This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/xVWlyfjWNauHSqD1r_D5-LgllLw.roa File: xVWlyfjWNauHSqD1r_D5-LgllLw.roa (raw, json) Hash identifier: dlJT/Xcxoye27KDxhsg9z9fDGJ9uuoxQEu/5uWsLfvA= Subject key identifier: C5:55:A5:C9:F8:D6:35:AB:87:4A:A0:F5:AF:F0:F9:F8:B8:25:94:BC Certificate issuer: /CN=483fb37d1fb0ccd216dadec40009561a844aa83b Certificate serial: 019B7D5BF4FE3155D99F7213358FBA81219E Authority key identifier: 48:3F:B3:7D:1F:B0:CC:D2:16:DA:DE:C4:00:09:56:1A:84:4A:A8:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/xVWlyfjWNauHSqD1r_D5-LgllLw.roa Signing time: Fri 02 Jan 2026 06:18:57 +0000 ROA not before: Fri 02 Jan 2026 06:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47625 IP address blocks: 91.206.182.0/23 maxlen: 23 188.64.184.0/23 maxlen: 23 188.64.186.0/23 maxlen: 23 188.64.188.0/23 maxlen: 23 188.64.190.0/23 maxlen: 23 195.216.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:f4:fe:31:55:d9:9f:72:13:35:8f:ba:81:21:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=483fb37d1fb0ccd216dadec40009561a844aa83b Validity Not Before: Jan 2 06:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c555a5c9f8d635ab874aa0f5aff0f9f8b82594bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1a:88:50:58:c4:88:d7:9a:ee:1d:58:49:24: 9b:78:9f:ce:1a:4b:da:dd:58:79:4f:18:27:e3:be: 58:dd:c7:ad:ce:26:42:89:96:f3:ae:95:6f:c6:ba: ce:cb:38:1b:59:c8:7a:2c:9e:87:ea:0b:87:7c:16: fb:88:40:89:23:c3:99:93:49:c3:15:9c:0d:bf:26: e8:5a:8a:d7:7a:63:b8:69:04:f2:af:ae:84:b9:c7: e4:36:30:4e:91:2b:34:3b:05:8b:2c:ab:6a:a0:2b: 80:2c:d1:1d:61:a6:30:fe:17:39:6d:fa:84:12:f0: 5c:6d:f8:b1:bb:20:bf:08:13:a0:5d:21:bb:39:01: 54:54:c1:0f:50:25:e9:0f:cd:d0:ab:b1:e3:81:23: 5c:a1:4e:e4:93:00:f7:1f:03:3a:9e:23:f4:d8:91: d8:91:90:31:02:5a:80:1f:2c:e1:6f:00:7e:8d:83: 6e:b0:0c:ec:60:43:39:ca:92:e9:6c:ff:f7:6f:1b: 3a:81:8f:34:fd:e2:af:1a:3f:51:b9:af:bf:2e:c4: 29:52:e9:6d:22:80:5a:33:b4:fe:17:9a:1f:1e:83: 77:b0:f1:da:06:58:82:21:0c:5c:df:73:83:d7:91: 15:86:60:7c:82:75:8c:a0:77:05:b5:94:5a:db:c5: 2a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:55:A5:C9:F8:D6:35:AB:87:4A:A0:F5:AF:F0:F9:F8:B8:25:94:BC X509v3 Authority Key Identifier: keyid:48:3F:B3:7D:1F:B0:CC:D2:16:DA:DE:C4:00:09:56:1A:84:4A:A8:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/xVWlyfjWNauHSqD1r_D5-LgllLw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.182.0/23 188.64.184.0/21 195.216.196.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:53:3c:99:31:49:4d:56:eb:b9:7f:71:f1:50:e0:a5:12:37: e6:72:46:d9:2a:48:fa:f6:04:ea:35:96:6a:3b:6e:c5:60:4b: c0:1e:55:52:52:76:43:c9:aa:d5:4f:d3:4e:a3:0f:52:dd:68: b1:f1:d0:39:a7:60:25:1c:78:c5:e9:e1:59:3f:0b:62:93:98: a2:bb:5e:37:4c:e4:70:f6:52:67:e7:35:67:42:0b:4b:6a:c3: c7:5e:33:43:64:69:bb:7e:73:5c:85:67:97:61:b6:d0:f7:a8: 93:df:3f:fd:14:63:60:27:97:06:ac:24:40:5b:1d:96:30:a5: 42:f6:90:4c:8a:f4:ac:ef:f2:b0:99:74:a0:92:cb:10:3a:40: b1:30:81:a7:de:7d:dd:de:9f:ff:fd:84:e6:d3:89:fc:89:04: 3f:62:0e:5d:c3:7b:66:52:5a:79:8b:7a:c0:9b:b6:b7:07:e9: 0e:cd:d5:1c:06:d1:57:39:af:81:d3:a1:24:e8:7e:bb:b1:0a: b7:8f:bc:b7:eb:79:4d:90:7c:c1:71:52:4e:09:0c:0a:84:ae: 48:64:e3:b3:d1:5a:12:9f:07:c9:08:b9:3d:b2:ec:6a:cf:ba: 61:9e:b0:07:44:ea:60:ea:ea:b0:07:da:8d:c9:f5:17:bf:cc: eb:6e:c0:91 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9W/T+MVXZn3ITNY+6gSGeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4M2ZiMzdkMWZiMGNjZDIxNmRhZGVjNDAwMDk1NjFhODQ0 YWE4M2IwHhcNMjYwMTAyMDYxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTU1YTVjOWY4ZDYzNWFiODc0YWEwZjVhZmYwZjlmOGI4MjU5NGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RqIUFjEiNea7h1YSSSbeJ/OGkva 3Vh5Txgn475Y3cetziZCiZbzrpVvxrrOyzgbWch6LJ6H6guHfBb7iECJI8OZk0nD FZwNvyboWorXemO4aQTyr66EucfkNjBOkSs0OwWLLKtqoCuALNEdYaYw/hc5bfqE EvBcbfixuyC/CBOgXSG7OQFUVMEPUCXpD83Qq7HjgSNcoU7kkwD3HwM6niP02JHY kZAxAlqAHyzhbwB+jYNusAzsYEM5ypLpbP/3bxs6gY80/eKvGj9Rua+/LsQpUult IoBaM7T+F5ofHoN3sPHaBliCIQxc33OD15EVhmB8gnWMoHcFtZRa28Uq0wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMVVpcn41jWrh0qg9a/w+fi4JZS8MB8GA1UdIwQY MBaAFEg/s30fsMzSFtrexAAJVhqESqg7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0QtemZSLXd6TklXMnQ3RUFBbFdHb1JLcURzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9hMWViNjYtY2M4Ny00YTkwLTljNWQt ZWUzY2E3NGJiYjc5LzEveFZXbHlmaldOYXVIU3FEMXJfRDUtTGdsbEx3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9hMWViNjYtY2M4Ny00YTkwLTljNWQtZWUzY2E3NGJiYjc5 LzEvU0QtemZSLXd6TklXMnQ3RUFBbFdHb1JLcURzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBW862AwQD vEC4AwQBw9jEMA0GCSqGSIb3DQEBCwUAA4IBAQAqUzyZMUlNVuu5f3HxUOClEjfm ckbZKkj69gTqNZZqO27FYEvAHlVSUnZDyarVT9NOow9S3Wix8dA5p2AlHHjF6eFZ Pwtik5iiu143TORw9lJn5zVnQgtLasPHXjNDZGm7fnNchWeXYbbQ96iT3z/9FGNg J5cGrCRAWx2WMKVC9pBMivSs7/KwmXSgkssQOkCxMIGn3n3d3p///YTm04n8iQQ/ Yg5dw3tmUlp5i3rAm7a3B+kOzdUcBtFXOa+B06Ek6H67sQq3j7y363lNkHzBcVJO CQwKhK5IZOOz0VoSnwfJCLk9suxqz7phnrAHROpg6uqwB9qNyfUXv8zrbsCR -----END CERTIFICATE-----Generated at Mon Feb 9 23:45:11 2026 by rpki-client