This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/Xyfw_F7Al_ClRr8-ihHfuJGwEGI.roa File: Xyfw_F7Al_ClRr8-ihHfuJGwEGI.roa (raw, json) Hash identifier: FySK//s6n3h8RIZFxfbkqJJANJBH7/F4as5E6MlREIw= Subject key identifier: 5F:27:F0:FC:5E:C0:97:F0:A5:46:BF:3E:8A:11:DF:B8:91:B0:10:62 Certificate issuer: /CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea Certificate serial: 019B7AC7DFD930DA845F2E8B88D2E25CA9C2 Authority key identifier: 65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/Xyfw_F7Al_ClRr8-ihHfuJGwEGI.roa Signing time: Thu 01 Jan 2026 18:17:57 +0000 ROA not before: Thu 01 Jan 2026 18:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207713 IP address blocks: 213.165.60.0/24 maxlen: 24 213.165.61.0/24 maxlen: 24 213.165.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:df:d9:30:da:84:5f:2e:8b:88:d2:e2:5c:a9:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea Validity Not Before: Jan 1 18:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f27f0fc5ec097f0a546bf3e8a11dfb891b01062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:15:d6:44:8c:2c:dc:40:b7:f5:ed:45:9d:61: 59:b2:92:50:de:f3:a1:49:4e:8d:7b:d0:d0:86:6e: d0:ab:dd:cb:4b:9f:e9:61:da:b1:ba:6e:24:91:2c: da:2f:a6:a1:70:8c:89:3f:f1:af:2c:b1:f1:40:30: cc:b0:c7:01:3d:b5:97:45:3b:87:f4:48:4f:4d:ae: 6b:d0:89:7e:22:f8:cb:d5:d2:b5:e4:5f:be:b7:5f: 3d:2e:bf:4d:0f:b2:c8:0f:ee:c6:81:77:59:20:65: 5a:ee:0d:45:3f:31:67:34:ed:e4:92:0b:4e:47:ee: 6f:ea:6d:e3:c5:72:c7:39:2a:9f:f0:df:85:da:a0: f2:bf:e5:7d:6d:3f:71:a5:31:4d:d8:06:f1:60:20: da:da:1f:69:08:74:7d:4b:a4:77:87:c2:32:e5:28: af:a9:94:4f:2a:78:df:1c:cc:8e:f5:d2:62:07:44: 16:4f:d4:3e:3c:75:b3:67:4a:f3:aa:94:cb:0c:94: 13:a1:44:c0:2e:a8:29:58:cb:6c:8f:cf:17:d4:dc: f1:00:b3:95:0d:8f:f7:28:83:3c:97:31:56:f7:61: 97:7a:40:09:3a:69:69:3b:5d:8f:aa:eb:82:85:00: fb:21:a3:5f:c3:fe:eb:30:2f:3a:b6:d5:b7:13:22: 1e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:27:F0:FC:5E:C0:97:F0:A5:46:BF:3E:8A:11:DF:B8:91:B0:10:62 X509v3 Authority Key Identifier: keyid:65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/Xyfw_F7Al_ClRr8-ihHfuJGwEGI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.165.60.0-213.165.62.255 Signature Algorithm: sha256WithRSAEncryption 1c:29:32:d0:ab:13:04:87:17:7b:69:0c:dc:d2:bf:d9:7c:8e: 71:79:04:47:d0:a2:71:c2:29:e3:cc:87:a5:fd:29:f1:f0:55: e7:b0:2d:1f:62:d5:4f:36:7d:db:ca:57:51:23:c3:1a:58:b4: 9a:92:51:bc:f1:96:f2:f8:43:a0:3e:cc:3e:9d:87:78:b7:4b: ab:bf:22:dc:8d:36:46:65:2f:c4:8d:a9:58:47:b4:37:54:89: bc:a4:68:65:20:c8:93:a2:41:6d:d2:d9:40:cf:54:12:d7:65: 5e:6c:24:4c:64:07:25:78:f9:3c:5e:9d:51:b1:c5:8a:9b:1c: 2b:50:87:18:a6:da:41:bf:29:e3:b8:b2:82:fe:ba:28:52:25: 1c:85:a2:bd:23:cd:ca:ab:94:6a:8f:d7:e4:58:db:47:0f:ae: ff:16:1f:e0:b4:b0:63:c5:c1:2c:19:7e:4f:42:44:4c:d2:05: e9:aa:e8:1c:35:45:fc:41:c8:53:42:6c:97:59:c9:5a:dd:a2: 3c:ee:48:29:34:e6:6a:74:e1:ff:67:7e:45:53:80:16:00:60: 35:14:f5:13:45:f6:9d:f5:9a:3f:99:00:ba:f5:7d:ed:2a:37: 8f:4a:42:28:14:09:85:6f:6b:d4:37:15:dd:2d:ea:e1:a6:3d: 93:ec:3b:ae -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt6x9/ZMNqEXy6LiNLiXKnCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ZWE5M2Q4OGEyMDJkNTFkMzRkMmE5MDM1OTdlNzZiOGYx N2YwZWEwHhcNMjYwMTAxMTgxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjI3ZjBmYzVlYzA5N2YwYTU0NmJmM2U4YTExZGZiODkxYjAxMDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxXWRIws3EC39e1FnWFZspJQ3vOh SU6Ne9DQhm7Qq93LS5/pYdqxum4kkSzaL6ahcIyJP/GvLLHxQDDMsMcBPbWXRTuH 9EhPTa5r0Il+IvjL1dK15F++t189Lr9ND7LID+7GgXdZIGVa7g1FPzFnNO3kkgtO R+5v6m3jxXLHOSqf8N+F2qDyv+V9bT9xpTFN2AbxYCDa2h9pCHR9S6R3h8Iy5Siv qZRPKnjfHMyO9dJiB0QWT9Q+PHWzZ0rzqpTLDJQToUTALqgpWMtsj88X1NzxALOV DY/3KIM8lzFW92GXekAJOmlpO12PquuChQD7IaNfw/7rMC86ttW3EyIe+wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFF8n8PxewJfwpUa/PooR37iRsBBiMB8GA1UdIwQY MBaAFGXqk9iKIC1R000qkDWX52uPF/DqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmVxVDJJb2dMVkhUVFNxUU5aZm5hNDhYOE9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC81NGVhYzAtNzFmZC00NmU5LTllMWIt Y2UxYmJhNjkxYjM3LzEvWHlmd19GN0FsX0NsUnI4LWloSGZ1Skd3RUdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC81NGVhYzAtNzFmZC00NmU5LTllMWItY2UxYmJhNjkxYjM3 LzEvWmVxVDJJb2dMVkhUVFNxUU5aZm5hNDhYOE9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALVpTwD BADVpT4wDQYJKoZIhvcNAQELBQADggEBABwpMtCrEwSHF3tpDNzSv9l8jnF5BEfQ onHCKePMh6X9KfHwVeewLR9i1U82fdvKV1EjwxpYtJqSUbzxlvL4Q6A+zD6dh3i3 S6u/ItyNNkZlL8SNqVhHtDdUibykaGUgyJOiQW3S2UDPVBLXZV5sJExkByV4+Txe nVGxxYqbHCtQhxim2kG/KeO4soL+uihSJRyFor0jzcqrlGqP1+RY20cPrv8WH+C0 sGPFwSwZfk9CREzSBemq6Bw1RfxByFNCbJdZyVrdojzuSCk05mp04f9nfkVTgBYA YDUU9RNF9p31mj+ZALr1fe0qN49KQigUCYVva9Q3Fd0t6uGmPZPsO64= -----END CERTIFICATE-----Generated at Sat Jan 10 03:17:00 2026 by rpki-client