This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/XyHRW9hSs5g5DqhdNNm-O5kYuCI.roa File: XyHRW9hSs5g5DqhdNNm-O5kYuCI.roa (raw, json) Hash identifier: 18JqolHCP0T7BbgeoqRtbanVGpTxNfn5ZFf1rzTqHVY= Subject key identifier: 5F:21:D1:5B:D8:52:B3:98:39:0E:A8:5D:34:D9:BE:3B:99:18:B8:22 Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Certificate serial: 019B3C02AFF246B7704C623F5DD06C282402 Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/XyHRW9hSs5g5DqhdNNm-O5kYuCI.roa Signing time: Sat 20 Dec 2025 13:46:07 +0000 ROA not before: Sat 20 Dec 2025 13:46:07 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44559 IP address blocks: 2.58.124.0/24 maxlen: 24 2.58.125.0/24 maxlen: 24 2.58.126.0/24 maxlen: 24 2.58.127.0/24 maxlen: 24 45.83.180.0/24 maxlen: 24 45.83.181.0/24 maxlen: 24 45.83.182.0/24 maxlen: 24 45.83.183.0/24 maxlen: 24 45.150.110.0/24 maxlen: 24 92.118.124.0/24 maxlen: 24 92.118.125.0/24 maxlen: 24 92.118.126.0/24 maxlen: 24 92.118.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:46:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:02:af:f2:46:b7:70:4c:62:3f:5d:d0:6c:28:24:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Validity Not Before: Dec 20 13:46:07 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5f21d15bd852b398390ea85d34d9be3b9918b822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e1:df:d6:58:ad:3e:74:fa:e9:50:28:47:da: 92:e7:d5:2a:71:71:76:08:96:e2:9a:de:e9:2d:d5: d5:32:18:04:60:91:bf:bb:4a:81:95:6a:1b:a1:5f: ef:70:0c:e2:74:fe:c2:46:10:41:3b:4d:1a:5a:e0: 8a:6e:3c:98:40:e4:74:1a:0d:45:e8:e9:d7:09:7c: 9a:c2:96:46:e6:22:25:d2:1b:f4:05:87:03:dc:e5: d4:10:27:aa:74:81:77:c3:ba:44:0d:fa:ed:e9:46: e6:b3:32:ce:04:b4:b7:40:cd:ad:40:2d:98:97:b2: a6:e5:77:56:e5:be:38:85:a3:c3:b1:6d:02:47:79: e0:47:47:5d:8f:42:c7:6d:0b:d6:02:1a:3b:b5:d8: 1c:76:df:b4:2f:55:d6:1e:e5:f0:34:a8:b2:cd:00: b8:94:3e:56:c3:5d:99:e1:41:5c:14:12:1f:b9:ea: 02:76:6c:74:fa:cd:0b:17:20:14:e7:df:3b:c4:2c: f2:f8:07:34:19:1a:36:d1:dd:89:d1:45:e5:9d:f0: a4:07:58:a9:68:20:86:1b:d9:df:e2:4c:e7:5a:0b: 21:4a:79:4e:12:68:82:40:73:c0:7a:11:7c:6a:ce: d9:47:b9:9b:e4:05:14:7d:fd:99:bd:a4:b6:c7:c9: 6e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:21:D1:5B:D8:52:B3:98:39:0E:A8:5D:34:D9:BE:3B:99:18:B8:22 X509v3 Authority Key Identifier: keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/XyHRW9hSs5g5DqhdNNm-O5kYuCI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.124.0/22 45.83.180.0/22 45.150.110.0/24 92.118.124.0/22 Signature Algorithm: sha256WithRSAEncryption 44:79:49:27:e3:31:d0:a0:83:8d:b7:51:47:78:66:d1:45:59: 5c:ea:ea:27:84:95:e9:71:2b:bb:c7:0e:21:fc:3d:5e:3f:7f: 00:88:da:08:01:71:32:79:64:0e:41:61:90:1e:41:9f:4f:11: 4c:f9:48:d9:bc:82:65:57:a3:44:ff:5e:79:6b:ff:6c:ac:85: 08:37:0b:d9:90:16:32:20:ec:27:e7:e1:1c:42:90:88:76:a7: 81:9e:78:5f:10:a4:f6:3e:4f:7f:f1:5e:aa:1f:7e:90:8e:4e: 41:b7:65:27:a4:ac:c6:09:e5:22:3b:89:df:96:06:57:8d:79: 5a:fc:3f:52:70:00:f4:15:23:f7:b9:80:0a:f6:ce:9f:75:13: dc:00:43:a8:2a:15:c8:26:50:bc:89:43:00:7e:d2:9e:c7:3e: 0d:d4:4d:e4:fe:c3:7a:02:7d:3f:91:f9:2e:3d:4a:d3:df:6c: 8b:be:72:4a:75:b9:39:c9:77:72:42:5b:27:0c:43:af:c5:53: 36:ee:41:42:de:d1:da:4a:22:15:45:a3:5d:e6:93:34:ba:b9: 8f:10:24:b1:07:3a:ad:28:98:9e:6e:a7:91:a5:bf:78:cd:28: 0b:63:e8:d2:23:3d:48:9f:94:0b:f6:c7:f2:fe:96:da:cf:47: b0:f8:76:52 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZs8Aq/yRrdwTGI/XdBsKCQCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMjBkZGQzOThkYWM4ZjYyY2MxMjUyNjMyNWYxODIxZmI3 MjRmNzUwHhcNMjUxMjIwMTM0NjA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjIxZDE1YmQ4NTJiMzk4MzkwZWE4NWQzNGQ5YmUzYjk5MThiODIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruHf1litPnT66VAoR9qS59UqcXF2 CJbimt7pLdXVMhgEYJG/u0qBlWoboV/vcAzidP7CRhBBO00aWuCKbjyYQOR0Gg1F 6OnXCXyawpZG5iIl0hv0BYcD3OXUECeqdIF3w7pEDfrt6UbmszLOBLS3QM2tQC2Y l7Km5XdW5b44haPDsW0CR3ngR0ddj0LHbQvWAho7tdgcdt+0L1XWHuXwNKiyzQC4 lD5Ww12Z4UFcFBIfueoCdmx0+s0LFyAU5987xCzy+Ac0GRo20d2J0UXlnfCkB1ip aCCGG9nf4kznWgshSnlOEmiCQHPAehF8as7ZR7mb5AUUff2ZvaS2x8lu+wIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFF8h0VvYUrOYOQ6oXTTZvjuZGLgiMB8GA1UdIwQY MBaAFG0g3dOY2sj2LMElJjJfGCH7ck91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmIt MzZkZTY1NzIzMmJlLzEvWHlIUlc5aFNzNWc1RHFoZE5ObS1PNWtZdUNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmItMzZkZTY1NzIzMmJl LzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCAjp8AwQC LVO0AwQALZZuAwQCXHZ8MA0GCSqGSIb3DQEBCwUAA4IBAQBEeUkn4zHQoIONt1FH eGbRRVlc6uonhJXpcSu7xw4h/D1eP38AiNoIAXEyeWQOQWGQHkGfTxFM+UjZvIJl V6NE/155a/9srIUINwvZkBYyIOwn5+EcQpCIdqeBnnhfEKT2Pk9/8V6qH36Qjk5B t2UnpKzGCeUiO4nflgZXjXla/D9ScAD0FSP3uYAK9s6fdRPcAEOoKhXIJlC8iUMA ftKexz4N1E3k/sN6An0/kfkuPUrT32yLvnJKdbk5yXdyQlsnDEOvxVM27kFC3tHa SiIVRaNd5pM0urmPECSxBzqtKJiebqeRpb94zSgLY+jSIz1In5QL9sfy/pbaz0ew +HZS -----END CERTIFICATE-----Generated at Sat Dec 20 21:12:33 2025 by rpki-client