This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/xjnYzgBcenqcxEq_xCvUmgvi1LI.roa File: xjnYzgBcenqcxEq_xCvUmgvi1LI.roa (raw, json) Hash identifier: Z9ZiuEMfsOlYoKUCQ/ZjnzpK4neZkRT5jBddWL6d7fM= Subject key identifier: C6:39:D8:CE:00:5C:7A:7A:9C:C4:4A:BF:C4:2B:D4:9A:0B:E2:D4:B2 Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5 Certificate serial: 019B7DCA296B07096AECF90937C1A8814879 Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/xjnYzgBcenqcxEq_xCvUmgvi1LI.roa Signing time: Fri 02 Jan 2026 08:19:19 +0000 ROA not before: Fri 02 Jan 2026 08:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25086 IP address blocks: 62.168.224.0/20 maxlen: 20 62.168.240.0/20 maxlen: 20 81.91.32.0/20 maxlen: 20 81.91.48.0/20 maxlen: 20 85.235.32.0/20 maxlen: 20 85.235.48.0/20 maxlen: 20 93.90.228.0/22 maxlen: 22 93.90.232.0/21 maxlen: 21 94.140.132.0/23 maxlen: 23 94.140.138.0/23 maxlen: 23 94.140.144.0/23 maxlen: 23 94.140.150.0/23 maxlen: 23 95.169.128.0/20 maxlen: 20 95.169.144.0/20 maxlen: 20 109.198.224.0/20 maxlen: 20 109.198.240.0/20 maxlen: 20 141.105.24.0/22 maxlen: 22 213.176.228.0/24 maxlen: 24 213.176.229.0/24 maxlen: 24 213.176.230.0/24 maxlen: 24 213.176.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:29:6b:07:09:6a:ec:f9:09:37:c1:a8:81:48:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5 Validity Not Before: Jan 2 08:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c639d8ce005c7a7a9cc44abfc42bd49a0be2d4b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7b:0c:1c:75:58:c7:8e:8d:d3:a1:e6:56:e0: b1:9c:e4:fa:a0:a8:28:1e:8d:fa:cd:3c:51:50:34: 02:9b:bf:a7:fc:ce:87:96:d3:ce:c5:61:6d:45:13: 01:b2:12:7e:37:6f:b1:dd:24:f1:97:a5:94:2c:52: f0:1f:39:ba:1a:35:f6:72:41:02:8d:5f:80:d0:1d: ff:9a:1f:37:c9:93:81:84:ae:6c:98:e0:8d:e4:89: bc:6d:38:39:26:3e:63:22:0f:80:a2:19:0c:1c:64: 20:0d:20:80:c0:76:0c:99:bc:85:33:24:d6:d1:09: d9:a9:fd:39:3e:29:8f:a8:c8:7c:c8:b9:4f:b5:04: c2:ed:88:ca:df:76:ee:34:df:fe:0a:d3:8b:3a:cf: c4:5d:0d:51:cf:bd:0c:1a:83:58:e7:93:34:b2:e7: 36:96:a3:38:63:1a:30:27:b6:48:1c:8c:29:95:31: 87:9a:5c:09:20:aa:3d:c5:93:4e:ce:ca:19:02:55: 38:2b:87:42:4b:ab:0a:dc:06:7c:d6:5f:bf:3f:05: 10:b8:b2:75:14:94:21:7f:94:24:7f:19:d4:08:d0: d7:a9:18:de:ca:7c:bb:38:be:a2:31:86:17:4d:aa: d1:e4:11:8c:b9:d6:5c:0b:37:23:66:01:e4:49:27: 75:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:39:D8:CE:00:5C:7A:7A:9C:C4:4A:BF:C4:2B:D4:9A:0B:E2:D4:B2 X509v3 Authority Key Identifier: keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/xjnYzgBcenqcxEq_xCvUmgvi1LI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.168.224.0/19 81.91.32.0/19 85.235.32.0/19 93.90.228.0-93.90.239.255 94.140.132.0/23 94.140.138.0/23 94.140.144.0/23 94.140.150.0/23 95.169.128.0/19 109.198.224.0/19 141.105.24.0/22 213.176.228.0/22 Signature Algorithm: sha256WithRSAEncryption 09:7d:20:d0:5d:eb:e5:5e:1e:c1:24:fc:d0:11:16:54:d6:f5: 8e:2b:f2:bc:59:d3:c1:28:84:ff:f2:5d:10:7a:d5:81:1a:62: 3d:b9:92:60:e7:7a:63:82:2c:44:a5:3d:ac:c8:09:d0:20:50: ee:9e:bd:0b:32:50:d4:29:96:67:09:02:6c:79:0b:21:00:b1: fd:80:b1:63:97:69:78:b1:47:3b:f3:6e:39:88:ec:c9:74:54: 38:e1:05:9f:c8:c9:97:e5:af:a8:77:fd:97:66:be:49:34:40: 02:a0:df:2e:65:49:e6:fc:c4:42:32:78:d0:cb:8d:c5:05:a9: 5b:d5:50:22:53:30:de:37:53:b4:28:ef:69:07:a7:e3:97:55: 33:21:aa:35:c3:42:75:71:9f:8b:c2:0a:01:c3:73:63:cc:c9: f8:f5:5c:9c:b0:87:c4:7a:1e:e7:ec:67:9d:48:2f:9a:f8:91: 1c:31:26:99:7f:c3:85:1d:32:3f:03:17:48:af:86:f7:40:f6: f4:c7:e8:68:71:6a:ff:e9:98:0a:4e:04:bf:d7:07:af:9b:4e: 3b:a3:56:cb:0c:46:e0:33:30:bf:61:ef:c5:9b:2c:49:bb:07: 69:a9:6a:4a:d5:dd:f4:52:5c:0e:54:81:df:a1:99:8d:71:8a: db:37:b8:58 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgISAZt9yilrBwlq7PkJN8GogUh5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZmUxYzg1OTQwOWFjNWRlNzQxNGM0OGY4NjczOTkxM2Jl NmI3ZTUwHhcNMjYwMTAyMDgxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjM5ZDhjZTAwNWM3YTdhOWNjNDRhYmZjNDJiZDQ5YTBiZTJkNGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHsMHHVYx46N06HmVuCxnOT6oKgo Ho36zTxRUDQCm7+n/M6HltPOxWFtRRMBshJ+N2+x3STxl6WULFLwHzm6GjX2ckEC jV+A0B3/mh83yZOBhK5smOCN5Im8bTg5Jj5jIg+AohkMHGQgDSCAwHYMmbyFMyTW 0QnZqf05PimPqMh8yLlPtQTC7YjK33buNN/+CtOLOs/EXQ1Rz70MGoNY55M0suc2 lqM4YxowJ7ZIHIwplTGHmlwJIKo9xZNOzsoZAlU4K4dCS6sK3AZ81l+/PwUQuLJ1 FJQhf5QkfxnUCNDXqRjeyny7OL6iMYYXTarR5BGMudZcCzcjZgHkSSd1GwIDAQAB o4ICUzCCAk8wHQYDVR0OBBYEFMY52M4AXHp6nMRKv8Qr1JoL4tSyMB8GA1UdIwQY MBaAFK7+HIWUCaxd50FMSPhnOZE75rflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEt NDI4NDU4Njc5Y2U0LzEveGpuWXpnQmNlbnFjeEVxX3hDdlVtZ3ZpMUxJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEtNDI4NDU4Njc5Y2U0 LzEvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEHAQH/BFowWDBWBAIAATBQAwQFPqjgAwQF UVsgAwQFVesgMAwDBAJdWuQDBARdWuADBAFejIQDBAFejIoDBAFejJADBAFejJYD BAVfqYADBAVtxuADBAKNaRgDBALVsOQwDQYJKoZIhvcNAQELBQADggEBAAl9INBd 6+VeHsEk/NARFlTW9Y4r8rxZ08EohP/yXRB61YEaYj25kmDnemOCLESlPazICdAg UO6evQsyUNQplmcJAmx5CyEAsf2AsWOXaXixRzvzbjmI7Ml0VDjhBZ/IyZflr6h3 /Zdmvkk0QAKg3y5lSeb8xEIyeNDLjcUFqVvVUCJTMN43U7Qo72kHp+OXVTMhqjXD QnVxn4vCCgHDc2PMyfj1XJywh8R6HufsZ51IL5r4kRwxJpl/w4UdMj8DF0ivhvdA 9vTH6Ghxav/pmApOBL/XB6+bTjujVssMRuAzML9h78WbLEm7B2mpakrV3fRSXA5U gd+hmY1xits3uFg= -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:00 2026 by rpki-client