This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/xkqTLe723JYQEXtXfkhbeU-dejg.roa File: xkqTLe723JYQEXtXfkhbeU-dejg.roa (raw, json) Hash identifier: fJSR5ceUT9TwBgIlhR1vgdrQUPGf/keafHAkjWeakbg= Subject key identifier: C6:4A:93:2D:EE:F6:DC:96:10:11:7B:57:7E:48:5B:79:4F:9D:7A:38 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019B797ED329ACD06A11E9C5FD185FCD1765 Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/xkqTLe723JYQEXtXfkhbeU-dejg.roa Signing time: Thu 01 Jan 2026 12:18:33 +0000 ROA not before: Thu 01 Jan 2026 12:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199565 IP address blocks: 188.255.146.0/24 maxlen: 24 188.255.169.0/24 maxlen: 24 188.255.173.0/24 maxlen: 24 188.255.184.0/24 maxlen: 24 188.255.221.0/24 maxlen: 24 188.255.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d3:29:ac:d0:6a:11:e9:c5:fd:18:5f:cd:17:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Jan 1 12:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c64a932deef6dc9610117b577e485b794f9d7a38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:64:bc:48:3d:bd:83:62:79:a9:13:d5:6d:bc: af:d2:9a:c9:f7:45:5f:c1:72:ae:14:b1:1a:54:b8: e2:d7:0e:a1:ec:10:96:a2:78:a5:ff:16:e7:bd:cb: 1a:1c:7d:0a:bf:0c:99:d3:a3:72:b7:74:40:fd:29: 43:43:c2:af:aa:77:5b:40:a7:75:54:ae:73:a0:e5: 46:48:16:bf:10:dc:8f:e3:0c:fd:2c:43:85:6d:db: f5:6a:09:37:58:14:41:96:a9:65:a4:1a:2f:6a:ee: 31:dd:f2:78:82:77:8f:1f:07:9f:34:a4:db:e9:c8: 60:7a:75:a4:6f:5d:9d:d7:25:68:1e:a9:70:36:dc: 61:22:02:29:fa:c6:cf:84:f4:f4:08:99:6b:3d:8c: 3c:d1:b0:b2:d3:5d:9c:aa:46:41:da:d3:23:1e:f8: f7:8f:a8:9f:34:0d:17:c0:45:cd:6d:6e:a4:2a:45: 6b:3f:8f:f8:19:77:02:b3:2f:4b:93:8a:d5:a4:87: f9:fb:e7:4e:61:55:b1:46:ff:7d:df:db:50:a5:b6: c5:98:a0:9d:20:61:d8:ee:b3:e0:68:05:34:d7:ca: 0a:69:7d:78:07:7a:b5:ce:73:9e:47:6c:51:8a:04: 09:1b:92:d6:9d:b2:1c:8f:76:8e:d0:81:5f:b3:f7: 99:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:4A:93:2D:EE:F6:DC:96:10:11:7B:57:7E:48:5B:79:4F:9D:7A:38 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/xkqTLe723JYQEXtXfkhbeU-dejg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.255.146.0/24 188.255.169.0/24 188.255.173.0/24 188.255.184.0/24 188.255.221.0/24 188.255.224.0/24 Signature Algorithm: sha256WithRSAEncryption 38:18:e5:94:b3:d7:a8:c2:cb:a5:6f:ee:fb:11:bc:37:e4:8b: 13:c6:49:4a:c7:6d:0f:69:e8:05:b9:d3:50:c8:60:14:a4:e1: 14:56:66:4a:b3:f8:1d:dc:1b:9a:fe:21:36:b4:96:b8:13:83: c9:1c:ed:76:2e:00:c7:f3:b4:db:4a:9b:55:8e:86:40:04:91: bd:7d:6c:43:5c:38:85:5f:ac:e3:43:1a:5a:33:f0:a0:15:8b: d8:d5:ba:f3:bf:d9:1c:09:38:61:a3:6f:18:9e:e1:f8:d7:7f: 80:a0:2c:d4:a5:07:55:49:d1:32:9a:ed:12:cf:9f:cb:ab:94: 06:e9:d2:80:69:b7:2d:99:09:fe:ce:33:c7:b0:cb:3a:74:b2: 7e:6b:44:8c:5e:98:51:c9:b7:ea:85:29:e7:9d:01:18:49:e0: 46:ff:2a:53:b1:08:30:c0:db:9d:52:d0:de:cc:2b:52:67:6c: 3b:77:77:3c:ce:63:7b:97:59:9a:ef:30:be:1a:9b:28:94:1d: a3:8f:46:46:00:f2:de:ce:58:08:4c:2c:e3:38:97:c4:b6:27: 36:29:4d:bf:90:4e:bf:56:ec:34:a4:12:7c:95:89:12:a8:61: 97:1d:f8:7e:c1:1e:2c:43:7c:a4:45:88:39:e0:f6:6b:3c:20: df:09:f9:59 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt5ftMprNBqEenF/RhfzRdlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjYwMTAxMTIxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjRhOTMyZGVlZjZkYzk2MTAxMTdiNTc3ZTQ4NWI3OTRmOWQ3YTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mS8SD29g2J5qRPVbbyv0prJ90Vf wXKuFLEaVLji1w6h7BCWonil/xbnvcsaHH0KvwyZ06Nyt3RA/SlDQ8KvqndbQKd1 VK5zoOVGSBa/ENyP4wz9LEOFbdv1agk3WBRBlqllpBovau4x3fJ4gnePHwefNKTb 6chgenWkb12d1yVoHqlwNtxhIgIp+sbPhPT0CJlrPYw80bCy012cqkZB2tMjHvj3 j6ifNA0XwEXNbW6kKkVrP4/4GXcCsy9Lk4rVpIf5++dOYVWxRv9939tQpbbFmKCd IGHY7rPgaAU018oKaX14B3q1znOeR2xRigQJG5LWnbIcj3aO0IFfs/eZ0QIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFMZKky3u9tyWEBF7V35IW3lPnXo4MB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEveGtxVExlNzIzSllRRVh0WGZraGJlVS1kZWpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAvP+SAwQA vP+pAwQAvP+tAwQAvP+4AwQAvP/dAwQAvP/gMA0GCSqGSIb3DQEBCwUAA4IBAQA4 GOWUs9eowsulb+77Ebw35IsTxklKx20PaegFudNQyGAUpOEUVmZKs/gd3Bua/iE2 tJa4E4PJHO12LgDH87TbSptVjoZABJG9fWxDXDiFX6zjQxpaM/CgFYvY1brzv9kc CThho28YnuH413+AoCzUpQdVSdEymu0Sz5/Lq5QG6dKAabctmQn+zjPHsMs6dLJ+ a0SMXphRybfqhSnnnQEYSeBG/ypTsQgwwNudUtDezCtSZ2w7d3c8zmN7l1ma7zC+ GpsolB2jj0ZGAPLezlgITCzjOJfEtic2KU2/kE6/Vuw0pBJ8lYkSqGGXHfh+wR4s Q3ykRYg54PZrPCDfCflZ -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:04 2026 by rpki-client