This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/X6bKafUHkhkpou4OCxL8fuWQRK4.roa File: X6bKafUHkhkpou4OCxL8fuWQRK4.roa (raw, json) Hash identifier: WoLzQ8S7RBA73Yq2Vk2wSQeggqTkifN1MdLrz3kjqRM= Subject key identifier: 5F:A6:CA:69:F5:07:92:19:29:A2:EE:0E:0B:12:FC:7E:E5:90:44:AE Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Certificate serial: 019B7F16015D6D6E44BEF86A59656F0F65F9 Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/X6bKafUHkhkpou4OCxL8fuWQRK4.roa Signing time: Fri 02 Jan 2026 14:21:47 +0000 ROA not before: Fri 02 Jan 2026 14:21:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 178.239.127.0/24 maxlen: 24 185.95.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:16:01:5d:6d:6e:44:be:f8:6a:59:65:6f:0f:65:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Validity Not Before: Jan 2 14:21:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5fa6ca69f507921929a2ee0e0b12fc7ee59044ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:88:f1:17:3a:d1:ef:0f:d2:38:cc:f7:ee:f9: e6:d8:cf:fa:6e:27:fa:74:74:97:64:e8:be:26:16: 13:cb:4d:6f:5e:53:91:7d:6f:d2:8b:91:23:ff:11: 02:58:31:25:96:e8:e3:d6:00:4d:b8:8b:d8:7f:67: 84:d5:db:e5:74:63:dd:51:03:cd:67:10:6b:6c:3d: a7:bc:d3:82:b5:ca:16:83:4a:eb:26:78:9d:29:b6: 71:62:f6:c0:59:dc:f6:f2:2a:23:bb:63:99:69:eb: c6:5b:ad:17:9d:eb:98:ae:ce:99:87:3f:10:42:15: 78:61:8f:90:55:e8:16:eb:85:8c:ed:16:47:ec:a2: e4:21:c4:78:ef:c1:90:0f:3c:4b:09:18:86:9c:1d: 08:88:88:a3:4d:34:d0:d6:a6:82:e3:e9:61:28:cc: f7:02:24:01:fe:12:6b:d5:12:c6:d1:94:e6:4c:2f: 79:bf:a0:bf:9c:25:71:14:78:4d:b8:df:65:a4:71: 04:5c:83:00:96:f6:6e:b7:2d:44:94:06:36:8a:39: 26:e3:4c:0c:bb:44:17:50:52:48:05:2a:60:09:3c: 24:02:ab:55:4b:31:0d:a2:2f:8e:30:96:5b:07:45: 87:35:50:ae:a7:17:18:05:5e:11:dd:06:fe:ae:24: a6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:A6:CA:69:F5:07:92:19:29:A2:EE:0E:0B:12:FC:7E:E5:90:44:AE X509v3 Authority Key Identifier: keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/X6bKafUHkhkpou4OCxL8fuWQRK4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.239.127.0/24 185.95.158.0/24 Signature Algorithm: sha256WithRSAEncryption 77:db:57:b4:1d:91:6a:1e:47:da:01:73:0b:8a:17:ae:01:7c: 91:15:76:0a:2a:c4:94:64:7b:29:f6:8e:5c:ba:23:c4:79:94: e1:de:32:64:65:50:f1:64:95:a1:f5:4e:38:ef:5e:31:e4:df: 47:c7:92:3c:9e:75:d4:59:40:6f:0b:d3:ff:08:34:48:dc:8c: 09:b1:1c:dc:a4:1b:e4:92:82:96:f0:89:29:29:1f:67:2d:2f: 7d:9c:71:89:99:8d:88:5c:55:e3:f4:31:bd:93:83:b8:7c:16: 2a:0c:26:71:b2:a9:b5:ca:d6:75:f1:be:7c:ff:22:4a:83:7d: 2d:95:5b:59:de:71:16:28:60:36:f0:5b:41:69:79:6d:fc:9b: 1f:61:cf:f8:c8:69:c7:70:01:7e:3e:24:6d:a0:eb:fa:c1:a1: cd:2c:94:b4:da:70:36:e2:d1:98:42:65:bb:c4:ad:e7:4b:0f: 28:83:ae:6c:66:a7:66:59:f3:ba:54:05:70:66:57:b2:11:61: 14:63:cf:f2:a5:fa:25:16:b6:85:db:62:06:a9:a4:73:ed:4f: 20:75:c8:a5:2d:d1:34:72:dc:be:ac:d6:fc:64:ce:43:73:49: 85:c4:fb:eb:dc:f3:75:b7:f7:cd:88:2c:9b:82:7d:ae:fc:0e: 49:d9:e6:93 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FgFdbW5EvvhqWWVvD2X5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy ODRkMGYwHhcNMjYwMTAyMTQyMTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmE2Y2E2OWY1MDc5MjE5MjlhMmVlMGUwYjEyZmM3ZWU1OTA0NGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlojxFzrR7w/SOMz37vnm2M/6bif6 dHSXZOi+JhYTy01vXlORfW/Si5Ej/xECWDEllujj1gBNuIvYf2eE1dvldGPdUQPN ZxBrbD2nvNOCtcoWg0rrJnidKbZxYvbAWdz28ioju2OZaevGW60XneuYrs6Zhz8Q QhV4YY+QVegW64WM7RZH7KLkIcR478GQDzxLCRiGnB0IiIijTTTQ1qaC4+lhKMz3 AiQB/hJr1RLG0ZTmTC95v6C/nCVxFHhNuN9lpHEEXIMAlvZuty1ElAY2ijkm40wM u0QXUFJIBSpgCTwkAqtVSzENoi+OMJZbB0WHNVCupxcYBV4R3Qb+riSmUQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFF+mymn1B5IZKaLuDgsS/H7lkESuMB8GA1UdIwQY MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt NGY1N2Q5Y2Y1Y2FhLzEvWDZiS2FmVUhraGtwb3U0T0N4TDhmdVdRUks0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsu9/AwQA uV+eMA0GCSqGSIb3DQEBCwUAA4IBAQB321e0HZFqHkfaAXMLiheuAXyRFXYKKsSU ZHsp9o5cuiPEeZTh3jJkZVDxZJWh9U44714x5N9Hx5I8nnXUWUBvC9P/CDRI3IwJ sRzcpBvkkoKW8IkpKR9nLS99nHGJmY2IXFXj9DG9k4O4fBYqDCZxsqm1ytZ18b58 /yJKg30tlVtZ3nEWKGA28FtBaXlt/JsfYc/4yGnHcAF+PiRtoOv6waHNLJS02nA2 4tGYQmW7xK3nSw8og65sZqdmWfO6VAVwZleyEWEUY8/ypfolFraF22IGqaRz7U8g dcilLdE0cty+rNb8ZM5Dc0mFxPvr3PN1t/fNiCybgn2u/A5J2eaT -----END CERTIFICATE-----Generated at Sat Jan 17 08:23:47 2026 by rpki-client