This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/XxBDK8mEu59X0nQ6H71CIJn630c.roa File: XxBDK8mEu59X0nQ6H71CIJn630c.roa (raw, json) Hash identifier: RWHGmB+JhT/MSavPuX7S6QrJopEFXGwlhgz2rOdGBd4= Subject key identifier: 5F:10:43:2B:C9:84:BB:9F:57:D2:74:3A:1F:BD:42:20:99:FA:DF:47 Certificate issuer: /CN=2c94d70cfb7e69019a2e01c87d0a5d545a599b52 Certificate serial: 019B22A52FFF0289375129F5C492F7924863 Authority key identifier: 2C:94:D7:0C:FB:7E:69:01:9A:2E:01:C8:7D:0A:5D:54:5A:59:9B:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/XxBDK8mEu59X0nQ6H71CIJn630c.roa Signing time: Mon 15 Dec 2025 15:33:29 +0000 ROA not before: Mon 15 Dec 2025 15:33:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 57307 IP address blocks: 185.100.148.0/22 maxlen: 24 188.227.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:a5:2f:ff:02:89:37:51:29:f5:c4:92:f7:92:48:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c94d70cfb7e69019a2e01c87d0a5d545a599b52 Validity Not Before: Dec 15 15:33:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5f10432bc984bb9f57d2743a1fbd422099fadf47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d9:b4:23:19:29:50:06:3d:a8:c4:6a:83:4c: 8f:db:cc:b8:e5:8d:5e:19:3e:ac:a6:b1:31:c7:3c: 53:47:e1:6c:73:eb:57:39:7b:4f:11:86:6b:f3:db: 47:75:89:61:23:5c:b5:77:6c:df:e1:ca:70:b0:d8: 9f:d7:9b:81:c4:44:ec:18:e6:da:3d:5a:15:65:40: 30:eb:5f:d1:7d:e1:99:6c:ee:be:5b:a8:3e:51:3a: 25:eb:42:ec:73:4c:a4:ad:46:d9:4c:52:9f:9c:83: 22:b0:8f:1f:65:89:f1:bb:53:fd:d5:6d:d7:fe:47: 6b:7b:ec:16:83:c8:96:6e:23:6c:69:85:fd:2c:b6: 26:6e:f8:b2:e9:7f:a0:c0:89:1a:b4:39:2c:79:90: b2:89:47:b3:44:cc:02:83:c4:14:13:62:55:34:1f: 21:d2:da:36:0e:2b:37:a9:d5:f4:bd:64:bd:f6:2d: 26:07:7e:65:29:f8:19:f2:7c:3d:7f:8c:56:f9:8b: ac:c5:1b:29:75:0c:2e:ec:39:e0:ed:f1:a2:07:7d: 51:27:3c:95:00:26:56:38:ed:17:03:e6:00:b1:21: 08:b6:07:28:a2:17:39:6a:70:6d:5f:30:c3:4a:4e: e2:4e:ec:18:57:bc:4e:87:22:4c:64:93:63:86:7b: 92:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:10:43:2B:C9:84:BB:9F:57:D2:74:3A:1F:BD:42:20:99:FA:DF:47 X509v3 Authority Key Identifier: keyid:2C:94:D7:0C:FB:7E:69:01:9A:2E:01:C8:7D:0A:5D:54:5A:59:9B:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/XxBDK8mEu59X0nQ6H71CIJn630c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.100.148.0/22 188.227.240.0/21 Signature Algorithm: sha256WithRSAEncryption 0a:cc:de:79:0d:9c:29:64:bb:92:6e:f9:1f:4e:96:e2:ba:77: 70:01:91:2f:94:bf:74:85:35:52:47:ed:97:84:8d:72:70:75: 94:5b:c9:e4:45:39:b3:94:47:f4:b5:ea:d8:53:dd:e2:83:1e: e4:69:10:a0:ac:02:41:38:a5:79:c5:e1:c3:0d:c4:d6:a6:e3: bc:0d:57:ce:7f:6d:5d:f7:81:55:9f:26:98:dd:ea:67:58:9e: 14:2c:52:88:29:a4:ca:f0:73:7e:31:7f:4b:41:4a:91:4e:a8: a8:ed:93:54:69:d7:88:06:56:f6:3e:65:56:ce:24:1c:42:6e: 66:bd:43:db:02:cb:fc:32:54:ca:d6:ff:a9:39:22:6c:8a:6c: 11:28:f7:1f:6e:d7:32:fd:0e:28:fa:2a:44:59:51:d0:a9:6e: 65:c2:07:75:05:9f:b8:b2:f7:6e:79:61:37:25:79:0a:4f:00: 37:27:db:e2:e9:b5:52:4e:88:26:c4:69:44:d2:ff:2d:e4:23: f1:6c:ef:41:c5:cd:21:5c:bb:8c:2e:2b:ec:ab:67:cc:4a:1b: 89:45:63:d2:a9:1a:14:c6:82:33:e1:30:d8:2f:e7:50:48:46: 30:50:04:90:98:44:24:98:5f:95:11:3a:9f:10:8d:12:ff:8f: 27:1d:d5:f0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsipS//Aok3USn1xJL3kkhjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjOTRkNzBjZmI3ZTY5MDE5YTJlMDFjODdkMGE1ZDU0NWE1 OTliNTIwHhcNMjUxMjE1MTUzMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjEwNDMyYmM5ODRiYjlmNTdkMjc0M2ExZmJkNDIyMDk5ZmFkZjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNm0IxkpUAY9qMRqg0yP28y45Y1e GT6sprExxzxTR+Fsc+tXOXtPEYZr89tHdYlhI1y1d2zf4cpwsNif15uBxETsGOba PVoVZUAw61/RfeGZbO6+W6g+UTol60Lsc0ykrUbZTFKfnIMisI8fZYnxu1P91W3X /kdre+wWg8iWbiNsaYX9LLYmbviy6X+gwIkatDkseZCyiUezRMwCg8QUE2JVNB8h 0to2Dis3qdX0vWS99i0mB35lKfgZ8nw9f4xW+YusxRspdQwu7Dng7fGiB31RJzyV ACZWOO0XA+YAsSEItgcoohc5anBtXzDDSk7iTuwYV7xOhyJMZJNjhnuSRQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFF8QQyvJhLufV9J0Oh+9QiCZ+t9HMB8GA1UdIwQY MBaAFCyU1wz7fmkBmi4ByH0KXVRaWZtSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEpUWERQdC1hUUdhTGdISWZRcGRWRnBabTFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8xYmRhN2MtOTg1OC00M2Y1LTg2NTkt NjlmYzA1NmIyNjI1LzEvWHhCREs4bUV1NTlYMG5RNkg3MUNJSm42MzBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi8xYmRhN2MtOTg1OC00M2Y1LTg2NTktNjlmYzA1NmIyNjI1 LzEvTEpUWERQdC1hUUdhTGdISWZRcGRWRnBabTFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuWSUAwQD vOPwMA0GCSqGSIb3DQEBCwUAA4IBAQAKzN55DZwpZLuSbvkfTpbiundwAZEvlL90 hTVSR+2XhI1ycHWUW8nkRTmzlEf0terYU93igx7kaRCgrAJBOKV5xeHDDcTWpuO8 DVfOf21d94FVnyaY3epnWJ4ULFKIKaTK8HN+MX9LQUqRTqio7ZNUadeIBlb2PmVW ziQcQm5mvUPbAsv8MlTK1v+pOSJsimwRKPcfbtcy/Q4o+ipEWVHQqW5lwgd1BZ+4 svdueWE3JXkKTwA3J9vi6bVSTogmxGlE0v8t5CPxbO9Bxc0hXLuMLivsq2fMShuJ RWPSqRoUxoIz4TDYL+dQSEYwUASQmEQkmF+VETqfEI0S/48nHdXw -----END CERTIFICATE-----Generated at Sat Dec 20 22:44:47 2025 by rpki-client