This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/X1bpbfnEeWysnkVlNQYpli_JB9U.roa File: X1bpbfnEeWysnkVlNQYpli_JB9U.roa (raw, json) Hash identifier: z2gfYvH3Y3eC1HsP9BRSds53oOJzBhG8NMfygnzQq2s= Subject key identifier: 5F:56:E9:6D:F9:C4:79:6C:AC:9E:45:65:35:06:29:96:2F:C9:07:D5 Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6 Certificate serial: 019B7F80C0426B0B9D3B17391E92695CBBC3 Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/X1bpbfnEeWysnkVlNQYpli_JB9U.roa Signing time: Fri 02 Jan 2026 16:18:22 +0000 ROA not before: Fri 02 Jan 2026 16:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5065 IP address blocks: 185.65.60.0/24 maxlen: 24 185.65.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:c0:42:6b:0b:9d:3b:17:39:1e:92:69:5c:bb:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6 Validity Not Before: Jan 2 16:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f56e96df9c4796cac9e4565350629962fc907d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9a:a4:a4:8e:2d:05:a5:5c:e3:83:f6:7e:81: 56:d2:e1:dc:1e:68:a2:50:2a:3b:51:73:8c:66:aa: f1:8b:53:08:6f:ba:a9:82:8f:1c:d7:8c:28:f2:a7: d2:b4:ac:10:77:00:0c:c8:19:1b:44:11:cf:f4:0e: f4:c9:40:a5:d2:c9:51:18:ef:7a:d6:36:7b:b8:a6: b2:37:0a:1a:74:b2:b0:78:ff:2c:da:d5:dd:87:1b: 56:a0:d5:da:f4:9b:65:16:98:f0:a4:06:7a:cd:7a: b4:bc:2e:79:86:44:46:1c:ab:5a:54:24:fe:72:dc: f9:f1:62:3f:6c:d4:39:be:14:8c:3e:35:9c:64:40: 21:ef:4f:ae:47:94:ea:48:f5:e4:1b:a1:70:91:07: d4:fc:a0:a2:49:79:18:48:10:68:44:21:7d:a0:8d: 53:0b:79:42:5f:45:93:fc:21:cd:c5:15:cc:4e:92: 65:3b:0a:a3:38:5d:6a:54:22:a5:71:14:6b:7c:38: 1f:95:ec:fe:9c:d2:51:5b:4f:be:76:02:8f:58:79: 22:31:97:af:c7:88:c5:47:6d:ca:3e:c5:ab:fb:56: 3b:c9:51:29:9b:b4:ef:ed:01:9f:ec:1c:08:14:33: c7:7d:09:a2:94:56:1d:fe:01:ba:2e:1c:38:70:4c: ce:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:56:E9:6D:F9:C4:79:6C:AC:9E:45:65:35:06:29:96:2F:C9:07:D5 X509v3 Authority Key Identifier: keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/X1bpbfnEeWysnkVlNQYpli_JB9U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.65.60.0/23 Signature Algorithm: sha256WithRSAEncryption 3c:2c:24:f3:cc:46:42:27:40:9c:45:6f:b7:7e:4d:80:b8:25: ab:1b:8e:7c:57:ec:d1:cd:72:a9:42:5d:7e:25:79:3c:28:1c: 97:0d:a7:d3:62:40:7e:d0:6f:49:b9:6f:6f:af:28:ca:be:21: a1:fa:5c:55:73:70:a5:3a:bf:9d:d4:0a:22:1e:0e:5e:61:d0: 98:19:16:0f:0b:47:c1:49:67:e9:45:b0:07:17:99:9e:d6:aa: d6:ee:3a:85:5b:35:17:f1:5b:d6:7e:da:17:6d:53:34:20:94: 24:04:7a:09:03:98:0d:0b:41:66:d4:19:2b:e2:36:e1:66:f4: 72:67:81:b7:99:fc:cd:50:b7:65:f2:e5:6e:5a:10:83:46:94: 03:83:76:61:84:0b:bb:7d:c0:95:43:b5:e6:13:a4:f7:aa:d2: 43:22:98:a7:0e:47:fd:b4:6b:84:4f:91:7c:ee:9e:a6:1e:c3: a9:79:c4:4e:1f:61:8c:e5:71:7a:31:69:aa:14:8f:a1:60:6d: d1:c5:f6:60:08:df:a4:ec:08:22:52:9b:47:37:56:91:92:7d: 21:e9:c4:ba:3b:54:d3:5c:85:55:23:e6:c3:62:6d:6d:82:8c: 13:b1:cb:b4:5b:99:cd:61:8c:01:9b:14:a6:6e:8a:a2:6a:53: f4:00:42:bb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gMBCawudOxc5HpJpXLvDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNzVlNGU5NGI1Y2I3NDUxN2I3YjAxNTY4MDE1ZGE5ZTZl ZWNkYjYwHhcNMjYwMTAyMTYxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjU2ZTk2ZGY5YzQ3OTZjYWM5ZTQ1NjUzNTA2Mjk5NjJmYzkwN2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZqkpI4tBaVc44P2foFW0uHcHmii UCo7UXOMZqrxi1MIb7qpgo8c14wo8qfStKwQdwAMyBkbRBHP9A70yUCl0slRGO96 1jZ7uKayNwoadLKweP8s2tXdhxtWoNXa9JtlFpjwpAZ6zXq0vC55hkRGHKtaVCT+ ctz58WI/bNQ5vhSMPjWcZEAh70+uR5TqSPXkG6FwkQfU/KCiSXkYSBBoRCF9oI1T C3lCX0WT/CHNxRXMTpJlOwqjOF1qVCKlcRRrfDgflez+nNJRW0++dgKPWHkiMZev x4jFR23KPsWr+1Y7yVEpm7Tv7QGf7BwIFDPHfQmilFYd/gG6Lhw4cEzOQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF9W6W35xHlsrJ5FZTUGKZYvyQfVMB8GA1UdIwQY MBaAFG915OlLXLdFF7ewFWgBXanm7s22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzIt NjY0NTc3MjRjMmQzLzEvWDFicGJmbkVlV3lzbmtWbE5RWXBsaV9KQjlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzItNjY0NTc3MjRjMmQz LzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuUE8MA0G CSqGSIb3DQEBCwUAA4IBAQA8LCTzzEZCJ0CcRW+3fk2AuCWrG458V+zRzXKpQl1+ JXk8KByXDafTYkB+0G9JuW9vryjKviGh+lxVc3ClOr+d1AoiHg5eYdCYGRYPC0fB SWfpRbAHF5me1qrW7jqFWzUX8VvWftoXbVM0IJQkBHoJA5gNC0Fm1Bkr4jbhZvRy Z4G3mfzNULdl8uVuWhCDRpQDg3ZhhAu7fcCVQ7XmE6T3qtJDIpinDkf9tGuET5F8 7p6mHsOpecROH2GM5XF6MWmqFI+hYG3RxfZgCN+k7AgiUptHN1aRkn0h6cS6O1TT XIVVI+bDYm1tgowTscu0W5nNYYwBmxSmboqialP0AEK7 -----END CERTIFICATE-----Generated at Mon Jan 19 11:29:52 2026 by rpki-client