This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/XddFO1_V4vw4BFewS5a4h464RsI.roa File: XddFO1_V4vw4BFewS5a4h464RsI.roa (raw, json) Hash identifier: 6STZFqkc7/OsVyHseLRUMCPEN6uwIoKNwxdIv1/YIe8= Subject key identifier: 5D:D7:45:3B:5F:D5:E2:FC:38:04:57:B0:4B:96:B8:87:8E:B8:46:C2 Certificate issuer: /CN=c59b6dc3bc22f6c36a039855534b2d41abb12423 Certificate serial: 019B7B3696D21721255B24F7584107E93EBB Authority key identifier: C5:9B:6D:C3:BC:22:F6:C3:6A:03:98:55:53:4B:2D:41:AB:B1:24:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZttw7wi9sNqA5hVU0stQauxJCM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/XddFO1_V4vw4BFewS5a4h464RsI.roa Signing time: Thu 01 Jan 2026 20:18:53 +0000 ROA not before: Thu 01 Jan 2026 20:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204309 IP address blocks: 185.253.200.0/22 maxlen: 22 185.253.200.0/24 maxlen: 24 185.253.201.0/24 maxlen: 24 185.253.202.0/24 maxlen: 24 185.253.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.mft rsync://rpki.ripe.net/repository/DEFAULT/xZttw7wi9sNqA5hVU0stQauxJCM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:96:d2:17:21:25:5b:24:f7:58:41:07:e9:3e:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c59b6dc3bc22f6c36a039855534b2d41abb12423 Validity Not Before: Jan 1 20:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5dd7453b5fd5e2fc380457b04b96b8878eb846c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cd:cd:fa:04:20:15:03:e6:ba:65:d5:2f:7e: 9e:3c:b9:94:0b:a2:cf:c7:54:4d:3c:76:06:12:12: c6:70:6c:87:e9:43:94:11:c5:18:2c:35:12:4a:ce: 7a:f8:f6:01:39:1f:64:3f:63:e6:af:ac:fe:94:e4: 8c:f8:35:d3:40:86:d2:f4:aa:09:af:96:b7:68:2f: 31:04:b8:97:7e:13:1b:16:c7:b5:6b:6f:f1:63:66: cb:a0:52:18:05:c5:9b:27:d4:e4:e9:88:ad:6a:f9: e8:dd:c5:31:4d:59:ec:ec:e4:fb:9a:37:04:1f:86: 74:aa:86:01:78:ae:96:07:ab:bf:ad:0f:73:68:11: 61:24:8e:32:ac:eb:d9:db:cc:f0:a5:c4:fd:0f:74: f1:c0:21:ab:9b:cc:3c:cd:d8:24:8b:c2:b0:af:15: 36:df:73:77:63:c2:b5:d4:a6:2c:ef:59:5f:98:52: fe:87:a7:48:f5:3a:5d:9d:89:24:65:77:2f:bb:6e: 96:bb:d9:4c:97:5d:c8:87:f5:d5:aa:9b:55:da:02: fb:f5:f2:8a:08:b1:d0:d5:b1:08:4e:63:8b:73:ab: 93:43:d2:c6:56:86:6e:bb:05:32:ff:bc:f1:82:a0: 58:0a:57:83:2c:3e:e5:e2:ff:01:71:18:72:72:42: 01:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D7:45:3B:5F:D5:E2:FC:38:04:57:B0:4B:96:B8:87:8E:B8:46:C2 X509v3 Authority Key Identifier: keyid:C5:9B:6D:C3:BC:22:F6:C3:6A:03:98:55:53:4B:2D:41:AB:B1:24:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZttw7wi9sNqA5hVU0stQauxJCM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/XddFO1_V4vw4BFewS5a4h464RsI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.253.200.0/22 Signature Algorithm: sha256WithRSAEncryption 66:58:5b:6e:1c:1e:79:35:16:62:a5:21:4c:14:cd:a6:0f:5b: b0:e3:41:99:a4:0e:89:ba:ab:d9:e0:e1:5c:44:4a:03:32:07: 6e:32:1b:6d:4d:00:0e:26:82:4b:20:94:60:19:7e:d1:b4:b4: 33:17:f1:64:c5:3c:c3:ad:e6:82:13:88:83:5c:48:0d:63:ff: 12:2d:89:7f:4f:22:b9:df:87:f1:8b:80:b5:52:99:b9:f5:da: b3:4e:f6:1e:44:7c:02:03:15:81:e8:e9:3f:c7:bb:55:f0:f2: 5f:60:af:67:37:a3:92:09:c7:25:b3:89:df:e6:b2:ed:b4:64: 3a:67:3b:83:7c:9d:51:dc:37:7a:c9:0b:45:4e:9b:7f:4b:12: f0:9d:88:40:f2:97:9d:9e:49:59:3b:c4:ef:f5:3f:a8:8a:d5: 05:b9:4e:bc:f6:7d:70:cf:30:84:6a:35:94:04:c6:c8:28:0a: 5a:ca:12:39:73:79:09:5d:6d:4c:7a:e1:e5:83:f9:b4:6a:d9: 16:18:86:e1:7f:b3:a1:a9:7f:73:f6:6a:cb:74:42:3c:7b:53: cb:8a:34:e8:bb:bd:ee:50:6b:09:36:de:ec:41:d0:a8:2f:a7: 28:70:7f:d5:db:0e:fa:b9:c3:0a:73:a9:a5:85:a9:43:64:0f: b6:59:32:a3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NpbSFyElWyT3WEEH6T67MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1OWI2ZGMzYmMyMmY2YzM2YTAzOTg1NTUzNGIyZDQxYWJi MTI0MjMwHhcNMjYwMTAxMjAxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZGQ3NDUzYjVmZDVlMmZjMzgwNDU3YjA0Yjk2Yjg4NzhlYjg0NmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAos3N+gQgFQPmumXVL36ePLmUC6LP x1RNPHYGEhLGcGyH6UOUEcUYLDUSSs56+PYBOR9kP2Pmr6z+lOSM+DXTQIbS9KoJ r5a3aC8xBLiXfhMbFse1a2/xY2bLoFIYBcWbJ9Tk6Yitavno3cUxTVns7OT7mjcE H4Z0qoYBeK6WB6u/rQ9zaBFhJI4yrOvZ28zwpcT9D3TxwCGrm8w8zdgki8KwrxU2 33N3Y8K11KYs71lfmFL+h6dI9TpdnYkkZXcvu26Wu9lMl13Ih/XVqptV2gL79fKK CLHQ1bEITmOLc6uTQ9LGVoZuuwUy/7zxgqBYCleDLD7l4v8BcRhyckIBUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF3XRTtf1eL8OARXsEuWuIeOuEbCMB8GA1UdIwQY MBaAFMWbbcO8IvbDagOYVVNLLUGrsSQjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFp0dHc3d2k5c05xQTVoVlUwc3RRYXV4SkNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mMGVmZTMtNDEzYy00M2QyLWJiNjkt ZDJmNDBkZTA0OWI3LzEvWGRkRk8xX1Y0dnc0QkZld1M1YTRoNDY0UnNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mMGVmZTMtNDEzYy00M2QyLWJiNjktZDJmNDBkZTA0OWI3 LzEveFp0dHc3d2k5c05xQTVoVlUwc3RRYXV4SkNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuf3IMA0G CSqGSIb3DQEBCwUAA4IBAQBmWFtuHB55NRZipSFMFM2mD1uw40GZpA6JuqvZ4OFc REoDMgduMhttTQAOJoJLIJRgGX7RtLQzF/FkxTzDreaCE4iDXEgNY/8SLYl/TyK5 34fxi4C1Upm59dqzTvYeRHwCAxWB6Ok/x7tV8PJfYK9nN6OSCccls4nf5rLttGQ6 ZzuDfJ1R3Dd6yQtFTpt/SxLwnYhA8pednklZO8Tv9T+oitUFuU689n1wzzCEajWU BMbIKApayhI5c3kJXW1MeuHlg/m0atkWGIbhf7OhqX9z9mrLdEI8e1PLijTou73u UGsJNt7sQdCoL6cocH/V2w76ucMKc6mlhalDZA+2WTKj -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:44 2026 by rpki-client