This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1-XRDOFgajLYzF4zMB10PlRUFm2A.roa File: 1-XRDOFgajLYzF4zMB10PlRUFm2A.roa (raw, json) Hash identifier: I0Wd4wkpPnsv2qelJvtv1++b3n8Y/eNZD8gTEBFowBA= Subject key identifier: F9:74:43:38:58:1A:8C:B6:33:17:8C:CC:07:5D:0F:95:15:05:9B:60 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B31B5E75F6D9F0207E7FFAE600935ECA2 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1-XRDOFgajLYzF4zMB10PlRUFm2A.roa Signing time: Thu 18 Dec 2025 13:46:03 +0000 ROA not before: Thu 18 Dec 2025 13:46:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 6220 IP address blocks: 87.83.53.0/24 maxlen: 24 195.172.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:b5:e7:5f:6d:9f:02:07:e7:ff:ae:60:09:35:ec:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Dec 18 13:46:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f9744338581a8cb633178ccc075d0f9515059b60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e2:45:57:1e:4e:30:19:75:50:7e:22:e3:ba: 27:8d:e3:9e:ac:0a:32:2a:5c:db:8e:26:e0:48:c2: 64:e7:ac:4b:d4:1b:3f:28:18:ef:e6:23:1a:dc:67: 03:9a:cc:e1:ee:be:28:3b:28:18:27:1d:27:88:fe: 18:5f:29:61:44:ee:35:ee:cb:a0:59:68:04:25:4f: a4:e9:81:92:58:6b:8f:90:b0:0c:63:1c:95:8b:8b: 85:59:af:26:15:c8:57:a2:91:fa:00:cc:47:51:41: 52:54:91:09:20:ee:23:9e:e7:de:64:a0:3e:77:83: 69:1f:a5:82:4a:04:78:9f:45:8b:1f:37:2f:b1:5c: da:fc:58:e3:23:b3:8a:5f:60:7a:5b:62:2e:a9:1a: 96:00:49:24:7e:f7:c2:75:f4:52:89:25:5c:c3:91: d5:85:56:a1:e6:e8:35:cd:67:51:b3:7b:53:ec:eb: a6:2f:67:c8:db:37:0f:69:90:9c:af:a7:d6:8e:61: 5a:40:26:1a:65:07:02:f7:9a:c9:cf:c8:1c:d0:27: c7:25:22:4a:42:10:42:ba:66:97:fd:d4:4d:50:f4: 53:bf:62:1c:c5:c3:92:a9:5d:47:ca:9d:f1:2f:b7: 8a:97:5e:dd:46:ca:a7:f1:bb:48:a7:b2:94:8f:11: d6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:74:43:38:58:1A:8C:B6:33:17:8C:CC:07:5D:0F:95:15:05:9B:60 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1-XRDOFgajLYzF4zMB10PlRUFm2A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.83.53.0/24 195.172.144.0/24 Signature Algorithm: sha256WithRSAEncryption ca:62:4f:91:4c:b6:99:70:96:e0:5e:a3:59:ec:4e:1f:d5:8d: 4a:9a:5d:45:be:84:f2:58:e4:17:4f:d9:57:54:84:eb:e8:66: e6:5d:f3:57:cc:70:b3:b8:07:29:5b:db:24:7c:8d:da:8c:d8: 19:1a:2b:16:6f:a7:96:3c:a0:b8:31:94:7a:c5:e9:ef:04:69: cc:52:71:2d:54:c4:ed:97:3d:cb:17:16:cf:bc:88:ed:6a:5f: fb:ed:f5:9c:76:47:70:5f:7d:9d:aa:9c:df:60:73:70:67:8e: 1d:71:d6:3b:8a:44:be:49:14:c8:a5:c5:59:4b:e0:d2:95:b7: a9:93:b6:25:5d:f9:de:a0:e0:56:e4:29:4c:6f:26:83:0a:26: ac:95:2c:5a:dd:f8:8f:d2:f3:43:91:41:33:a5:68:11:2c:51: 4d:aa:d8:dd:87:fb:17:77:c6:66:81:b9:6a:5b:e0:61:f5:cd: f1:bf:5e:48:8a:6b:26:3c:07:f2:73:1f:2f:1a:5b:91:bb:0a: 58:e1:20:8a:83:54:0d:17:8c:d8:0b:67:62:28:66:3b:39:62: ad:3d:f1:8b:f5:a0:ee:e7:37:b5:e0:51:14:ef:23:8c:e4:a5: 34:38:ef:1e:8d:ff:6e:ec:b4:bc:a2:13:da:34:53:ca:7c:16: 65:0e:49:52 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZsxtedfbZ8CB+f/rmAJNeyiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjUxMjE4MTM0NjAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTc0NDMzODU4MWE4Y2I2MzMxNzhjY2MwNzVkMGY5NTE1MDU5YjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uJFVx5OMBl1UH4i47onjeOerAoy KlzbjibgSMJk56xL1Bs/KBjv5iMa3GcDmszh7r4oOygYJx0niP4YXylhRO417sug WWgEJU+k6YGSWGuPkLAMYxyVi4uFWa8mFchXopH6AMxHUUFSVJEJIO4jnufeZKA+ d4NpH6WCSgR4n0WLHzcvsVza/FjjI7OKX2B6W2IuqRqWAEkkfvfCdfRSiSVcw5HV hVah5ug1zWdRs3tT7OumL2fI2zcPaZCcr6fWjmFaQCYaZQcC95rJz8gc0CfHJSJK QhBCumaX/dRNUPRTv2IcxcOSqV1Hyp3xL7eKl17dRsqn8btIp7KUjxHWbQIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFPl0QzhYGoy2MxeMzAddD5UVBZtgMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvMS1YUkRPRmdhakxZekY0ek1CMTBQbFJVRm0yQS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvODAvNmI2NjJkLTAyYTEtNDZlNy1iOWNkLTAzNWQ5NzdmNDIx Ni8xL2ZpQ3dOT0xFbDdHSVJJamU4UWFYSndSMlVDay5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFdTNQME AMOskDANBgkqhkiG9w0BAQsFAAOCAQEAymJPkUy2mXCW4F6jWexOH9WNSppdRb6E 8ljkF0/ZV1SE6+hm5l3zV8xws7gHKVvbJHyN2ozYGRorFm+nljyguDGUesXp7wRp zFJxLVTE7Zc9yxcWz7yI7Wpf++31nHZHcF99naqc32BzcGeOHXHWO4pEvkkUyKXF WUvg0pW3qZO2JV353qDgVuQpTG8mgwomrJUsWt34j9LzQ5FBM6VoESxRTarY3Yf7 F3fGZoG5alvgYfXN8b9eSIprJjwH8nMfLxpbkbsKWOEgioNUDReM2AtnYihmOzli rT3xi/Wg7uc3teBRFO8jjOSlNDjvHo3/buy0vKIT2jRTynwWZQ5JUg== -----END CERTIFICATE-----Generated at Sun Dec 21 03:47:25 2025 by rpki-client