This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/XoABJkvFJlIBHBYKi3N92dtD2pM.roa File: XoABJkvFJlIBHBYKi3N92dtD2pM.roa (raw, json) Hash identifier: 6dk5p2u6Y8s6ANCot7VM7GjCFhgD1bkj5ift9Y46o6I= Subject key identifier: 5E:80:01:26:4B:C5:26:52:01:1C:16:0A:8B:73:7D:D9:DB:43:DA:93 Certificate issuer: /CN=a1f7882861c29ed599be4a937480c4d13e25bfc2 Certificate serial: 019B783467B65C1271FA6DBB2749709FDD49 Authority key identifier: A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/XoABJkvFJlIBHBYKi3N92dtD2pM.roa Signing time: Thu 01 Jan 2026 06:17:38 +0000 ROA not before: Thu 01 Jan 2026 06:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33986 IP address blocks: 45.9.96.0/22 maxlen: 24 46.102.101.0/24 maxlen: 24 185.41.72.0/22 maxlen: 22 185.41.72.0/24 maxlen: 24 185.41.73.0/24 maxlen: 24 185.41.74.0/24 maxlen: 24 185.41.75.0/24 maxlen: 24 185.169.44.0/22 maxlen: 22 217.194.176.0/20 maxlen: 20 217.194.176.0/24 maxlen: 24 217.194.177.0/24 maxlen: 24 217.194.178.0/24 maxlen: 24 217.194.179.0/24 maxlen: 24 217.194.180.0/24 maxlen: 24 217.194.181.0/24 maxlen: 24 217.194.182.0/24 maxlen: 24 217.194.183.0/24 maxlen: 24 217.194.184.0/24 maxlen: 24 217.194.185.0/24 maxlen: 24 217.194.186.0/24 maxlen: 24 217.194.187.0/24 maxlen: 24 217.194.188.0/24 maxlen: 24 217.194.189.0/24 maxlen: 24 217.194.190.0/24 maxlen: 24 217.194.191.0/24 maxlen: 24 2a00:5b00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:67:b6:5c:12:71:fa:6d:bb:27:49:70:9f:dd:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1f7882861c29ed599be4a937480c4d13e25bfc2 Validity Not Before: Jan 1 06:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e8001264bc52652011c160a8b737dd9db43da93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:42:ff:8d:60:da:f5:be:fc:83:72:70:b2:9a: b7:d3:f5:52:29:50:34:77:4b:68:e7:59:d6:32:d9: d7:1e:cf:16:54:27:e7:61:f3:1f:bd:35:0f:a0:36: ca:63:7e:e0:00:20:b6:7e:57:9f:e4:6e:d8:25:a1: 45:5a:e8:de:b0:3e:dc:79:c1:70:3c:ac:3a:e5:ef: 24:10:82:cc:dd:23:9a:e1:c5:13:8c:5c:c7:57:f2: 3d:83:2f:ff:82:70:16:08:a2:59:8c:cd:e8:bf:41: c5:8c:19:cb:a6:d7:40:1a:65:e7:91:8f:65:01:6a: 02:bf:c8:c5:30:23:d6:ed:f5:a4:b7:a8:47:67:8f: 5e:54:b4:50:dc:e5:10:4c:40:a0:c5:f4:e3:59:a7: f3:c4:10:83:77:56:e3:e7:64:da:3d:a7:1c:9a:b8: 01:7a:45:d1:f9:34:68:32:83:c5:06:48:93:05:8a: 89:d6:49:60:a4:90:33:06:cf:18:7f:51:e6:0e:20: 50:b5:5f:4c:cc:6d:dd:3d:d0:94:76:33:f0:03:8a: 8c:bb:e6:4b:00:ec:80:8c:f1:23:8c:98:9a:a9:10: 72:5f:17:4b:19:1a:64:70:fe:3d:ac:71:bd:e6:4b: ab:b1:e3:87:62:5c:d7:6c:85:ac:cc:69:e3:9b:e1: fc:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:80:01:26:4B:C5:26:52:01:1C:16:0A:8B:73:7D:D9:DB:43:DA:93 X509v3 Authority Key Identifier: keyid:A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/XoABJkvFJlIBHBYKi3N92dtD2pM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.9.96.0/22 46.102.101.0/24 185.41.72.0/22 185.169.44.0/22 217.194.176.0/20 IPv6: 2a00:5b00::/29 Signature Algorithm: sha256WithRSAEncryption 3a:0c:59:09:f4:71:f9:ea:de:59:3b:71:f5:a3:fa:a6:2b:a0: 40:c9:ec:3a:93:33:a5:9e:5c:61:1e:c4:1d:d2:ac:8f:e5:28: f7:82:13:04:e7:64:18:d7:b2:41:81:89:02:ac:dc:d8:e2:d0: 96:ea:d4:08:70:ff:aa:87:02:1c:24:d8:73:73:7d:20:10:d0: 7d:07:e0:f9:4e:42:5b:b9:29:62:67:9c:54:c7:dd:8e:95:fc: 7d:14:3f:4a:98:07:37:61:e0:10:d9:cd:c1:f9:b2:a6:66:9c: 54:0a:47:dd:15:6d:e4:6d:49:01:73:c5:23:23:bb:78:3f:61: 88:2a:95:be:98:14:35:93:7a:9a:c1:1e:6a:8e:58:30:a5:04: bd:fb:2e:0c:07:58:a0:cc:77:2b:03:60:6d:a9:72:94:bb:c9: d0:3c:2d:8f:9d:7a:52:d5:dd:3f:7f:aa:24:64:3d:70:6d:49: 23:90:b5:39:d5:b9:8d:74:53:59:79:6b:b9:4c:93:92:eb:4e: d2:0d:8e:60:35:16:18:59:4f:88:ab:ce:b5:a9:70:0d:48:be: 1e:aa:64:ba:1e:5e:4b:fa:07:dd:dc:b0:ff:99:c3:48:8e:66: d1:08:83:71:aa:6c:2e:ce:7d:7c:02:6e:d9:f4:6d:e8:86:fa: a8:4d:34:4d -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt4NGe2XBJx+m27J0lwn91JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZjc4ODI4NjFjMjllZDU5OWJlNGE5Mzc0ODBjNGQxM2Uy NWJmYzIwHhcNMjYwMTAxMDYxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTgwMDEyNjRiYzUyNjUyMDExYzE2MGE4YjczN2RkOWRiNDNkYTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUL/jWDa9b78g3Jwspq30/VSKVA0 d0to51nWMtnXHs8WVCfnYfMfvTUPoDbKY37gACC2flef5G7YJaFFWujesD7cecFw PKw65e8kEILM3SOa4cUTjFzHV/I9gy//gnAWCKJZjM3ov0HFjBnLptdAGmXnkY9l AWoCv8jFMCPW7fWkt6hHZ49eVLRQ3OUQTECgxfTjWafzxBCDd1bj52TaPaccmrgB ekXR+TRoMoPFBkiTBYqJ1klgpJAzBs8Yf1HmDiBQtV9MzG3dPdCUdjPwA4qMu+ZL AOyAjPEjjJiaqRByXxdLGRpkcP49rHG95kurseOHYlzXbIWszGnjm+H8+QIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFF6AASZLxSZSARwWCotzfdnbQ9qTMB8GA1UdIwQY MBaAFKH3iChhwp7Vmb5Kk3SAxNE+Jb/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2ZlSUtHSENudFdadmtxVGRJREUwVDRsdjhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wM2JhYjgtNmM0My00YTIwLWE5NjAt YzM3YTU5ODJmNDY2LzEvWG9BQkprdkZKbElCSEJZS2kzTjkyZHREMnBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8wM2JhYjgtNmM0My00YTIwLWE5NjAtYzM3YTU5ODJmNDY2 LzEvb2ZlSUtHSENudFdadmtxVGRJREUwVDRsdjhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCLQlgAwQA LmZlAwQCuSlIAwQCuaksAwQE2cKwMA0EAgACMAcDBQMqAFsAMA0GCSqGSIb3DQEB CwUAA4IBAQA6DFkJ9HH56t5ZO3H1o/qmK6BAyew6kzOlnlxhHsQd0qyP5Sj3ghME 52QY17JBgYkCrNzY4tCW6tQIcP+qhwIcJNhzc30gENB9B+D5TkJbuSliZ5xUx92O lfx9FD9KmAc3YeAQ2c3B+bKmZpxUCkfdFW3kbUkBc8UjI7t4P2GIKpW+mBQ1k3qa wR5qjlgwpQS9+y4MB1igzHcrA2BtqXKUu8nQPC2PnXpS1d0/f6okZD1wbUkjkLU5 1bmNdFNZeWu5TJOS607SDY5gNRYYWU+Iq861qXANSL4eqmS6Hl5L+gfd3LD/mcNI jmbRCINxqmwuzn18Am7Z9G3ohvqoTTRN -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:49 2026 by rpki-client