This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/xsB8VuxguMjVGEEIoWg1RDm1ZYo.roa File: xsB8VuxguMjVGEEIoWg1RDm1ZYo.roa (raw, json) Hash identifier: mQSj5E+L8Ak9ruHD0WWJ2/J6mb1ky6kbhBVPI1nZD5A= Subject key identifier: C6:C0:7C:56:EC:60:B8:C8:D5:18:41:08:A1:68:35:44:39:B5:65:8A Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155 Certificate serial: 019B7B359DD65C3F4051CAFBE56E0F7C96BD Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/xsB8VuxguMjVGEEIoWg1RDm1ZYo.roa Signing time: Thu 01 Jan 2026 20:17:49 +0000 ROA not before: Thu 01 Jan 2026 20:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48678 IP address blocks: 94.154.41.0/24 maxlen: 24 94.154.43.0/24 maxlen: 24 94.154.44.0/24 maxlen: 24 94.154.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:9d:d6:5c:3f:40:51:ca:fb:e5:6e:0f:7c:96:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155 Validity Not Before: Jan 1 20:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6c07c56ec60b8c8d5184108a168354439b5658a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fe:8d:06:29:97:37:6c:11:f8:4c:f5:74:fc: 6b:71:b7:78:0b:b5:5d:7b:25:ef:96:76:66:1d:a6: 71:94:53:d1:7f:40:69:ae:6a:1f:c1:c1:0a:aa:1d: 51:b7:bd:03:59:73:63:6e:dd:64:42:2f:2d:f7:2e: 49:21:48:a0:d2:1d:ff:86:b2:84:98:3c:ba:86:2e: ae:77:f7:19:0c:a9:3a:b9:c4:ec:9f:15:a8:b4:87: 21:31:75:9f:c4:1f:06:07:e2:fe:e1:fd:91:90:c8: f8:ce:fb:47:56:6a:f3:05:b7:c2:93:4d:06:e4:28: cd:ca:62:71:9f:1f:d2:b5:64:bb:9e:60:c4:c2:db: 74:ab:7d:cd:50:68:1a:b6:22:32:2e:97:a7:ef:21: 2f:7f:aa:d0:52:0f:67:10:c0:04:0e:a9:16:af:37: 97:bd:b8:b3:43:2d:ae:5d:c0:31:00:9c:0b:e2:1d: 66:b5:5a:de:53:73:3a:0c:8a:cb:e0:87:35:e2:5a: 27:a5:2a:7d:53:ae:de:22:f2:39:c4:fc:a5:dc:6c: 77:9e:7d:0d:f3:6f:a8:96:79:14:34:10:f0:a5:ba: fe:a3:12:02:5e:8d:88:61:03:96:3a:43:63:81:67: 91:ab:2d:a7:b1:e3:a9:98:59:84:da:27:1c:cd:89: 03:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C0:7C:56:EC:60:B8:C8:D5:18:41:08:A1:68:35:44:39:B5:65:8A X509v3 Authority Key Identifier: keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/xsB8VuxguMjVGEEIoWg1RDm1ZYo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.154.41.0/24 94.154.43.0-94.154.45.255 Signature Algorithm: sha256WithRSAEncryption 27:00:74:cf:87:49:45:8f:e0:c9:91:50:fa:5f:c4:c2:12:97: 20:30:83:9c:e2:1d:0f:7c:31:6b:6a:2e:4a:ee:8f:9a:90:6a: 7d:c4:f2:64:e8:30:9e:dd:32:04:cf:a4:95:3b:c2:c7:27:f7: 41:4a:05:62:ab:fe:43:c0:e7:56:4c:12:93:67:f2:61:47:7e: ec:30:c8:fe:db:bb:b6:73:98:6b:e6:1d:4f:64:24:75:06:1c: 24:c2:87:d9:b9:da:6a:91:4f:3a:e1:9d:37:7b:39:21:99:81: c0:bf:53:49:d6:7e:e0:72:92:6d:51:6d:e6:a3:2d:ac:2f:5d: 5e:93:ae:72:4f:88:ca:c1:9a:0e:dd:45:54:65:b1:b3:a2:2c: 7c:06:44:09:46:e5:46:cb:3d:3c:de:1f:f0:62:6a:b6:d1:9f: 28:c5:2f:f6:5c:16:a8:ac:cd:b8:4f:7b:72:e7:a2:f3:37:5c: fa:75:a5:28:d3:33:69:98:22:da:a2:7c:16:03:4b:59:9f:59: c7:3e:14:d0:b1:a3:bf:43:fe:ff:23:74:a0:1c:3e:7e:2f:1c: a1:e5:d7:9c:f2:a4:58:f6:3c:a2:0a:84:ab:59:40:dd:c7:03: c0:e3:9a:97:08:bd:26:7f:7d:d0:fc:30:cd:52:5b:81:57:5b: 4f:80:ef:fa -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt7NZ3WXD9AUcr75W4PfJa9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMTFkYWVmYWZmODFjN2U1MDEyNzhkODdkOWJjMmIyMDRk NzExNTUwHhcNMjYwMTAxMjAxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmMwN2M1NmVjNjBiOGM4ZDUxODQxMDhhMTY4MzU0NDM5YjU2NThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/6NBimXN2wR+Ez1dPxrcbd4C7Vd eyXvlnZmHaZxlFPRf0BprmofwcEKqh1Rt70DWXNjbt1kQi8t9y5JIUig0h3/hrKE mDy6hi6ud/cZDKk6ucTsnxWotIchMXWfxB8GB+L+4f2RkMj4zvtHVmrzBbfCk00G 5CjNymJxnx/StWS7nmDEwtt0q33NUGgatiIyLpen7yEvf6rQUg9nEMAEDqkWrzeX vbizQy2uXcAxAJwL4h1mtVreU3M6DIrL4Ic14lonpSp9U67eIvI5xPyl3Gx3nn0N 82+olnkUNBDwpbr+oxICXo2IYQOWOkNjgWeRqy2nseOpmFmE2icczYkDlQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFMbAfFbsYLjI1RhBCKFoNUQ5tWWKMB8GA1UdIwQY MBaAFNwR2u+v+Bx+UBJ42H2bwrIE1xFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYt NjUyNDljYmM1NzNjLzEveHNCOFZ1eGd1TWpWR0VFSW9XZzFSRG0xWllvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYtNjUyNDljYmM1NzNj LzEvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAXpopMAwD BABemisDBAFemiwwDQYJKoZIhvcNAQELBQADggEBACcAdM+HSUWP4MmRUPpfxMIS lyAwg5ziHQ98MWtqLkruj5qQan3E8mToMJ7dMgTPpJU7wscn90FKBWKr/kPA51ZM EpNn8mFHfuwwyP7bu7ZzmGvmHU9kJHUGHCTCh9m52mqRTzrhnTd7OSGZgcC/U0nW fuBykm1RbeajLawvXV6TrnJPiMrBmg7dRVRlsbOiLHwGRAlG5UbLPTzeH/BiarbR nyjFL/ZcFqiszbhPe3LnovM3XPp1pSjTM2mYItqifBYDS1mfWcc+FNCxo79D/v8j dKAcPn4vHKHl15zypFj2PKIKhKtZQN3HA8DjmpcIvSZ/fdD8MM1SW4FXW0+A7/o= -----END CERTIFICATE-----Generated at Mon Jan 19 16:54:18 2026 by rpki-client