This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/xKJGESGTjFwwHaYD9v272aHamsA.roa File: xKJGESGTjFwwHaYD9v272aHamsA.roa (raw, json) Hash identifier: fgbTfswP5/p+4NfMt/CDHRQt2/uUSdoKPJJSPF2ke2k= Subject key identifier: C4:A2:46:11:21:93:8C:5C:30:1D:A6:03:F6:FD:BB:D9:A1:DA:9A:C0 Certificate issuer: /CN=30056b0375d894b93cb0e26d9b4d64a08c58371e Certificate serial: 019B78A24C50B39EC21A8F6D4E68539A7682 Authority key identifier: 30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/xKJGESGTjFwwHaYD9v272aHamsA.roa Signing time: Thu 01 Jan 2026 08:17:40 +0000 ROA not before: Thu 01 Jan 2026 08:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 91.198.117.0/24 maxlen: 24 185.109.132.0/24 maxlen: 24 185.109.133.0/24 maxlen: 24 185.109.134.0/24 maxlen: 24 185.109.135.0/24 maxlen: 24 185.146.152.0/24 maxlen: 24 185.146.154.0/24 maxlen: 24 185.146.155.0/24 maxlen: 24 2a07:4f80::/44 maxlen: 44 2a07:4f80::/48 maxlen: 48 2a07:4f80:10::/44 maxlen: 44 2a07:4f80:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:4c:50:b3:9e:c2:1a:8f:6d:4e:68:53:9a:76:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30056b0375d894b93cb0e26d9b4d64a08c58371e Validity Not Before: Jan 1 08:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4a2461121938c5c301da603f6fdbbd9a1da9ac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:39:86:d3:fd:9a:48:00:73:67:14:4d:57:32: f1:43:dc:2b:29:3d:0b:d8:2e:a1:ff:2b:b5:b9:84: 21:63:02:d0:d2:93:ea:34:2a:40:f6:2f:48:c6:43: 96:54:74:cf:d2:12:7a:35:38:72:9c:8a:71:ed:72: d5:38:65:bf:08:6b:6a:e5:c3:97:99:b1:6e:c0:d5: 54:c5:99:83:ba:34:7b:25:b6:5e:da:87:a2:d6:c5: 90:32:3d:e2:8a:bf:e9:ef:75:99:40:cb:fc:78:dc: b6:f6:4f:a7:c4:e0:25:90:8c:bb:a0:40:12:ae:25: 05:b5:6e:5b:f8:84:29:13:42:63:81:b1:48:bd:8c: 70:b7:78:4b:d6:89:fa:eb:c2:ba:b5:51:f3:28:81: d7:af:e0:dc:6f:41:e2:b7:3f:f7:c6:b9:86:dc:61: 05:71:5b:fa:62:e4:87:3a:6f:64:cf:a5:ae:fb:c1: fd:ff:07:1a:8e:d8:56:01:c7:7f:97:ef:c8:10:8b: b5:ac:3d:45:cd:d7:f7:96:24:8e:d1:24:a7:31:04: 1f:50:f7:68:5a:41:7d:7d:df:f6:c4:b0:f0:dd:2a: ec:e4:92:da:e8:7f:75:52:98:a0:97:b9:35:41:27: d5:bf:91:fb:86:f3:a9:3c:a2:16:4d:a1:ed:be:ca: ca:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A2:46:11:21:93:8C:5C:30:1D:A6:03:F6:FD:BB:D9:A1:DA:9A:C0 X509v3 Authority Key Identifier: keyid:30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/xKJGESGTjFwwHaYD9v272aHamsA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.117.0/24 185.109.132.0/22 185.146.152.0/24 185.146.154.0/23 IPv6: 2a07:4f80::-2a07:4f80:20:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 88:8f:6c:66:ed:28:26:d8:46:12:b5:b2:af:e6:c3:7f:aa:61: af:26:7b:a1:74:04:b2:5a:06:45:b8:6d:76:8d:a9:9c:44:cb: 37:90:68:df:16:1f:48:5f:4c:3c:c4:6f:64:c0:b9:94:fe:e0: 08:6b:cf:ab:5e:8b:f9:41:5b:1f:4c:3b:e2:14:e4:1c:56:73: 24:2f:1a:7f:1a:a2:9c:b5:f8:f9:d3:73:a6:22:d0:c3:a8:c9: 8e:77:3e:19:8e:d6:02:98:8a:99:72:63:1f:a1:a6:e1:51:aa: 61:b3:e3:97:16:43:a7:26:66:98:fb:d6:8c:44:fe:fe:5f:91: 68:f3:31:2b:0c:50:9a:40:ad:1a:aa:f2:80:61:3b:5d:23:3d: c3:f7:c5:3f:1d:43:6c:fa:d1:33:6b:41:26:99:b3:8b:d9:fd: ed:0e:3c:3b:74:ad:98:ec:a5:2b:de:db:46:6a:aa:ec:dc:58: 5e:d4:3f:ec:f3:ae:8e:c9:f8:79:23:4e:c6:85:22:4c:4a:44: 33:a7:d8:52:76:3e:0a:31:39:d6:a8:85:a3:61:8b:18:70:88: f7:69:a9:20:b8:09:25:9e:8e:f3:13:43:a4:a1:cd:12:23:e7: d4:4a:81:90:6d:59:e3:02:55:52:8a:e6:d6:b5:2a:3d:e8:6f: 1c:26:70:71 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZt4okxQs57CGo9tTmhTmnaCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMDU2YjAzNzVkODk0YjkzY2IwZTI2ZDliNGQ2NGEwOGM1 ODM3MWUwHhcNMjYwMTAxMDgxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNGEyNDYxMTIxOTM4YzVjMzAxZGE2MDNmNmZkYmJkOWExZGE5YWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDmG0/2aSABzZxRNVzLxQ9wrKT0L 2C6h/yu1uYQhYwLQ0pPqNCpA9i9IxkOWVHTP0hJ6NThynIpx7XLVOGW/CGtq5cOX mbFuwNVUxZmDujR7JbZe2oei1sWQMj3iir/p73WZQMv8eNy29k+nxOAlkIy7oEAS riUFtW5b+IQpE0JjgbFIvYxwt3hL1on668K6tVHzKIHXr+Dcb0Hitz/3xrmG3GEF cVv6YuSHOm9kz6Wu+8H9/wcajthWAcd/l+/IEIu1rD1Fzdf3liSO0SSnMQQfUPdo WkF9fd/2xLDw3Srs5JLa6H91Upigl7k1QSfVv5H7hvOpPKIWTaHtvsrKNQIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFMSiRhEhk4xcMB2mA/b9u9mh2prAMB8GA1UdIwQY MBaAFDAFawN12JS5PLDibZtNZKCMWDceMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUFWckEzWFlsTGs4c09KdG0wMWtvSXhZTng0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yYTc0NzItY2JiOC00Yzk5LWJlMjEt MTFiNGFmYmVkZTE5LzEveEtKR0VTR1RqRnd3SGFZRDl2MjcyYUhhbXNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8yYTc0NzItY2JiOC00Yzk5LWJlMjEtMTFiNGFmYmVkZTE5 LzEvTUFWckEzWFlsTGs4c09KdG0wMWtvSXhZTng0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjAeBAIAATAYAwQAW8Z1AwQC uW2EAwQAuZKYAwQBuZKaMBgEAgACMBIwEAMFByoHT4ADBwAqB0+AACAwDQYJKoZI hvcNAQELBQADggEBAIiPbGbtKCbYRhK1sq/mw3+qYa8me6F0BLJaBkW4bXaNqZxE yzeQaN8WH0hfTDzEb2TAuZT+4Ahrz6tei/lBWx9MO+IU5BxWcyQvGn8aopy1+PnT c6Yi0MOoyY53PhmO1gKYiplyYx+hpuFRqmGz45cWQ6cmZpj71oxE/v5fkWjzMSsM UJpArRqq8oBhO10jPcP3xT8dQ2z60TNrQSaZs4vZ/e0OPDt0rZjspSve20Zqquzc WF7UP+zzro7J+HkjTsaFIkxKRDOn2FJ2PgoxOdaohaNhixhwiPdpqSC4CSWejvMT Q6ShzRIj59RKgZBtWeMCVVKK5ta1Kj3obxwmcHE= -----END CERTIFICATE-----Generated at Fri Jan 9 00:56:53 2026 by rpki-client