This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/XSpwiywulPZo2LrgiSZYYhXMcR4.roa File: XSpwiywulPZo2LrgiSZYYhXMcR4.roa (raw, json) Hash identifier: z7vOCQZCBzqb25QDKFWBBduXWtXh66EqmXLH85bLl60= Subject key identifier: 5D:2A:70:8B:2C:2E:94:F6:68:D8:BA:E0:89:26:58:62:15:CC:71:1E Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019B797EC6C13DFC8D5B9FC37374A4FB5B94 Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/XSpwiywulPZo2LrgiSZYYhXMcR4.roa Signing time: Thu 01 Jan 2026 12:18:30 +0000 ROA not before: Thu 01 Jan 2026 12:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42831 IP address blocks: 178.219.6.0/24 maxlen: 24 188.255.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c6:c1:3d:fc:8d:5b:9f:c3:73:74:a4:fb:5b:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Jan 1 12:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d2a708b2c2e94f668d8bae08926586215cc711e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b5:76:51:79:05:01:2a:e9:95:a8:d3:86:ec: c6:80:13:a0:40:c5:c1:64:da:39:27:a6:11:39:0a: 1b:b0:60:32:b9:0f:ec:f0:b0:a5:cf:54:09:2f:40: b2:ff:87:06:08:1c:29:07:44:3d:f5:aa:f3:7e:22: 35:13:a9:24:a6:e3:9f:df:13:c6:7f:1e:c2:d5:6c: d7:27:6f:31:2c:41:4c:4e:93:99:27:b8:1a:71:c4: dc:23:40:88:bd:09:1c:7c:3c:4c:4d:6d:b7:9d:ce: 9c:7e:68:ed:0e:68:b4:e4:07:8f:aa:74:b1:1c:71: 30:0e:e2:8d:e8:1e:a6:bb:38:97:b8:94:03:a9:70: 4a:57:e8:c9:1e:e1:67:09:59:de:1f:5d:eb:ca:27: 3d:bc:98:7f:41:06:af:12:1c:d6:d6:19:2c:e4:5d: 89:80:b9:4f:50:d8:e0:b6:54:82:95:e7:31:17:57: 11:3e:39:90:36:e9:e0:99:85:ec:a4:9c:8d:f6:f5: 10:30:17:a1:0e:0d:93:23:83:68:0c:d7:ad:6c:de: d9:65:40:87:1e:b0:79:b0:e7:ad:37:fa:26:89:86: 61:2d:88:ea:eb:92:ba:9c:c4:2f:3c:fc:2c:ab:76: 5d:52:6d:62:0d:b2:32:9d:52:8b:83:d1:e0:a3:41: 29:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:2A:70:8B:2C:2E:94:F6:68:D8:BA:E0:89:26:58:62:15:CC:71:1E X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/XSpwiywulPZo2LrgiSZYYhXMcR4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.219.6.0/24 188.255.212.0/24 Signature Algorithm: sha256WithRSAEncryption 86:86:0a:1b:2b:56:16:12:43:e4:18:18:6d:47:ec:20:60:13: 8c:45:ab:c0:48:49:0c:f5:bc:26:6c:15:d4:98:4b:fd:8e:9d: 4b:dc:8d:92:10:7e:da:9d:cd:b3:f4:77:48:cc:88:fc:f7:d6: ed:03:72:08:0b:2e:35:db:30:02:3e:94:e9:06:f6:5c:61:c2: 90:f1:a0:24:c9:b6:c6:96:72:f9:8f:88:93:52:26:d9:b9:7b: 59:0c:99:2d:5d:b7:fe:5f:9c:a9:ba:32:79:6a:29:70:79:1b: 60:20:5a:c2:ca:68:42:67:47:66:e8:8b:92:78:0a:ad:e9:65: 4f:13:f7:33:20:a0:c7:d0:f4:2e:56:bd:41:16:a7:13:0f:59: 4c:03:4f:42:56:5d:45:91:52:92:d8:0f:f4:b9:56:81:cd:61: 27:57:da:17:49:42:01:5c:14:d3:f7:27:3c:3b:42:ba:c0:2d: 73:dc:87:70:e0:6b:52:f9:1d:0f:b7:e0:d5:44:4f:7b:05:6c: c8:d0:0d:14:ca:ad:bb:00:05:af:63:2a:b1:0b:18:4e:bc:97: c8:1e:a5:13:7f:15:20:4d:a9:69:a4:3d:1d:4c:08:d4:cb:f4: 81:a0:33:5c:d4:6b:8c:fa:ac:31:b0:7a:9e:62:bb:29:17:ee: 6d:c9:b9:a0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fsbBPfyNW5/Dc3Sk+1uUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjYwMTAxMTIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDJhNzA4YjJjMmU5NGY2NjhkOGJhZTA4OTI2NTg2MjE1Y2M3MTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rV2UXkFASrplajThuzGgBOgQMXB ZNo5J6YROQobsGAyuQ/s8LClz1QJL0Cy/4cGCBwpB0Q99arzfiI1E6kkpuOf3xPG fx7C1WzXJ28xLEFMTpOZJ7gaccTcI0CIvQkcfDxMTW23nc6cfmjtDmi05AePqnSx HHEwDuKN6B6muziXuJQDqXBKV+jJHuFnCVneH13ryic9vJh/QQavEhzW1hks5F2J gLlPUNjgtlSClecxF1cRPjmQNungmYXspJyN9vUQMBehDg2TI4NoDNetbN7ZZUCH HrB5sOetN/omiYZhLYjq65K6nMQvPPwsq3ZdUm1iDbIynVKLg9Hgo0EpBwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFF0qcIssLpT2aNi64IkmWGIVzHEeMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvWFNwd2l5d3VsUFpvMkxyZ2lTWllZaFhNY1I0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAstsGAwQA vP/UMA0GCSqGSIb3DQEBCwUAA4IBAQCGhgobK1YWEkPkGBhtR+wgYBOMRavASEkM 9bwmbBXUmEv9jp1L3I2SEH7anc2z9HdIzIj899btA3IICy412zACPpTpBvZcYcKQ 8aAkybbGlnL5j4iTUibZuXtZDJktXbf+X5ypujJ5ailweRtgIFrCymhCZ0dm6IuS eAqt6WVPE/czIKDH0PQuVr1BFqcTD1lMA09CVl1FkVKS2A/0uVaBzWEnV9oXSUIB XBTT9yc8O0K6wC1z3Idw4GtS+R0Pt+DVRE97BWzI0A0Uyq27AAWvYyqxCxhOvJfI HqUTfxUgTalppD0dTAjUy/SBoDNc1GuM+qwxsHqeYrspF+5tybmg -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:05 2026 by rpki-client