This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/XWcYfudW_fCjYcND3H407xe959o.roa File: XWcYfudW_fCjYcND3H407xe959o.roa (raw, json) Hash identifier: hWyo7JRjc5zRnP54qNBVfiEpztNdLDDxrtX9abLg7Ps= Subject key identifier: 5D:67:18:7E:E7:56:FD:F0:A3:61:C3:43:DC:7E:34:EF:17:BD:E7:DA Certificate issuer: /CN=3a34889251e7cb133e906c70891ba1a0495ed860 Certificate serial: 019B77C6F18EDD7A7E2C61D528A7276F4FB4 Authority key identifier: 3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/XWcYfudW_fCjYcND3H407xe959o.roa Signing time: Thu 01 Jan 2026 04:18:05 +0000 ROA not before: Thu 01 Jan 2026 04:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 185.185.208.0/24 maxlen: 24 185.185.209.0/24 maxlen: 24 185.185.210.0/24 maxlen: 24 185.185.211.0/24 maxlen: 24 185.240.76.0/24 maxlen: 24 185.240.77.0/24 maxlen: 24 185.240.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.crl rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:f1:8e:dd:7a:7e:2c:61:d5:28:a7:27:6f:4f:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a34889251e7cb133e906c70891ba1a0495ed860 Validity Not Before: Jan 1 04:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d67187ee756fdf0a361c343dc7e34ef17bde7da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b1:84:20:0f:66:b5:b5:d6:87:0e:2b:82:ab: 41:8b:fe:e3:fc:5d:e0:10:b7:55:71:f0:c2:da:55: 82:12:0c:7e:98:b7:38:4f:66:de:db:2e:84:27:9c: 26:ae:d4:39:1a:a6:27:5d:d8:e8:ca:b2:8a:7c:6f: 84:32:10:bd:ea:93:13:82:a7:9c:9b:58:a5:11:ba: fc:fb:bd:25:42:ae:43:fa:f2:ab:dd:bd:88:7f:b4: 0d:4d:57:b1:34:14:a9:c0:8b:f0:9a:cb:ec:f1:ac: 1d:fe:08:d5:77:6a:28:1c:ac:ba:48:59:42:9c:45: 5a:1b:47:fe:06:32:c2:60:65:4b:a1:a2:1b:13:69: 41:60:f8:d7:df:df:f0:a8:34:87:20:7d:64:a4:7d: 11:7f:8a:9b:01:e5:bd:47:2c:9c:27:31:32:38:58: 1f:5f:05:dd:ad:0e:a3:2e:92:62:0a:1a:ef:c4:2c: a4:76:8d:ca:e0:d1:e5:7e:2e:4f:ba:c1:bd:12:4a: ea:a8:e6:81:31:6b:73:85:e9:61:98:67:ef:30:0f: 0a:ed:0c:00:99:ae:03:61:a0:c1:f4:9c:3e:29:29: ca:93:0d:16:24:77:ff:ec:4c:20:fa:dd:02:1e:2c: 37:93:a6:39:14:43:88:da:40:68:ba:e7:3b:f0:a7: 6e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:67:18:7E:E7:56:FD:F0:A3:61:C3:43:DC:7E:34:EF:17:BD:E7:DA X509v3 Authority Key Identifier: keyid:3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/XWcYfudW_fCjYcND3H407xe959o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.185.208.0/22 185.240.76.0-185.240.78.255 Signature Algorithm: sha256WithRSAEncryption 06:38:95:09:58:09:07:14:e9:f4:b9:d5:25:58:1b:ae:b0:c7: 7d:50:a3:bf:e5:70:b3:0c:18:c7:d3:56:d0:0f:c9:bb:0b:e6: 89:de:29:52:a5:59:fc:cc:17:ac:b6:67:ba:ff:03:6a:43:6f: 03:51:33:c5:7e:4d:a4:11:12:aa:7f:65:7e:28:2b:9b:ae:6c: cb:fd:a4:c8:ad:8e:95:ed:09:84:ea:8b:ab:75:da:8a:14:45: fa:dd:58:7d:3e:48:55:c9:95:4f:84:d7:c2:de:2c:ab:b3:a3: 5a:64:3f:04:35:91:2c:02:59:19:ff:78:0b:7c:ef:e8:1f:a3: f5:f2:41:92:72:6a:8c:ad:65:e6:77:54:85:f3:63:e6:48:a7: 95:31:09:2f:0a:a6:b8:67:48:e1:61:91:4f:82:e4:cc:72:97: b3:c6:fe:b3:60:e5:f8:2d:8f:f8:d3:49:89:eb:ee:b9:f9:ec: 22:1d:ab:32:00:0d:96:f1:10:84:00:c0:41:0a:bf:f7:f0:08: 7c:12:ef:d5:b1:41:c4:23:e3:8c:be:bf:de:81:db:38:0d:08: c4:06:5c:01:11:13:9c:3d:96:4c:ea:00:34:6d:22:b3:e7:d4: 5a:cd:36:ad:71:4e:95:3d:52:20:90:89:62:e6:88:1d:bc:f0: e7:20:d2:2b -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt3xvGO3Xp+LGHVKKcnb0+0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMzQ4ODkyNTFlN2NiMTMzZTkwNmM3MDg5MWJhMWEwNDk1 ZWQ4NjAwHhcNMjYwMTAxMDQxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDY3MTg3ZWU3NTZmZGYwYTM2MWMzNDNkYzdlMzRlZjE3YmRlN2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37GEIA9mtbXWhw4rgqtBi/7j/F3g ELdVcfDC2lWCEgx+mLc4T2be2y6EJ5wmrtQ5GqYnXdjoyrKKfG+EMhC96pMTgqec m1ilEbr8+70lQq5D+vKr3b2If7QNTVexNBSpwIvwmsvs8awd/gjVd2ooHKy6SFlC nEVaG0f+BjLCYGVLoaIbE2lBYPjX39/wqDSHIH1kpH0Rf4qbAeW9RyycJzEyOFgf XwXdrQ6jLpJiChrvxCykdo3K4NHlfi5PusG9EkrqqOaBMWtzhelhmGfvMA8K7QwA ma4DYaDB9Jw+KSnKkw0WJHf/7Ewg+t0CHiw3k6Y5FEOI2kBouuc78KduvwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFF1nGH7nVv3wo2HDQ9x+NO8XvefaMB8GA1UdIwQY MBaAFDo0iJJR58sTPpBscIkboaBJXthgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2pTSWtsSG55eE0ta0d4d2lSdWhvRWxlMkdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS85MTE4MmEtZjM0Yi00YTE1LWIzNjMt ODRmOWVkODdhYzMxLzEvWFdjWWZ1ZFdfZkNqWWNORDNINDA3eGU5NTlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS85MTE4MmEtZjM0Yi00YTE1LWIzNjMtODRmOWVkODdhYzMx LzEvT2pTSWtsSG55eE0ta0d4d2lSdWhvRWxlMkdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCubnQMAwD BAK58EwDBAC58E4wDQYJKoZIhvcNAQELBQADggEBAAY4lQlYCQcU6fS51SVYG66w x31Qo7/lcLMMGMfTVtAPybsL5oneKVKlWfzMF6y2Z7r/A2pDbwNRM8V+TaQREqp/ ZX4oK5uubMv9pMitjpXtCYTqi6t12ooURfrdWH0+SFXJlU+E18LeLKuzo1pkPwQ1 kSwCWRn/eAt87+gfo/XyQZJyaoytZeZ3VIXzY+ZIp5UxCS8KprhnSOFhkU+C5Mxy l7PG/rNg5fgtj/jTSYnr7rn57CIdqzIADZbxEIQAwEEKv/fwCHwS79WxQcQj44y+ v96B2zgNCMQGXAERE5w9lkzqADRtIrPn1FrNNq1xTpU9UiCQiWLmiB288Ocg0is= -----END CERTIFICATE-----Generated at Mon Jan 19 20:37:40 2026 by rpki-client