This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/xtqTYc3FisAjSoOKz0qQbv-w9eE.roa File: xtqTYc3FisAjSoOKz0qQbv-w9eE.roa (raw, json) Hash identifier: By6eiQuokhQEBSqOwfKwNpK+9QYjN9SAV/CC9N9Nmfw= Subject key identifier: C6:DA:93:61:CD:C5:8A:C0:23:4A:83:8A:CF:4A:90:6E:FF:B0:F5:E1 Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b Certificate serial: 019AFF0B1D3209639262B84E2E1CA116DCC5 Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/xtqTYc3FisAjSoOKz0qQbv-w9eE.roa Signing time: Mon 08 Dec 2025 17:38:29 +0000 ROA not before: Mon 08 Dec 2025 17:38:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209604 IP address blocks: 5.144.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ff:0b:1d:32:09:63:92:62:b8:4e:2e:1c:a1:16:dc:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b Validity Not Before: Dec 8 17:38:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c6da9361cdc58ac0234a838acf4a906effb0f5e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b8:a0:79:87:31:d3:c6:ad:0d:4e:95:c1:7f: 23:df:8e:e1:5a:a4:2b:8d:ad:df:5f:3d:41:a4:25: ad:56:85:7d:fb:2f:b0:85:a4:d7:68:bf:eb:d2:30: 70:3f:4c:93:ed:60:3a:47:92:90:8e:66:b1:bf:21: 47:4e:57:40:66:53:45:97:dc:1f:86:00:99:9f:63: 25:c1:5e:08:df:2e:0a:fa:19:2c:31:76:92:54:85: 5a:56:ea:11:52:c4:a1:74:62:41:18:fe:7c:1e:4c: a0:1c:1c:71:20:92:72:54:db:0e:d0:68:27:f7:50: f8:00:6f:35:80:91:8b:aa:6d:93:54:c5:eb:ff:1b: 11:48:86:ca:94:3a:13:a2:c9:0e:dc:85:af:e4:c2: 72:f9:d0:3b:ab:25:e1:68:e1:58:42:fc:08:7a:d8: e7:ed:5d:61:4a:f9:91:79:d3:5a:f6:37:38:56:71: 29:ce:8f:c0:5c:87:55:50:96:87:a5:59:af:f0:9d: 2f:5b:72:45:c1:d5:cf:cf:37:81:29:3f:74:51:53: ce:4a:18:af:d6:c3:11:52:dd:c1:cd:1d:ca:40:60: d1:bb:03:0c:57:a9:c5:e2:4c:12:e0:75:a1:a6:67: 9c:85:e7:74:2b:da:60:11:36:26:6e:99:90:eb:d6: 1c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:DA:93:61:CD:C5:8A:C0:23:4A:83:8A:CF:4A:90:6E:FF:B0:F5:E1 X509v3 Authority Key Identifier: keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/xtqTYc3FisAjSoOKz0qQbv-w9eE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.144.177.0/24 Signature Algorithm: sha256WithRSAEncryption 48:53:5a:f7:85:a1:2d:d4:80:b3:ee:fe:66:5e:a9:02:58:d2: 69:3b:23:16:81:ae:1c:aa:11:be:2e:02:eb:2e:dd:4f:f4:70: 68:8a:52:f2:70:2f:57:f9:6d:26:85:09:ad:5f:bf:27:7a:2c: 6a:1c:19:05:aa:4f:51:ba:5f:9b:b6:08:15:7e:22:74:97:00: 1a:e6:84:51:fa:e6:47:ca:2b:5e:fb:1a:94:d1:ed:88:8f:12: e6:10:8d:9c:a5:20:92:93:2d:82:4a:9c:e9:3e:fc:b2:b4:d6: 24:29:26:6d:69:a5:75:0a:cf:45:56:d0:ac:6a:02:d8:b0:55: 62:e8:34:93:ea:f1:88:0e:01:f0:e0:97:54:a1:2d:10:1a:13: 4d:17:7a:17:c5:2c:ab:e0:e2:0f:90:33:01:21:9e:1f:15:bf: 5b:73:5d:93:4d:fa:d4:ea:67:00:8c:b1:13:10:77:22:5b:51: 93:f9:cb:94:0f:30:66:aa:15:d2:13:42:e1:b2:d0:be:d7:a5: f8:db:45:58:26:ba:56:21:8e:53:cc:ac:a6:e0:87:f8:19:c5: c0:2a:cc:ad:1e:84:f1:96:de:78:cc:16:e1:56:e1:61:82:87: e8:a9:a9:74:d0:22:89:54:9e:5c:d6:2b:0d:8e:c9:15:d3:6f: 2e:0f:0e:f9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZr/Cx0yCWOSYrhOLhyhFtzFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMTg4MTczMmEzZTI0NWE5NTliYzY3OWUwNDU4YzM5Zjg5 M2U0NmIwHhcNMjUxMjA4MTczODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmRhOTM2MWNkYzU4YWMwMjM0YTgzOGFjZjRhOTA2ZWZmYjBmNWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbigeYcx08atDU6VwX8j347hWqQr ja3fXz1BpCWtVoV9+y+whaTXaL/r0jBwP0yT7WA6R5KQjmaxvyFHTldAZlNFl9wf hgCZn2MlwV4I3y4K+hksMXaSVIVaVuoRUsShdGJBGP58HkygHBxxIJJyVNsO0Ggn 91D4AG81gJGLqm2TVMXr/xsRSIbKlDoToskO3IWv5MJy+dA7qyXhaOFYQvwIetjn 7V1hSvmRedNa9jc4VnEpzo/AXIdVUJaHpVmv8J0vW3JFwdXPzzeBKT90UVPOShiv 1sMRUt3BzR3KQGDRuwMMV6nF4kwS4HWhpmeched0K9pgETYmbpmQ69YcLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMbak2HNxYrAI0qDis9KkG7/sPXhMB8GA1UdIwQY MBaAFBMYgXMqPiRalZvGeeBFjDn4k+RrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUt Y2Q2MTUyMjYxYzZmLzEveHRxVFljM0Zpc0FqU29PS3owcVFidi13OWVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUtY2Q2MTUyMjYxYzZm LzEvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABZCxMA0G CSqGSIb3DQEBCwUAA4IBAQBIU1r3haEt1ICz7v5mXqkCWNJpOyMWga4cqhG+LgLr Lt1P9HBoilLycC9X+W0mhQmtX78neixqHBkFqk9Rul+btggVfiJ0lwAa5oRR+uZH yite+xqU0e2IjxLmEI2cpSCSky2CSpzpPvyytNYkKSZtaaV1Cs9FVtCsagLYsFVi 6DST6vGIDgHw4JdUoS0QGhNNF3oXxSyr4OIPkDMBIZ4fFb9bc12TTfrU6mcAjLET EHciW1GT+cuUDzBmqhXSE0LhstC+16X420VYJrpWIY5TzKym4If4GcXAKsytHoTx lt54zBbhVuFhgofoqal00CKJVJ5c1isNjskV028uDw75 -----END CERTIFICATE-----Generated at Sat Dec 20 15:38:29 2025 by rpki-client