This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/xcw2R2YD0BpUNlrolf3aKOVApLA.roa File: xcw2R2YD0BpUNlrolf3aKOVApLA.roa (raw, json) Hash identifier: 2wiyEKSnDgQYW+1aN/U9IvVMDBKDQ1GzIsfrU/OlUSg= Subject key identifier: C5:CC:36:47:66:03:D0:1A:54:36:5A:E8:95:FD:DA:28:E5:40:A4:B0 Certificate issuer: /CN=564013e3464c16cd8589b05202fb0f0c5910dca3 Certificate serial: 019B7CEDCC4799B92E68CEDBCC97E6EFE5F8 Authority key identifier: 56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/xcw2R2YD0BpUNlrolf3aKOVApLA.roa Signing time: Fri 02 Jan 2026 04:18:37 +0000 ROA not before: Fri 02 Jan 2026 04:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.186.212.0/24 maxlen: 24 185.186.213.0/24 maxlen: 24 2a0b:8780::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:cc:47:99:b9:2e:68:ce:db:cc:97:e6:ef:e5:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=564013e3464c16cd8589b05202fb0f0c5910dca3 Validity Not Before: Jan 2 04:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5cc36476603d01a54365ae895fdda28e540a4b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:06:59:a9:17:35:40:b2:2a:cc:e1:06:13:40: 29:3c:26:43:07:82:36:0b:35:f5:91:36:7e:11:6b: 03:34:19:76:b4:d1:e1:f3:22:20:f8:38:fa:f9:0b: 01:70:c8:28:ef:eb:76:c3:4a:67:29:7c:cd:2e:40: a7:16:f6:cb:1b:82:69:09:fc:fb:5c:b2:83:55:84: 59:5c:22:e5:d0:ed:68:de:c2:c7:cc:64:dd:ed:9c: 21:a1:26:97:7e:c2:6e:e7:e7:40:40:a1:71:39:dd: a3:20:bf:6c:6c:74:91:b1:c5:9f:55:ca:ba:cd:43: 7c:7b:36:7c:f2:68:13:6e:8a:0a:d1:a3:cd:c7:74: b1:f3:22:a5:7a:7b:dc:ce:be:8f:76:49:55:a6:2b: bf:02:c6:58:5e:9b:d1:fb:af:3b:96:b9:6d:10:9e: 24:68:e2:89:2e:aa:27:ef:fc:81:89:07:d9:77:65: 7a:79:ad:53:94:5f:af:ff:b3:42:1c:68:8d:f7:b7: ed:02:95:31:d9:36:a2:b8:8c:24:c2:84:b6:51:83: 9e:d6:25:52:ac:37:0c:63:31:f1:3f:ec:68:10:0a: ad:68:80:ed:47:d9:19:9b:f3:30:bd:fe:33:29:28: a7:e3:f3:c2:4f:5d:38:93:66:31:03:4d:90:d2:bc: f8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:CC:36:47:66:03:D0:1A:54:36:5A:E8:95:FD:DA:28:E5:40:A4:B0 X509v3 Authority Key Identifier: keyid:56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/xcw2R2YD0BpUNlrolf3aKOVApLA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.186.212.0/23 IPv6: 2a0b:8780::/48 Signature Algorithm: sha256WithRSAEncryption 84:37:c8:b2:a6:55:af:1d:d5:21:74:4d:ec:d0:4d:7d:81:50: d3:92:ad:c9:d0:5e:d3:f1:24:ff:dd:e9:37:5b:f3:01:0a:f0: 72:fb:2f:87:da:75:8d:ea:4c:17:14:af:a2:a4:99:7e:43:6d: 5c:01:8f:51:2c:98:4e:8a:28:23:2c:bd:bd:d1:c1:27:97:9d: 03:7a:57:8d:5a:1d:2c:d3:1d:19:1c:3f:ba:ff:1f:bf:f1:77: f1:91:b1:dc:67:4f:46:66:41:0c:00:55:d8:f9:38:b3:78:cc: b1:f5:09:46:71:3b:3e:42:d7:2a:17:5f:ab:29:7d:47:dc:91: ff:02:7d:ad:5d:77:af:2a:37:68:9d:bf:eb:b1:e7:34:f3:ec: 22:d8:df:81:81:20:05:22:d9:f7:71:90:c5:f7:16:2f:11:75: 2d:04:4d:22:0e:e6:19:a7:4a:cf:54:9b:a4:3d:dd:1d:36:df: 3c:4c:0d:f1:61:0b:41:ce:13:06:99:94:7e:fd:7c:2e:8c:cb: e2:9d:80:b0:00:57:ed:30:c3:ce:f0:0d:5b:e0:9e:0e:8e:6f: 2c:e8:3d:24:2e:e4:c6:91:29:9a:f1:58:b9:aa:bd:50:94:f3: 20:0f:ee:7b:2b:a6:14:8d:ed:e5:2f:fc:48:83:9b:6d:ff:15: e2:ae:ab:e0 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt87cxHmbkuaM7bzJfm7+X4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2NDAxM2UzNDY0YzE2Y2Q4NTg5YjA1MjAyZmIwZjBjNTkx MGRjYTMwHhcNMjYwMTAyMDQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNWNjMzY0NzY2MDNkMDFhNTQzNjVhZTg5NWZkZGEyOGU1NDBhNGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAZZqRc1QLIqzOEGE0ApPCZDB4I2 CzX1kTZ+EWsDNBl2tNHh8yIg+Dj6+QsBcMgo7+t2w0pnKXzNLkCnFvbLG4JpCfz7 XLKDVYRZXCLl0O1o3sLHzGTd7ZwhoSaXfsJu5+dAQKFxOd2jIL9sbHSRscWfVcq6 zUN8ezZ88mgTbooK0aPNx3Sx8yKlenvczr6PdklVpiu/AsZYXpvR+687lrltEJ4k aOKJLqon7/yBiQfZd2V6ea1TlF+v/7NCHGiN97ftApUx2TaiuIwkwoS2UYOe1iVS rDcMYzHxP+xoEAqtaIDtR9kZm/Mwvf4zKSin4/PCT104k2YxA02Q0rz4TwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFMXMNkdmA9AaVDZa6JX92ijlQKSwMB8GA1UdIwQY MBaAFFZAE+NGTBbNhYmwUgL7DwxZENyjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmtBVDQwWk1GczJGaWJCU0F2c1BERmtRM0tNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy85OGVlNzYtMGUwMi00ZmY1LTkxZWQt ODY2N2ExMDEwMTQzLzEveGN3MlIyWUQwQnBVTmxyb2xmM2FLT1ZBcExBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy85OGVlNzYtMGUwMi00ZmY1LTkxZWQtODY2N2ExMDEwMTQz LzEvVmtBVDQwWk1GczJGaWJCU0F2c1BERmtRM0tNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBubrUMA8E AgACMAkDBwAqC4eAAAAwDQYJKoZIhvcNAQELBQADggEBAIQ3yLKmVa8d1SF0TezQ TX2BUNOSrcnQXtPxJP/d6Tdb8wEK8HL7L4fadY3qTBcUr6KkmX5DbVwBj1EsmE6K KCMsvb3RwSeXnQN6V41aHSzTHRkcP7r/H7/xd/GRsdxnT0ZmQQwAVdj5OLN4zLH1 CUZxOz5C1yoXX6spfUfckf8Cfa1dd68qN2idv+ux5zTz7CLY34GBIAUi2fdxkMX3 Fi8RdS0ETSIO5hmnSs9Um6Q93R023zxMDfFhC0HOEwaZlH79fC6My+KdgLAAV+0w w87wDVvgng6ObyzoPSQu5MaRKZrxWLmqvVCU8yAP7nsrphSN7eUv/EiDm23/FeKu q+A= -----END CERTIFICATE-----Generated at Fri Jan 2 09:29:47 2026 by rpki-client