This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/xNSFqM7-0qNODofNrUEn4XQu4ME.roa File: xNSFqM7-0qNODofNrUEn4XQu4ME.roa (raw, json) Hash identifier: raRCbVzrGPXhNpKnAVtwuinosdft0bdaQidRsp21paQ= Subject key identifier: C4:D4:85:A8:CE:FE:D2:A3:4E:0E:87:CD:AD:41:27:E1:74:2E:E0:C1 Certificate issuer: /CN=f60846f21c56a8513d31c155dd199197a3ffc7c0 Certificate serial: 019B7A5B71FA37A8E4F4CFEF621BB59B40E9 Authority key identifier: F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/xNSFqM7-0qNODofNrUEn4XQu4ME.roa Signing time: Thu 01 Jan 2026 16:19:31 +0000 ROA not before: Thu 01 Jan 2026 16:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 17804 IP address blocks: 185.109.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:71:fa:37:a8:e4:f4:cf:ef:62:1b:b5:9b:40:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60846f21c56a8513d31c155dd199197a3ffc7c0 Validity Not Before: Jan 1 16:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4d485a8cefed2a34e0e87cdad4127e1742ee0c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:96:c9:c6:2d:68:63:55:e6:64:60:1d:7b:41: 8d:13:8b:d5:43:25:4a:1a:69:a9:3a:2b:f4:fd:c9: d4:ad:f6:ea:5a:a9:c4:47:ec:f6:70:4e:bd:31:b5: 76:5a:c7:b9:e9:4d:7f:30:1e:32:96:44:96:0a:80: 56:ed:57:04:f3:08:ff:f3:cc:31:da:16:36:b3:f9: 40:ca:fa:1d:25:23:fc:a0:0d:ce:bc:29:84:1e:0c: 10:1c:80:02:e9:25:65:bb:fc:2a:6f:cd:dc:df:e0: 91:c1:cd:dc:3a:88:26:e8:80:ff:cf:5f:68:f3:a6: 2c:18:eb:d5:68:9b:cf:f9:e1:22:69:2e:96:ca:81: 52:b0:c6:87:5d:c3:5a:ab:3f:c8:d6:8b:ae:a2:a6: 72:d5:73:06:aa:8c:ee:3a:c3:52:61:dd:88:3c:e4: 4b:60:e3:bf:96:d7:46:35:e7:8a:bd:7d:74:57:05: 0a:c4:c1:e3:a0:d7:7d:d9:97:28:34:ab:b1:b9:39: 63:26:65:65:e6:23:42:a5:af:d8:f7:97:81:4b:16: fb:20:5e:4b:2a:5a:e0:26:d7:0e:c2:9c:c6:fc:e4: 30:0e:b4:93:e9:0e:46:36:eb:65:01:a9:fb:46:66: 78:bc:64:a3:83:0c:41:c2:c3:c8:b3:48:98:17:3f: d4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D4:85:A8:CE:FE:D2:A3:4E:0E:87:CD:AD:41:27:E1:74:2E:E0:C1 X509v3 Authority Key Identifier: keyid:F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/xNSFqM7-0qNODofNrUEn4XQu4ME.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.109.87.0/24 Signature Algorithm: sha256WithRSAEncryption 31:86:8b:53:11:e0:b7:8a:6b:7b:85:47:cc:f6:30:8b:37:0b: 81:f8:05:ed:68:2d:aa:a7:af:1a:1b:7a:42:14:55:08:8c:44: 3e:e9:b7:b8:41:d3:ef:d8:c4:1f:25:46:e9:c1:29:c6:73:9c: 43:44:95:ab:50:8d:b7:04:b8:d4:03:84:46:39:1a:15:5f:f6: 63:1d:36:b1:51:3d:1b:bb:6b:4a:95:96:78:b3:dc:5f:bb:13: e8:c7:86:d4:5f:09:8a:27:cf:fe:45:ff:9d:6f:ff:74:6a:8b: 07:63:03:52:6f:30:61:69:d6:7f:93:3c:e0:7a:c1:cc:f0:20: 9b:cc:96:2d:eb:6a:54:3a:a5:73:d4:09:41:e8:a7:e2:5c:3b: 20:9d:2e:80:19:d6:2d:be:03:f2:7a:59:0e:8c:4e:c3:b0:a5: 31:79:1e:14:65:23:3d:44:52:0a:a1:03:f0:cc:0f:19:5c:4e: 1c:c7:c9:30:24:8c:4d:b9:57:22:f1:91:77:17:de:f3:31:d5: de:31:99:b9:df:a8:ac:bf:d0:d1:3c:fd:a2:04:e0:c3:69:f1: 5e:f2:04:21:72:f5:e4:8d:28:b6:b8:1a:32:fe:37:65:fa:bd: 00:96:90:29:fa:93:1c:03:b3:6d:38:68:e5:48:9c:a2:74:a5: ce:5e:ae:24 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W3H6N6jk9M/vYhu1m0DpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2MDg0NmYyMWM1NmE4NTEzZDMxYzE1NWRkMTk5MTk3YTNm ZmM3YzAwHhcNMjYwMTAxMTYxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNGQ0ODVhOGNlZmVkMmEzNGUwZTg3Y2RhZDQxMjdlMTc0MmVlMGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJbJxi1oY1XmZGAde0GNE4vVQyVK GmmpOiv0/cnUrfbqWqnER+z2cE69MbV2Wse56U1/MB4ylkSWCoBW7VcE8wj/88wx 2hY2s/lAyvodJSP8oA3OvCmEHgwQHIAC6SVlu/wqb83c3+CRwc3cOogm6ID/z19o 86YsGOvVaJvP+eEiaS6WyoFSsMaHXcNaqz/I1ouuoqZy1XMGqozuOsNSYd2IPORL YOO/ltdGNeeKvX10VwUKxMHjoNd92ZcoNKuxuTljJmVl5iNCpa/Y95eBSxb7IF5L KlrgJtcOwpzG/OQwDrST6Q5GNutlAan7RmZ4vGSjgwxBwsPIs0iYFz/U6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMTUhajO/tKjTg6Hza1BJ+F0LuDBMB8GA1UdIwQY MBaAFPYIRvIcVqhRPTHBVd0ZkZej/8fAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWdoRzhoeFdxRkU5TWNGVjNSbVJsNlBfeDhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9hMGY0YmUtNGMwZC00ZGY1LTkwYzYt YTZkNDVlZjdkMjI3LzEveE5TRnFNNy0wcU5PRG9mTnJVRW40WFF1NE1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9hMGY0YmUtNGMwZC00ZGY1LTkwYzYtYTZkNDVlZjdkMjI3 LzEvOWdoRzhoeFdxRkU5TWNGVjNSbVJsNlBfeDhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuW1XMA0G CSqGSIb3DQEBCwUAA4IBAQAxhotTEeC3imt7hUfM9jCLNwuB+AXtaC2qp68aG3pC FFUIjEQ+6be4QdPv2MQfJUbpwSnGc5xDRJWrUI23BLjUA4RGORoVX/ZjHTaxUT0b u2tKlZZ4s9xfuxPox4bUXwmKJ8/+Rf+db/90aosHYwNSbzBhadZ/kzzgesHM8CCb zJYt62pUOqVz1AlB6KfiXDsgnS6AGdYtvgPyelkOjE7DsKUxeR4UZSM9RFIKoQPw zA8ZXE4cx8kwJIxNuVci8ZF3F97zMdXeMZm536isv9DRPP2iBODDafFe8gQhcvXk jSi2uBoy/jdl+r0AlpAp+pMcA7NtOGjlSJyidKXOXq4k -----END CERTIFICATE-----Generated at Mon Jan 26 15:34:59 2026 by rpki-client