This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/xgkVb7jGmrVMuFNZV5uC54rwBLc.roa File: xgkVb7jGmrVMuFNZV5uC54rwBLc.roa (raw, json) Hash identifier: U7zPiRVnuj8K+WrtUv0kblwys87NbJBaEKGAwaoWJcc= Subject key identifier: C6:09:15:6F:B8:C6:9A:B5:4C:B8:53:59:57:9B:82:E7:8A:F0:04:B7 Certificate issuer: /CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908 Certificate serial: 019B7C804C22C033E539C811C5D9E63C21B0 Authority key identifier: B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/xgkVb7jGmrVMuFNZV5uC54rwBLc.roa Signing time: Fri 02 Jan 2026 02:19:01 +0000 ROA not before: Fri 02 Jan 2026 02:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209093 IP address blocks: 185.243.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.crl rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:4c:22:c0:33:e5:39:c8:11:c5:d9:e6:3c:21:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908 Validity Not Before: Jan 2 02:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c609156fb8c69ab54cb85359579b82e78af004b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7c:72:25:16:61:8a:fe:e4:34:94:bf:0f:be: 9c:c9:82:db:5c:da:04:c7:89:60:fb:3d:25:64:ef: 92:a2:21:95:15:89:9d:aa:4f:2a:04:93:44:49:fb: 90:5e:4e:42:d7:8a:05:61:a5:92:4c:5f:f5:6b:9b: 08:6d:22:64:2c:6f:e1:ac:8b:3e:9d:6f:f0:50:51: cb:31:a3:0b:f7:cf:83:d4:6f:a0:82:b3:90:ee:a5: d9:ad:4b:a6:e0:ca:3b:f0:4b:a2:9b:fc:b3:51:39: c1:c3:99:02:8d:0c:a2:84:28:c2:76:49:a4:cd:86: 80:f0:d5:d0:75:7e:88:82:49:0b:9f:d6:2f:37:be: bc:29:fa:88:1e:ef:0c:93:a5:16:f1:43:15:19:82: 40:bd:74:b3:3b:83:62:d3:af:85:4c:04:a6:2b:b0: 3d:1c:c8:92:a9:2c:ac:a6:2a:bc:89:c7:fe:6f:6e: 4b:8e:94:ce:93:d5:59:90:67:bb:15:bc:04:91:6d: 86:d0:96:3f:2f:d6:3d:cc:1c:1f:0e:a1:0e:c9:61: 52:e5:c4:84:cb:69:31:01:52:41:e7:7c:0d:7a:39: 34:b0:dc:26:96:80:70:3c:97:71:59:77:a0:e6:5b: ec:da:b3:ef:67:d7:39:c0:f5:ec:6e:84:22:d2:ab: 06:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:09:15:6F:B8:C6:9A:B5:4C:B8:53:59:57:9B:82:E7:8A:F0:04:B7 X509v3 Authority Key Identifier: keyid:B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/xgkVb7jGmrVMuFNZV5uC54rwBLc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.243.21.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:43:da:77:45:96:90:6e:ee:ab:ad:60:aa:55:e7:cc:f9:e2: be:69:22:7a:20:76:da:ae:b0:49:23:0b:16:f3:d5:52:1c:ef: 1e:db:17:4d:37:ac:67:0c:58:b6:06:7d:82:8d:3a:8d:c8:a4: 20:45:2d:c1:af:22:70:51:43:7b:cd:7d:cb:66:28:fa:68:c1: 89:b8:53:c4:da:fd:5b:5e:5e:f2:0b:7a:7e:35:e9:4c:ae:b7: f4:b7:2d:c3:70:12:99:49:b1:f5:3b:eb:fc:44:0b:95:8a:c5: 2b:ac:a7:c3:81:90:ee:7e:a2:fa:1c:b5:51:55:e6:63:67:b6: 8c:cd:b0:cf:e2:ef:b7:89:5c:2e:9b:9c:11:40:cf:12:1a:04: 82:5e:f1:6b:51:e6:46:c7:10:6d:ed:62:fd:3a:3c:96:11:5c: f6:ff:ca:0c:ff:40:19:45:c0:74:5b:08:b7:f7:a9:e0:18:79: 6c:56:39:53:80:09:3a:47:b6:86:57:66:da:3b:f0:b6:4b:2a: c8:85:b2:ec:d0:f5:14:5e:fb:24:ca:b1:41:36:83:1f:c2:82: 0c:3a:bd:08:5d:99:b9:61:e0:10:66:eb:a2:14:9a:64:15:dd: ee:6e:1b:cc:e0:45:9a:6c:2c:48:f4:95:52:30:ab:34:f0:98: c7:de:0f:08 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gEwiwDPlOcgRxdnmPCGwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNWEwNjA0ZTc2ODc2ZmEwM2U2YWQ4Njg3ZmExZGI2YzYz ZDM5MDgwHhcNMjYwMTAyMDIxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjA5MTU2ZmI4YzY5YWI1NGNiODUzNTk1NzliODJlNzhhZjAwNGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXxyJRZhiv7kNJS/D76cyYLbXNoE x4lg+z0lZO+SoiGVFYmdqk8qBJNESfuQXk5C14oFYaWSTF/1a5sIbSJkLG/hrIs+ nW/wUFHLMaML98+D1G+ggrOQ7qXZrUum4Mo78Euim/yzUTnBw5kCjQyihCjCdkmk zYaA8NXQdX6IgkkLn9YvN768KfqIHu8Mk6UW8UMVGYJAvXSzO4Ni06+FTASmK7A9 HMiSqSyspiq8icf+b25LjpTOk9VZkGe7FbwEkW2G0JY/L9Y9zBwfDqEOyWFS5cSE y2kxAVJB53wNejk0sNwmloBwPJdxWXeg5lvs2rPvZ9c5wPXsboQi0qsGGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMYJFW+4xpq1TLhTWVebgueK8AS3MB8GA1UdIwQY MBaAFLBaBgTnaHb6A+athof6HbbGPTkIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0ZvR0JPZG9kdm9ENXEyR2hfb2R0c1k5T1FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi84MWFhNDktOGI0YS00YzI4LWE1Nzgt YTYwNTcxN2QzNGFlLzEveGdrVmI3akdtclZNdUZOWlY1dUM1NHJ3QkxjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi84MWFhNDktOGI0YS00YzI4LWE1NzgtYTYwNTcxN2QzNGFl LzEvc0ZvR0JPZG9kdm9ENXEyR2hfb2R0c1k5T1FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufMVMA0G CSqGSIb3DQEBCwUAA4IBAQCLQ9p3RZaQbu6rrWCqVefM+eK+aSJ6IHbarrBJIwsW 89VSHO8e2xdNN6xnDFi2Bn2CjTqNyKQgRS3BryJwUUN7zX3LZij6aMGJuFPE2v1b Xl7yC3p+NelMrrf0ty3DcBKZSbH1O+v8RAuVisUrrKfDgZDufqL6HLVRVeZjZ7aM zbDP4u+3iVwum5wRQM8SGgSCXvFrUeZGxxBt7WL9OjyWEVz2/8oM/0AZRcB0Wwi3 96ngGHlsVjlTgAk6R7aGV2baO/C2SyrIhbLs0PUUXvskyrFBNoMfwoIMOr0IXZm5 YeAQZuuiFJpkFd3ubhvM4EWabCxI9JVSMKs08JjH3g8I -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:07 2026 by rpki-client