA255696 Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/Xe3VgFT7EtpGV7uCq0Il_J4rlYU.roa Signing time: Wed 03 Dec 2025 10:57:09 +0000 ROA not before: Wed 03 Dec 2025 10:57:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 61400 IP address blocks: 185.39.205.0/24 maxlen: 24 2a09:6283::/32 maxlen: 32 2a12:c300::/30 maxlen: 30 2a12:c300::/32 maxlen: 32 2a12:c301::/32 maxlen: 32 2a12:c302::/32 maxlen: 32 2a12:c303::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:db:e1:12:59:b0:9d:cd:2b:70:96:07:ea:25:56:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Validity Not Before: Dec 3 10:57:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5dedd58054fb12da4657bb82ab4225fc9e2b9585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f9:c4:57:b2:2b:27:8e:46:0b:84:a5:32:a4: 7b:79:b5:45:64:24:cd:f9:99:76:8c:a2:55:ca:89: 55:2f:6f:d5:1c:76:ac:6a:05:92:b4:14:f7:44:dc: f6:81:de:f5:0b:e4:e1:88:27:4a:b6:1f:bd:8b:d4: d0:6f:92:53:3c:61:ca:4f:13:55:09:cd:38:13:79: a7:b8:72:1d:4a:86:fa:2f:19:94:c4:52:7c:a1:9f: f6:cb:90:0c:8d:b8:d4:4f:60:ab:72:22:74:63:9d: 48:ee:64:2e:c4:15:27:d5:93:00:30:25:5d:f9:b5: 36:6a:48:5a:16:51:c7:1f:f2:df:d9:51:7d:54:04: 6d:35:79:f6:14:51:72:d4:8e:b7:a6:5a:2b:e5:9b: a0:90:da:5c:ce:b8:5a:55:44:08:3b:cb:fe:f5:88: 50:71:52:e8:da:f2:5b:47:88:01:b6:35:f3:6d:7e: b2:c7:52:ad:ce:01:86:54:25:e9:1a:75:02:df:3c: 13:02:97:f3:30:1d:29:ac:df:ba:59:f7:31:ab:8f: 42:f3:ea:7b:b6:15:35:a4:1a:ff:a1:ee:f1:8d:1e: 95:b3:20:b1:4d:68:85:e1:d7:a6:93:4e:4b:11:cb: a0:00:09:3d:44:3d:62:22:4e:f2:5c:7c:8f:f9:8b: 97:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:ED:D5:80:54:FB:12:DA:46:57:BB:82:AB:42:25:FC:9E:2B:95:85 X509v3 Authority Key Identifier: keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/Xe3VgFT7EtpGV7uCq0Il_J4rlYU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.39.205.0/24 IPv6: 2a09:6283::/32 2a12:c300::/30 Signature Algorithm: sha256WithRSAEncryption 49:5f:11:c8:cb:24:ea:09:76:67:14:41:84:cb:af:a2:7c:1c: e6:6d:23:0f:db:1f:0e:93:ea:fc:cf:b5:86:29:23:ac:1e:58: 89:3f:80:ef:34:ab:d4:f5:d9:66:d6:e3:1a:d3:81:40:ae:b4: 6f:db:0e:ae:b9:8c:b0:2c:0b:92:a3:0d:9b:33:93:6b:bc:d0: 3c:5f:63:92:d6:0c:7b:48:ca:d2:43:91:93:8a:58:7b:4f:92: b9:0e:80:22:cc:f8:c3:54:a1:7b:ce:c1:7e:aa:fd:ca:3e:eb: 7e:78:93:f0:44:96:2f:02:c8:4c:86:01:64:59:c6:0d:00:1a: 78:1b:4c:45:fb:1e:ce:98:2e:78:21:80:45:aa:82:39:ce:a7: cb:2e:73:a8:63:51:60:e1:3c:6e:80:68:fc:8c:8a:5f:1c:65: b4:e4:f5:3e:61:11:79:01:46:e3:02:ab:c0:a9:17:26:ae:44: 0a:ff:22:85:c0:2d:cc:ec:46:7e:f3:21:73:ca:99:25:be:ef: d3:10:e3:d8:1b:b9:22:68:8e:38:d4:36:99:25:a6:3e:fc:a3: 68:f6:03:7d:02:37:42:85:cf:30:b0:83:ec:7a:51:91:2e:5d: 75:75:c6:4a:59:cf:6b:0f:86:99:9c:b1:ed:d0:dc:9a:c5:e7: bf:e2:cd:82 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZrj2+ESWbCdzStwlgfqJVaWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl NWVjZjIwHhcNMjUxMjAzMTA1NzA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZGVkZDU4MDU0ZmIxMmRhNDY1N2JiODJhYjQyMjVmYzllMmI5NTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfnEV7IrJ45GC4SlMqR7ebVFZCTN +Zl2jKJVyolVL2/VHHasagWStBT3RNz2gd71C+ThiCdKth+9i9TQb5JTPGHKTxNV Cc04E3mnuHIdSob6LxmUxFJ8oZ/2y5AMjbjUT2CrciJ0Y51I7mQuxBUn1ZMAMCVd +bU2akhaFlHHH/Lf2VF9VARtNXn2FFFy1I63plor5ZugkNpczrhaVUQIO8v+9YhQ cVLo2vJbR4gBtjXzbX6yx1KtzgGGVCXpGnUC3zwTApfzMB0prN+6Wfcxq49C8+p7 thU1pBr/oe7xjR6VsyCxTWiF4demk05LEcugAAk9RD1iIk7yXHyP+YuX2wIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFF3t1YBU+xLaRle7gqtCJfyeK5WFMB8GA1UdIwQY MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt MTcxYzM2N2JlNzgyLzEvWGUzVmdGVDdFdHBHVjd1Q3EwSWxfSjRybFlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAMBAIAATAGAwQAuSfNMBQE AgACMA4DBQAqCWKDAwUCKhLDADANBgkqhkiG9w0BAQsFAAOCAQEASV8RyMsk6gl2 ZxRBhMuvonwc5m0jD9sfDpPq/M+1hikjrB5YiT+A7zSr1PXZZtbjGtOBQK60b9sO rrmMsCwLkqMNmzOTa7zQPF9jktYMe0jK0kORk4pYe0+SuQ6AIsz4w1She87Bfqr9 yj7rfniT8ESWLwLITIYBZFnGDQAaeBtMRfsezpgueCGARaqCOc6nyy5zqGNRYOE8 boBo/IyKXxxltOT1PmEReQFG4wKrwKkXJq5ECv8ihcAtzOxGfvMhc8qZJb7v0xDj 2Bu5ImiOONQ2mSWmPvyjaPYDfQI3QoXPMLCD7HpRkS5ddXXGSlnPaw+GmZyx7dDc msXnv+LNgg== -----END CERTIFICATE-----Generated at Fri Dec 5 08:38:06 2025 by rpki-client