This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/XF1Nc0TElShdxgSlTTRramDytfo.roa File: XF1Nc0TElShdxgSlTTRramDytfo.roa (raw, json) Hash identifier: 2x0djNsK99Aex80NEk4TpsPuhlZgzcphXHvm3HIeB7I= Subject key identifier: 5C:5D:4D:73:44:C4:95:28:5D:C6:04:A5:4D:34:6B:6A:60:F2:B5:FA Certificate issuer: /CN=9fa736d46981ce486394dfef9c738b7ebeb61a6d Certificate serial: 019B797EFD6F5BE8EA6671DC9870E65A91A9 Authority key identifier: 9F:A7:36:D4:69:81:CE:48:63:94:DF:EF:9C:73:8B:7E:BE:B6:1A:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n6c21GmBzkhjlN_vnHOLfr62Gm0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/XF1Nc0TElShdxgSlTTRramDytfo.roa Signing time: Thu 01 Jan 2026 12:18:44 +0000 ROA not before: Thu 01 Jan 2026 12:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205718 IP address blocks: 185.205.112.0/22 maxlen: 22 2a09:1780::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.mft rsync://rpki.ripe.net/repository/DEFAULT/n6c21GmBzkhjlN_vnHOLfr62Gm0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:fd:6f:5b:e8:ea:66:71:dc:98:70:e6:5a:91:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fa736d46981ce486394dfef9c738b7ebeb61a6d Validity Not Before: Jan 1 12:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c5d4d7344c495285dc604a54d346b6a60f2b5fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1c:d9:1b:36:53:1c:36:8c:5d:bd:bb:b3:9d: 28:f9:22:7f:f3:b8:61:07:59:a1:e5:e2:ce:5c:4f: 9d:4e:09:6c:a3:cb:79:a8:c8:11:02:3d:e0:54:0e: e7:eb:b6:5f:ce:f2:ee:f1:94:23:f6:59:b2:11:4d: e2:af:d7:35:03:00:04:54:c9:f5:3b:80:01:93:6c: 26:c0:fc:ca:a8:69:d8:cb:7e:28:ba:a7:4c:a2:30: 25:5f:07:f2:83:62:66:33:fc:98:c4:e3:64:d1:e4: e4:b5:67:4a:26:17:6d:95:09:a3:10:54:ed:85:36: 63:f2:e6:4c:8e:56:16:97:33:59:ea:46:4a:bb:4f: 97:95:12:2a:a4:29:e0:d4:e1:d6:2a:d3:69:97:0b: 29:8e:53:69:92:4a:72:9c:28:e3:00:ee:4b:05:63: 21:b1:9d:09:65:af:da:34:e8:70:7c:94:b2:ce:a9: 00:f3:83:c6:72:70:11:04:71:2b:e2:d6:d2:13:3f: af:b3:dc:4a:03:fc:5b:ec:7a:0c:4a:80:f0:a2:14: 47:09:90:e3:18:db:4f:9b:c8:bd:2c:50:16:09:18: 3a:cf:2f:ba:22:8b:cf:3c:05:85:5d:51:c4:46:f6: 97:77:d4:7c:14:78:cf:c3:5a:1c:eb:a0:04:2d:1f: 37:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:5D:4D:73:44:C4:95:28:5D:C6:04:A5:4D:34:6B:6A:60:F2:B5:FA X509v3 Authority Key Identifier: keyid:9F:A7:36:D4:69:81:CE:48:63:94:DF:EF:9C:73:8B:7E:BE:B6:1A:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6c21GmBzkhjlN_vnHOLfr62Gm0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/XF1Nc0TElShdxgSlTTRramDytfo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.205.112.0/22 IPv6: 2a09:1780::/34 Signature Algorithm: sha256WithRSAEncryption cd:6b:b6:2e:9a:04:85:67:29:46:29:1b:ac:18:67:5a:29:6f: 54:a0:ac:24:a3:6f:49:ba:82:3b:f6:e5:08:2d:96:3b:d3:2e: e6:19:1d:b8:12:cf:c9:aa:73:bd:cd:6b:57:0c:73:fb:e7:41: f6:e9:63:b6:05:13:07:0f:b7:ad:54:d4:47:d7:82:3b:20:41: 7e:85:3f:69:4b:ac:27:9e:fa:6a:05:89:b3:2b:56:ff:b0:69: 95:22:d7:fc:6d:fe:11:4d:9a:7d:1a:36:65:93:4e:c3:fa:40: 44:bb:03:5f:8c:25:c0:61:90:e0:41:e4:79:be:91:1f:6a:6c: 90:59:e3:c1:bb:d5:5c:17:e5:5d:65:9f:54:cd:1f:21:40:e0: 2f:fb:50:63:6f:bd:96:29:0a:04:67:55:93:e2:42:b2:98:2e: 4d:fe:9f:d7:2d:d9:39:6f:ca:03:1e:5b:10:19:31:73:ca:72: 91:14:cb:f3:f2:cc:a8:af:f2:ee:53:e3:bd:1b:9c:b5:ce:dd: 57:8c:43:f5:32:68:f0:d0:0e:61:a3:b8:a3:13:6c:d0:6d:3f: 37:9a:c0:e1:2b:fe:4f:46:e4:d5:b3:3f:f5:91:89:6a:e0:82: d5:5c:66:8f:a3:28:f3:4b:81:af:9d:f2:c6:b4:76:f3:d6:8d: 75:2e:85:88 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt5fv1vW+jqZnHcmHDmWpGpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmYTczNmQ0Njk4MWNlNDg2Mzk0ZGZlZjljNzM4YjdlYmVi NjFhNmQwHhcNMjYwMTAxMTIxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzVkNGQ3MzQ0YzQ5NTI4NWRjNjA0YTU0ZDM0NmI2YTYwZjJiNWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRzZGzZTHDaMXb27s50o+SJ/87hh B1mh5eLOXE+dTglso8t5qMgRAj3gVA7n67ZfzvLu8ZQj9lmyEU3ir9c1AwAEVMn1 O4ABk2wmwPzKqGnYy34ouqdMojAlXwfyg2JmM/yYxONk0eTktWdKJhdtlQmjEFTt hTZj8uZMjlYWlzNZ6kZKu0+XlRIqpCng1OHWKtNplwspjlNpkkpynCjjAO5LBWMh sZ0JZa/aNOhwfJSyzqkA84PGcnARBHEr4tbSEz+vs9xKA/xb7HoMSoDwohRHCZDj GNtPm8i9LFAWCRg6zy+6IovPPAWFXVHERvaXd9R8FHjPw1oc66AELR83sQIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFFxdTXNExJUoXcYEpU00a2pg8rX6MB8GA1UdIwQY MBaAFJ+nNtRpgc5IY5Tf75xzi36+thptMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjZjMjFHbUJ6a2hqbE5fdm5IT0xmcjYyR20wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80ZDc0ZDktNmM0Yy00YjE0LTgxNWYt ZDI2MjgwM2NmNjQ0LzEvWEYxTmMwVEVsU2hkeGdTbFRUUnJhbUR5dGZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC80ZDc0ZDktNmM0Yy00YjE0LTgxNWYtZDI2MjgwM2NmNjQ0 LzEvbjZjMjFHbUJ6a2hqbE5fdm5IT0xmcjYyR20wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCuc1wMA4E AgACMAgDBgYqCReAADANBgkqhkiG9w0BAQsFAAOCAQEAzWu2LpoEhWcpRikbrBhn WilvVKCsJKNvSbqCO/blCC2WO9Mu5hkduBLPyapzvc1rVwxz++dB9uljtgUTBw+3 rVTUR9eCOyBBfoU/aUusJ576agWJsytW/7BplSLX/G3+EU2afRo2ZZNOw/pARLsD X4wlwGGQ4EHkeb6RH2pskFnjwbvVXBflXWWfVM0fIUDgL/tQY2+9likKBGdVk+JC spguTf6f1y3ZOW/KAx5bEBkxc8pykRTL8/LMqK/y7lPjvRuctc7dV4xD9TJo8NAO YaO4oxNs0G0/N5rA4Sv+T0bk1bM/9ZGJauCC1Vxmj6Mo80uBr53yxrR289aNdS6F iA== -----END CERTIFICATE-----Generated at Mon Feb 9 23:47:18 2026 by rpki-client