This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/XWUeoKzPiymOtiolB_c7UPWXM_A.roa File: XWUeoKzPiymOtiolB_c7UPWXM_A.roa (raw, json) Hash identifier: dbme98MUsM08vhgeRnSWM+kW9ZOj2+F5fN+x1V3kjyM= Subject key identifier: 5D:65:1E:A0:AC:CF:8B:29:8E:B6:2A:25:07:F7:3B:50:F5:97:33:F0 Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f Certificate serial: 019B14CA6F37860974328C0DE2288C4D10CE Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/XWUeoKzPiymOtiolB_c7UPWXM_A.roa Signing time: Fri 12 Dec 2025 22:59:29 +0000 ROA not before: Fri 12 Dec 2025 22:59:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215245 IP address blocks: 31.22.72.0/24 maxlen: 24 31.22.76.0/24 maxlen: 24 31.22.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:14:ca:6f:37:86:09:74:32:8c:0d:e2:28:8c:4d:10:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f Validity Not Before: Dec 12 22:59:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5d651ea0accf8b298eb62a2507f73b50f59733f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:47:03:3e:39:a0:7f:bf:93:92:47:51:b6:47: fd:be:ce:b7:1d:96:b9:e8:f5:00:91:ca:06:8c:82: 3d:ad:6e:0a:dc:9b:e4:01:64:d0:77:d7:d2:2f:be: 63:46:cd:55:e6:55:a1:6d:2a:be:56:76:57:6d:33: 16:a1:b4:6c:0a:e2:c8:b0:78:ce:80:cb:94:bc:b4: 1b:3c:05:7e:8b:74:1b:ac:6f:e3:77:25:7f:0e:8c: 48:46:0f:5b:e2:8e:4e:ed:8b:7c:02:3f:e4:03:44: 5f:7d:80:91:fe:28:cd:a0:c2:66:50:f5:6c:be:da: 77:41:48:13:4d:93:92:7b:52:aa:70:22:69:fa:34: 24:10:4a:65:03:42:30:31:93:37:34:e7:2d:b4:b0: 7e:58:04:34:07:a5:9f:ef:04:76:6d:89:75:64:8b: fd:f2:31:92:73:fb:2a:48:24:be:99:0d:64:6e:50: 1c:dc:f7:c7:77:7a:93:0b:92:93:9a:bf:6a:83:4b: 90:ed:bd:5d:2c:82:0a:44:72:04:9e:81:9d:d7:b0: cb:a4:95:ac:39:cf:dd:db:f1:bd:31:c8:44:c4:88: 8b:68:cf:21:02:7e:55:54:60:4c:8c:de:85:61:a4: 7d:b4:8b:20:c5:74:6a:30:5f:ef:66:94:a1:e2:30: 95:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:65:1E:A0:AC:CF:8B:29:8E:B6:2A:25:07:F7:3B:50:F5:97:33:F0 X509v3 Authority Key Identifier: keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/XWUeoKzPiymOtiolB_c7UPWXM_A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.22.72.0/24 31.22.76.0/23 Signature Algorithm: sha256WithRSAEncryption 04:37:59:62:a3:b4:1d:e9:5c:34:c1:1d:3c:2d:52:85:e6:94: 21:49:27:d3:93:fe:aa:9d:29:77:01:e0:95:eb:c8:05:f9:b2: bc:45:90:28:03:49:d4:d7:6c:a0:e9:a2:bb:68:83:02:f7:83: 43:f4:89:5b:36:f8:b0:07:0d:f5:62:94:4a:9a:50:49:47:89: 55:3c:65:78:2b:88:ea:9d:d8:e8:de:a4:c7:74:1b:b1:33:94: a5:32:7c:68:c7:0b:b1:df:5e:35:f5:61:41:68:dc:20:d0:48: 14:e4:e4:85:6f:73:1b:bd:8e:5b:f5:b3:de:f4:f6:d4:ee:11: 77:93:54:e0:61:c4:21:aa:c7:cd:89:73:aa:83:75:d0:94:2b: d3:51:00:81:d0:7a:e8:e7:78:d8:50:2c:df:90:6d:ff:36:e0: f0:be:bd:0a:1e:52:1e:4d:d4:6e:19:1b:70:b0:93:05:36:20: 53:46:3c:a5:8d:2f:c4:ef:23:eb:33:a3:5c:02:c4:ee:82:69: f7:48:9d:ff:37:58:99:4e:61:c6:3a:03:5b:77:20:90:1b:88: 8f:92:59:23:df:63:d8:69:bf:39:85:79:1a:a3:7a:69:7e:43: 3d:bb:8d:3e:34:91:fd:8d:97:56:ab:4a:b0:0c:5a:ea:19:7b: ac:23:6b:f8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsUym83hgl0MowN4iiMTRDOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYmUyOWM5NTY4OTRjNDljNmQ0YmUwZWQ5ODg4MmI5MGQx YmM3N2YwHhcNMjUxMjEyMjI1OTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDY1MWVhMGFjY2Y4YjI5OGViNjJhMjUwN2Y3M2I1MGY1OTczM2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUcDPjmgf7+TkkdRtkf9vs63HZa5 6PUAkcoGjII9rW4K3JvkAWTQd9fSL75jRs1V5lWhbSq+VnZXbTMWobRsCuLIsHjO gMuUvLQbPAV+i3QbrG/jdyV/DoxIRg9b4o5O7Yt8Aj/kA0RffYCR/ijNoMJmUPVs vtp3QUgTTZOSe1KqcCJp+jQkEEplA0IwMZM3NOcttLB+WAQ0B6Wf7wR2bYl1ZIv9 8jGSc/sqSCS+mQ1kblAc3PfHd3qTC5KTmr9qg0uQ7b1dLIIKRHIEnoGd17DLpJWs Oc/d2/G9MchExIiLaM8hAn5VVGBMjN6FYaR9tIsgxXRqMF/vZpSh4jCVDwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFF1lHqCsz4spjrYqJQf3O1D1lzPwMB8GA1UdIwQY MBaAFBK+KclWiUxJxtS+DtmIgrkNG8d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjIt YWE2ZWQ0ZGFmYjNiLzEvWFdVZW9LelBpeW1PdGlvbEJfYzdVUFdYTV9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjItYWE2ZWQ0ZGFmYjNi LzEvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHxZIAwQB HxZMMA0GCSqGSIb3DQEBCwUAA4IBAQAEN1lio7Qd6Vw0wR08LVKF5pQhSSfTk/6q nSl3AeCV68gF+bK8RZAoA0nU12yg6aK7aIMC94ND9IlbNviwBw31YpRKmlBJR4lV PGV4K4jqndjo3qTHdBuxM5SlMnxoxwux31419WFBaNwg0EgU5OSFb3MbvY5b9bPe 9PbU7hF3k1TgYcQhqsfNiXOqg3XQlCvTUQCB0Hro53jYUCzfkG3/NuDwvr0KHlIe TdRuGRtwsJMFNiBTRjyljS/E7yPrM6NcAsTugmn3SJ3/N1iZTmHGOgNbdyCQG4iP klkj32PYab85hXkao3ppfkM9u40+NJH9jZdWq0qwDFrqGXusI2v4 -----END CERTIFICATE-----Generated at Sat Dec 20 05:28:41 2025 by rpki-client