This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/xd4uF5A-A5iD95Zuer1EQgUg4c4.roa File: xd4uF5A-A5iD95Zuer1EQgUg4c4.roa (raw, json) Hash identifier: zL8osWE5mYbHuTzixEhig2aehz5wUK5OJXXALOyQ/Ns= Subject key identifier: C5:DE:2E:17:90:3E:03:98:83:F7:96:6E:7A:BD:44:42:05:20:E1:CE Certificate issuer: /CN=84106bfa023f17cf6d67eac9fdd2868a72f76680 Certificate serial: 019B79ECE9D2CABC197E5C594E696AE8ACEB Authority key identifier: 84:10:6B:FA:02:3F:17:CF:6D:67:EA:C9:FD:D2:86:8A:72:F7:66:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/xd4uF5A-A5iD95Zuer1EQgUg4c4.roa Signing time: Thu 01 Jan 2026 14:18:48 +0000 ROA not before: Thu 01 Jan 2026 14:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50370 IP address blocks: 195.114.24.0/23 maxlen: 24 2001:67c:6a4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.crl rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft rsync://rpki.ripe.net/repository/DEFAULT/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:e9:d2:ca:bc:19:7e:5c:59:4e:69:6a:e8:ac:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84106bfa023f17cf6d67eac9fdd2868a72f76680 Validity Not Before: Jan 1 14:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5de2e17903e039883f7966e7abd44420520e1ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9c:a9:05:a6:22:40:c4:d8:1f:9d:30:69:f0: 5d:ca:99:e9:07:8f:87:46:09:1e:9f:26:46:09:49: 43:cf:4d:7b:60:e1:89:99:dd:cf:b7:33:a0:b2:e6: fc:47:6c:f6:ed:02:59:43:b6:3e:63:28:bd:22:e3: a6:d5:b8:85:77:05:12:b7:04:e6:22:16:27:00:98: b0:85:d3:a6:f8:30:c3:50:cb:de:6e:16:36:7b:f3: 6c:1d:d8:54:dc:f5:34:e2:63:af:de:1f:e5:37:38: cc:fb:d2:ae:de:86:f4:89:8a:1e:91:17:1d:7c:61: 3b:7e:2a:fb:7f:fd:30:89:86:d1:f5:db:c0:e1:e3: 01:91:ca:4a:c7:52:4f:4f:03:1e:f8:e0:45:be:50: 98:b2:18:9a:89:e5:65:a1:bd:be:c1:c4:40:80:15: 10:e9:19:d0:9e:c5:dd:c2:69:c6:a4:f3:cd:41:08: 33:e8:5b:06:87:84:c4:08:4c:ae:2b:06:04:6f:97: 77:95:e4:01:bf:2e:54:3d:bd:0d:c4:a4:9c:35:f0: eb:c1:a9:0a:ba:f9:29:0d:00:2d:d2:75:43:c4:40: 7d:09:6b:40:7b:9b:cf:d2:14:8d:8d:16:ff:2b:4d: fd:3e:3d:3f:a2:63:95:0e:4e:be:de:0f:c3:f8:e9: 31:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:DE:2E:17:90:3E:03:98:83:F7:96:6E:7A:BD:44:42:05:20:E1:CE X509v3 Authority Key Identifier: keyid:84:10:6B:FA:02:3F:17:CF:6D:67:EA:C9:FD:D2:86:8A:72:F7:66:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/xd4uF5A-A5iD95Zuer1EQgUg4c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.114.24.0/23 IPv6: 2001:67c:6a4::/48 Signature Algorithm: sha256WithRSAEncryption ad:62:02:c1:77:f4:a6:80:4c:d1:48:ff:7f:da:bd:8d:b0:f1: d7:02:cf:6d:f7:40:5d:d9:eb:0d:d8:21:70:30:e1:a4:97:b9: fe:0d:c1:fb:aa:2f:73:41:f1:58:be:13:41:f7:d9:8b:e3:d2: bb:1a:46:2b:31:76:c4:c7:85:6e:6c:ef:f5:c6:91:fe:50:b9: 40:e1:0c:a3:d9:a7:6d:e6:5f:6b:e1:3c:8b:07:03:20:3a:88: 31:79:14:0b:17:b1:aa:bd:e8:20:43:58:9b:8c:97:8c:99:ca: ed:ee:ed:02:36:61:dd:66:04:5d:18:54:79:83:90:e3:81:62: 00:4a:46:66:14:be:30:44:e9:02:4e:77:34:be:d2:6e:20:ff: 41:7d:14:0c:3d:0c:78:59:56:3a:fa:01:9e:d4:dd:1f:13:a1: 69:cc:7c:b1:62:fd:70:38:b3:00:6f:84:10:03:89:e6:ae:cb: 0e:7d:bd:a1:32:2a:29:07:85:6f:77:82:ee:dd:7d:fb:0a:79: 5a:c6:b4:03:59:84:7b:2d:c5:46:4b:86:8d:ef:11:da:ff:57: 54:88:83:e3:04:31:69:fc:31:69:02:9e:b4:5a:f1:a0:eb:0c: 7e:53:43:8b:c0:47:5b:49:91:97:50:22:d7:4c:aa:ea:2d:ae: 89:ee:25:af -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt57OnSyrwZflxZTmlq6KzrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0MTA2YmZhMDIzZjE3Y2Y2ZDY3ZWFjOWZkZDI4NjhhNzJm NzY2ODAwHhcNMjYwMTAxMTQxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNWRlMmUxNzkwM2UwMzk4ODNmNzk2NmU3YWJkNDQ0MjA1MjBlMWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5ypBaYiQMTYH50wafBdypnpB4+H RgkenyZGCUlDz017YOGJmd3PtzOgsub8R2z27QJZQ7Y+Yyi9IuOm1biFdwUStwTm IhYnAJiwhdOm+DDDUMvebhY2e/NsHdhU3PU04mOv3h/lNzjM+9Ku3ob0iYoekRcd fGE7fir7f/0wiYbR9dvA4eMBkcpKx1JPTwMe+OBFvlCYshiaieVlob2+wcRAgBUQ 6RnQnsXdwmnGpPPNQQgz6FsGh4TECEyuKwYEb5d3leQBvy5UPb0NxKScNfDrwakK uvkpDQAt0nVDxEB9CWtAe5vP0hSNjRb/K039Pj0/omOVDk6+3g/D+OkxIQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFMXeLheQPgOYg/eWbnq9REIFIOHOMB8GA1UdIwQY MBaAFIQQa/oCPxfPbWfqyf3Shopy92aAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEJCci1nSV9GODl0Wi1ySl9kS0dpbkwzWm9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83ZWIyOTMtOGU3Ni00NzBmLTg1NWYt YjYyNmQ1NzQ2ZDEzLzEveGQ0dUY1QS1BNWlEOTVadWVyMUVRZ1VnNGM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy83ZWIyOTMtOGU3Ni00NzBmLTg1NWYtYjYyNmQ1NzQ2ZDEz LzEvaEJCci1nSV9GODl0Wi1ySl9kS0dpbkwzWm9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBw3IYMA8E AgACMAkDBwAgAQZ8BqQwDQYJKoZIhvcNAQELBQADggEBAK1iAsF39KaATNFI/3/a vY2w8dcCz233QF3Z6w3YIXAw4aSXuf4NwfuqL3NB8Vi+E0H32Yvj0rsaRisxdsTH hW5s7/XGkf5QuUDhDKPZp23mX2vhPIsHAyA6iDF5FAsXsaq96CBDWJuMl4yZyu3u 7QI2Yd1mBF0YVHmDkOOBYgBKRmYUvjBE6QJOdzS+0m4g/0F9FAw9DHhZVjr6AZ7U 3R8ToWnMfLFi/XA4swBvhBADieauyw59vaEyKikHhW93gu7dffsKeVrGtANZhHst xUZLho3vEdr/V1SIg+MEMWn8MWkCnrRa8aDrDH5TQ4vAR1tJkZdQItdMquotronu Ja8= -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:30 2026 by rpki-client