This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/XKyWf4Y6NjYLpXjJG8NNu1YgV8I.roa File: XKyWf4Y6NjYLpXjJG8NNu1YgV8I.roa (raw, json) Hash identifier: Wg/rYioLK0eT7zXUczkOHExRo3EIegYLBIdXxr8Hp88= Subject key identifier: 5C:AC:96:7F:86:3A:36:36:0B:A5:78:C9:1B:C3:4D:BB:56:20:57:C2 Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21 Certificate serial: 019B7CEE21552C4358CD88DF1FC872E30B46 Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/XKyWf4Y6NjYLpXjJG8NNu1YgV8I.roa Signing time: Fri 02 Jan 2026 04:18:59 +0000 ROA not before: Fri 02 Jan 2026 04:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201508 IP address blocks: 185.4.24.0/22 maxlen: 24 185.42.0.0/22 maxlen: 24 185.245.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:21:55:2c:43:58:cd:88:df:1f:c8:72:e3:0b:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21 Validity Not Before: Jan 2 04:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5cac967f863a36360ba578c91bc34dbb562057c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c5:01:63:15:85:94:12:ce:29:fc:d4:e1:b4: 80:37:57:33:4e:d6:c1:7d:a6:0f:99:c6:3a:bf:3c: 50:68:16:24:50:4a:45:a7:08:d8:fc:76:4d:a3:18: 53:31:50:9b:38:f2:4a:15:fe:7f:e5:9b:cd:6c:53: 00:6d:4c:99:bb:e3:ab:69:3b:82:29:ad:38:9a:d7: 99:41:6c:66:1b:93:16:45:69:c0:41:db:a1:0d:32: fa:d5:e4:f0:3d:6f:ff:0b:da:19:12:0d:e7:89:dd: d9:2f:d9:cc:5d:ee:31:72:94:59:96:fb:57:c5:02: b6:fd:44:db:b8:55:f5:96:37:10:fa:25:b5:92:53: 33:ad:86:24:81:42:85:73:02:70:14:31:b3:89:1b: 41:aa:6d:ba:11:3c:5e:16:04:48:df:e8:3c:42:d5: 21:be:88:e7:36:94:4a:50:6e:7c:3a:bc:e8:5a:64: 0b:cd:e0:39:76:98:d7:89:bc:06:d6:ae:18:c0:a7: a0:fb:9e:36:0b:2b:a4:73:1b:5b:48:18:7a:48:b7: 27:87:e0:08:f3:79:2c:67:f9:d3:86:fc:a6:c9:10: 6d:a2:cb:7f:8a:19:cc:63:20:b4:8f:e9:bd:9f:e6: 31:17:bd:6f:29:93:cc:06:70:dc:c4:91:e1:09:fc: 23:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:AC:96:7F:86:3A:36:36:0B:A5:78:C9:1B:C3:4D:BB:56:20:57:C2 X509v3 Authority Key Identifier: keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/XKyWf4Y6NjYLpXjJG8NNu1YgV8I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.4.24.0/22 185.42.0.0/22 185.245.212.0/22 Signature Algorithm: sha256WithRSAEncryption 7f:c2:d0:70:81:ba:1e:a2:30:4b:ad:e2:bb:79:cb:98:c7:a6: 25:ea:a5:cb:58:56:a2:08:89:c8:56:17:98:b3:1c:35:df:43: fd:1e:e1:7e:e1:4e:19:f0:2c:8c:53:f9:ff:fd:b9:f2:e7:30: 44:ad:55:8c:ab:c2:4d:14:da:d5:51:e4:bd:89:0a:30:63:aa: 97:8f:f6:93:f0:bd:c4:93:b9:14:5c:58:b5:f9:c4:30:c1:68: 4a:8a:4d:1f:d3:d9:64:45:e8:98:9f:3e:d7:5e:7d:73:31:2f: b6:76:ce:78:52:58:5d:db:15:46:e9:a5:ac:82:3d:2a:54:47: cb:eb:72:8c:ff:10:6e:a0:af:68:9f:06:5e:7e:60:12:29:d7: 6f:f0:48:31:16:43:e3:64:7f:4d:ff:ae:a0:3e:4a:d1:10:d8: 9e:29:a0:13:ca:78:24:59:ae:b3:ed:09:b2:50:1d:ec:2c:e8: ee:7f:44:96:41:96:db:32:cc:71:5a:d2:16:86:37:e9:12:be: ea:46:c2:e2:8e:f7:41:ce:36:93:16:f2:0d:00:29:5e:46:32: 51:1a:01:b4:e6:e4:2d:f0:17:14:1c:97:fc:d7:0b:40:09:b3: c5:2a:fb:89:be:58:c0:f9:c2:4b:a3:ec:71:28:4a:ea:03:3b: ec:71:6f:df -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt87iFVLENYzYjfH8hy4wtGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NWEwNTY2ZDBiNjNhMWY4NjJkODM0NThlNGYyZWE2ZmQ4 ZjdkMjEwHhcNMjYwMTAyMDQxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2FjOTY3Zjg2M2EzNjM2MGJhNTc4YzkxYmMzNGRiYjU2MjA1N2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssUBYxWFlBLOKfzU4bSAN1czTtbB faYPmcY6vzxQaBYkUEpFpwjY/HZNoxhTMVCbOPJKFf5/5ZvNbFMAbUyZu+OraTuC Ka04mteZQWxmG5MWRWnAQduhDTL61eTwPW//C9oZEg3nid3ZL9nMXe4xcpRZlvtX xQK2/UTbuFX1ljcQ+iW1klMzrYYkgUKFcwJwFDGziRtBqm26ETxeFgRI3+g8QtUh vojnNpRKUG58OrzoWmQLzeA5dpjXibwG1q4YwKeg+542CyukcxtbSBh6SLcnh+AI 83ksZ/nThvymyRBtost/ihnMYyC0j+m9n+YxF71vKZPMBnDcxJHhCfwjOQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFysln+GOjY2C6V4yRvDTbtWIFfCMB8GA1UdIwQY MBaAFLdaBWbQtjofhi2DRY5PLqb9j30hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQt ODNmNjAxYzNmYjU5LzEvWEt5V2Y0WTZOallMcFhqSkc4Tk51MVlnVjhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQtODNmNjAxYzNmYjU5 LzEvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCuQQYAwQC uSoAAwQCufXUMA0GCSqGSIb3DQEBCwUAA4IBAQB/wtBwgboeojBLreK7ecuYx6Yl 6qXLWFaiCInIVheYsxw130P9HuF+4U4Z8CyMU/n//bny5zBErVWMq8JNFNrVUeS9 iQowY6qXj/aT8L3Ek7kUXFi1+cQwwWhKik0f09lkReiYnz7XXn1zMS+2ds54Ulhd 2xVG6aWsgj0qVEfL63KM/xBuoK9onwZefmASKddv8EgxFkPjZH9N/66gPkrRENie KaATyngkWa6z7QmyUB3sLOjuf0SWQZbbMsxxWtIWhjfpEr7qRsLijvdBzjaTFvIN ACleRjJRGgG05uQt8BcUHJf81wtACbPFKvuJvljA+cJLo+xxKErqAzvscW/f -----END CERTIFICATE-----Generated at Fri Jan 2 23:49:50 2026 by rpki-client