This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/XxG0lcapcX3f01pd4vpTnjm9Yus.roa File: XxG0lcapcX3f01pd4vpTnjm9Yus.roa (raw, json) Hash identifier: vWXZkQekZf5e/kleDV3tv+kPedK8sMsMpUg57X+SCcg= Subject key identifier: 5F:11:B4:95:C6:A9:71:7D:DF:D3:5A:5D:E2:FA:53:9E:39:BD:62:EB Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019B0D6F35FA7DBE0161AA94261530CECF30 Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/XxG0lcapcX3f01pd4vpTnjm9Yus.roa Signing time: Thu 11 Dec 2025 12:42:30 +0000 ROA not before: Thu 11 Dec 2025 12:42:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 200019 IP address blocks: 80.97.128.0/20 maxlen: 20 81.180.92.0/23 maxlen: 24 85.120.81.0/24 maxlen: 24 85.121.4.0/23 maxlen: 24 85.121.149.0/24 maxlen: 24 194.102.105.0/24 maxlen: 24 217.156.8.0/23 maxlen: 24 217.156.64.0/24 maxlen: 24 217.156.65.0/24 maxlen: 24 217.156.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 18:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:6f:35:fa:7d:be:01:61:aa:94:26:15:30:ce:cf:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Dec 11 12:42:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5f11b495c6a9717ddfd35a5de2fa539e39bd62eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:cd:6e:db:84:0d:b8:9d:57:08:72:3a:64:c2: 36:33:fa:17:b7:63:73:09:59:8c:23:b9:1a:ed:68: cb:ab:3c:6f:ce:a9:6d:af:04:b1:45:c9:6c:14:64: 14:df:0b:58:f5:36:67:3f:65:b9:8a:57:95:a7:b3: 86:f5:83:94:31:c3:34:59:28:50:64:25:d7:31:e8: 52:46:b3:15:9c:f8:42:ca:ea:18:11:ff:7e:28:af: 83:a4:c0:86:9b:2a:ef:ea:91:34:c5:51:79:c4:80: d3:13:a4:22:32:ab:a1:c6:12:68:09:fa:dd:cd:2e: eb:3a:b8:84:2b:53:59:56:cc:ff:ae:a0:9b:eb:f3: 27:00:1e:f4:a9:21:f1:3a:35:a6:ce:3f:94:65:e9: a9:1e:89:68:fc:90:76:73:9c:6b:b3:27:aa:58:94: 30:ec:f5:0a:71:c9:bb:9d:39:c2:db:8a:d0:ed:bc: 28:7f:79:38:37:a1:33:73:7d:e3:47:cb:d2:9d:6f: 7b:64:49:03:19:14:3a:13:4b:f7:f7:6f:b2:fe:98: f9:fd:d0:05:d7:2e:57:68:f0:43:6d:38:ae:df:23: cb:92:46:22:5b:06:46:20:a5:26:ad:5f:8b:0c:5f: 02:08:35:ec:13:ac:99:2c:3f:52:c0:d4:4a:93:27: 45:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:11:B4:95:C6:A9:71:7D:DF:D3:5A:5D:E2:FA:53:9E:39:BD:62:EB X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/XxG0lcapcX3f01pd4vpTnjm9Yus.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.97.128.0/20 81.180.92.0/23 85.120.81.0/24 85.121.4.0/23 85.121.149.0/24 194.102.105.0/24 217.156.8.0/23 217.156.64.0/23 217.156.123.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:53:06:06:f2:90:da:7e:1e:fe:63:46:c1:c3:8a:d6:6c:31: cc:16:f7:1d:b1:42:35:88:38:a2:d2:95:c0:b4:ed:3b:4e:24: 57:31:1c:0a:4d:ac:a8:c6:52:5d:cc:3c:cd:ac:f4:72:69:a5: 5f:09:c4:77:d8:06:38:60:e3:13:3e:dc:8b:50:fb:fe:83:a1: a2:27:1a:3d:c3:89:28:7e:1c:1f:ac:57:af:6c:f6:4f:32:d4: db:f3:66:8b:60:9e:c9:3c:df:2d:dd:2c:bb:3a:85:02:2f:f7: d2:f6:cb:9a:1c:0e:f5:36:09:f7:2f:58:74:9c:42:c8:5f:50: 7c:63:df:3e:06:48:3b:ff:5f:c1:1d:08:9b:dc:2b:40:b4:fd: 0b:f4:99:d6:79:66:c4:6c:cf:59:9b:ef:c7:19:5d:dc:48:94: b7:28:7c:5a:41:97:83:0e:8e:1f:67:4f:bb:b3:4d:eb:21:22: 32:40:d3:f7:fc:ea:e2:e3:46:97:a3:a5:69:88:00:ba:80:b9: a6:59:05:dd:65:af:b2:f5:bb:66:b4:6e:ca:e4:28:88:84:d7: d2:ea:50:52:5c:a6:cd:06:43:c3:40:5c:c9:a4:58:51:f2:14: 3d:84:19:6b:1f:60:19:c5:a3:45:28:74:8b:c6:a9:46:7b:06: 9d:b6:fe:f2 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZsNbzX6fb4BYaqUJhUwzs8wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjUxMjExMTI0MjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjExYjQ5NWM2YTk3MTdkZGZkMzVhNWRlMmZhNTM5ZTM5YmQ2MmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3s1u24QNuJ1XCHI6ZMI2M/oXt2Nz CVmMI7ka7WjLqzxvzqltrwSxRclsFGQU3wtY9TZnP2W5ileVp7OG9YOUMcM0WShQ ZCXXMehSRrMVnPhCyuoYEf9+KK+DpMCGmyrv6pE0xVF5xIDTE6QiMquhxhJoCfrd zS7rOriEK1NZVsz/rqCb6/MnAB70qSHxOjWmzj+UZempHolo/JB2c5xrsyeqWJQw 7PUKccm7nTnC24rQ7bwof3k4N6Ezc33jR8vSnW97ZEkDGRQ6E0v392+y/pj5/dAF 1y5XaPBDbTiu3yPLkkYiWwZGIKUmrV+LDF8CCDXsE6yZLD9SwNRKkydFwQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFF8RtJXGqXF939NaXeL6U545vWLrMB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEvWHhHMGxjYXBjWDNmMDFwZDR2cFRuam05WXVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQEUGGAAwQB UbRcAwQAVXhRAwQBVXkEAwQAVXmVAwQAwmZpAwQB2ZwIAwQB2ZxAAwQA2Zx7MA0G CSqGSIb3DQEBCwUAA4IBAQA8UwYG8pDafh7+Y0bBw4rWbDHMFvcdsUI1iDii0pXA tO07TiRXMRwKTayoxlJdzDzNrPRyaaVfCcR32AY4YOMTPtyLUPv+g6GiJxo9w4ko fhwfrFevbPZPMtTb82aLYJ7JPN8t3Sy7OoUCL/fS9suaHA71Ngn3L1h0nELIX1B8 Y98+Bkg7/1/BHQib3CtAtP0L9JnWeWbEbM9Zm+/HGV3cSJS3KHxaQZeDDo4fZ0+7 s03rISIyQNP3/Ori40aXo6VpiAC6gLmmWQXdZa+y9btmtG7K5CiIhNfS6lBSXKbN BkPDQFzJpFhR8hQ9hBlrH2AZxaNFKHSLxqlGewadtv7y -----END CERTIFICATE-----Generated at Sat Dec 20 04:30:51 2025 by rpki-client