This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/XXKVsIY0HbIJymCv56HgZpurwFA.roa File: XXKVsIY0HbIJymCv56HgZpurwFA.roa (raw, json) Hash identifier: Sk/E2nAzU4UxwMsd952VhcruaPuVHKtKy3ii+1Myr2Q= Subject key identifier: 5D:72:95:B0:86:34:1D:B2:09:CA:60:AF:E7:A1:E0:66:9B:AB:C0:50 Certificate issuer: /CN=f08710e6e24e6d69bd5c44afeaf0ee9c67ed3a06 Certificate serial: 019B7CEE1DEC7EA6C34DCC087254B603FBF5 Authority key identifier: F0:87:10:E6:E2:4E:6D:69:BD:5C:44:AF:EA:F0:EE:9C:67:ED:3A:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/XXKVsIY0HbIJymCv56HgZpurwFA.roa Signing time: Fri 02 Jan 2026 04:18:58 +0000 ROA not before: Fri 02 Jan 2026 04:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21231 IP address blocks: 80.92.32.0/23 maxlen: 23 80.92.34.0/23 maxlen: 23 80.92.36.0/23 maxlen: 23 80.92.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:1d:ec:7e:a6:c3:4d:cc:08:72:54:b6:03:fb:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f08710e6e24e6d69bd5c44afeaf0ee9c67ed3a06 Validity Not Before: Jan 2 04:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d7295b086341db209ca60afe7a1e0669babc050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ae:6f:f6:df:fa:c3:75:76:c7:df:4d:19:80: c1:0f:de:ed:38:ee:12:08:04:ae:ed:be:ca:0c:c0: bf:89:e2:d4:93:83:e7:dd:e9:bd:51:76:d7:69:36: 88:5f:4b:54:f5:bf:b7:fc:6b:aa:91:e9:19:02:af: 71:dd:38:94:90:9c:1f:22:c0:75:0b:42:97:ee:75: 7c:7e:86:c8:ec:c5:f7:0e:96:32:20:d3:41:55:e0: e4:f9:2a:67:59:46:7d:f1:3b:c0:2a:0e:5a:77:6b: 8e:e9:0e:9f:35:07:9d:a4:9d:1b:36:f7:86:c8:cc: d0:e6:b4:a8:ee:10:51:75:1e:19:31:00:87:72:86: 1c:30:75:ec:6c:96:2d:8b:ce:03:13:d7:32:01:45: 37:5f:ae:8c:a7:7c:54:62:ec:7f:7c:6a:7b:fa:63: 61:e4:46:41:d6:1e:97:ad:f5:93:d9:d9:48:04:8e: 16:93:67:9f:09:44:c1:03:d0:27:30:6a:03:1b:ac: 00:33:04:c3:90:9b:c8:7c:d3:30:18:05:09:67:02: 6e:cc:71:27:31:33:42:49:d9:b7:2b:15:bc:c6:f6: 77:47:8d:8e:2b:10:b0:b5:23:97:e4:25:d3:55:3b: 43:e3:fb:b3:9a:12:cb:1c:c8:0e:5a:c5:7b:07:aa: cc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:72:95:B0:86:34:1D:B2:09:CA:60:AF:E7:A1:E0:66:9B:AB:C0:50 X509v3 Authority Key Identifier: keyid:F0:87:10:E6:E2:4E:6D:69:BD:5C:44:AF:EA:F0:EE:9C:67:ED:3A:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/XXKVsIY0HbIJymCv56HgZpurwFA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.92.32.0-80.92.37.255 80.92.39.0/24 Signature Algorithm: sha256WithRSAEncryption 84:f4:2f:1e:6e:96:54:ec:56:de:76:86:1a:36:26:6d:d7:ec: 21:1b:9b:2b:89:0c:b5:8b:31:74:15:e2:08:5a:8c:9f:24:48: 7b:f5:6e:af:33:97:57:11:3a:cb:e1:eb:33:7b:2b:8b:69:4c: 90:7d:61:74:f2:d8:76:a4:33:3a:46:fa:cd:fa:38:36:34:c3: 3b:e2:8c:6d:de:66:73:61:d0:1a:66:39:2d:c9:eb:4b:56:10: 30:56:fd:09:0a:be:6f:db:ef:62:79:79:2b:83:ad:a7:2f:99: 2a:14:1a:a1:06:09:9d:92:c5:d5:c1:5b:fe:45:3f:b8:03:89: 9c:68:e7:a4:4d:71:98:a0:01:69:6d:0e:e6:4d:9e:d4:3c:e1: 7b:0f:fc:a8:86:ac:d2:87:a3:71:9a:9d:9f:8d:8e:ce:83:1e: cd:58:c1:1d:b1:5b:69:62:53:82:73:3b:79:57:b2:34:86:85: 97:48:31:30:ec:33:b1:3a:c0:bd:05:df:16:11:8b:fb:cf:c1: e5:0e:42:0b:c8:26:23:15:bf:36:9b:89:ab:e4:06:63:51:41: 89:b7:8d:0c:11:2d:b8:9e:c5:92:98:95:ac:98:65:a4:65:a3: 5b:f0:dc:e6:85:2a:59:4c:5e:85:b3:99:80:40:a0:cc:99:a2: 18:65:43:20 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt87h3sfqbDTcwIclS2A/v1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwODcxMGU2ZTI0ZTZkNjliZDVjNDRhZmVhZjBlZTljNjdl ZDNhMDYwHhcNMjYwMTAyMDQxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDcyOTViMDg2MzQxZGIyMDljYTYwYWZlN2ExZTA2NjliYWJjMDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnq5v9t/6w3V2x99NGYDBD97tOO4S CASu7b7KDMC/ieLUk4Pn3em9UXbXaTaIX0tU9b+3/GuqkekZAq9x3TiUkJwfIsB1 C0KX7nV8fobI7MX3DpYyINNBVeDk+SpnWUZ98TvAKg5ad2uO6Q6fNQedpJ0bNveG yMzQ5rSo7hBRdR4ZMQCHcoYcMHXsbJYti84DE9cyAUU3X66Mp3xUYux/fGp7+mNh 5EZB1h6XrfWT2dlIBI4Wk2efCUTBA9AnMGoDG6wAMwTDkJvIfNMwGAUJZwJuzHEn MTNCSdm3KxW8xvZ3R42OKxCwtSOX5CXTVTtD4/uzmhLLHMgOWsV7B6rMewIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFF1ylbCGNB2yCcpgr+eh4Gabq8BQMB8GA1UdIwQY MBaAFPCHEObiTm1pvVxEr+rw7pxn7ToGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEljUTV1Sk9iV205WEVTdjZ2RHVuR2Z0T2dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi83YmJhZDQtZTE1YS00YmZkLWFiMzIt NzZlODY1ZTJjNGJkLzEvWFhLVnNJWTBIYklKeW1DdjU2SGdacHVyd0ZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi83YmJhZDQtZTE1YS00YmZkLWFiMzItNzZlODY1ZTJjNGJk LzEvOEljUTV1Sk9iV205WEVTdjZ2RHVuR2Z0T2dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAVQXCAD BAFQXCQDBABQXCcwDQYJKoZIhvcNAQELBQADggEBAIT0Lx5ullTsVt52hho2Jm3X 7CEbmyuJDLWLMXQV4ghajJ8kSHv1bq8zl1cROsvh6zN7K4tpTJB9YXTy2HakMzpG +s36ODY0wzvijG3eZnNh0BpmOS3J60tWEDBW/QkKvm/b72J5eSuDracvmSoUGqEG CZ2SxdXBW/5FP7gDiZxo56RNcZigAWltDuZNntQ84XsP/KiGrNKHo3GanZ+Njs6D Hs1YwR2xW2liU4JzO3lXsjSGhZdIMTDsM7E6wL0F3xYRi/vPweUOQgvIJiMVvzab iavkBmNRQYm3jQwRLbiexZKYlayYZaRlo1vw3OaFKllMXoWzmYBAoMyZohhlQyA= -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:06 2026 by rpki-client