This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/xYG26TB2RrgqHuMvZiHsPq1NDVM.roa File: xYG26TB2RrgqHuMvZiHsPq1NDVM.roa (raw, json) Hash identifier: W2+WDoIzPRMoYogzmzQsW/rEEBQkgPMptZQ4oMSwz/c= Subject key identifier: C5:81:B6:E9:30:76:46:B8:2A:1E:E3:2F:66:21:EC:3E:AD:4D:0D:53 Certificate issuer: /CN=67589d5fe4bb1c5bdb83a353c2737dc604341326 Certificate serial: 019B7C7FCD00911094DE5AD809BA61D25B13 Authority key identifier: 67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/xYG26TB2RrgqHuMvZiHsPq1NDVM.roa Signing time: Fri 02 Jan 2026 02:18:28 +0000 ROA not before: Fri 02 Jan 2026 02:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210976 IP address blocks: 185.207.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 05:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:cd:00:91:10:94:de:5a:d8:09:ba:61:d2:5b:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67589d5fe4bb1c5bdb83a353c2737dc604341326 Validity Not Before: Jan 2 02:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c581b6e9307646b82a1ee32f6621ec3ead4d0d53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:30:4f:44:c2:4c:f7:7e:a6:27:ee:c9:ef:cd: 66:42:02:85:d9:6c:14:0c:a8:39:79:c0:b1:70:2d: 6d:d7:53:ed:e6:43:47:36:2a:3b:0a:37:53:c8:9e: 9c:77:fa:5a:10:da:83:3a:93:8a:bf:92:41:70:49: 5e:cb:50:13:0f:a3:c3:de:9b:b6:4d:30:62:47:02: 05:d7:8d:e4:83:9c:36:42:e9:18:2b:83:82:75:1e: 7c:6e:09:66:6a:3a:9c:a8:59:b0:67:21:60:45:8d: 62:52:a2:c2:f3:3f:5e:e3:bc:aa:91:8c:27:67:f8: e6:1d:41:73:74:21:13:ea:cd:99:f0:5b:ec:4f:08: c2:f5:a6:cb:de:2a:35:da:61:16:2c:50:cd:ab:7a: a6:f9:3f:ed:86:a8:e6:d4:85:e5:99:34:5e:df:78: a1:fd:ea:aa:52:ee:c3:45:3f:f8:6b:a0:39:15:c2: d1:d1:bc:99:b8:e2:6c:f5:c3:29:d1:5b:a5:b6:d9: 26:fb:5d:c4:b2:8b:e7:79:cc:f3:b1:58:de:70:2b: dd:3b:2d:91:31:10:6c:22:c4:84:ac:cb:8d:5e:24: b9:bc:67:ab:7e:c2:b8:33:9c:c0:44:06:5b:1b:d8: 92:31:a9:55:c5:b4:34:2a:6d:47:a1:b9:59:a6:17: 76:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:81:B6:E9:30:76:46:B8:2A:1E:E3:2F:66:21:EC:3E:AD:4D:0D:53 X509v3 Authority Key Identifier: keyid:67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/xYG26TB2RrgqHuMvZiHsPq1NDVM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.207.67.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:53:60:b9:8a:37:5a:74:50:56:cb:c9:14:40:0f:27:42:f7: e1:2f:81:61:40:e7:48:ac:79:4a:be:c2:bf:e9:c6:68:59:38: 00:26:1e:f8:d0:1c:fc:b5:a2:27:a9:97:80:ea:64:37:90:56: 5d:72:ef:e3:a4:7c:44:51:5f:0d:fa:eb:d5:b4:66:6d:65:f5: 30:b5:8c:0b:30:32:4a:2e:72:3e:ef:9e:f4:4a:98:d2:aa:f8: cb:95:cd:50:58:ef:da:6f:91:be:8f:6e:18:ca:43:41:d2:88: 40:35:29:43:7f:f8:df:34:33:44:54:9e:f9:9d:2f:69:df:eb: ec:02:b7:22:d2:5e:1d:af:db:19:f7:f6:6f:48:3e:90:9b:e2: bf:76:91:52:e7:37:7e:d8:c0:f2:d7:ff:08:1b:73:9b:a5:b0: b0:ae:42:2f:d5:54:3f:24:3d:bc:42:af:d7:ad:30:18:7b:ca: ad:f3:e2:2a:64:a2:63:e2:b7:0b:00:2d:05:f8:5f:46:32:d1: d5:a1:b6:b6:ee:da:02:d8:cd:82:e1:05:a6:15:9a:8d:20:66: 3b:02:5a:16:b8:c5:31:b8:1a:5f:e9:89:12:e4:05:b5:71:85: c8:92:b3:c0:3b:14:a9:5a:e0:b2:7e:35:65:e4:df:33:ac:94: 07:98:e7:2a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f80AkRCU3lrYCbph0lsTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NTg5ZDVmZTRiYjFjNWJkYjgzYTM1M2MyNzM3ZGM2MDQz NDEzMjYwHhcNMjYwMTAyMDIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTgxYjZlOTMwNzY0NmI4MmExZWUzMmY2NjIxZWMzZWFkNGQwZDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzBPRMJM936mJ+7J781mQgKF2WwU DKg5ecCxcC1t11Pt5kNHNio7CjdTyJ6cd/paENqDOpOKv5JBcEley1ATD6PD3pu2 TTBiRwIF143kg5w2QukYK4OCdR58bglmajqcqFmwZyFgRY1iUqLC8z9e47yqkYwn Z/jmHUFzdCET6s2Z8FvsTwjC9abL3io12mEWLFDNq3qm+T/thqjm1IXlmTRe33ih /eqqUu7DRT/4a6A5FcLR0byZuOJs9cMp0Vulttkm+13EsovneczzsVjecCvdOy2R MRBsIsSErMuNXiS5vGerfsK4M5zARAZbG9iSMalVxbQ0Km1HoblZphd2oQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMWBtukwdka4Kh7jL2Yh7D6tTQ1TMB8GA1UdIwQY MBaAFGdYnV/kuxxb24OjU8JzfcYENBMmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjFpZFgtUzdIRnZiZzZOVHduTjl4Z1EwRXlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC83MzNmOWMtYjExNS00OWM4LTk1OWIt ZjU4Y2I2NDgwYTdlLzEveFlHMjZUQjJScmdxSHVNdlppSHNQcTFORFZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC83MzNmOWMtYjExNS00OWM4LTk1OWItZjU4Y2I2NDgwYTdl LzEvWjFpZFgtUzdIRnZiZzZOVHduTjl4Z1EwRXlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuc9DMA0G CSqGSIb3DQEBCwUAA4IBAQB6U2C5ijdadFBWy8kUQA8nQvfhL4FhQOdIrHlKvsK/ 6cZoWTgAJh740Bz8taInqZeA6mQ3kFZdcu/jpHxEUV8N+uvVtGZtZfUwtYwLMDJK LnI+7570SpjSqvjLlc1QWO/ab5G+j24YykNB0ohANSlDf/jfNDNEVJ75nS9p3+vs Arci0l4dr9sZ9/ZvSD6Qm+K/dpFS5zd+2MDy1/8IG3ObpbCwrkIv1VQ/JD28Qq/X rTAYe8qt8+IqZKJj4rcLAC0F+F9GMtHVoba27toC2M2C4QWmFZqNIGY7AloWuMUx uBpf6YkS5AW1cYXIkrPAOxSpWuCyfjVl5N8zrJQHmOcq -----END CERTIFICATE-----Generated at Wed Jan 21 11:16:12 2026 by rpki-client