This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/XRWUGRiRnDftn0w5XsjFN-6BZUA.roa File: XRWUGRiRnDftn0w5XsjFN-6BZUA.roa (raw, json) Hash identifier: eD7AmSbdUlIktA8wqOi/TIT8HlO0vCWmUNetc9plP2U= Subject key identifier: 5D:15:94:19:18:91:9C:37:ED:9F:4C:39:5E:C8:C5:37:EE:81:65:40 Certificate issuer: /CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640 Certificate serial: 019B7758C4CFA21D75AA875BDE38887993AD Authority key identifier: 6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/XRWUGRiRnDftn0w5XsjFN-6BZUA.roa Signing time: Thu 01 Jan 2026 02:17:44 +0000 ROA not before: Thu 01 Jan 2026 02:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.38.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:c4:cf:a2:1d:75:aa:87:5b:de:38:88:79:93:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640 Validity Not Before: Jan 1 02:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d15941918919c37ed9f4c395ec8c537ee816540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e0:d6:27:3c:d7:a7:2b:f8:c4:48:fe:50:6d: 73:be:f0:0a:e4:e0:18:c8:a1:dc:33:74:d1:b2:b0: 6b:6e:5a:2a:b7:5c:04:b6:ce:71:f7:91:65:f5:17: 6d:47:79:57:ee:06:88:cd:99:1e:ae:29:9d:b7:c8: fa:aa:99:90:5a:8a:fe:8d:dd:d0:0b:fd:bc:80:66: 8c:c2:f8:0b:c5:cc:e9:82:71:e8:6f:35:da:50:84: 47:7a:72:2d:e2:25:f4:ee:3e:92:4e:09:b7:80:99: cf:c4:5a:4a:fb:0c:da:f8:81:ad:74:47:70:20:28: 38:0a:d0:50:f2:c1:6c:c8:56:76:8e:70:c0:0e:6b: 9d:67:22:f4:2b:59:a9:c6:1a:34:eb:3b:f6:cd:54: c6:e7:7f:3f:45:ff:b5:fd:3e:c2:e2:92:8b:62:43: e0:10:ca:b5:d3:7e:35:f4:56:e3:47:69:35:b8:01: 46:47:c3:f2:c9:37:ca:da:df:24:7a:3a:7d:f5:6b: b7:fb:a1:11:72:d3:4d:02:ff:00:17:6e:a9:a3:f1: 9c:f4:fb:d2:3c:b6:a1:e2:d0:c1:dd:df:e4:8e:4b: 3f:5b:13:b1:9e:ec:9e:ec:d5:a5:2e:b5:d4:db:6e: 4b:41:17:4e:18:6f:cd:39:7c:f0:82:34:b0:f3:3f: 27:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:15:94:19:18:91:9C:37:ED:9F:4C:39:5E:C8:C5:37:EE:81:65:40 X509v3 Authority Key Identifier: keyid:6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/XRWUGRiRnDftn0w5XsjFN-6BZUA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.38.134.0/24 Signature Algorithm: sha256WithRSAEncryption 03:8c:ab:78:ee:d0:e2:fb:0f:19:ad:10:d1:ac:e5:27:24:2c: 61:5f:f5:18:73:4e:c2:e6:1f:06:91:9c:0b:65:a0:26:79:a1: 7a:cf:5b:78:19:e0:aa:c3:2b:a3:13:37:72:a9:91:b5:65:32: 60:a3:bc:10:f9:29:e0:b3:24:1a:73:8e:9c:ad:53:d8:c1:c0: ab:13:01:c1:ce:2f:6b:9b:3c:b3:ed:31:66:f9:d2:fc:b6:1f: 6e:ff:d9:d7:88:bf:70:a4:b3:65:c3:6a:b2:43:b2:19:1e:95: 1d:e0:eb:96:71:62:6f:f9:75:ef:4c:cb:4e:f5:b4:14:f9:75: 69:85:b8:df:f6:4b:6f:a3:38:e5:c7:0b:85:0a:93:27:33:c3: 75:13:1d:d0:cc:d1:b1:69:27:ba:b9:d1:35:bf:64:28:fc:ed: 86:fc:86:29:4c:b6:8f:2e:fe:0c:40:db:6f:64:f6:8e:94:67: 2e:cb:e4:38:e8:37:15:a4:66:bc:df:40:a8:09:5b:14:34:4c: 93:20:ec:9c:77:f7:1f:aa:5b:a1:9d:71:0d:3b:d6:f7:ff:89: 45:75:8d:68:7a:1c:09:5f:5b:a7:7c:ce:3b:fa:47:06:45:64: 29:ad:e3:7b:84:de:ac:32:19:70:32:24:3c:41:85:f9:c1:44: 02:5c:a1:10 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WMTPoh11qodb3jiIeZOtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNDIzMmMxOWQwYTdmN2VkNzY5YzQ3MTU0MjFlNmNjMThi ZGI2NDAwHhcNMjYwMTAxMDIxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDE1OTQxOTE4OTE5YzM3ZWQ5ZjRjMzk1ZWM4YzUzN2VlODE2NTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuDWJzzXpyv4xEj+UG1zvvAK5OAY yKHcM3TRsrBrbloqt1wEts5x95Fl9RdtR3lX7gaIzZkerimdt8j6qpmQWor+jd3Q C/28gGaMwvgLxczpgnHobzXaUIRHenIt4iX07j6STgm3gJnPxFpK+wza+IGtdEdw ICg4CtBQ8sFsyFZ2jnDADmudZyL0K1mpxho06zv2zVTG538/Rf+1/T7C4pKLYkPg EMq103419FbjR2k1uAFGR8PyyTfK2t8kejp99Wu3+6ERctNNAv8AF26po/Gc9PvS PLah4tDB3d/kjks/WxOxnuye7NWlLrXU225LQRdOGG/NOXzwgjSw8z8niQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF0VlBkYkZw37Z9MOV7IxTfugWVAMB8GA1UdIwQY MBaAFG9CMsGdCn9+12nEcVQh5swYvbZAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjBJeXdaMEtmMzdYYWNSeFZDSG16Qmk5dGtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mMWQ3MDMtZmY5YS00NGIxLThlNjUt NjZjYTU3Zjc0ZTBkLzEvWFJXVUdSaVJuRGZ0bjB3NVhzakZOLTZCWlVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9mMWQ3MDMtZmY5YS00NGIxLThlNjUtNjZjYTU3Zjc0ZTBk LzEvYjBJeXdaMEtmMzdYYWNSeFZDSG16Qmk5dGtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSaGMA0G CSqGSIb3DQEBCwUAA4IBAQADjKt47tDi+w8ZrRDRrOUnJCxhX/UYc07C5h8GkZwL ZaAmeaF6z1t4GeCqwyujEzdyqZG1ZTJgo7wQ+SngsyQac46crVPYwcCrEwHBzi9r mzyz7TFm+dL8th9u/9nXiL9wpLNlw2qyQ7IZHpUd4OuWcWJv+XXvTMtO9bQU+XVp hbjf9ktvozjlxwuFCpMnM8N1Ex3QzNGxaSe6udE1v2Qo/O2G/IYpTLaPLv4MQNtv ZPaOlGcuy+Q46DcVpGa830CoCVsUNEyTIOycd/cfqluhnXENO9b3/4lFdY1oehwJ X1unfM47+kcGRWQpreN7hN6sMhlwMiQ8QYX5wUQCXKEQ -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:41 2026 by rpki-client