This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/cXrbKTXhSK7ki4TmnfmJOJqU_kQ.roa File: cXrbKTXhSK7ki4TmnfmJOJqU_kQ.roa (raw, json) Hash identifier: wGt3eC7XgUqAIQ3KH0Xjs1sf60C7d5hlU+BmNSn3D5M= Subject key identifier: 71:7A:DB:29:35:E1:48:AE:E4:8B:84:E6:9D:F9:89:38:9A:94:FE:44 Certificate issuer: /CN=4304d868b0b9d1d43678eb467ae7c3fa3bffe2f8 Certificate serial: 019B7C809CE0840C30C538BC3818A6C92202 Authority key identifier: 43:04:D8:68:B0:B9:D1:D4:36:78:EB:46:7A:E7:C3:FA:3B:FF:E2:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwTYaLC50dQ2eOtGeufD-jv_4vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/cXrbKTXhSK7ki4TmnfmJOJqU_kQ.roa Signing time: Fri 02 Jan 2026 02:19:22 +0000 ROA not before: Fri 02 Jan 2026 02:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39842 IP address blocks: 185.35.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.crl rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft rsync://rpki.ripe.net/repository/DEFAULT/QwTYaLC50dQ2eOtGeufD-jv_4vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:9c:e0:84:0c:30:c5:38:bc:38:18:a6:c9:22:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4304d868b0b9d1d43678eb467ae7c3fa3bffe2f8 Validity Not Before: Jan 2 02:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=717adb2935e148aee48b84e69df989389a94fe44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:73:28:65:05:1e:0e:52:6e:a4:7e:30:2c:b7: f3:57:d8:ef:7c:b5:87:6a:09:92:c1:52:17:df:3c: 07:20:8a:8c:01:0f:b9:69:f6:35:73:56:d6:77:a6: a0:78:7e:1f:2b:b4:39:f4:be:f7:b5:3b:5e:6c:70: 9a:52:84:77:d6:4c:d1:99:09:21:c4:63:c3:22:a3: 2e:ae:07:3f:55:f1:03:ab:d7:87:b6:4e:75:72:4c: e1:cb:ce:2c:05:fd:65:9a:88:40:e4:93:92:fe:55: 3f:8d:32:e8:88:96:85:ba:9a:a7:21:df:71:83:cf: 71:51:8d:c5:33:85:df:59:22:cf:30:e0:83:a2:a8: 1d:27:a2:49:5f:4b:33:4b:17:fc:80:46:50:f1:24: 49:5b:67:a0:4d:fc:11:83:5e:b0:a2:ca:6f:30:7d: 7e:15:0c:6e:58:e6:57:0d:76:14:49:aa:c4:01:f2: c9:a6:47:9e:15:fc:69:f7:f9:d6:3d:d7:fa:59:2d: b0:78:8b:1d:0e:37:8d:f5:1d:33:8a:13:d4:3b:ff: 88:9c:f0:c6:d2:aa:0e:a9:70:6d:2d:07:a0:90:63: 6c:35:03:10:72:10:cf:d9:97:fc:0c:4e:86:85:86: 0c:73:23:c3:5d:2c:5e:05:f6:5d:55:63:2c:9c:97: db:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:7A:DB:29:35:E1:48:AE:E4:8B:84:E6:9D:F9:89:38:9A:94:FE:44 X509v3 Authority Key Identifier: keyid:43:04:D8:68:B0:B9:D1:D4:36:78:EB:46:7A:E7:C3:FA:3B:FF:E2:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwTYaLC50dQ2eOtGeufD-jv_4vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/cXrbKTXhSK7ki4TmnfmJOJqU_kQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.35.224.0/22 Signature Algorithm: sha256WithRSAEncryption 22:36:1f:c9:9b:54:93:a4:63:de:7a:a5:b0:ce:59:b1:42:dd: 50:10:b7:62:f6:7f:e0:fd:c2:85:ff:e8:bc:ed:63:66:97:52: 37:71:58:03:dc:16:b8:ec:93:a4:59:d3:b4:04:60:37:30:1c: 7b:db:15:09:2e:54:0e:f4:1d:ed:a5:54:61:15:1d:48:85:24: 59:38:1c:11:50:a4:fb:ba:26:9f:d1:7e:d6:7b:e1:40:9b:93: 8a:cc:86:88:52:34:cc:b4:f4:fd:8a:fb:6c:4c:14:4d:29:1b: 20:2a:39:91:e3:13:3a:2b:c4:c6:f6:7c:e4:d4:be:da:35:3d: 3b:e6:b8:94:d3:7a:dc:b9:4b:62:bb:64:cd:4b:e3:e4:21:20: 34:6e:01:74:a6:ff:8c:74:35:e2:af:c6:3e:0f:4c:ba:69:22: 5e:25:e2:d4:36:05:3d:2a:07:ed:ae:a6:b0:b0:ab:d8:e2:71: b0:32:d0:91:15:f0:a5:68:65:20:05:40:03:a2:49:ca:77:7b: a1:19:0a:72:fc:e9:e8:8b:45:3f:9e:bd:22:ec:22:d9:0b:72: 7a:2f:14:dd:b0:71:ce:c4:5a:c5:b9:94:54:10:69:55:f7:83: ba:ce:5e:08:10:6a:a3:bb:32:88:f4:b7:d7:fd:71:4b:d2:78: 78:c4:49:83 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gJzghAwwxTi8OBimySICMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDRkODY4YjBiOWQxZDQzNjc4ZWI0NjdhZTdjM2ZhM2Jm ZmUyZjgwHhcNMjYwMTAyMDIxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTdhZGIyOTM1ZTE0OGFlZTQ4Yjg0ZTY5ZGY5ODkzODlhOTRmZTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3MoZQUeDlJupH4wLLfzV9jvfLWH agmSwVIX3zwHIIqMAQ+5afY1c1bWd6ageH4fK7Q59L73tTtebHCaUoR31kzRmQkh xGPDIqMurgc/VfEDq9eHtk51ckzhy84sBf1lmohA5JOS/lU/jTLoiJaFupqnId9x g89xUY3FM4XfWSLPMOCDoqgdJ6JJX0szSxf8gEZQ8SRJW2egTfwRg16wospvMH1+ FQxuWOZXDXYUSarEAfLJpkeeFfxp9/nWPdf6WS2weIsdDjeN9R0zihPUO/+InPDG 0qoOqXBtLQegkGNsNQMQchDP2Zf8DE6GhYYMcyPDXSxeBfZdVWMsnJfbfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHF62yk14Uiu5IuE5p35iTialP5EMB8GA1UdIwQY MBaAFEME2GiwudHUNnjrRnrnw/o7/+L4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdUWWFMQzUwZFEyZU90R2V1ZkQtanZfNHZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mYmRlMjktYjk0Ni00M2YzLWI4NDct MWEyMGNkZDU2MGMyLzEvY1hyYktUWGhTSzdraTRUbW5mbUpPSnFVX2tRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9mYmRlMjktYjk0Ni00M2YzLWI4NDctMWEyMGNkZDU2MGMy LzEvUXdUWWFMQzUwZFEyZU90R2V1ZkQtanZfNHZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuSPgMA0G CSqGSIb3DQEBCwUAA4IBAQAiNh/Jm1STpGPeeqWwzlmxQt1QELdi9n/g/cKF/+i8 7WNml1I3cVgD3Ba47JOkWdO0BGA3MBx72xUJLlQO9B3tpVRhFR1IhSRZOBwRUKT7 uiaf0X7We+FAm5OKzIaIUjTMtPT9ivtsTBRNKRsgKjmR4xM6K8TG9nzk1L7aNT07 5riU03rcuUtiu2TNS+PkISA0bgF0pv+MdDXir8Y+D0y6aSJeJeLUNgU9Kgftrqaw sKvY4nGwMtCRFfClaGUgBUADoknKd3uhGQpy/Onoi0U/nr0i7CLZC3J6LxTdsHHO xFrFuZRUEGlV94O6zl4IEGqjuzKI9LfX/XFL0nh4xEmD -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:50 2026 by rpki-client