This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/XMYGZg5HfdYgDn8ux6WUakMG7bc.roa File: XMYGZg5HfdYgDn8ux6WUakMG7bc.roa (raw, json) Hash identifier: skdp8+wDE1jn0tf3zRnnWUq7zWuYU5dp75qtwxc7xwU= Subject key identifier: 5C:C6:06:66:0E:47:7D:D6:20:0E:7F:2E:C7:A5:94:6A:43:06:ED:B7 Certificate issuer: /CN=94d98e8fec680775a157266e0c6b78b141a34f5e Certificate serial: 019B22F043BD28C7F363E9C39D0D2217437F Authority key identifier: 94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/XMYGZg5HfdYgDn8ux6WUakMG7bc.roa Signing time: Mon 15 Dec 2025 16:55:29 +0000 ROA not before: Mon 15 Dec 2025 16:55:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 8254 IP address blocks: 5.34.178.0/23 maxlen: 23 46.28.71.0/24 maxlen: 24 82.117.252.0/23 maxlen: 23 82.117.254.0/24 maxlen: 24 85.90.197.0/24 maxlen: 24 85.90.198.0/24 maxlen: 24 193.238.154.0/24 maxlen: 24 217.12.204.0/24 maxlen: 24 2a05:9405::/32 maxlen: 32 2a12:6fc3::/32 maxlen: 32 2a12:6fc4::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:f0:43:bd:28:c7:f3:63:e9:c3:9d:0d:22:17:43:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94d98e8fec680775a157266e0c6b78b141a34f5e Validity Not Before: Dec 15 16:55:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5cc606660e477dd6200e7f2ec7a5946a4306edb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:13:6a:c0:c2:98:33:47:ca:05:44:81:f7:e0: f9:84:df:23:ba:1a:9d:1a:8c:5c:3b:ed:d5:b7:c9: 23:b8:cc:0f:c5:df:9a:2d:d7:13:90:3f:22:86:74: 3c:8e:f4:c9:2e:42:de:96:22:73:d2:9b:61:62:87: d4:f3:5b:67:af:13:e6:b3:b3:66:48:16:2e:d7:65: 16:0c:57:1f:e4:9a:ed:04:d3:05:05:9a:40:80:22: 43:4d:c0:94:bf:bd:d1:fa:52:a6:5a:bf:09:c1:86: f2:ea:b7:df:25:5e:ff:27:ad:80:74:48:29:e0:a3: d5:87:12:c4:62:58:ea:b3:72:d4:3f:fa:9c:50:14: d1:82:b2:dc:3f:c9:2e:6a:b0:59:fc:d3:f6:84:ba: eb:15:a3:fa:74:90:b8:48:9e:56:d1:d6:a7:5a:06: e4:91:b1:e2:64:6e:e1:61:c5:30:5c:38:ff:0d:7d: 17:a6:6e:86:9f:35:cc:38:62:c1:89:d8:b6:78:09: 5d:bc:bc:d5:26:6d:dd:54:12:8f:57:49:14:96:7d: 44:1f:9f:69:05:a5:c8:a3:b5:d9:cf:61:05:ba:c9: 16:20:ff:f6:ce:e9:87:21:ac:ec:05:9c:3b:74:3a: d1:91:2d:2f:ba:19:1e:35:76:ab:9d:16:0d:1c:75: a3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:C6:06:66:0E:47:7D:D6:20:0E:7F:2E:C7:A5:94:6A:43:06:ED:B7 X509v3 Authority Key Identifier: keyid:94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/XMYGZg5HfdYgDn8ux6WUakMG7bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.34.178.0/23 46.28.71.0/24 82.117.252.0-82.117.254.255 85.90.197.0-85.90.198.255 193.238.154.0/24 217.12.204.0/24 IPv6: 2a05:9405::/32 2a12:6fc3::-2a12:6fc4:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 4a:b8:16:07:ed:37:6e:50:8b:92:95:e0:9e:8e:a5:b6:3d:33: e1:80:6f:5e:22:57:58:b2:b7:4b:17:1c:40:f2:a3:d1:c8:7d: e2:21:c2:56:e6:c4:c5:51:82:fd:18:dc:e8:98:32:78:15:ec: 7c:f1:90:21:24:a3:db:1d:79:cd:30:d1:3a:94:db:f2:88:12: f9:27:ca:44:fd:ff:3f:4f:e2:77:a0:f1:19:f0:ee:fd:67:e1: 68:ed:59:ca:10:af:fd:6f:b6:92:d1:de:cb:7a:13:4e:f8:5f: ce:e4:55:ba:8b:f4:e3:23:6c:e0:73:99:e0:27:a2:52:49:51: af:98:51:05:77:b7:d8:12:27:0b:93:c7:55:e0:9c:81:cc:de: 9b:2a:93:2a:4a:e7:8c:e9:a5:9e:28:25:b1:93:ff:a0:1b:60: bd:05:fe:de:f2:e3:21:96:a0:f6:98:ce:67:a8:b1:20:4a:0f: fd:19:77:10:1c:eb:ba:9f:05:dc:cf:f7:e1:0a:d7:89:a3:7c: ba:4b:f5:79:fe:8f:0b:98:26:bb:18:94:e6:0e:77:93:b4:ce: 1b:c6:6b:28:4e:fd:24:2c:06:45:6d:c2:4d:25:0f:94:2e:e9: 15:f1:23:d2:48:48:80:90:e4:3a:d0:f4:00:32:6a:e0:ef:b7: 30:aa:d1:46 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgISAZsi8EO9KMfzY+nDnQ0iF0N/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0ZDk4ZThmZWM2ODA3NzVhMTU3MjY2ZTBjNmI3OGIxNDFh MzRmNWUwHhcNMjUxMjE1MTY1NTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2M2MDY2NjBlNDc3ZGQ2MjAwZTdmMmVjN2E1OTQ2YTQzMDZlZGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxNqwMKYM0fKBUSB9+D5hN8juhqd GoxcO+3Vt8kjuMwPxd+aLdcTkD8ihnQ8jvTJLkLeliJz0pthYofU81tnrxPms7Nm SBYu12UWDFcf5JrtBNMFBZpAgCJDTcCUv73R+lKmWr8JwYby6rffJV7/J62AdEgp 4KPVhxLEYljqs3LUP/qcUBTRgrLcP8kuarBZ/NP2hLrrFaP6dJC4SJ5W0danWgbk kbHiZG7hYcUwXDj/DX0Xpm6GnzXMOGLBidi2eAldvLzVJm3dVBKPV0kUln1EH59p BaXIo7XZz2EFuskWIP/2zumHIazsBZw7dDrRkS0vuhkeNXarnRYNHHWjTQIDAQAB o4ICVjCCAlIwHQYDVR0OBBYEFFzGBmYOR33WIA5/LsellGpDBu23MB8GA1UdIwQY MBaAFJTZjo/saAd1oVcmbgxreLFBo09eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbE5tT2oteG9CM1doVnladURHdDRzVUdqVDE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83YWUzYzctNjdlNC00NGRlLWIxMzkt ODdkMTdkZjc0YzdlLzEvWE1ZR1pnNUhmZFlnRG44dXg2V1Vha01HN2JjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi83YWUzYzctNjdlNC00NGRlLWIxMzktODdkMTdkZjc0Yzdl LzEvbE5tT2oteG9CM1doVnladURHdDRzVUdqVDE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGwGCCsGAQUFBwEHAQH/BF0wWzA6BAIAATA0AwQBBSKyAwQA LhxHMAwDBAJSdfwDBABSdf4wDAMEAFVaxQMEAFVaxgMEAMHumgMEANkMzDAdBAIA AjAXAwUAKgWUBTAOAwUAKhJvwwMFACoSb8QwDQYJKoZIhvcNAQELBQADggEBAEq4 FgftN25Qi5KV4J6OpbY9M+GAb14iV1iyt0sXHEDyo9HIfeIhwlbmxMVRgv0Y3OiY MngV7HzxkCEko9sdec0w0TqU2/KIEvknykT9/z9P4neg8Rnw7v1n4WjtWcoQr/1v tpLR3st6E074X87kVbqL9OMjbOBzmeAnolJJUa+YUQV3t9gSJwuTx1XgnIHM3psq kypK54zppZ4oJbGT/6AbYL0F/t7y4yGWoPaYzmeosSBKD/0ZdxAc67qfBdzP9+EK 14mjfLpL9Xn+jwuYJrsYlOYOd5O0zhvGayhO/SQsBkVtwk0lD5Qu6RXxI9JISICQ 5DrQ9AAyauDvtzCq0UY= -----END CERTIFICATE-----Generated at Thu Dec 18 02:00:17 2025 by rpki-client