This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/b2xSsus3Hj7cGhjo1nPet5eRuPw.roa File: b2xSsus3Hj7cGhjo1nPet5eRuPw.roa (raw, json) Hash identifier: 4Z+8GdvPCOKqSqYHZOOPtEQxG/LZnIdHmS9KBS01348= Subject key identifier: 6F:6C:52:B2:EB:37:1E:3E:DC:1A:18:E8:D6:73:DE:B7:97:91:B8:FC Certificate issuer: /CN=925cecefe522817405d26fc92bb5104ac90cfdc5 Certificate serial: 019B3293DC934ED5C1849ED28AA2132B6F6F Authority key identifier: 92:5C:EC:EF:E5:22:81:74:05:D2:6F:C9:2B:B5:10:4A:C9:0C:FD:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/b2xSsus3Hj7cGhjo1nPet5eRuPw.roa Signing time: Thu 18 Dec 2025 17:48:29 +0000 ROA not before: Thu 18 Dec 2025 17:48:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 39793 IP address blocks: 91.229.185.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.crl rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.mft rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:93:dc:93:4e:d5:c1:84:9e:d2:8a:a2:13:2b:6f:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=925cecefe522817405d26fc92bb5104ac90cfdc5 Validity Not Before: Dec 18 17:48:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6f6c52b2eb371e3edc1a18e8d673deb79791b8fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:ad:aa:6a:ed:e5:ec:fc:e8:1b:14:d0:60:54: 8d:23:46:76:24:4a:47:f6:f4:1d:fb:d6:6f:8c:9c: c5:13:65:22:a0:60:66:f5:36:cb:54:32:2f:f1:15: b5:1d:50:cf:66:23:14:b3:2a:b1:8c:1d:75:34:bc: a4:c1:05:a5:06:60:f3:0b:bf:40:46:8c:f1:a4:ee: da:60:c5:b0:d8:24:05:05:c4:5a:d1:03:bc:60:4d: e5:34:f4:00:89:fe:48:fe:3e:a6:3e:68:83:bf:ba: c2:b4:e6:69:b6:8c:f0:76:31:d1:80:7a:3d:01:ca: ab:2b:ae:4a:12:d5:f6:a6:fb:b4:c1:f0:9f:41:84: 7a:18:64:d3:92:ea:11:36:4b:b7:18:1c:23:2a:29: 35:a9:1f:30:e2:5b:4e:c3:c2:69:b4:a3:73:f5:1c: a3:a6:53:9e:fe:0c:91:e7:53:5c:64:f2:c5:8a:90: d0:7f:7e:b6:d1:aa:c1:9f:93:1e:1b:a2:93:f0:c1: 2b:4b:71:1e:85:b8:12:5a:38:88:88:fe:62:f8:f8: 9e:03:eb:e0:e1:47:21:10:ce:6c:eb:ee:8c:7f:a1: ec:70:20:36:5f:8a:b0:96:bd:66:d9:51:d6:60:9c: 3b:68:f7:8f:62:55:ef:0d:7a:ad:a5:a5:de:ef:48: 48:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:6C:52:B2:EB:37:1E:3E:DC:1A:18:E8:D6:73:DE:B7:97:91:B8:FC X509v3 Authority Key Identifier: keyid:92:5C:EC:EF:E5:22:81:74:05:D2:6F:C9:2B:B5:10:4A:C9:0C:FD:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/b2xSsus3Hj7cGhjo1nPet5eRuPw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.229.185.0/24 Signature Algorithm: sha256WithRSAEncryption c5:a2:88:0d:3c:da:73:d3:da:30:49:5f:85:59:00:35:8b:c4: 7a:b2:13:1e:7b:8a:0c:db:00:64:84:32:f4:cb:ca:c7:ca:50: e1:30:04:60:d9:fa:c7:24:16:93:95:07:e3:18:12:97:16:d2: 79:63:ee:ca:2c:b9:05:28:d7:00:95:3d:99:65:ea:a4:cc:a7: 47:b2:a7:fc:16:2c:3d:5f:32:19:63:5e:a7:c9:9e:53:e6:7a: 57:88:b1:67:78:94:c3:87:78:a5:92:b9:da:a2:48:c0:f4:13: 6e:e2:c8:e0:24:84:f8:f1:5c:ce:d2:1f:ae:ee:f5:85:30:26: a1:eb:8d:8e:99:13:75:1f:aa:67:5a:ed:2d:ce:6d:04:49:66: 7b:e2:e1:a8:05:91:cd:f1:e8:ac:48:f4:d4:a7:1c:d1:83:f3: 53:69:f5:71:64:ac:c2:68:8c:da:02:6e:bb:39:3f:cd:fb:65: bb:5a:31:01:f7:33:08:1e:1e:ff:a1:cf:d4:32:82:af:c5:24: 07:db:7d:48:2b:fd:8b:d3:d0:89:9c:06:98:ee:11:7d:27:54: c0:a9:a6:a9:24:ad:92:14:f8:b1:2b:e7:7b:32:45:73:69:2a: b1:20:09:75:9e:2a:a1:4e:da:bd:5b:1c:13:09:31:3c:22:df: f0:7b:72:44 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsyk9yTTtXBhJ7SiqITK29vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNWNlY2VmZTUyMjgxNzQwNWQyNmZjOTJiYjUxMDRhYzkw Y2ZkYzUwHhcNMjUxMjE4MTc0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjZjNTJiMmViMzcxZTNlZGMxYTE4ZThkNjczZGViNzk3OTFiOGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9K2qau3l7PzoGxTQYFSNI0Z2JEpH 9vQd+9ZvjJzFE2UioGBm9TbLVDIv8RW1HVDPZiMUsyqxjB11NLykwQWlBmDzC79A RozxpO7aYMWw2CQFBcRa0QO8YE3lNPQAif5I/j6mPmiDv7rCtOZptozwdjHRgHo9 AcqrK65KEtX2pvu0wfCfQYR6GGTTkuoRNku3GBwjKik1qR8w4ltOw8JptKNz9Ryj plOe/gyR51NcZPLFipDQf3620arBn5MeG6KT8MErS3EehbgSWjiIiP5i+PieA+vg 4UchEM5s6+6Mf6HscCA2X4qwlr1m2VHWYJw7aPePYlXvDXqtpaXe70hI1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG9sUrLrNx4+3BoY6NZz3reXkbj8MB8GA1UdIwQY MBaAFJJc7O/lIoF0BdJvySu1EErJDP3FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2x6czctVWlnWFFGMG1fSks3VVFTc2tNX2NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mMDc2N2MtYjAxOS00NjNjLWEwYjEt OGQ0YmZkMGFhY2U4LzEvYjJ4U3N1czNIajdjR2hqbzFuUGV0NWVSdVB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9mMDc2N2MtYjAxOS00NjNjLWEwYjEtOGQ0YmZkMGFhY2U4 LzEva2x6czctVWlnWFFGMG1fSks3VVFTc2tNX2NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+W5MA0G CSqGSIb3DQEBCwUAA4IBAQDFoogNPNpz09owSV+FWQA1i8R6shMee4oM2wBkhDL0 y8rHylDhMARg2frHJBaTlQfjGBKXFtJ5Y+7KLLkFKNcAlT2ZZeqkzKdHsqf8Fiw9 XzIZY16nyZ5T5npXiLFneJTDh3ilkrnaokjA9BNu4sjgJIT48VzO0h+u7vWFMCah 642OmRN1H6pnWu0tzm0ESWZ74uGoBZHN8eisSPTUpxzRg/NTafVxZKzCaIzaAm67 OT/N+2W7WjEB9zMIHh7/oc/UMoKvxSQH231IK/2L09CJnAaY7hF9J1TAqaapJK2S FPixK+d7MkVzaSqxIAl1niqhTtq9WxwTCTE8It/we3JE -----END CERTIFICATE-----Generated at Sun Dec 21 10:49:56 2025 by rpki-client