This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/xf_QUU1oboJfw8GDN5-xVx0M_-E.roa File: xf_QUU1oboJfw8GDN5-xVx0M_-E.roa (raw, json) Hash identifier: rDjY7MiBuFT4JV2RH/A0NQJ6KgI0D96lXBHlUo5cGuY= Subject key identifier: C5:FF:D0:51:4D:68:6E:82:5F:C3:C1:83:37:9F:B1:57:1D:0C:FF:E1 Certificate issuer: /CN=132e1e484fca8e9528df6ac1483056c88786771d Certificate serial: 019B77595DCFFD4E68AD2955A89CA8B0BE64 Authority key identifier: 13:2E:1E:48:4F:CA:8E:95:28:DF:6A:C1:48:30:56:C8:87:86:77:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ey4eSE_KjpUo32rBSDBWyIeGdx0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/xf_QUU1oboJfw8GDN5-xVx0M_-E.roa Signing time: Thu 01 Jan 2026 02:18:23 +0000 ROA not before: Thu 01 Jan 2026 02:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62153 IP address blocks: 195.85.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.crl rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft rsync://rpki.ripe.net/repository/DEFAULT/Ey4eSE_KjpUo32rBSDBWyIeGdx0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:5d:cf:fd:4e:68:ad:29:55:a8:9c:a8:b0:be:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=132e1e484fca8e9528df6ac1483056c88786771d Validity Not Before: Jan 1 02:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5ffd0514d686e825fc3c183379fb1571d0cffe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:5d:9a:7b:31:da:21:35:47:b0:ad:87:af:7b: a8:80:95:d2:68:30:95:39:56:24:5c:34:bb:a3:6a: a4:4b:4f:7a:68:9f:eb:ea:08:28:44:3f:ec:f5:b2: 53:b0:27:d9:40:86:fa:4c:6d:47:49:7a:c0:ea:b5: fd:09:74:98:93:76:3a:4b:84:fb:ed:4e:44:96:28: c8:a4:ba:6f:35:b2:fb:66:3e:bf:f0:5c:03:5e:f6: 42:2c:84:96:99:8c:f0:f9:51:fb:39:54:36:99:e4: 54:98:f7:36:cc:32:6c:dc:3b:2d:39:fa:a8:e0:92: 26:25:f4:5e:07:e8:f7:26:a6:1f:a7:1f:ba:f9:78: 97:03:9c:2e:8c:14:f6:2b:e3:52:26:88:35:9f:30: c4:24:ce:e5:64:b7:07:7c:a8:9f:30:19:5f:33:f8: 73:fa:86:5d:dd:b0:36:9a:98:91:2f:5f:dc:0b:a1: 85:0b:ad:94:18:87:b5:86:74:66:f2:45:0f:af:5d: aa:36:3e:24:ad:56:9a:15:ce:a3:84:6a:8f:ee:d6: b5:8b:d8:36:52:87:2f:eb:da:dc:28:6b:cd:5a:94: 0e:df:32:d0:49:69:0c:21:09:28:2d:61:61:9f:41: c2:20:37:82:cf:64:2e:cb:c8:ff:3c:e7:03:c4:a3: 32:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:FF:D0:51:4D:68:6E:82:5F:C3:C1:83:37:9F:B1:57:1D:0C:FF:E1 X509v3 Authority Key Identifier: keyid:13:2E:1E:48:4F:CA:8E:95:28:DF:6A:C1:48:30:56:C8:87:86:77:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ey4eSE_KjpUo32rBSDBWyIeGdx0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/xf_QUU1oboJfw8GDN5-xVx0M_-E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.85.249.0/24 Signature Algorithm: sha256WithRSAEncryption 05:f8:16:ef:56:db:76:8c:1f:a5:01:6f:e9:26:2e:c4:41:d9: ad:a9:06:af:f8:91:04:b6:ae:38:d8:d0:45:53:74:cb:6e:7e: cc:aa:f4:32:9b:4e:0a:69:5d:7b:ac:04:6b:c1:72:0c:32:a1: b2:26:a0:ce:e3:ae:e2:f8:be:f8:29:61:42:45:07:bf:3f:14: 17:54:b8:90:1b:cd:28:35:45:81:10:dd:77:2c:14:b5:91:0f: 0b:49:82:7f:89:dd:a0:0e:bf:29:e1:c0:66:07:48:01:38:ab: 76:db:fd:6e:04:6f:98:6d:e7:ed:9d:ea:4e:ef:f2:fa:ec:4c: 09:a0:77:bf:58:62:94:94:62:54:b9:b5:8f:4b:a3:15:06:d5: 21:61:02:d3:52:1c:3e:b1:62:18:0d:c3:26:34:a0:01:9e:aa: a1:32:9d:fc:02:4d:24:7f:86:99:d4:2a:e4:e0:c0:51:52:b9: 19:6f:34:9f:d7:dc:77:a4:90:01:00:dd:a1:18:91:db:e7:0e: 50:4d:b1:95:6b:52:a5:3c:fc:6c:32:a0:d5:20:97:01:9d:6e: 23:4f:4d:62:54:b3:28:6b:64:b2:d8:29:f0:b8:ff:d5:ee:23: b2:80:8a:58:b1:71:7b:32:32:48:43:8b:9f:1a:48:2a:7b:3a: 9c:9a:07:6c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WV3P/U5orSlVqJyosL5kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMmUxZTQ4NGZjYThlOTUyOGRmNmFjMTQ4MzA1NmM4ODc4 Njc3MWQwHhcNMjYwMTAxMDIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNWZmZDA1MTRkNjg2ZTgyNWZjM2MxODMzNzlmYjE1NzFkMGNmZmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7F2aezHaITVHsK2Hr3uogJXSaDCV OVYkXDS7o2qkS096aJ/r6ggoRD/s9bJTsCfZQIb6TG1HSXrA6rX9CXSYk3Y6S4T7 7U5ElijIpLpvNbL7Zj6/8FwDXvZCLISWmYzw+VH7OVQ2meRUmPc2zDJs3DstOfqo 4JImJfReB+j3JqYfpx+6+XiXA5wujBT2K+NSJog1nzDEJM7lZLcHfKifMBlfM/hz +oZd3bA2mpiRL1/cC6GFC62UGIe1hnRm8kUPr12qNj4krVaaFc6jhGqP7ta1i9g2 Uocv69rcKGvNWpQO3zLQSWkMIQkoLWFhn0HCIDeCz2Quy8j/POcDxKMyawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMX/0FFNaG6CX8PBgzefsVcdDP/hMB8GA1UdIwQY MBaAFBMuHkhPyo6VKN9qwUgwVsiHhncdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXk0ZVNFX0tqcFVvMzJyQlNEQld5SWVHZHgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8zN2Y1NmUtYTIyMS00ZTAwLThlMTQt NzlkNmY1M2M3YTJlLzEveGZfUVVVMW9ib0pmdzhHRE41LXhWeDBNXy1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC8zN2Y1NmUtYTIyMS00ZTAwLThlMTQtNzlkNmY1M2M3YTJl LzEvRXk0ZVNFX0tqcFVvMzJyQlNEQld5SWVHZHgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1X5MA0G CSqGSIb3DQEBCwUAA4IBAQAF+BbvVtt2jB+lAW/pJi7EQdmtqQav+JEEtq442NBF U3TLbn7MqvQym04KaV17rARrwXIMMqGyJqDO467i+L74KWFCRQe/PxQXVLiQG80o NUWBEN13LBS1kQ8LSYJ/id2gDr8p4cBmB0gBOKt22/1uBG+YbeftnepO7/L67EwJ oHe/WGKUlGJUubWPS6MVBtUhYQLTUhw+sWIYDcMmNKABnqqhMp38Ak0kf4aZ1Crk 4MBRUrkZbzSf19x3pJABAN2hGJHb5w5QTbGVa1KlPPxsMqDVIJcBnW4jT01iVLMo a2Sy2CnwuP/V7iOygIpYsXF7MjJIQ4ufGkgqezqcmgds -----END CERTIFICATE-----Generated at Mon Feb 9 22:26:56 2026 by rpki-client