This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xF3U1nawlLCKIW8172dbQKYncqU.roa File: xF3U1nawlLCKIW8172dbQKYncqU.roa (raw, json) Hash identifier: 2SOnmlb7sAOSrnEni9zVQhVSI3qS6WNg3Ld7swwE6IQ= Subject key identifier: C4:5D:D4:D6:76:B0:94:B0:8A:21:6F:35:EF:67:5B:40:A6:27:72:A5 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A2F0DF5A812F6DB75C5EB7E67CD75C Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xF3U1nawlLCKIW8172dbQKYncqU.roa Signing time: Thu 01 Jan 2026 08:18:22 +0000 ROA not before: Thu 01 Jan 2026 08:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34368 IP address blocks: 85.217.192.0/24 maxlen: 32 85.217.193.0/24 maxlen: 32 85.217.194.0/24 maxlen: 32 85.217.195.0/24 maxlen: 32 85.217.196.0/23 maxlen: 32 85.217.198.0/24 maxlen: 32 85.217.199.0/24 maxlen: 32 85.217.200.0/22 maxlen: 32 85.217.204.0/22 maxlen: 32 2a00:1728:18::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:f0:df:5a:81:2f:6d:b7:5c:5e:b7:e6:7c:d7:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c45dd4d676b094b08a216f35ef675b40a62772a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cb:bb:2c:83:a9:42:49:fa:0d:7f:dd:8a:84: 06:43:fe:4a:49:3b:54:25:90:5d:43:5d:27:d3:38: f1:f1:7e:84:f6:01:e3:f5:c7:2c:9f:40:c9:7d:2f: c6:6e:7c:31:91:45:9b:09:f2:99:d0:04:61:8a:53: 42:cc:14:dd:6c:ae:fe:cd:ff:76:6f:84:3d:f2:7b: 95:83:da:5f:35:fa:e6:68:53:92:a0:48:e5:50:75: 86:20:9c:3a:de:0f:3f:fc:22:2f:64:01:75:d3:6c: 81:cd:bb:e1:01:27:28:c5:7b:90:c3:18:31:e7:ec: 85:58:b6:18:9c:02:51:f6:46:bf:a7:d9:03:82:ef: 0e:db:e9:a0:78:97:20:b2:6d:93:ce:e5:71:cc:cf: ac:ee:9a:e2:e0:3b:11:9a:91:a6:86:0e:d2:e1:99: 2a:78:55:70:d5:86:a6:5d:a7:44:71:b2:e0:af:32: 5f:04:c7:a2:04:1d:35:0e:e8:d5:31:d5:0a:77:42: 05:58:1b:77:f0:80:0c:e0:b0:93:9d:23:62:86:fa: 36:9d:1f:3f:01:c3:bc:ec:c1:6e:13:87:92:51:9c: 69:27:b8:09:11:41:60:a3:5c:4a:94:a6:c9:26:1e: eb:a3:98:f9:0f:02:81:bf:6f:e0:a9:f3:9f:cf:fd: 12:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:5D:D4:D6:76:B0:94:B0:8A:21:6F:35:EF:67:5B:40:A6:27:72:A5 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xF3U1nawlLCKIW8172dbQKYncqU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.217.192.0/20 IPv6: 2a00:1728:18::/48 Signature Algorithm: sha256WithRSAEncryption 07:62:29:01:0b:c0:dc:e5:fd:7e:c5:28:5e:d7:cb:4b:b2:3f: 00:2c:a0:f9:22:d4:7f:c0:39:77:53:a6:63:5b:03:f2:bf:03: 1a:29:ff:83:ff:19:f3:d3:65:b6:ac:99:be:77:e4:7e:00:b5: f6:ae:aa:4e:b0:47:14:a1:7f:e3:ca:53:a2:d8:3b:84:1c:99: 9d:4a:53:e4:d0:3a:0f:c4:a4:7e:7d:e7:2b:61:f0:4b:f2:81: e1:c0:7a:0f:fd:c0:66:e3:34:ce:ca:99:01:bd:52:58:f1:ab: 54:e4:cc:2e:de:45:25:52:78:67:85:0a:a5:4d:b0:28:4d:ed: ff:5b:80:2e:11:06:9c:52:74:92:49:e1:78:88:97:67:b9:5b: 67:9c:67:fa:78:8d:93:8f:16:68:b0:b1:00:8b:51:8b:c6:2c: c7:c8:e2:2b:4c:6b:87:7e:59:ea:ee:5e:dd:34:6a:89:20:d6: 5f:45:66:58:2a:63:31:45:6a:77:07:de:21:3c:51:b2:4e:9e: cf:21:47:1e:8b:e9:ab:d4:cb:62:33:8e:d6:87:56:b1:27:48: be:e0:21:6d:fd:3e:d5:5f:a6:a0:06:06:29:a0:8c:0c:bf:fb: 7a:83:59:95:77:3f:09:01:47:4d:eb:4f:ec:b3:cb:29:7d:38: 79:84:e3:a9 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4ovDfWoEvbbdcXrfmfNdcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDVkZDRkNjc2YjA5NGIwOGEyMTZmMzVlZjY3NWI0MGE2Mjc3MmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMu7LIOpQkn6DX/dioQGQ/5KSTtU JZBdQ10n0zjx8X6E9gHj9ccsn0DJfS/GbnwxkUWbCfKZ0ARhilNCzBTdbK7+zf92 b4Q98nuVg9pfNfrmaFOSoEjlUHWGIJw63g8//CIvZAF102yBzbvhAScoxXuQwxgx 5+yFWLYYnAJR9ka/p9kDgu8O2+mgeJcgsm2TzuVxzM+s7pri4DsRmpGmhg7S4Zkq eFVw1YamXadEcbLgrzJfBMeiBB01DujVMdUKd0IFWBt38IAM4LCTnSNihvo2nR8/ AcO87MFuE4eSUZxpJ7gJEUFgo1xKlKbJJh7ro5j5DwKBv2/gqfOfz/0SMwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFMRd1NZ2sJSwiiFvNe9nW0CmJ3KlMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEveEYzVTFuYXdsTENLSVc4MTcyZGJRS1luY3FVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQEVdnAMA8E AgACMAkDBwAqABcoABgwDQYJKoZIhvcNAQELBQADggEBAAdiKQELwNzl/X7FKF7X y0uyPwAsoPki1H/AOXdTpmNbA/K/Axop/4P/GfPTZbasmb535H4Atfauqk6wRxSh f+PKU6LYO4QcmZ1KU+TQOg/EpH595yth8EvygeHAeg/9wGbjNM7KmQG9Uljxq1Tk zC7eRSVSeGeFCqVNsChN7f9bgC4RBpxSdJJJ4XiIl2e5W2ecZ/p4jZOPFmiwsQCL UYvGLMfI4itMa4d+WeruXt00aokg1l9FZlgqYzFFancH3iE8UbJOns8hRx6L6avU y2IzjtaHVrEnSL7gIW39PtVfpqAGBimgjAy/+3qDWZV3PwkBR03rT+yzyyl9OHmE 46k= -----END CERTIFICATE-----Generated at Fri Jan 2 12:07:57 2026 by rpki-client