This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/xufioavVjF8CEbGx1cHltSCyEPE.roa File: xufioavVjF8CEbGx1cHltSCyEPE.roa (raw, json) Hash identifier: yxyXkFpI8SjkVfT6SLtd6jSu4JdIMIm/t1CqSzD3wWU= Subject key identifier: C6:E7:E2:A1:AB:D5:8C:5F:02:11:B1:B1:D5:C1:E5:B5:20:B2:10:F1 Certificate issuer: /CN=95380935e7e8a21ec32b65a7fc4ed7d468278521 Certificate serial: 019B7C1343B07408A0FE6A0EDED883B4806C Authority key identifier: 95:38:09:35:E7:E8:A2:1E:C3:2B:65:A7:FC:4E:D7:D4:68:27:85:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/xufioavVjF8CEbGx1cHltSCyEPE.roa Signing time: Fri 02 Jan 2026 00:19:55 +0000 ROA not before: Fri 02 Jan 2026 00:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33915 IP address blocks: 148.200.0.0/21 maxlen: 21 148.200.14.0/24 maxlen: 24 148.200.140.0/22 maxlen: 22 148.200.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:43:b0:74:08:a0:fe:6a:0e:de:d8:83:b4:80:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95380935e7e8a21ec32b65a7fc4ed7d468278521 Validity Not Before: Jan 2 00:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6e7e2a1abd58c5f0211b1b1d5c1e5b520b210f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:2a:0f:c3:c9:6c:3d:be:8a:a4:ea:73:2e:0d: bb:12:b2:4a:c2:81:e4:16:ea:86:a0:0b:be:fb:62: e8:a8:16:47:86:d8:ff:87:02:c2:97:6c:63:b3:b9: 99:08:ec:85:88:95:54:b1:cf:46:8e:f6:74:a5:8a: 0e:33:fe:0f:bc:0e:53:18:58:e8:c6:1b:61:bb:56: b0:32:dc:48:96:d3:2b:cc:5d:f1:89:7a:22:3f:4d: 02:7a:04:81:9d:0e:68:0b:24:a8:17:b6:10:03:21: 82:f4:37:8c:0c:a0:f3:b1:f2:cb:bb:4b:93:a7:bc: 14:03:e1:b4:0f:f2:ce:4f:1e:78:cb:60:3e:dd:19: f0:ed:b3:0e:7c:4c:e0:aa:24:3b:10:dc:4f:33:95: 08:f2:49:53:a6:43:6c:ba:dc:ae:01:16:8c:35:88: 08:e0:ea:c3:62:1b:d7:f4:72:3c:fd:32:8d:b4:64: d4:58:8c:8a:a8:f3:19:ef:e9:01:cc:76:5b:85:a1: 4d:9c:fc:db:98:96:01:ea:97:01:7b:4a:45:6c:cc: 15:7a:37:5c:f5:b3:ee:9f:91:1c:59:ce:ee:af:6b: 39:94:fc:84:f5:25:7e:4c:f3:7f:9e:15:dd:bf:da: 98:0e:b1:61:25:64:dd:82:87:5e:9f:26:80:61:dd: 6b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E7:E2:A1:AB:D5:8C:5F:02:11:B1:B1:D5:C1:E5:B5:20:B2:10:F1 X509v3 Authority Key Identifier: keyid:95:38:09:35:E7:E8:A2:1E:C3:2B:65:A7:FC:4E:D7:D4:68:27:85:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/xufioavVjF8CEbGx1cHltSCyEPE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 148.200.0.0/21 148.200.14.0/24 148.200.140.0/22 148.200.240.0/21 Signature Algorithm: sha256WithRSAEncryption 58:38:37:b5:7d:29:92:33:40:67:2e:b0:4b:06:8e:72:60:c6: 34:c2:15:77:5d:a6:84:56:e6:85:7a:bf:0d:06:8c:96:4d:06: f1:ac:a6:a5:83:6e:16:f8:63:a6:8f:22:9a:b7:9b:39:69:c4: 24:1d:5a:55:67:a8:a4:09:2c:7c:09:7d:ed:0f:af:55:99:78: 64:19:55:fb:ff:8d:7f:9c:4d:5d:90:81:28:e1:9f:7a:b5:69: 1d:86:b4:d7:83:ff:df:ff:c5:b0:f8:cd:63:9f:20:ae:11:e3: 6c:a4:19:c7:d0:9f:2f:47:9d:bb:46:32:05:26:e3:da:4c:60: 74:7f:71:df:8e:a4:a1:8b:17:92:bc:6c:1d:1d:c8:bf:f1:4a: 0e:7a:50:89:94:2f:53:5b:5e:07:a1:7c:1e:d7:ae:a3:2e:64: c1:5f:af:1a:e9:6a:ee:02:d7:91:97:d9:e9:02:a3:73:f7:e4: da:60:76:4a:ea:93:bd:a6:57:d4:ff:c0:35:34:6c:71:e6:fb: a5:ce:6d:90:7f:c4:02:6e:d9:2a:cd:85:e9:c7:cb:ba:39:06: 4d:50:12:14:4a:c9:47:86:cf:5d:92:98:7b:f3:3b:ec:2c:dc: 4f:e1:e6:fa:33:8c:7d:db:00:1e:df:e3:97:95:80:85:87:54: 54:da:f2:9b -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt8E0OwdAig/moO3tiDtIBsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MzgwOTM1ZTdlOGEyMWVjMzJiNjVhN2ZjNGVkN2Q0Njgy Nzg1MjEwHhcNMjYwMTAyMDAxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmU3ZTJhMWFiZDU4YzVmMDIxMWIxYjFkNWMxZTViNTIwYjIxMGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ioPw8lsPb6KpOpzLg27ErJKwoHk FuqGoAu++2LoqBZHhtj/hwLCl2xjs7mZCOyFiJVUsc9GjvZ0pYoOM/4PvA5TGFjo xhthu1awMtxIltMrzF3xiXoiP00CegSBnQ5oCySoF7YQAyGC9DeMDKDzsfLLu0uT p7wUA+G0D/LOTx54y2A+3Rnw7bMOfEzgqiQ7ENxPM5UI8klTpkNsutyuARaMNYgI 4OrDYhvX9HI8/TKNtGTUWIyKqPMZ7+kBzHZbhaFNnPzbmJYB6pcBe0pFbMwVejdc 9bPun5EcWc7ur2s5lPyE9SV+TPN/nhXdv9qYDrFhJWTdgodenyaAYd1rTQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFMbn4qGr1YxfAhGxsdXB5bUgshDxMB8GA1UdIwQY MBaAFJU4CTXn6KIewytlp/xO19RoJ4UhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFRnSk5lZm9vaDdESzJXbl9FN1gxR2duaFNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC82MjYzMWItZmRmMy00MTNmLThmMjIt ZWNlMDg4ZjAxODI3LzEveHVmaW9hdlZqRjhDRWJHeDFjSGx0U0N5RVBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC82MjYzMWItZmRmMy00MTNmLThmMjItZWNlMDg4ZjAxODI3 LzEvbFRnSk5lZm9vaDdESzJXbl9FN1gxR2duaFNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDlMgAAwQA lMgOAwQClMiMAwQDlMjwMA0GCSqGSIb3DQEBCwUAA4IBAQBYODe1fSmSM0BnLrBL Bo5yYMY0whV3XaaEVuaFer8NBoyWTQbxrKalg24W+GOmjyKat5s5acQkHVpVZ6ik CSx8CX3tD69VmXhkGVX7/41/nE1dkIEo4Z96tWkdhrTXg//f/8Ww+M1jnyCuEeNs pBnH0J8vR527RjIFJuPaTGB0f3HfjqShixeSvGwdHci/8UoOelCJlC9TW14HoXwe 166jLmTBX68a6WruAteRl9npAqNz9+TaYHZK6pO9plfU/8A1NGxx5vulzm2Qf8QC btkqzYXpx8u6OQZNUBIUSslHhs9dkph78zvsLNxP4eb6M4x92wAe3+OXlYCFh1RU 2vKb -----END CERTIFICATE-----Generated at Mon Jan 26 22:36:03 2026 by rpki-client