This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/cXFFQKzh5dcFU3XtaeNBQMpNoFA.roa File: cXFFQKzh5dcFU3XtaeNBQMpNoFA.roa (raw, json) Hash identifier: Bc6gK83Xo5w6DNn5Y2mcDoH/NwYwNU2Zn8rgLenmliY= Subject key identifier: 71:71:45:40:AC:E1:E5:D7:05:53:75:ED:69:E3:41:40:CA:4D:A0:50 Certificate issuer: /CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8 Certificate serial: 019B2355E256591E978A8B629AF73EF6A942 Authority key identifier: 46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/cXFFQKzh5dcFU3XtaeNBQMpNoFA.roa Signing time: Mon 15 Dec 2025 18:46:29 +0000 ROA not before: Mon 15 Dec 2025 18:46:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202934 IP address blocks: 185.205.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 00:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:55:e2:56:59:1e:97:8a:8b:62:9a:f7:3e:f6:a9:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8 Validity Not Before: Dec 15 18:46:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=71714540ace1e5d7055375ed69e34140ca4da050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:fd:44:c0:bf:ff:02:ba:23:e2:53:9e:78:d6: 03:36:13:14:0f:4a:d9:45:33:4f:86:83:78:86:46: d9:1c:fc:04:76:76:98:b4:11:b2:39:82:fc:a9:a0: 7d:21:87:6a:6b:ec:bb:05:fe:3e:6f:a8:b9:d0:a8: 89:fc:64:83:8d:e1:0f:f2:00:ec:43:80:2d:96:ec: 35:e8:28:af:42:d9:9e:50:b2:a8:d5:c5:44:7f:3d: 8e:8a:b0:ce:a4:53:d1:f7:d8:ff:20:fc:01:11:a0: 8d:e5:fb:71:db:6c:c9:15:83:78:d1:bf:ea:eb:4c: d5:c1:e8:f5:b9:31:86:c8:36:da:6b:c6:ea:4f:ef: 64:5d:e3:70:b2:09:40:06:d4:90:4b:d2:79:2b:8f: 8a:af:8e:b2:c7:60:ee:31:67:40:01:ad:4c:85:30: 17:5c:6e:f9:9f:2a:c2:15:7e:e9:3c:79:3f:2a:6e: 29:01:ef:ca:87:eb:0e:a7:a8:76:6e:89:fa:30:84: 12:16:f5:98:4c:3a:e6:ea:e8:f2:25:dc:2d:05:9b: 9d:23:80:eb:3e:eb:02:8e:ea:0f:9b:76:dd:ee:12: 68:d9:62:ef:e7:63:7d:97:1e:80:1f:b0:c1:82:dc: af:d0:9c:36:7f:52:6c:32:a0:45:b0:a9:64:f4:b3: 1a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:71:45:40:AC:E1:E5:D7:05:53:75:ED:69:E3:41:40:CA:4D:A0:50 X509v3 Authority Key Identifier: keyid:46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/cXFFQKzh5dcFU3XtaeNBQMpNoFA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.205.33.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:e9:c8:54:4b:39:0f:46:ec:b8:51:09:2f:5f:aa:dc:63:bd: 54:ce:d5:3b:92:4a:ae:92:dc:a5:ea:c3:c5:2f:d7:f7:9b:16: 4e:2d:ee:46:b6:98:28:33:b0:6e:88:1e:54:73:2d:b5:a6:4d: 09:3f:2b:8a:9c:7b:92:15:a9:00:1a:04:fe:29:b6:ef:5e:c1: 0e:d0:ef:34:b8:e2:d8:cc:cc:9c:36:4e:96:58:1e:de:4b:66: b4:09:6e:66:bf:05:8e:34:5d:2d:6f:2a:15:da:48:ad:0c:26: 6f:5e:43:76:23:a4:4b:28:24:84:73:b2:e3:82:2a:1b:4a:c9: 0f:5d:14:89:5b:4f:0d:0e:f9:2c:e1:49:71:fb:07:ff:80:5a: b1:08:b7:b1:52:26:df:6d:1e:41:96:c7:9c:f5:e8:6b:02:0d: 1b:42:15:42:e4:26:ae:df:7b:b7:36:f0:35:74:00:83:bf:0b: ba:21:59:67:cf:f6:fe:67:a6:d1:d9:68:e6:5d:ce:fb:8d:97: 85:69:83:8f:32:c1:ef:b9:67:1f:5e:e7:5a:66:33:8a:32:a1: 80:5b:97:90:02:0b:97:49:9c:8e:43:c2:36:5f:67:b8:0d:a0: 4f:0f:43:1a:82:75:01:ce:8d:20:f7:d3:3f:29:3c:b5:ef:64: e9:b2:48:81 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsjVeJWWR6Xiotimvc+9qlCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2ZDk0NDc3YzhiNTRkMTJlYzhiM2Y3YjZkOWFlNzhlNTEw YjIzZDgwHhcNMjUxMjE1MTg0NjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTcxNDU0MGFjZTFlNWQ3MDU1Mzc1ZWQ2OWUzNDE0MGNhNGRhMDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2v1EwL//Aroj4lOeeNYDNhMUD0rZ RTNPhoN4hkbZHPwEdnaYtBGyOYL8qaB9IYdqa+y7Bf4+b6i50KiJ/GSDjeEP8gDs Q4Atluw16CivQtmeULKo1cVEfz2OirDOpFPR99j/IPwBEaCN5ftx22zJFYN40b/q 60zVwej1uTGGyDbaa8bqT+9kXeNwsglABtSQS9J5K4+Kr46yx2DuMWdAAa1MhTAX XG75nyrCFX7pPHk/Km4pAe/Kh+sOp6h2bon6MIQSFvWYTDrm6ujyJdwtBZudI4Dr PusCjuoPm3bd7hJo2WLv52N9lx6AH7DBgtyv0Jw2f1JsMqBFsKlk9LMaRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHFxRUCs4eXXBVN17WnjQUDKTaBQMB8GA1UdIwQY MBaAFEbZRHfItU0S7Is/e22a545RCyPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnRsRWQ4aTFUUkxzaXo5N2Jacm5qbEVMSTlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81NGE0NTctM2M0OC00ZTAxLTkwYjAt NWViNzVjMjMxOGFhLzEvY1hGRlFLemg1ZGNGVTNYdGFlTkJRTXBOb0ZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81NGE0NTctM2M0OC00ZTAxLTkwYjAtNWViNzVjMjMxOGFh LzEvUnRsRWQ4aTFUUkxzaXo5N2Jacm5qbEVMSTlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuc0hMA0G CSqGSIb3DQEBCwUAA4IBAQAP6chUSzkPRuy4UQkvX6rcY71UztU7kkquktyl6sPF L9f3mxZOLe5GtpgoM7BuiB5Ucy21pk0JPyuKnHuSFakAGgT+KbbvXsEO0O80uOLY zMycNk6WWB7eS2a0CW5mvwWONF0tbyoV2kitDCZvXkN2I6RLKCSEc7LjgiobSskP XRSJW08NDvks4Ulx+wf/gFqxCLexUibfbR5Blsec9ehrAg0bQhVC5Cau33u3NvA1 dACDvwu6IVlnz/b+Z6bR2WjmXc77jZeFaYOPMsHvuWcfXudaZjOKMqGAW5eQAguX SZyOQ8I2X2e4DaBPD0MagnUBzo0g99M/KTy172TpskiB -----END CERTIFICATE-----Generated at Thu Dec 18 07:42:26 2025 by rpki-client