This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/xxJU5TK5j86eCuqKfFa3ZjAgLJ0.roa File: xxJU5TK5j86eCuqKfFa3ZjAgLJ0.roa (raw, json) Hash identifier: 8Fc3FeiY5RFVLrYSZ7k2lRb5tRyk3H93J4Gso2Iermg= Subject key identifier: C7:12:54:E5:32:B9:8F:CE:9E:0A:EA:8A:7C:56:B7:66:30:20:2C:9D Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094 Certificate serial: 019B2CC0773CE3E49315E8C21A62E7B7E737 Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/xxJU5TK5j86eCuqKfFa3ZjAgLJ0.roa Signing time: Wed 17 Dec 2025 14:39:29 +0000 ROA not before: Wed 17 Dec 2025 14:39:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 29226 IP address blocks: 130.49.143.0/24 maxlen: 24 130.49.153.0/24 maxlen: 24 155.212.245.0/24 maxlen: 24 155.212.246.0/24 maxlen: 24 155.212.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:c0:77:3c:e3:e4:93:15:e8:c2:1a:62:e7:b7:e7:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094 Validity Not Before: Dec 17 14:39:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c71254e532b98fce9e0aea8a7c56b76630202c9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:8d:da:b7:7e:96:e9:b4:11:4e:2f:c9:94:17: 39:57:bc:ab:18:8a:bc:85:6b:9c:79:23:22:b8:50: e1:50:6b:37:e0:b3:07:d4:7c:7c:85:5a:01:09:08: fc:6e:ef:51:32:fd:26:39:f3:2c:5f:23:83:08:91: 87:f9:f2:3b:7c:73:1e:57:35:af:89:7d:d3:c1:d1: b8:a5:ad:1c:ed:9b:36:bf:3d:0b:f7:df:bb:2e:ec: fa:28:e4:b1:bc:a6:b3:31:f2:7b:6d:fb:3b:63:3a: 59:d1:3e:dc:39:89:f2:a4:cb:0c:85:bd:f3:c8:a0: 45:0d:06:b9:22:5e:b4:11:f5:a7:7f:14:61:0a:e9: d2:c2:a4:46:52:0e:5c:ab:e7:98:d0:d0:1d:be:22: d6:b5:41:45:04:7d:0b:53:df:57:0b:b2:e6:e5:3a: e1:df:15:40:58:29:71:06:ca:20:6f:77:69:b8:c4: 97:87:10:cf:9d:84:ab:cb:b3:81:6d:48:40:fd:06: 98:6b:75:42:94:f5:b2:ac:20:e5:9c:ef:cd:01:2a: 32:f0:e8:1c:d6:a7:4c:57:72:d3:37:0d:22:ee:70: 85:a2:0b:91:cc:e4:a9:6f:fb:15:a1:7a:d8:7a:9c: c2:49:5a:e0:3a:9b:79:39:88:4a:92:ca:37:1d:48: 76:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:12:54:E5:32:B9:8F:CE:9E:0A:EA:8A:7C:56:B7:66:30:20:2C:9D X509v3 Authority Key Identifier: keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/xxJU5TK5j86eCuqKfFa3ZjAgLJ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.49.143.0/24 130.49.153.0/24 155.212.245.0-155.212.247.255 Signature Algorithm: sha256WithRSAEncryption 68:68:1b:80:2a:f2:e7:9d:e9:99:30:c6:53:0e:77:13:ea:99: 72:9d:27:2a:45:34:99:96:bb:ec:70:e8:d2:32:7d:f2:6c:5f: b6:ca:9c:90:2d:4b:b8:17:b2:01:30:38:62:8f:8d:4d:f2:16: 95:3a:a7:2a:6e:63:f2:eb:38:23:d2:41:8e:ea:03:86:91:f6: 07:81:c8:9e:bf:ad:1a:9d:ce:c7:fc:ac:5b:0b:bd:5d:fb:2b: b0:fc:25:a3:21:bd:0b:76:d3:7d:2a:66:8b:55:26:f7:d3:9c: c0:ce:8e:7f:04:e3:a2:64:ad:02:d7:74:fe:55:70:68:84:be: 5a:4c:2e:3f:17:16:03:6e:0d:d9:cc:1b:43:db:c8:d5:dd:32: fa:83:58:01:64:22:d0:36:90:72:1b:7f:8f:15:07:29:b2:75: a6:4a:6f:8f:57:af:3e:35:52:85:ab:2b:81:3d:39:63:a6:92: 43:ed:de:8b:21:c1:73:26:8e:f1:d6:80:63:26:03:16:4b:aa: 76:bb:59:4c:99:2d:18:a5:04:58:f4:b1:ce:57:31:ad:52:b3: 8b:01:66:e7:f8:37:2c:7b:47:5e:7e:b1:33:84:c2:7d:84:2c: 6d:84:5d:86:3c:cc:48:a9:d3:d7:2b:15:42:bf:7c:ec:df:a0: 9e:46:fe:fd -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZsswHc84+STFejCGmLnt+c3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYmU2NWFlMjNmMjA3ZmE2OTUyNTVmNTVhOTA3YWMxNjA4 YmUwOTQwHhcNMjUxMjE3MTQzOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzEyNTRlNTMyYjk4ZmNlOWUwYWVhOGE3YzU2Yjc2NjMwMjAyYzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8o3at36W6bQRTi/JlBc5V7yrGIq8 hWuceSMiuFDhUGs34LMH1Hx8hVoBCQj8bu9RMv0mOfMsXyODCJGH+fI7fHMeVzWv iX3TwdG4pa0c7Zs2vz0L99+7Luz6KOSxvKazMfJ7bfs7YzpZ0T7cOYnypMsMhb3z yKBFDQa5Il60EfWnfxRhCunSwqRGUg5cq+eY0NAdviLWtUFFBH0LU99XC7Lm5Trh 3xVAWClxBsogb3dpuMSXhxDPnYSry7OBbUhA/QaYa3VClPWyrCDlnO/NASoy8Ogc 1qdMV3LTNw0i7nCFoguRzOSpb/sVoXrYepzCSVrgOpt5OYhKkso3HUh28wIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFMcSVOUyuY/OngrqinxWt2YwICydMB8GA1UdIwQY MBaAFF++Za4j8gf6aVJV9VqQesFgi+CUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDc1bHJpUHlCX3BwVWxYMVdwQjZ3V0NMNEpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9mNDMxOWYtM2RmYi00MmVhLWJhOTUt NDkyYWIzNzI2ODlkLzEveHhKVTVUSzVqODZlQ3VxS2ZGYTNaakFnTEowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9mNDMxOWYtM2RmYi00MmVhLWJhOTUtNDkyYWIzNzI2ODlk LzEvWDc1bHJpUHlCX3BwVWxYMVdwQjZ3V0NMNEpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAgjGPAwQA gjGZMAwDBACb1PUDBAOb1PAwDQYJKoZIhvcNAQELBQADggEBAGhoG4Aq8ued6Zkw xlMOdxPqmXKdJypFNJmWu+xw6NIyffJsX7bKnJAtS7gXsgEwOGKPjU3yFpU6pypu Y/LrOCPSQY7qA4aR9geByJ6/rRqdzsf8rFsLvV37K7D8JaMhvQt2030qZotVJvfT nMDOjn8E46JkrQLXdP5VcGiEvlpMLj8XFgNuDdnMG0PbyNXdMvqDWAFkItA2kHIb f48VBymydaZKb49Xrz41UoWrK4E9OWOmkkPt3oshwXMmjvHWgGMmAxZLqna7WUyZ LRilBFj0sc5XMa1Ss4sBZuf4Nyx7R15+sTOEwn2ELG2EXYY8zEip09crFUK/fOzf oJ5G/v0= -----END CERTIFICATE-----Generated at Sun Dec 21 00:08:53 2025 by rpki-client