This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/xrTDRH7W_ATocCsWo-qnqpB60jc.roa File: xrTDRH7W_ATocCsWo-qnqpB60jc.roa (raw, json) Hash identifier: rcqIWslEK1fTssayqywxJbPZu5Bp13nM9n6B2zco1Xg= Subject key identifier: C6:B4:C3:44:7E:D6:FC:04:E8:70:2B:16:A3:EA:A7:AA:90:7A:D2:37 Certificate issuer: /CN=63d92b8256159894d2b9b25f4d85986c172723c3 Certificate serial: 019B797E1276C659D44B04C1F5505CF33ACF Authority key identifier: 63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/xrTDRH7W_ATocCsWo-qnqpB60jc.roa Signing time: Thu 01 Jan 2026 12:17:43 +0000 ROA not before: Thu 01 Jan 2026 12:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 81.20.40.0/24 maxlen: 24 81.20.41.0/24 maxlen: 24 2a00:1fd0:ae00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:12:76:c6:59:d4:4b:04:c1:f5:50:5c:f3:3a:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63d92b8256159894d2b9b25f4d85986c172723c3 Validity Not Before: Jan 1 12:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6b4c3447ed6fc04e8702b16a3eaa7aa907ad237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5b:e9:dc:ad:28:3a:64:39:21:41:b1:bc:2c: 22:fe:18:e0:80:ea:fb:62:3f:6f:2d:c6:01:91:95: 42:d5:e7:63:5c:0a:6e:29:e0:9d:e3:39:f4:31:b9: ab:e1:ec:2b:a9:60:0a:71:48:20:07:24:e2:23:38: a2:76:58:52:d4:86:20:dd:24:04:e3:ca:b9:2c:ad: 44:72:4f:83:5d:35:ad:cc:6f:77:f9:2d:a0:7d:c7: a9:ea:64:69:31:17:b5:76:a3:8a:04:70:19:78:0b: fc:97:96:fc:b5:2c:f7:ea:6b:42:b9:d7:af:46:1c: 87:12:bf:c3:97:0d:ff:fc:e6:61:8f:41:d0:07:19: ee:71:52:84:8e:8a:18:a3:b5:1c:8a:11:f4:4f:57: 1f:3a:6a:31:6e:58:04:57:3a:6d:cd:8b:10:82:0c: 59:71:c1:c2:cc:3d:60:6c:83:ab:bb:d3:98:1a:c2: a2:97:fd:e9:cd:e1:6d:11:c4:84:f5:a4:51:09:f8: ef:0e:b6:62:8f:35:c9:8d:25:25:9a:64:db:fc:d4: 88:83:fb:c0:1d:8e:43:f8:a7:c4:9c:25:a2:f0:2d: 6b:d2:e8:f2:76:81:e1:07:92:50:7d:e1:a5:e8:19: 0f:64:aa:a1:94:88:3d:3d:e5:2b:da:20:37:22:57: 6e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:B4:C3:44:7E:D6:FC:04:E8:70:2B:16:A3:EA:A7:AA:90:7A:D2:37 X509v3 Authority Key Identifier: keyid:63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/xrTDRH7W_ATocCsWo-qnqpB60jc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.20.40.0/23 IPv6: 2a00:1fd0:ae00::/40 Signature Algorithm: sha256WithRSAEncryption 52:a7:85:37:63:a6:27:44:26:83:29:f4:fa:bf:4d:40:ab:7e: 98:1f:37:27:ea:95:24:fc:bc:83:bf:e7:d3:78:f8:bc:c5:05: 13:82:ad:ba:6d:0b:6f:6c:0e:10:9a:bb:0f:97:0a:04:cf:55: 3d:f0:ca:b9:07:65:74:6e:af:13:04:98:c8:34:bf:2b:00:63: ab:26:f9:d7:68:3c:55:ff:2f:75:7f:b2:a0:85:d9:0b:57:6e: 15:62:6c:89:c5:d7:39:ad:01:06:f9:d2:9d:1c:eb:ab:5a:84: cc:91:0c:f9:f0:57:37:04:97:db:a3:ce:9e:a6:27:6e:33:83: ed:fb:5b:e4:01:f6:fb:95:48:a9:4c:8a:e4:02:b2:0f:cf:5f: 17:74:9a:20:fe:35:a9:3e:1b:30:37:73:ef:1d:76:d4:ea:24: b4:22:63:06:94:c4:e6:1e:8d:e7:69:19:91:b9:56:e5:a3:6f: 87:da:ea:e5:83:1e:49:22:2b:09:be:1b:c3:49:eb:73:e7:e2: 6d:52:41:08:3c:9e:9b:de:15:29:e8:9d:53:9b:7e:cd:6e:03: 38:23:1f:d9:98:3f:20:17:36:a7:7a:57:ec:ae:8a:34:4c:c7: 1a:d2:8d:8f:47:70:8f:a5:27:95:f0:41:cf:1a:9f:6f:e9:98: ac:9b:a0:0f -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt5fhJ2xlnUSwTB9VBc8zrPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZDkyYjgyNTYxNTk4OTRkMmI5YjI1ZjRkODU5ODZjMTcy NzIzYzMwHhcNMjYwMTAxMTIxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmI0YzM0NDdlZDZmYzA0ZTg3MDJiMTZhM2VhYTdhYTkwN2FkMjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFvp3K0oOmQ5IUGxvCwi/hjggOr7 Yj9vLcYBkZVC1edjXApuKeCd4zn0Mbmr4ewrqWAKcUggByTiIziidlhS1IYg3SQE 48q5LK1Eck+DXTWtzG93+S2gfcep6mRpMRe1dqOKBHAZeAv8l5b8tSz36mtCudev RhyHEr/Dlw3//OZhj0HQBxnucVKEjooYo7UcihH0T1cfOmoxblgEVzptzYsQggxZ ccHCzD1gbIOru9OYGsKil/3pzeFtEcSE9aRRCfjvDrZijzXJjSUlmmTb/NSIg/vA HY5D+KfEnCWi8C1r0ujydoHhB5JQfeGl6BkPZKqhlIg9PeUr2iA3IlduuwIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFMa0w0R+1vwE6HArFqPqp6qQetI3MB8GA1UdIwQY MBaAFGPZK4JWFZiU0rmyX02FmGwXJyPDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTlrcmdsWVZtSlRTdWJKZlRZV1liQmNuSThNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8yNmQ5MTctOGM5MS00NWFiLTg0NDIt ZTRlNTJhYzBmZWZlLzEveHJURFJIN1dfQVRvY0NzV28tcW5xcEI2MGpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8yNmQ5MTctOGM5MS00NWFiLTg0NDItZTRlNTJhYzBmZWZl LzEvWTlrcmdsWVZtSlRTdWJKZlRZV1liQmNuSThNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBURQoMA4E AgACMAgDBgAqAB/QrjANBgkqhkiG9w0BAQsFAAOCAQEAUqeFN2OmJ0Qmgyn0+r9N QKt+mB83J+qVJPy8g7/n03j4vMUFE4Ktum0Lb2wOEJq7D5cKBM9VPfDKuQdldG6v EwSYyDS/KwBjqyb512g8Vf8vdX+yoIXZC1duFWJsicXXOa0BBvnSnRzrq1qEzJEM +fBXNwSX26POnqYnbjOD7ftb5AH2+5VIqUyK5AKyD89fF3SaIP41qT4bMDdz7x12 1OoktCJjBpTE5h6N52kZkblW5aNvh9rq5YMeSSIrCb4bw0nrc+fibVJBCDyem94V KeidU5t+zW4DOCMf2Zg/IBc2p3pX7K6KNEzHGtKNj0dwj6UnlfBBzxqfb+mYrJug Dw== -----END CERTIFICATE-----Generated at Fri Jan 2 11:04:00 2026 by rpki-client