This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/xFZR1KhNDV1PzAY9xdmbUvS30ZQ.roa File: xFZR1KhNDV1PzAY9xdmbUvS30ZQ.roa (raw, json) Hash identifier: jderMKo7UnEWNXFtL+OuCzcx9Nwkg2oJApu/rqD4eTs= Subject key identifier: C4:56:51:D4:A8:4D:0D:5D:4F:CC:06:3D:C5:D9:9B:52:F4:B7:D1:94 Certificate issuer: /CN=9a98febc33e4d517ae3d9ca3e932e2d4ba6885ac Certificate serial: 019B78A2BCD2DB4EC629D212BEA278B2D3FD Authority key identifier: 9A:98:FE:BC:33:E4:D5:17:AE:3D:9C:A3:E9:32:E2:D4:BA:68:85:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpj-vDPk1ReuPZyj6TLi1Lpohaw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/xFZR1KhNDV1PzAY9xdmbUvS30ZQ.roa Signing time: Thu 01 Jan 2026 08:18:09 +0000 ROA not before: Thu 01 Jan 2026 08:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210431 IP address blocks: 185.140.175.0/24 maxlen: 24 2a12:7380::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft rsync://rpki.ripe.net/repository/DEFAULT/mpj-vDPk1ReuPZyj6TLi1Lpohaw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:bc:d2:db:4e:c6:29:d2:12:be:a2:78:b2:d3:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a98febc33e4d517ae3d9ca3e932e2d4ba6885ac Validity Not Before: Jan 1 08:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c45651d4a84d0d5d4fcc063dc5d99b52f4b7d194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b2:7b:b1:43:72:1c:71:6e:b5:4e:d2:cc:fc: 96:26:dd:c4:50:62:6d:9c:92:3f:97:bc:33:81:34: 66:c0:c7:df:71:b1:5b:a8:e3:03:5f:e5:9d:fa:29: ce:15:05:f2:f0:80:d1:89:ed:7d:14:a6:4c:a6:0f: 30:1a:1d:0f:8c:8b:ff:ab:43:d3:e4:17:6d:10:0b: 46:8a:69:c5:4c:23:5f:9b:c6:e0:47:4f:3f:02:42: 3b:de:4d:e2:ed:de:46:ea:f0:bb:3d:f1:5f:9c:ff: d6:7c:f0:f6:02:f8:c2:55:55:f8:e4:4a:cb:c6:36: 8e:12:44:e3:66:b6:be:4e:7c:7a:88:83:47:70:d2: b6:fe:bf:44:c1:69:e9:78:69:87:e9:fa:49:d0:66: d1:0a:5b:e0:99:27:5f:c5:8f:de:5e:80:51:56:e9: e9:8d:28:2c:ee:1a:7a:ee:36:03:81:3a:63:41:c4: 4a:25:5f:9d:88:bb:fc:33:ba:db:16:3d:a9:1b:75: f9:24:67:fe:0c:4c:1c:ca:19:5e:41:98:6b:5b:8d: a6:05:a4:bf:49:6d:b1:ac:80:7c:10:52:6e:ae:6c: a1:25:28:c7:29:7f:5b:49:11:47:96:e3:2a:b7:09: 8f:b6:59:21:98:d9:1f:ab:e7:37:8c:79:a1:7d:61: 1d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:56:51:D4:A8:4D:0D:5D:4F:CC:06:3D:C5:D9:9B:52:F4:B7:D1:94 X509v3 Authority Key Identifier: keyid:9A:98:FE:BC:33:E4:D5:17:AE:3D:9C:A3:E9:32:E2:D4:BA:68:85:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpj-vDPk1ReuPZyj6TLi1Lpohaw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/xFZR1KhNDV1PzAY9xdmbUvS30ZQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.140.175.0/24 IPv6: 2a12:7380::/32 Signature Algorithm: sha256WithRSAEncryption 4f:69:0e:b7:7a:f2:30:f1:9c:30:1c:e7:bd:09:43:50:2e:ab: 32:0d:64:e8:de:1e:55:88:27:fa:df:51:20:dd:40:14:88:b3: b7:81:df:c1:88:be:50:a4:fa:97:47:f2:f1:86:a6:b5:52:dd: b0:3d:cb:eb:fd:8d:6b:06:32:8e:29:69:ee:3b:99:64:dc:82: 30:e6:5e:9d:1c:14:21:27:fe:6e:d1:92:3f:12:f0:34:7c:5f: 64:87:2f:10:fc:ff:19:4c:7b:35:2c:51:f7:e3:94:a5:dc:66: f5:c9:88:68:25:55:0d:a9:58:89:3c:a7:7c:4d:91:5c:08:b7: 54:2c:12:d9:3f:96:b8:ce:71:22:dd:60:1b:04:a2:f5:a4:65: b7:ef:16:f0:bb:0c:77:08:e9:56:57:f8:62:1a:e5:d5:8f:20: 62:d5:8c:2f:58:f4:8e:9e:89:80:7c:94:0a:14:56:ee:b5:36: 04:17:cc:82:76:d9:20:f9:d5:e3:50:87:0e:04:f2:0d:61:cd: 31:07:d3:ae:08:ae:8f:ff:72:91:60:f1:3d:ca:6a:37:66:a8: 19:ce:da:3e:1f:7a:4e:d3:36:d8:49:22:be:e3:8d:dd:87:da: 5d:f4:37:c6:57:2f:e0:82:c6:70:d7:89:00:7a:00:4e:7d:94: 21:c6:c9:6e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4orzS207GKdISvqJ4stP9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhOThmZWJjMzNlNGQ1MTdhZTNkOWNhM2U5MzJlMmQ0YmE2 ODg1YWMwHhcNMjYwMTAxMDgxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDU2NTFkNGE4NGQwZDVkNGZjYzA2M2RjNWQ5OWI1MmY0YjdkMTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7J7sUNyHHFutU7SzPyWJt3EUGJt nJI/l7wzgTRmwMffcbFbqOMDX+Wd+inOFQXy8IDRie19FKZMpg8wGh0PjIv/q0PT 5BdtEAtGimnFTCNfm8bgR08/AkI73k3i7d5G6vC7PfFfnP/WfPD2AvjCVVX45ErL xjaOEkTjZra+Tnx6iINHcNK2/r9EwWnpeGmH6fpJ0GbRClvgmSdfxY/eXoBRVunp jSgs7hp67jYDgTpjQcRKJV+diLv8M7rbFj2pG3X5JGf+DEwcyhleQZhrW42mBaS/ SW2xrIB8EFJurmyhJSjHKX9bSRFHluMqtwmPtlkhmNkfq+c3jHmhfWEdCwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMRWUdSoTQ1dT8wGPcXZm1L0t9GUMB8GA1UdIwQY MBaAFJqY/rwz5NUXrj2co+ky4tS6aIWsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXBqLXZEUGsxUmV1UFp5ajZUTGkxTHBvaGF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS81YzM2ZjctOWZjYS00ODk2LWFiNzIt MDVlN2ZhNjMwYmJjLzEveEZaUjFLaE5EVjFQekFZOXhkbWJVdlMzMFpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS81YzM2ZjctOWZjYS00ODk2LWFiNzItMDVlN2ZhNjMwYmJj LzEvbXBqLXZEUGsxUmV1UFp5ajZUTGkxTHBvaGF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuYyvMA0E AgACMAcDBQAqEnOAMA0GCSqGSIb3DQEBCwUAA4IBAQBPaQ63evIw8ZwwHOe9CUNQ LqsyDWTo3h5ViCf631Eg3UAUiLO3gd/BiL5QpPqXR/Lxhqa1Ut2wPcvr/Y1rBjKO KWnuO5lk3IIw5l6dHBQhJ/5u0ZI/EvA0fF9khy8Q/P8ZTHs1LFH345Sl3Gb1yYho JVUNqViJPKd8TZFcCLdULBLZP5a4znEi3WAbBKL1pGW37xbwuwx3COlWV/hiGuXV jyBi1YwvWPSOnomAfJQKFFbutTYEF8yCdtkg+dXjUIcOBPINYc0xB9OuCK6P/3KR YPE9ymo3ZqgZzto+H3pO0zbYSSK+443dh9pd9DfGVy/ggsZw14kAegBOfZQhxslu -----END CERTIFICATE-----Generated at Tue Feb 10 06:03:58 2026 by rpki-client