This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/XRukR5doWXFFWT-GQPq_1fxDd6Q.roa File: XRukR5doWXFFWT-GQPq_1fxDd6Q.roa (raw, json) Hash identifier: V3QUKeQoFPnp7wTr0a6JzEKoCqJvxRb0xcbUKkS27wo= Subject key identifier: 5D:1B:A4:47:97:68:59:71:45:59:3F:86:40:FA:BF:D5:FC:43:77:A4 Certificate issuer: /CN=0c874a5f52734e260e7bfa4d45114add9277e353 Certificate serial: 019B21A5C1289E42F412A9FFCE60A1DB25D8 Authority key identifier: 0C:87:4A:5F:52:73:4E:26:0E:7B:FA:4D:45:11:4A:DD:92:77:E3:53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/XRukR5doWXFFWT-GQPq_1fxDd6Q.roa Signing time: Mon 15 Dec 2025 10:54:29 +0000 ROA not before: Mon 15 Dec 2025 10:54:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 2856 IP address blocks: 152.89.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:a5:c1:28:9e:42:f4:12:a9:ff:ce:60:a1:db:25:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c874a5f52734e260e7bfa4d45114add9277e353 Validity Not Before: Dec 15 10:54:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5d1ba4479768597145593f8640fabfd5fc4377a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:53:8e:92:79:92:b6:2a:c8:fc:55:ce:42:cd: 87:ae:df:83:3d:b1:71:92:4a:f2:bd:54:24:8e:ef: e6:c0:f7:fa:4c:c4:eb:24:d5:58:1f:a7:58:a7:07: f7:de:cf:24:eb:35:da:3f:90:8e:16:81:62:b4:79: cf:72:87:e0:4a:3a:80:1c:cb:35:c3:01:38:96:0e: e4:83:d0:99:d4:f1:68:ff:6f:99:52:30:a7:cf:c6: 8b:3a:69:73:77:cd:21:dc:37:93:f2:df:22:aa:71: 1a:60:fe:7f:8c:4c:f1:ea:34:60:13:e9:23:0f:9c: 8c:2e:7a:7d:07:27:e6:1d:d6:c8:4f:7c:98:7f:06: ca:44:b3:f1:5c:de:07:a7:ee:18:75:09:c5:89:9c: 6c:03:7f:20:95:cd:86:a7:aa:84:5d:9c:44:07:e1: b6:11:5b:85:ea:82:b2:d5:41:8d:2d:a5:18:cf:7f: 88:f7:54:41:06:bb:1b:e1:4d:e1:ad:84:a7:d4:e7: 8e:21:12:35:ec:e6:27:b3:65:7d:7a:47:c6:71:01: a1:51:ad:30:73:d0:4d:cb:2f:95:c6:f7:f3:d1:74: 02:b6:9a:89:99:cc:af:b5:2b:19:e8:29:7c:8c:0c: b6:8e:d6:7c:49:46:c0:f8:8f:a1:12:19:5c:b5:f2: 80:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:1B:A4:47:97:68:59:71:45:59:3F:86:40:FA:BF:D5:FC:43:77:A4 X509v3 Authority Key Identifier: keyid:0C:87:4A:5F:52:73:4E:26:0E:7B:FA:4D:45:11:4A:DD:92:77:E3:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/XRukR5doWXFFWT-GQPq_1fxDd6Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.89.24.0/22 Signature Algorithm: sha256WithRSAEncryption 20:a4:4f:39:b2:2b:0f:dd:20:13:41:19:e9:24:96:84:d7:8e: 41:c0:fd:d4:c1:f8:a7:12:91:d4:a0:0f:f7:56:26:74:57:c2: a3:30:60:f0:50:89:1a:ce:cb:67:00:a0:fd:7d:e3:98:51:e5: de:75:f8:16:14:6f:c0:f7:d0:0c:90:49:56:81:03:31:4e:b4: 5c:36:c7:7c:25:d1:c7:28:a1:61:d1:41:28:70:1d:4c:7e:92: eb:7b:e4:e0:44:61:3e:df:4b:80:f9:94:cf:78:47:0a:4a:92: cf:59:3e:98:13:8a:4e:1a:70:c0:76:79:bf:9b:fd:f5:10:ff: 20:f7:c9:b6:30:61:54:39:c4:fd:f0:97:0b:85:54:e2:02:5f: 5c:83:c6:df:5c:96:d1:d7:03:0a:ab:62:a7:66:71:f3:a2:0a: ab:b2:d7:c7:07:e9:13:36:59:42:54:df:4e:ba:34:c3:34:a3: 9a:02:40:37:92:f7:2e:5f:ab:e9:9d:4d:e2:a9:89:70:c4:6f: 42:74:c9:52:76:0a:f7:24:92:f4:67:e6:4f:7c:10:e3:d8:54: 64:ec:43:33:22:05:65:d9:a3:6a:3b:51:41:75:9e:26:e6:4d: 4b:8a:0d:ad:15:4d:5c:6f:08:1a:d3:3a:52:2a:9a:75:3d:46: 0c:38:d8:d4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZshpcEonkL0Eqn/zmCh2yXYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjODc0YTVmNTI3MzRlMjYwZTdiZmE0ZDQ1MTE0YWRkOTI3 N2UzNTMwHhcNMjUxMjE1MTA1NDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDFiYTQ0Nzk3Njg1OTcxNDU1OTNmODY0MGZhYmZkNWZjNDM3N2E0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVOOknmStirI/FXOQs2Hrt+DPbFx kkryvVQkju/mwPf6TMTrJNVYH6dYpwf33s8k6zXaP5COFoFitHnPcofgSjqAHMs1 wwE4lg7kg9CZ1PFo/2+ZUjCnz8aLOmlzd80h3DeT8t8iqnEaYP5/jEzx6jRgE+kj D5yMLnp9ByfmHdbIT3yYfwbKRLPxXN4Hp+4YdQnFiZxsA38glc2Gp6qEXZxEB+G2 EVuF6oKy1UGNLaUYz3+I91RBBrsb4U3hrYSn1OeOIRI17OYns2V9ekfGcQGhUa0w c9BNyy+Vxvfz0XQCtpqJmcyvtSsZ6Cl8jAy2jtZ8SUbA+I+hEhlctfKAMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF0bpEeXaFlxRVk/hkD6v9X8Q3ekMB8GA1UdIwQY MBaAFAyHSl9Sc04mDnv6TUURSt2Sd+NTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRElkS1gxSnpUaVlPZV9wTlJSRkszWkozNDFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC81M2I0ODktYWI0OC00OWZlLTlkMDEt YTBlMzdmMjVhNTE1LzEvWFJ1a1I1ZG9XWEZGV1QtR1FQcV8xZnhEZDZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC81M2I0ODktYWI0OC00OWZlLTlkMDEtYTBlMzdmMjVhNTE1 LzEvRElkS1gxSnpUaVlPZV9wTlJSRkszWkozNDFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmFkYMA0G CSqGSIb3DQEBCwUAA4IBAQAgpE85sisP3SATQRnpJJaE145BwP3UwfinEpHUoA/3 ViZ0V8KjMGDwUIkazstnAKD9feOYUeXedfgWFG/A99AMkElWgQMxTrRcNsd8JdHH KKFh0UEocB1MfpLre+TgRGE+30uA+ZTPeEcKSpLPWT6YE4pOGnDAdnm/m/31EP8g 98m2MGFUOcT98JcLhVTiAl9cg8bfXJbR1wMKq2KnZnHzogqrstfHB+kTNllCVN9O ujTDNKOaAkA3kvcuX6vpnU3iqYlwxG9CdMlSdgr3JJL0Z+ZPfBDj2FRk7EMzIgVl 2aNqO1FBdZ4m5k1Lig2tFU1cbwga0zpSKpp1PUYMONjU -----END CERTIFICATE-----Generated at Fri Dec 19 07:43:01 2025 by rpki-client