This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/xjh8d3YdZh4vpQueR9SItUPZD4Y.roa File: xjh8d3YdZh4vpQueR9SItUPZD4Y.roa (raw, json) Hash identifier: MrzcYUv0dMN5mv5Khff5m7xjUUe7vIM3FRg1rUhiWT4= Subject key identifier: C6:38:7C:77:76:1D:66:1E:2F:A5:0B:9E:47:D4:88:B5:43:D9:0F:86 Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Certificate serial: 019BF9D64F8B36BEC0FCBC33E4124CBF32AC Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/xjh8d3YdZh4vpQueR9SItUPZD4Y.roa Signing time: Mon 26 Jan 2026 10:25:30 +0000 ROA not before: Mon 26 Jan 2026 10:25:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2914 IP address blocks: 80.174.248.0/24 maxlen: 24 103.85.32.0/24 maxlen: 24 103.85.33.0/24 maxlen: 24 103.85.34.0/24 maxlen: 24 103.85.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:d6:4f:8b:36:be:c0:fc:bc:33:e4:12:4c:bf:32:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Validity Not Before: Jan 26 10:25:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6387c77761d661e2fa50b9e47d488b543d90f86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7a:1a:0e:e8:ac:b2:eb:6f:34:cf:89:64:99: f0:b3:e3:7a:32:8a:44:df:77:23:44:81:08:bf:e9: ed:e9:f6:96:4f:73:74:90:d7:3e:1e:6f:10:cf:77: 23:9b:d2:c5:ef:78:81:55:8e:56:57:c2:3e:43:8b: 23:8f:9c:45:f5:27:c4:d8:48:54:15:d7:48:d0:c7: d3:de:ae:ea:4a:10:6d:22:1c:51:b9:f9:b6:66:68: 5b:2e:92:54:05:25:70:87:8c:94:e2:24:1e:f7:1a: 60:8e:21:5d:38:13:51:ad:70:8d:7f:44:2a:6c:c2: e7:81:4b:0e:28:9b:3f:31:e6:f4:bd:74:4b:87:da: 04:cb:91:b0:b7:85:17:1a:6e:fe:33:23:74:a4:e4: 60:8c:6b:05:c6:22:13:9d:9d:09:b8:92:42:1c:f6: d3:6d:fa:36:ee:38:f2:78:d8:98:dc:5f:a8:15:e5: cc:d6:51:7d:de:2e:8d:73:bd:26:bb:24:7c:13:d2: ef:2a:a2:59:50:32:57:b9:b3:76:4a:b6:7d:1e:1a: e0:01:b5:90:fb:ad:b6:94:9e:b6:f2:c5:28:f3:af: e5:97:24:2d:dc:80:fa:a3:81:f9:9a:ab:2e:9f:ed: 6a:a1:d3:ff:db:18:66:bb:f2:f7:60:7a:20:bc:de: d5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:38:7C:77:76:1D:66:1E:2F:A5:0B:9E:47:D4:88:B5:43:D9:0F:86 X509v3 Authority Key Identifier: keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/xjh8d3YdZh4vpQueR9SItUPZD4Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.174.248.0/24 103.85.32.0/22 Signature Algorithm: sha256WithRSAEncryption 1d:88:10:43:b7:2d:a8:f5:b9:45:7a:f9:99:37:ec:fb:b0:0d: 3b:98:c1:b1:ba:ea:a5:65:59:b1:b9:7a:85:c9:92:d4:2c:5a: bf:4e:da:9d:ea:0c:a6:87:14:02:4d:7d:16:10:71:94:84:00: a0:72:fd:9a:43:cb:5c:24:f1:a5:ab:9e:aa:48:0d:03:46:ab: 60:ef:63:25:a1:37:04:0c:f5:13:17:77:97:0b:9e:ee:9f:ad: 54:16:cd:7b:69:a4:73:a7:dd:69:b4:26:cc:96:83:7f:6d:dd: 5d:9c:64:61:7f:d4:8d:9d:ac:25:81:7e:9f:9d:be:c4:98:8e: 9c:f2:16:5a:80:02:f5:40:cb:79:4d:81:ca:31:40:11:5b:7d: c0:31:48:54:2d:ee:9d:0a:70:e2:48:c6:0f:eb:24:5a:63:fc: 7a:20:4b:22:09:d0:1a:9c:74:e7:b1:33:5b:85:94:b5:95:c1: d3:f5:a0:63:96:64:de:3b:74:df:09:9f:38:43:2d:70:5b:e4: e5:1b:e4:ea:ef:26:42:6b:32:64:74:62:65:a7:c9:c1:66:63: 30:52:8d:1d:53:8c:56:e4:9f:10:e6:41:68:89:55:89:e5:a9: 26:04:0c:44:9c:60:59:03:21:c0:53:f3:e6:97:9b:60:95:8d: 4d:c1:69:02 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZv51k+LNr7A/Lwz5BJMvzKsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NTk5OTg5OWY3NmQyZTJlNGNjZGZjODE3Zjk4NzljZmFj MDZiYmUwHhcNMjYwMTI2MTAyNTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjM4N2M3Nzc2MWQ2NjFlMmZhNTBiOWU0N2Q0ODhiNTQzZDkwZjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXoaDuissutvNM+JZJnws+N6MopE 33cjRIEIv+nt6faWT3N0kNc+Hm8Qz3cjm9LF73iBVY5WV8I+Q4sjj5xF9SfE2EhU FddI0MfT3q7qShBtIhxRufm2ZmhbLpJUBSVwh4yU4iQe9xpgjiFdOBNRrXCNf0Qq bMLngUsOKJs/Meb0vXRLh9oEy5Gwt4UXGm7+MyN0pORgjGsFxiITnZ0JuJJCHPbT bfo27jjyeNiY3F+oFeXM1lF93i6Nc70muyR8E9LvKqJZUDJXubN2SrZ9HhrgAbWQ +622lJ628sUo86/llyQt3ID6o4H5mqsun+1qodP/2xhmu/L3YHogvN7V0wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMY4fHd2HWYeL6ULnkfUiLVD2Q+GMB8GA1UdIwQY MBaAFLRZmYmfdtLi5MzfyBf5h5z6wGu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUt NzM0MjhmOWM3YmZmLzEveGpoOGQzWWRaaDR2cFF1ZVI5U0l0VVBaRDRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUtNzM0MjhmOWM3YmZm LzEvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUK74AwQC Z1UgMA0GCSqGSIb3DQEBCwUAA4IBAQAdiBBDty2o9blFevmZN+z7sA07mMGxuuql ZVmxuXqFyZLULFq/Ttqd6gymhxQCTX0WEHGUhACgcv2aQ8tcJPGlq56qSA0DRqtg 72MloTcEDPUTF3eXC57un61UFs17aaRzp91ptCbMloN/bd1dnGRhf9SNnawlgX6f nb7EmI6c8hZagAL1QMt5TYHKMUARW33AMUhULe6dCnDiSMYP6yRaY/x6IEsiCdAa nHTnsTNbhZS1lcHT9aBjlmTeO3TfCZ84Qy1wW+TlG+Tq7yZCazJkdGJlp8nBZmMw Uo0dU4xW5J8Q5kFoiVWJ5akmBAxEnGBZAyHAU/Pml5tglY1NwWkC -----END CERTIFICATE-----Generated at Mon Jan 26 20:41:41 2026 by rpki-client