This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/XdOPnn7GOXfcAE1BvPe80KjSmRk.roa File: XdOPnn7GOXfcAE1BvPe80KjSmRk.roa (raw, json) Hash identifier: fnPKErsj9xLDMO0kkCxDusAM33EmRFzrGoHhCbdYTPI= Subject key identifier: 5D:D3:8F:9E:7E:C6:39:77:DC:00:4D:41:BC:F7:BC:D0:A8:D2:99:19 Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d Certificate serial: 019B130BAC80A28C99186CBB087659EED45C Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/XdOPnn7GOXfcAE1BvPe80KjSmRk.roa Signing time: Fri 12 Dec 2025 14:51:30 +0000 ROA not before: Fri 12 Dec 2025 14:51:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212826 IP address blocks: 45.152.11.0/24 maxlen: 24 46.161.208.0/23 maxlen: 23 46.161.212.0/23 maxlen: 23 46.161.214.0/23 maxlen: 23 195.60.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 14:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:13:0b:ac:80:a2:8c:99:18:6c:bb:08:76:59:ee:d4:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d Validity Not Before: Dec 12 14:51:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5dd38f9e7ec63977dc004d41bcf7bcd0a8d29919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:68:65:1a:74:a9:e9:57:1c:23:cb:23:5b:75: 96:e9:09:df:e7:ab:b0:1b:78:b0:87:27:cd:cc:1d: c1:6a:12:8f:d3:83:1e:25:38:88:2b:c2:3c:4a:ea: 54:cf:b6:99:1f:39:bc:ca:ec:30:32:3f:8c:dc:33: e0:c5:ab:c8:fd:21:1b:7e:60:7b:5b:b3:5a:bb:c4: e8:23:a7:62:bb:7e:0e:8f:db:1f:22:95:31:ef:5b: e2:da:ca:29:82:7e:8f:8b:54:ff:84:a3:c1:44:d3: 49:56:99:f0:ba:7e:65:3f:04:a1:6f:3d:9c:1f:35: 63:aa:c6:ff:49:ad:99:f1:91:4f:87:ce:96:9b:96: 45:36:a5:e4:bc:48:fd:c4:4d:9c:62:6d:35:c4:41: 1a:19:73:d1:77:66:02:85:10:7a:8d:6b:b3:ca:4b: 9b:0a:6a:0a:e5:1a:29:3a:7c:bc:dd:1b:27:68:69: dd:bc:6c:42:1f:4d:6f:48:f3:28:5e:e5:af:07:73: 19:59:89:35:d4:21:81:86:07:be:c4:f2:8f:0b:0d: f9:b2:ee:64:b2:7a:59:d9:66:97:4e:51:60:00:01: 9a:78:de:4c:92:cc:8b:41:01:a3:cc:f2:98:2b:9d: b5:a1:38:28:11:dc:45:a9:ba:4e:4a:15:d9:92:15: 91:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D3:8F:9E:7E:C6:39:77:DC:00:4D:41:BC:F7:BC:D0:A8:D2:99:19 X509v3 Authority Key Identifier: keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/XdOPnn7GOXfcAE1BvPe80KjSmRk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.11.0/24 46.161.208.0/23 46.161.212.0/22 195.60.176.0/24 Signature Algorithm: sha256WithRSAEncryption 26:d7:bd:a3:38:4f:53:28:92:07:14:0b:cf:d3:96:50:a6:59: 2b:50:6b:d2:c5:69:9a:a3:d9:76:98:6a:a2:25:ab:fa:cb:6d: ff:e9:9e:57:ea:c0:a7:7f:f9:20:0a:c5:77:f7:ff:46:5e:c3: 4c:e4:f4:c1:ea:2b:11:a6:e5:4a:21:da:39:42:40:72:08:54: 42:14:c7:6d:9a:81:ee:d2:01:d1:4b:73:35:75:99:ba:57:a0: 5b:74:bd:71:26:07:fd:f4:cb:fd:fb:09:11:7b:85:c6:8c:83: c3:01:91:3d:bc:62:05:16:01:7b:e7:76:4d:22:59:2f:96:3b: 09:91:19:f7:08:20:54:f5:4d:8e:3f:e7:ec:06:d6:62:23:38: cd:d3:7f:7f:a2:5e:d9:7d:c3:95:d7:6c:23:23:7a:ad:93:95: 38:fe:25:61:fb:f4:05:3b:5f:0b:f1:08:c3:f9:9c:0b:5a:af: 96:a3:55:b4:a6:7f:34:9a:b2:e3:55:b8:f1:55:d0:b4:83:eb: 94:1a:b5:c4:9a:56:78:d4:05:99:54:4b:c8:4a:92:82:68:45: 82:9e:a9:76:fd:92:d5:ca:12:43:5b:40:77:07:a0:b4:30:02: c3:f4:2e:8a:9f:da:9b:80:b3:83:01:e7:e7:fc:83:ad:41:46: af:82:48:52 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZsTC6yAooyZGGy7CHZZ7tRcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw MTRiOGQwHhcNMjUxMjEyMTQ1MTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZGQzOGY5ZTdlYzYzOTc3ZGMwMDRkNDFiY2Y3YmNkMGE4ZDI5OTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGhlGnSp6VccI8sjW3WW6Qnf56uw G3iwhyfNzB3BahKP04MeJTiIK8I8SupUz7aZHzm8yuwwMj+M3DPgxavI/SEbfmB7 W7Nau8ToI6diu34Oj9sfIpUx71vi2sopgn6Pi1T/hKPBRNNJVpnwun5lPwShbz2c HzVjqsb/Sa2Z8ZFPh86Wm5ZFNqXkvEj9xE2cYm01xEEaGXPRd2YChRB6jWuzykub CmoK5RopOny83RsnaGndvGxCH01vSPMoXuWvB3MZWYk11CGBhge+xPKPCw35su5k snpZ2WaXTlFgAAGaeN5MksyLQQGjzPKYK521oTgoEdxFqbpOShXZkhWRywIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFF3Tj55+xjl33ABNQbz3vNCo0pkZMB8GA1UdIwQY MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt NmJjNzU1NzhiNGMzLzEvWGRPUG5uN0dPWGZjQUUxQnZQZTgwS2pTbVJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALZgLAwQB LqHQAwQCLqHUAwQAwzywMA0GCSqGSIb3DQEBCwUAA4IBAQAm172jOE9TKJIHFAvP 05ZQplkrUGvSxWmao9l2mGqiJav6y23/6Z5X6sCnf/kgCsV39/9GXsNM5PTB6isR puVKIdo5QkByCFRCFMdtmoHu0gHRS3M1dZm6V6BbdL1xJgf99Mv9+wkRe4XGjIPD AZE9vGIFFgF753ZNIlkvljsJkRn3CCBU9U2OP+fsBtZiIzjN039/ol7ZfcOV12wj I3qtk5U4/iVh+/QFO18L8QjD+ZwLWq+Wo1W0pn80mrLjVbjxVdC0g+uUGrXEmlZ4 1AWZVEvISpKCaEWCnql2/ZLVyhJDW0B3B6C0MALD9C6Kn9qbgLODAefn/IOtQUav gkhS -----END CERTIFICATE-----Generated at Fri Dec 19 22:34:19 2025 by rpki-client