This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/xf-aTqyee4-5n_wFSTTwEdk3iBw.roa File: xf-aTqyee4-5n_wFSTTwEdk3iBw.roa (raw, json) Hash identifier: cKVaVuPQMYJD5abCn4kyEfa85heIwymXK7WFmMsO+7U= Subject key identifier: C5:FF:9A:4E:AC:9E:7B:8F:B9:9F:FC:05:49:34:F0:11:D9:37:88:1C Certificate issuer: /CN=0350df78fc785813724ec66648df9b494f9b8da7 Certificate serial: 019B7834E33FA52644D312D23779329BC9DD Authority key identifier: 03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/xf-aTqyee4-5n_wFSTTwEdk3iBw.roa Signing time: Thu 01 Jan 2026 06:18:10 +0000 ROA not before: Thu 01 Jan 2026 06:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61094 IP address blocks: 185.92.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:e3:3f:a5:26:44:d3:12:d2:37:79:32:9b:c9:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0350df78fc785813724ec66648df9b494f9b8da7 Validity Not Before: Jan 1 06:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5ff9a4eac9e7b8fb99ffc054934f011d937881c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b0:02:d1:8a:40:3e:8b:a1:ad:66:b3:ed:d3: b1:34:f1:c8:c7:62:65:eb:a8:5c:18:7e:f4:00:59: 6a:7a:36:04:92:30:71:a9:e7:fd:dc:29:cc:b0:f8: c1:ba:6e:ad:9f:ce:12:b3:3c:74:c4:1c:ae:75:56: b1:8a:59:c8:38:3d:00:0b:71:52:b4:b0:fb:c8:81: d9:74:aa:ab:5a:97:cf:f8:e5:04:1d:cd:c0:fd:bc: 8d:d2:02:a6:f3:ea:e7:2c:e9:32:41:19:a1:01:49: 8e:3c:e4:29:f7:9e:83:37:a4:ee:9c:f3:6f:0c:a9: 61:97:98:16:16:7f:1f:82:2f:67:57:a1:db:be:b5: a6:ac:07:4b:7a:50:8b:99:b3:a2:33:80:6f:df:65: b1:4c:52:26:fe:2b:91:c9:97:5b:33:c9:c8:db:84: a6:3e:ce:45:b7:9d:d6:1f:f1:e8:d7:da:d1:73:ea: 04:34:ff:a5:62:d0:50:00:56:1f:a0:78:de:97:1c: 54:b0:33:19:c5:86:7d:aa:ab:08:6d:7b:e9:b2:5e: 74:39:25:a6:a3:11:0c:84:83:22:2f:33:34:09:96: 93:1c:e8:ae:49:89:e4:d2:1f:49:d7:08:18:02:ee: d5:fc:14:d6:4f:ca:a3:d7:d8:54:03:49:64:d3:e3: 34:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:FF:9A:4E:AC:9E:7B:8F:B9:9F:FC:05:49:34:F0:11:D9:37:88:1C X509v3 Authority Key Identifier: keyid:03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/xf-aTqyee4-5n_wFSTTwEdk3iBw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.92.124.0/24 Signature Algorithm: sha256WithRSAEncryption 89:84:d8:54:b1:c8:00:ff:44:93:f0:65:6c:e7:a4:12:6b:a5: 64:76:e2:d9:84:44:eb:c1:9c:85:da:75:c1:c3:05:c0:8f:8c: d7:49:a9:42:7b:86:86:32:74:d0:16:90:7e:28:33:48:3a:3b: c6:32:e4:ff:04:5e:b4:18:4a:85:1c:68:e9:f8:95:51:9f:b4: d8:e6:94:0a:41:d0:e1:e3:bd:09:2c:18:3e:f1:81:d4:c4:9a: 46:b1:36:3a:de:5d:72:fe:f5:62:f3:4e:36:da:86:9d:fe:16: 55:6a:c3:e5:12:a9:a4:ce:90:27:4e:74:55:ae:50:f5:3b:e9: 15:0f:a8:ed:c4:8b:5b:d0:7b:5a:c5:bd:ad:cd:07:5b:79:2a: 31:0b:21:14:09:10:c3:7a:39:5b:f2:ed:e2:bd:2d:48:92:84: 0d:a2:61:e5:c6:19:55:6c:7b:ba:27:50:16:bb:e3:96:00:2d: e3:c0:be:9d:91:c7:b6:ac:ed:19:6b:8b:a5:43:cc:f9:c2:7e: 20:fc:38:39:a7:c8:69:62:1f:17:77:28:fb:a2:d3:e7:be:9d: 94:4a:f9:9b:4d:bd:bc:71:f2:15:ff:4c:2e:90:c1:f5:82:e5: d4:79:64:98:fd:5a:a1:95:28:67:d1:c3:a2:c6:45:70:9a:a5: 53:c3:b8:6c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NOM/pSZE0xLSN3kym8ndMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzNTBkZjc4ZmM3ODU4MTM3MjRlYzY2NjQ4ZGY5YjQ5NGY5 YjhkYTcwHhcNMjYwMTAxMDYxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNWZmOWE0ZWFjOWU3YjhmYjk5ZmZjMDU0OTM0ZjAxMWQ5Mzc4ODFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLAC0YpAPouhrWaz7dOxNPHIx2Jl 66hcGH70AFlqejYEkjBxqef93CnMsPjBum6tn84Sszx0xByudVaxilnIOD0AC3FS tLD7yIHZdKqrWpfP+OUEHc3A/byN0gKm8+rnLOkyQRmhAUmOPOQp956DN6TunPNv DKlhl5gWFn8fgi9nV6HbvrWmrAdLelCLmbOiM4Bv32WxTFIm/iuRyZdbM8nI24Sm Ps5Ft53WH/Ho19rRc+oENP+lYtBQAFYfoHjelxxUsDMZxYZ9qqsIbXvpsl50OSWm oxEMhIMiLzM0CZaTHOiuSYnk0h9J1wgYAu7V/BTWT8qj19hUA0lk0+M0WQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMX/mk6snnuPuZ/8BUk08BHZN4gcMB8GA1UdIwQY MBaAFANQ33j8eFgTck7GZkjfm0lPm42nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTFEZmVQeDRXQk55VHNabVNOLWJTVS1iamFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9hYjU4NmUtNGIyYS00N2Y2LWFjZTgt ZDI5MmFiN2NlOWZhLzEveGYtYVRxeWVlNC01bl93RlNUVHdFZGszaUJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9hYjU4NmUtNGIyYS00N2Y2LWFjZTgtZDI5MmFiN2NlOWZh LzEvQTFEZmVQeDRXQk55VHNabVNOLWJTVS1iamFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVx8MA0G CSqGSIb3DQEBCwUAA4IBAQCJhNhUscgA/0ST8GVs56QSa6VkduLZhETrwZyF2nXB wwXAj4zXSalCe4aGMnTQFpB+KDNIOjvGMuT/BF60GEqFHGjp+JVRn7TY5pQKQdDh 470JLBg+8YHUxJpGsTY63l1y/vVi80422oad/hZVasPlEqmkzpAnTnRVrlD1O+kV D6jtxItb0Htaxb2tzQdbeSoxCyEUCRDDejlb8u3ivS1IkoQNomHlxhlVbHu6J1AW u+OWAC3jwL6dkce2rO0Za4ulQ8z5wn4g/Dg5p8hpYh8Xdyj7otPnvp2USvmbTb28 cfIV/0wukMH1guXUeWSY/VqhlShn0cOixkVwmqVTw7hs -----END CERTIFICATE-----Generated at Tue Feb 10 03:57:19 2026 by rpki-client