This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Xxsha_zfr1ujhdH1SGeJymhE-yg.roa File: Xxsha_zfr1ujhdH1SGeJymhE-yg.roa (raw, json) Hash identifier: OGIfm9LMLa1jtsLPBD75f/6oaZwG9kKwENn0PymzHa4= Subject key identifier: 5F:1B:21:6B:FC:DF:AF:5B:A3:85:D1:F5:48:67:89:CA:68:44:FB:28 Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019B7AC7D7D28F3F061999D00C0E240D9A88 Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Xxsha_zfr1ujhdH1SGeJymhE-yg.roa Signing time: Thu 01 Jan 2026 18:17:55 +0000 ROA not before: Thu 01 Jan 2026 18:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199558 IP address blocks: 85.254.144.0/24 maxlen: 24 159.148.27.0/24 maxlen: 24 159.148.89.0/24 maxlen: 24 159.148.218.0/24 maxlen: 24 159.148.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:d7:d2:8f:3f:06:19:99:d0:0c:0e:24:0d:9a:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Jan 1 18:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f1b216bfcdfaf5ba385d1f5486789ca6844fb28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:66:b0:e9:b2:85:96:9a:68:0c:13:a1:c1:67: 40:d0:26:41:6f:b1:c7:0b:3e:9f:10:c3:c6:26:c1: ba:df:ac:4b:dc:85:5a:a3:8b:3c:c2:48:8f:65:42: 84:64:8c:d1:f8:e1:d9:23:59:f5:a3:ea:e2:3b:b9: 17:6a:4a:65:fd:39:fd:6c:da:48:9f:90:cc:2b:ef: 3d:46:6a:a6:4e:f8:7b:58:3f:3e:14:a3:2c:ef:d9: bd:76:fd:8a:a3:e5:68:4e:da:9e:6c:6d:bc:a9:1b: 80:3d:9c:a5:6e:d2:88:0b:88:d1:a9:4f:0a:bb:25: 1f:ca:13:26:63:dc:8a:00:69:5f:6d:8f:c8:c6:a7: 12:eb:12:9e:1b:45:2a:bf:59:7b:dc:4e:19:e4:91: e5:60:8d:6b:3b:98:01:79:b8:ab:94:a9:98:4b:7b: b8:55:78:bf:04:3d:87:5c:2f:31:2c:36:b6:da:e8: c4:07:d9:35:a9:02:2d:7d:13:8c:48:19:22:ae:c9: 01:0d:24:cf:e9:26:d9:cc:1c:0a:54:f2:60:0f:19: 74:e2:90:9b:77:29:c7:50:91:d4:ab:1b:45:14:ae: 96:ce:65:ad:a0:e3:7b:12:a7:23:80:89:ba:97:b8: 33:50:b3:06:ee:f4:15:0f:e4:40:99:cc:89:5c:90: d9:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:1B:21:6B:FC:DF:AF:5B:A3:85:D1:F5:48:67:89:CA:68:44:FB:28 X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Xxsha_zfr1ujhdH1SGeJymhE-yg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.254.144.0/24 159.148.27.0/24 159.148.89.0/24 159.148.218.0/24 159.148.233.0/24 Signature Algorithm: sha256WithRSAEncryption 59:f3:62:a5:dc:02:36:f2:91:90:79:a5:17:68:ed:e5:fd:09: c8:f5:e2:ff:a8:bf:5b:80:61:77:a7:e5:47:4e:72:13:a5:27: 25:41:b2:54:a1:fe:1e:1d:6d:73:4e:f4:39:12:43:2b:4d:4b: 7c:15:89:4f:90:52:b8:8f:95:ea:93:8a:2b:41:a6:cc:31:ab: d1:ee:e9:ce:11:2c:c0:05:46:ae:b7:bf:15:0c:5c:2a:3a:47: 1f:49:d2:c4:22:02:ce:3b:24:a7:10:bb:a3:f0:4d:55:34:35: 8f:04:b7:77:9f:6b:41:3f:9e:59:b3:8e:f4:13:82:98:47:53: a2:cb:18:bc:6f:a3:ef:68:00:bb:26:cc:19:1b:7a:6d:00:d3: f6:d5:25:bc:a5:18:0b:c9:7b:d2:35:05:0d:bb:09:6a:8f:65: ff:db:d0:fc:21:44:1e:82:c5:73:a4:dd:56:6c:e4:2b:55:b8: 3d:a7:12:b3:66:55:f3:c4:bc:a4:3d:3d:24:0b:57:e3:04:99: ad:c6:f2:b9:38:a8:49:38:85:32:12:9c:27:78:35:d4:26:0a: 44:5e:3c:08:ab:ad:a4:89:d2:30:5e:af:c1:ed:4e:4a:ff:b6: a2:87:03:49:91:60:65:c0:91:bc:42:ff:6a:00:6a:d5:d3:d3: fd:a4:19:58 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt6x9fSjz8GGZnQDA4kDZqIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjYwMTAxMTgxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjFiMjE2YmZjZGZhZjViYTM4NWQxZjU0ODY3ODljYTY4NDRmYjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWaw6bKFlppoDBOhwWdA0CZBb7HH Cz6fEMPGJsG636xL3IVao4s8wkiPZUKEZIzR+OHZI1n1o+riO7kXakpl/Tn9bNpI n5DMK+89RmqmTvh7WD8+FKMs79m9dv2Ko+VoTtqebG28qRuAPZylbtKIC4jRqU8K uyUfyhMmY9yKAGlfbY/IxqcS6xKeG0Uqv1l73E4Z5JHlYI1rO5gBebirlKmYS3u4 VXi/BD2HXC8xLDa22ujEB9k1qQItfROMSBkirskBDSTP6SbZzBwKVPJgDxl04pCb dynHUJHUqxtFFK6WzmWtoON7EqcjgIm6l7gzULMG7vQVD+RAmcyJXJDZzQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFF8bIWv8369bo4XR9UhnicpoRPsoMB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEvWHhzaGFfemZyMXVqaGRIMVNHZUp5bWhFLXlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAVf6QAwQA n5QbAwQAn5RZAwQAn5TaAwQAn5TpMA0GCSqGSIb3DQEBCwUAA4IBAQBZ82Kl3AI2 8pGQeaUXaO3l/QnI9eL/qL9bgGF3p+VHTnITpSclQbJUof4eHW1zTvQ5EkMrTUt8 FYlPkFK4j5Xqk4orQabMMavR7unOESzABUaut78VDFwqOkcfSdLEIgLOOySnELuj 8E1VNDWPBLd3n2tBP55Zs470E4KYR1Oiyxi8b6PvaAC7JswZG3ptANP21SW8pRgL yXvSNQUNuwlqj2X/29D8IUQegsVzpN1WbOQrVbg9pxKzZlXzxLykPT0kC1fjBJmt xvK5OKhJOIUyEpwneDXUJgpEXjwIq62kidIwXq/B7U5K/7aihwNJkWBlwJG8Qv9q AGrV09P9pBlY -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:01 2026 by rpki-client