This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/xG_Z_AN9TZQ2gJ2PV0YaepCBTsQ.roa File: xG_Z_AN9TZQ2gJ2PV0YaepCBTsQ.roa (raw, json) Hash identifier: nKSNO2Ekt5+NEphgm5cEzzq+4O/tpyRO5FtPgeeUWyk= Subject key identifier: C4:6F:D9:FC:03:7D:4D:94:36:80:9D:8F:57:46:1A:7A:90:81:4E:C4 Certificate issuer: /CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759 Certificate serial: 019B7D5C5BD33AE275476C6B80D5A9812721 Authority key identifier: 1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/xG_Z_AN9TZQ2gJ2PV0YaepCBTsQ.roa Signing time: Fri 02 Jan 2026 06:19:23 +0000 ROA not before: Fri 02 Jan 2026 06:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41897 IP address blocks: 78.109.97.0/24 maxlen: 24 78.109.98.0/24 maxlen: 24 78.109.99.0/24 maxlen: 24 78.109.100.0/23 maxlen: 23 78.109.102.0/23 maxlen: 23 185.90.132.0/23 maxlen: 23 185.90.134.0/23 maxlen: 23 193.42.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.crl rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:5b:d3:3a:e2:75:47:6c:6b:80:d5:a9:81:27:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759 Validity Not Before: Jan 2 06:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c46fd9fc037d4d9436809d8f57461a7a90814ec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ff:87:47:25:06:bb:19:82:a6:61:61:55:63: bb:8a:5e:b5:3f:2f:a4:dc:00:28:76:5c:0d:50:4d: 4b:97:0b:fd:d4:4e:48:ac:d9:4e:87:f2:13:d2:9c: f8:70:28:cc:67:f4:a9:e1:70:d2:f0:e5:99:03:cc: 26:4c:83:09:26:b9:73:57:e1:55:f3:13:36:c6:4a: 4c:d6:1f:d8:51:08:35:c8:01:84:44:ff:1d:c3:75: 09:58:fd:5f:06:85:b3:a4:6c:82:11:06:18:82:22: bf:96:a6:95:b9:b3:c1:4c:9a:e2:5a:4e:3d:d7:00: 8f:b6:e5:e8:17:55:55:24:86:46:04:89:00:c3:c5: 48:f4:d3:b4:e2:f2:95:c3:dc:60:7f:54:58:a7:50: 75:e4:d8:b7:23:88:29:76:39:dd:8c:23:21:3c:92: c5:04:3a:4a:92:ad:35:7c:98:6e:42:6e:b0:df:f3: 74:e6:14:12:c5:e1:58:0f:c4:16:7a:82:c2:bb:72: 98:2c:6d:c9:4e:95:71:32:81:67:24:cb:84:77:85: b6:26:49:f6:73:43:57:d2:b9:20:49:f8:b9:f0:28: 8d:f7:7d:6f:91:b7:4e:2b:0c:71:17:9d:96:fe:4d: 93:53:d4:80:6d:94:91:b3:f0:03:19:0d:c1:c6:14: 29:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:6F:D9:FC:03:7D:4D:94:36:80:9D:8F:57:46:1A:7A:90:81:4E:C4 X509v3 Authority Key Identifier: keyid:1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/xG_Z_AN9TZQ2gJ2PV0YaepCBTsQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.109.97.0-78.109.103.255 185.90.132.0/22 193.42.20.0/24 Signature Algorithm: sha256WithRSAEncryption 05:c9:7e:39:a4:24:ad:89:20:1c:bd:f9:d6:5b:91:63:0e:38: 8d:4c:10:ae:c0:f8:83:a3:18:7f:bc:d7:d7:a9:a6:91:76:61: fd:b5:43:49:28:22:47:9a:39:d8:42:c1:70:da:bd:ce:ee:7b: e2:65:c3:ca:73:7f:a4:01:11:6e:54:0c:ab:d5:ae:fa:f3:4d: 13:3e:aa:40:09:7f:b3:ad:d3:ec:c1:4b:fd:b0:66:51:7c:5e: d6:cf:27:b7:0b:c3:4c:bb:76:e5:08:61:2e:47:fe:57:60:67: 94:d5:80:c1:e0:c6:da:46:ae:1f:d0:22:ce:36:bf:26:1e:51: 14:bb:2a:f2:e8:08:6e:58:49:fc:7a:06:9a:21:91:de:19:b6: 06:cf:e2:1b:9c:a2:56:f3:4b:69:fa:a5:3d:13:1d:11:ca:74: ea:56:31:1b:d0:92:5e:24:0d:4a:6b:14:84:d9:6f:f6:91:a1: 6b:90:42:88:ca:b5:ed:83:46:fc:82:eb:fa:05:4c:d2:d0:66: 99:27:2f:f5:f3:6b:2d:97:49:ac:e9:4a:c1:8e:c3:db:b3:f7: fc:b8:ae:1b:53:34:67:33:bd:5e:03:e7:6a:fa:f1:db:fd:95: a0:ec:1e:7b:2b:a0:a2:60:57:81:db:c8:66:e0:db:e7:46:cb: 2e:0b:51:6d -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt9XFvTOuJ1R2xrgNWpgSchMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiYzE5OTRlYTYzZDUwZGJjOGI0M2FjZWNhZDI4NDJiNGRj MTU3NTkwHhcNMjYwMTAyMDYxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDZmZDlmYzAzN2Q0ZDk0MzY4MDlkOGY1NzQ2MWE3YTkwODE0ZWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwP+HRyUGuxmCpmFhVWO7il61Py+k 3AAodlwNUE1Llwv91E5IrNlOh/IT0pz4cCjMZ/Sp4XDS8OWZA8wmTIMJJrlzV+FV 8xM2xkpM1h/YUQg1yAGERP8dw3UJWP1fBoWzpGyCEQYYgiK/lqaVubPBTJriWk49 1wCPtuXoF1VVJIZGBIkAw8VI9NO04vKVw9xgf1RYp1B15Ni3I4gpdjndjCMhPJLF BDpKkq01fJhuQm6w3/N05hQSxeFYD8QWeoLCu3KYLG3JTpVxMoFnJMuEd4W2Jkn2 c0NX0rkgSfi58CiN931vkbdOKwxxF52W/k2TU9SAbZSRs/ADGQ3BxhQp2QIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFMRv2fwDfU2UNoCdj1dGGnqQgU7EMB8GA1UdIwQY MBaAFBvBmU6mPVDbyLQ6zsrShCtNwVdZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzhHWlRxWTlVTnZJdERyT3l0S0VLMDNCVjFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xM2JkYmEtMDcxNS00ZTI2LWIwNzYt YWY1ODY3NDc2MzA5LzEveEdfWl9BTjlUWlEyZ0oyUFYwWWFlcENCVHNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8xM2JkYmEtMDcxNS00ZTI2LWIwNzYtYWY1ODY3NDc2MzA5 LzEvRzhHWlRxWTlVTnZJdERyT3l0S0VLMDNCVjFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBABObWED BANObWADBAK5WoQDBADBKhQwDQYJKoZIhvcNAQELBQADggEBAAXJfjmkJK2JIBy9 +dZbkWMOOI1MEK7A+IOjGH+819epppF2Yf21Q0koIkeaOdhCwXDavc7ue+Jlw8pz f6QBEW5UDKvVrvrzTRM+qkAJf7Ot0+zBS/2wZlF8XtbPJ7cLw0y7duUIYS5H/ldg Z5TVgMHgxtpGrh/QIs42vyYeURS7KvLoCG5YSfx6Bpohkd4ZtgbP4hucolbzS2n6 pT0THRHKdOpWMRvQkl4kDUprFITZb/aRoWuQQojKte2DRvyC6/oFTNLQZpknL/Xz ay2XSazpSsGOw9uz9/y4rhtTNGczvV4D52r68dv9laDsHnsroKJgV4HbyGbg2+dG yy4LUW0= -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:19 2026 by rpki-client