This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/xZbjuHet0zPMCz8aCMyLZ6SqDIc.roa File: xZbjuHet0zPMCz8aCMyLZ6SqDIc.roa (raw, json) Hash identifier: PIyY/3SmE0GeW/cxsg0UGcqjkR19qPASaGeAb4yTbB8= Subject key identifier: C5:96:E3:B8:77:AD:D3:33:CC:0B:3F:1A:08:CC:8B:67:A4:AA:0C:87 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019BD65B8AEF2C6F31E7B0858271C41AE446 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/xZbjuHet0zPMCz8aCMyLZ6SqDIc.roa Signing time: Mon 19 Jan 2026 13:04:42 +0000 ROA not before: Mon 19 Jan 2026 13:04:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3356 IP address blocks: 87.83.96.0/20 maxlen: 22 195.40.20.0/23 maxlen: 23 212.134.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d6:5b:8a:ef:2c:6f:31:e7:b0:85:82:71:c4:1a:e4:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 19 13:04:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c596e3b877add333cc0b3f1a08cc8b67a4aa0c87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:17:97:7b:4c:9e:11:a4:e2:fd:53:16:97:af: db:f5:6a:40:2a:96:63:88:fa:38:59:39:b0:9e:2c: b6:fa:b3:83:86:fe:d9:9d:56:2f:8f:58:6b:de:d1: 09:04:67:09:30:91:28:9d:87:59:02:6c:77:21:09: 69:67:d0:3b:28:78:f4:4b:ad:f5:fc:d4:92:0c:43: 33:a2:fb:e9:1d:97:d4:07:eb:81:00:ee:4d:8b:7d: 39:d5:cb:a2:9a:51:0d:6a:55:4b:dd:69:12:15:de: 65:df:9e:6a:a4:c6:9f:04:4b:5f:77:f1:28:c2:ac: 2d:e2:23:87:15:d9:46:91:3c:52:fc:8f:af:ea:2e: 9d:26:20:73:67:d7:ae:ad:c4:6d:e9:32:8f:f8:93: 83:56:ab:5b:b4:a1:7a:df:36:4d:eb:90:f2:0b:9b: c1:4e:37:ad:b7:21:d9:a1:86:ab:49:ff:ca:8d:43: e2:fd:8c:5b:42:aa:bd:a1:bd:b0:df:f7:0e:62:21: 6e:89:08:93:f2:4d:ef:0f:fc:a6:7d:0b:d8:f7:20: de:d3:21:2e:12:ca:bf:e8:48:0a:33:61:c8:08:14: 81:f3:32:37:60:06:fd:73:1b:f1:59:cc:91:80:aa: 7e:f0:52:48:7a:76:35:4f:09:1e:8d:7a:48:cb:c9: 7e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:96:E3:B8:77:AD:D3:33:CC:0B:3F:1A:08:CC:8B:67:A4:AA:0C:87 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/xZbjuHet0zPMCz8aCMyLZ6SqDIc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.83.96.0/20 195.40.20.0/23 212.134.75.0/24 Signature Algorithm: sha256WithRSAEncryption 58:0b:85:10:f3:ed:14:c0:11:82:ef:34:be:64:91:f4:95:70: f6:2c:76:fb:be:76:21:66:09:05:f0:29:3a:4b:d1:5c:b0:51: e7:48:44:0b:7a:f5:40:57:84:6d:3d:4d:27:82:50:7e:03:ef: b3:25:e9:02:f4:35:bc:4d:85:df:5a:67:33:0e:ae:46:15:24: 7b:fb:b9:5f:c1:ff:5d:f6:cb:99:dc:b8:b3:22:ca:37:f9:12: 5e:f8:56:18:26:9e:8c:84:39:70:73:98:4f:25:be:7f:9f:7a: e0:54:24:4c:8c:dc:ea:a2:ae:be:7d:76:fa:2c:2b:4f:f6:5e: 88:85:1e:6e:22:b4:74:d6:7e:47:e6:07:0a:85:d5:91:b5:a3: 9a:4a:29:68:f8:c8:23:c7:d5:03:4f:ab:f3:ed:6c:c7:15:10: d9:50:8d:64:ce:c4:b6:82:3d:0c:93:27:ca:1a:72:66:02:b0: dc:cc:42:fb:d1:4c:71:bf:63:8a:de:b6:e6:0b:72:91:7f:0c: 69:2b:3d:6e:2f:06:31:4e:95:6e:8b:03:42:d0:d2:4e:e8:b8: 21:bb:a9:8b:28:78:0f:13:67:a5:23:94:17:c6:bd:ec:6a:85: cb:e1:da:d9:8e:03:1e:f0:dc:f7:a1:37:1b:70:53:a4:bd:94: 66:d0:a2:45 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZvWW4rvLG8x57CFgnHEGuRGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTE5MTMwNDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTk2ZTNiODc3YWRkMzMzY2MwYjNmMWEwOGNjOGI2N2E0YWEwYzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBeXe0yeEaTi/VMWl6/b9WpAKpZj iPo4WTmwniy2+rODhv7ZnVYvj1hr3tEJBGcJMJEonYdZAmx3IQlpZ9A7KHj0S631 /NSSDEMzovvpHZfUB+uBAO5Ni3051cuimlENalVL3WkSFd5l355qpMafBEtfd/Eo wqwt4iOHFdlGkTxS/I+v6i6dJiBzZ9eurcRt6TKP+JODVqtbtKF63zZN65DyC5vB TjettyHZoYarSf/KjUPi/YxbQqq9ob2w3/cOYiFuiQiT8k3vD/ymfQvY9yDe0yEu Esq/6EgKM2HICBSB8zI3YAb9cxvxWcyRgKp+8FJIenY1TwkejXpIy8l+2wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMWW47h3rdMzzAs/GgjMi2ekqgyHMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEveFpianVIZXQwelBNQ3o4YUNNeUxaNlNxREljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEV1NgAwQB wygUAwQA1IZLMA0GCSqGSIb3DQEBCwUAA4IBAQBYC4UQ8+0UwBGC7zS+ZJH0lXD2 LHb7vnYhZgkF8Ck6S9FcsFHnSEQLevVAV4RtPU0nglB+A++zJekC9DW8TYXfWmcz Dq5GFSR7+7lfwf9d9suZ3LizIso3+RJe+FYYJp6MhDlwc5hPJb5/n3rgVCRMjNzq oq6+fXb6LCtP9l6IhR5uIrR01n5H5gcKhdWRtaOaSilo+Mgjx9UDT6vz7WzHFRDZ UI1kzsS2gj0MkyfKGnJmArDczEL70Uxxv2OK3rbmC3KRfwxpKz1uLwYxTpVuiwNC 0NJO6Lghu6mLKHgPE2elI5QXxr3saoXL4drZjgMe8Nz3oTcbcFOkvZRm0KJF -----END CERTIFICATE-----Generated at Fri Jan 23 16:02:16 2026 by rpki-client