This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6a2919-e1cb-4e64-bf5d-68e1b173511e/1/X_SK-cz3TKw7b7-is_Q-Ji4uRec.roa File: X_SK-cz3TKw7b7-is_Q-Ji4uRec.roa (raw, json) Hash identifier: Xdw2xwjPivVwaHJjO+HBoTF0UNKMpoYwZBd/kG4I8fQ= Subject key identifier: 5F:F4:8A:F9:CC:F7:4C:AC:3B:6F:BF:A2:B3:F4:3E:26:2E:2E:45:E7 Certificate issuer: /CN=3d3ed8a62ee859bce68d4016319e082a204845a7 Certificate serial: 019B7A5B35368971D9D7B3EB98E3DDDD6003 Authority key identifier: 3D:3E:D8:A6:2E:E8:59:BC:E6:8D:40:16:31:9E:08:2A:20:48:45:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6a2919-e1cb-4e64-bf5d-68e1b173511e/1/X_SK-cz3TKw7b7-is_Q-Ji4uRec.roa Signing time: Thu 01 Jan 2026 16:19:16 +0000 ROA not before: Thu 01 Jan 2026 16:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44241 IP address blocks: 185.201.240.0/22 maxlen: 22 2a0a:cc40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6a2919-e1cb-4e64-bf5d-68e1b173511e/1/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/6a2919-e1cb-4e64-bf5d-68e1b173511e/1/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.mft rsync://rpki.ripe.net/repository/DEFAULT/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:35:36:89:71:d9:d7:b3:eb:98:e3:dd:dd:60:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d3ed8a62ee859bce68d4016319e082a204845a7 Validity Not Before: Jan 1 16:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ff48af9ccf74cac3b6fbfa2b3f43e262e2e45e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:50:46:69:92:11:0a:55:b1:56:9c:fb:63:51: 57:e8:c6:02:ef:57:98:62:5e:d7:e0:11:47:f5:05: 93:1d:aa:57:5b:a8:ca:ad:90:e9:6f:a6:3c:93:16: df:2a:1b:b4:6c:fc:76:72:23:3c:b1:8a:84:28:1c: 70:37:d1:8e:f5:e9:1a:54:ff:a6:aa:78:33:e1:54: 8f:2f:6c:9c:a8:1b:50:b1:7c:af:4b:8c:55:b4:9f: dd:53:7c:99:46:69:8d:7b:a7:8e:f8:b1:44:3e:92: 46:e4:d1:74:56:08:09:e3:b9:a8:c4:e3:02:10:01: 11:bd:84:b6:11:c8:5d:4d:2a:7c:e3:19:81:52:5e: 89:7b:e1:bd:2f:30:08:c4:fc:33:08:32:92:38:eb: 41:ee:82:ef:ad:54:7c:97:25:02:bd:6b:87:0a:76: cb:a6:d1:c3:db:35:b5:f9:e9:20:32:59:23:a1:23: 59:54:e9:0f:ea:f9:ea:54:45:d5:f5:bb:aa:6d:2e: c0:b2:a2:bd:e8:a4:28:96:e9:4a:60:4c:bd:a5:43: 7b:9e:88:cf:38:c0:e1:2c:9b:44:1e:9a:06:38:6e: c5:1b:83:43:c5:55:49:22:44:b8:bf:89:71:39:f6: 19:0f:66:84:db:0e:3f:16:8e:7e:ed:1e:7a:75:19: 53:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F4:8A:F9:CC:F7:4C:AC:3B:6F:BF:A2:B3:F4:3E:26:2E:2E:45:E7 X509v3 Authority Key Identifier: keyid:3D:3E:D8:A6:2E:E8:59:BC:E6:8D:40:16:31:9E:08:2A:20:48:45:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a2919-e1cb-4e64-bf5d-68e1b173511e/1/X_SK-cz3TKw7b7-is_Q-Ji4uRec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a2919-e1cb-4e64-bf5d-68e1b173511e/1/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.201.240.0/22 IPv6: 2a0a:cc40::/29 Signature Algorithm: sha256WithRSAEncryption a3:23:38:2b:af:1e:14:03:46:0b:55:67:b0:ca:c5:4b:2b:91: 01:c7:92:04:16:f8:c0:40:6f:de:e6:87:07:12:fa:63:2c:a0: b2:3a:d7:4b:40:e5:52:a7:88:eb:47:68:83:da:cd:9e:ff:76: 57:ec:95:4d:86:f2:c7:a1:5a:83:3a:c9:49:c9:b9:2c:5f:35: 2b:92:7c:d6:7c:20:00:0c:9e:23:0e:9f:21:bc:e1:f8:2a:19: ee:f8:dc:83:d6:d7:da:2a:6a:07:5e:77:86:72:c1:02:83:ca: 6d:9c:1b:f3:47:e5:fb:db:d3:15:a2:18:d5:aa:59:d8:4f:fb: e8:7b:08:5c:f1:7b:b9:19:a2:18:31:75:20:92:fb:06:d9:0b: e6:45:87:ee:f3:b9:4c:c1:27:47:4f:4e:88:1d:a8:9b:20:81: e5:e9:e0:8a:31:74:e5:49:1c:14:2e:89:00:a4:52:7e:e4:e5: 25:c2:9b:10:39:2e:9a:fd:2d:38:37:09:a6:58:b9:e9:83:75: 37:6f:84:c4:bc:b8:b4:f0:10:c8:ca:5e:94:b9:5d:03:7c:4b: 0f:a3:77:ff:72:bc:99:25:f3:3c:81:0c:ad:4c:35:99:cd:c1: a8:1a:ad:41:c7:30:06:45:06:d5:47:1b:cd:9a:3d:ab:19:94: aa:67:54:2e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6WzU2iXHZ17PrmOPd3WADMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkM2VkOGE2MmVlODU5YmNlNjhkNDAxNjMxOWUwODJhMjA0 ODQ1YTcwHhcNMjYwMTAxMTYxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmY0OGFmOWNjZjc0Y2FjM2I2ZmJmYTJiM2Y0M2UyNjJlMmU0NWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1BGaZIRClWxVpz7Y1FX6MYC71eY Yl7X4BFH9QWTHapXW6jKrZDpb6Y8kxbfKhu0bPx2ciM8sYqEKBxwN9GO9ekaVP+m qngz4VSPL2ycqBtQsXyvS4xVtJ/dU3yZRmmNe6eO+LFEPpJG5NF0VggJ47moxOMC EAERvYS2EchdTSp84xmBUl6Je+G9LzAIxPwzCDKSOOtB7oLvrVR8lyUCvWuHCnbL ptHD2zW1+ekgMlkjoSNZVOkP6vnqVEXV9buqbS7AsqK96KQolulKYEy9pUN7nojP OMDhLJtEHpoGOG7FG4NDxVVJIkS4v4lxOfYZD2aE2w4/Fo5+7R56dRlTwQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFF/0ivnM90ysO2+/orP0PiYuLkXnMB8GA1UdIwQY MBaAFD0+2KYu6Fm85o1AFjGeCCogSEWnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFQ3WXBpN29XYnptalVBV01aNElLaUJJUmFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi82YTI5MTktZTFjYi00ZTY0LWJmNWQt NjhlMWIxNzM1MTFlLzEvWF9TSy1jejNUS3c3YjctaXNfUS1KaTR1UmVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi82YTI5MTktZTFjYi00ZTY0LWJmNWQtNjhlMWIxNzM1MTFl LzEvUFQ3WXBpN29XYnptalVBV01aNElLaUJJUmFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCucnwMA0E AgACMAcDBQMqCsxAMA0GCSqGSIb3DQEBCwUAA4IBAQCjIzgrrx4UA0YLVWewysVL K5EBx5IEFvjAQG/e5ocHEvpjLKCyOtdLQOVSp4jrR2iD2s2e/3ZX7JVNhvLHoVqD OslJybksXzUrknzWfCAADJ4jDp8hvOH4Khnu+NyD1tfaKmoHXneGcsECg8ptnBvz R+X729MVohjVqlnYT/voewhc8Xu5GaIYMXUgkvsG2QvmRYfu87lMwSdHT06IHaib IIHl6eCKMXTlSRwULokApFJ+5OUlwpsQOS6a/S04NwmmWLnpg3U3b4TEvLi08BDI yl6UuV0DfEsPo3f/cryZJfM8gQytTDWZzcGoGq1BxzAGRQbVRxvNmj2rGZSqZ1Qu -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:17 2026 by rpki-client