This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/X25UP-NpXQst8cLd2OT5hwVkcyI.roa File: X25UP-NpXQst8cLd2OT5hwVkcyI.roa (raw, json) Hash identifier: R76mFG8Lz/frWiKGh1KsPANlprqbm2IEkXX6xFI1bWY= Subject key identifier: 5F:6E:54:3F:E3:69:5D:0B:2D:F1:C2:DD:D8:E4:F9:87:05:64:73:22 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B2C5BC4FFF2D746F937771B4823236329 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/X25UP-NpXQst8cLd2OT5hwVkcyI.roa Signing time: Wed 17 Dec 2025 12:49:30 +0000 ROA not before: Wed 17 Dec 2025 12:49:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 14618 IP address blocks: 212.134.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 19:08:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:5b:c4:ff:f2:d7:46:f9:37:77:1b:48:23:23:63:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Dec 17 12:49:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5f6e543fe3695d0b2df1c2ddd8e4f98705647322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ec:f4:47:84:61:31:9b:00:75:df:9f:26:dc: b4:dd:48:01:f2:fa:f9:d5:7c:4f:0d:92:e0:e9:f5: 19:6b:74:c3:e7:d0:9b:b4:7e:33:cc:78:74:44:f4: c4:c1:f1:85:62:89:1b:d8:53:da:ca:8b:81:d3:92: 77:7c:1d:9f:27:cf:ab:e3:32:41:f0:ba:ab:91:06: 89:2a:cf:3a:3a:74:45:ff:22:78:4b:3e:0f:21:36: be:14:49:b9:6e:46:6f:a0:92:94:9f:72:ac:98:09: f8:4a:01:98:d7:5e:30:f4:d2:1c:ae:d4:68:8f:0a: f4:cb:49:48:b3:07:f6:f3:3a:51:00:5b:f5:c6:a6: 0c:8d:bc:28:4a:9d:93:29:51:1d:c1:14:01:b2:00: 20:2c:e3:bd:de:c1:44:6a:e1:62:ac:ec:9c:4b:1f: 68:49:19:10:53:41:b5:93:c9:4d:db:f6:5f:ae:c3: 41:ad:51:4f:e7:bc:e9:0b:6e:15:fc:5f:ca:18:ff: 2c:31:eb:8d:56:27:72:d9:a7:e4:c5:27:cf:39:4b: 34:c5:53:b3:56:45:ba:2d:eb:27:3c:e3:b9:dc:9d: 55:fc:d4:20:d0:aa:6d:14:df:cd:e6:2e:7b:50:88: 54:13:f7:70:af:47:9b:52:e8:3e:91:99:8b:f4:54: 77:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:6E:54:3F:E3:69:5D:0B:2D:F1:C2:DD:D8:E4:F9:87:05:64:73:22 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/X25UP-NpXQst8cLd2OT5hwVkcyI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.144.0/22 Signature Algorithm: sha256WithRSAEncryption 89:c0:a7:c8:d4:2e:9f:7b:96:06:71:b5:a3:88:f1:10:7e:e3: 5f:36:0e:fd:7e:a5:8e:58:6b:35:3a:17:9a:b9:ef:6c:f0:7c: 37:97:aa:43:b6:e5:95:5b:71:32:66:0a:69:3d:21:00:ec:5c: 61:1b:7c:1a:05:7f:6a:33:ab:a8:94:70:cf:75:31:d3:9d:e1: 0c:6e:d9:dd:72:09:c0:c5:ea:33:1c:dd:f7:59:0c:ca:31:cf: 39:5f:4c:bd:d4:e9:e3:e3:f3:63:c1:e2:ef:e6:fd:6e:b8:53: 26:39:a8:65:71:f1:94:e1:48:82:93:a5:55:de:a1:ff:cc:ff: c5:90:f1:44:cc:66:60:ac:14:ad:70:79:5a:31:e1:9e:38:7f: 7a:a5:1a:c3:94:c0:36:89:d0:be:e0:50:08:c0:e6:5d:b8:bc: 39:d2:e3:34:fd:50:58:32:d1:03:e6:4b:7d:58:8d:78:23:ad: 9a:3c:e3:bc:05:da:fe:0e:e3:b6:ec:e1:bd:f9:5a:c8:53:58: 56:1c:8e:2b:db:97:e9:66:c9:a7:14:92:65:31:33:f4:fa:7b: 48:d1:dd:28:68:0c:1e:8a:09:0e:34:30:a4:c4:5c:63:f5:35: f1:17:99:26:15:b7:b7:9b:a3:e7:1e:21:23:f2:82:84:76:78: a8:3f:10:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZssW8T/8tdG+Td3G0gjI2MpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjUxMjE3MTI0OTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjZlNTQzZmUzNjk1ZDBiMmRmMWMyZGRkOGU0Zjk4NzA1NjQ3MzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOz0R4RhMZsAdd+fJty03UgB8vr5 1XxPDZLg6fUZa3TD59CbtH4zzHh0RPTEwfGFYokb2FPayouB05J3fB2fJ8+r4zJB 8LqrkQaJKs86OnRF/yJ4Sz4PITa+FEm5bkZvoJKUn3KsmAn4SgGY114w9NIcrtRo jwr0y0lIswf28zpRAFv1xqYMjbwoSp2TKVEdwRQBsgAgLOO93sFEauFirOycSx9o SRkQU0G1k8lN2/ZfrsNBrVFP57zpC24V/F/KGP8sMeuNVidy2afkxSfPOUs0xVOz VkW6LesnPOO53J1V/NQg0KptFN/N5i57UIhUE/dwr0ebUug+kZmL9FR3XQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF9uVD/jaV0LLfHC3djk+YcFZHMiMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvWDI1VVAtTnBYUXN0OGNMZDJPVDVod1ZrY3lJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1IaQMA0G CSqGSIb3DQEBCwUAA4IBAQCJwKfI1C6fe5YGcbWjiPEQfuNfNg79fqWOWGs1Ohea ue9s8Hw3l6pDtuWVW3EyZgppPSEA7FxhG3waBX9qM6uolHDPdTHTneEMbtndcgnA xeozHN33WQzKMc85X0y91Onj4/NjweLv5v1uuFMmOahlcfGU4UiCk6VV3qH/zP/F kPFEzGZgrBStcHlaMeGeOH96pRrDlMA2idC+4FAIwOZduLw50uM0/VBYMtED5kt9 WI14I62aPOO8Bdr+DuO27OG9+VrIU1hWHI4r25fpZsmnFJJlMTP0+ntI0d0oaAwe igkONDCkxFxj9TXxF5kmFbe3m6PnHiEj8oKEdnioPxBS -----END CERTIFICATE-----Generated at Sat Dec 20 04:20:24 2025 by rpki-client