This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/xnGY0GE7g_ENVu56e5gxelHybG8.roa File: xnGY0GE7g_ENVu56e5gxelHybG8.roa (raw, json) Hash identifier: yJUaHCIzmB9kSFy3GFPElESkvsA2U0DoARJQmC3vS48= Subject key identifier: C6:71:98:D0:61:3B:83:F1:0D:56:EE:7A:7B:98:31:7A:51:F2:6C:6F Certificate issuer: /CN=93fd26d3a0b693a029bc62dcb9dda9519e477640 Certificate serial: 019B76EB96C05AE7180A9AE0793AEFF98981 Authority key identifier: 93:FD:26:D3:A0:B6:93:A0:29:BC:62:DC:B9:DD:A9:51:9E:47:76:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_0m06C2k6ApvGLcud2pUZ5HdkA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/xnGY0GE7g_ENVu56e5gxelHybG8.roa Signing time: Thu 01 Jan 2026 00:18:29 +0000 ROA not before: Thu 01 Jan 2026 00:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60515 IP address blocks: 185.88.32.0/22 maxlen: 22 185.88.32.0/24 maxlen: 24 185.88.33.0/24 maxlen: 24 185.88.34.0/24 maxlen: 24 185.88.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.crl rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.mft rsync://rpki.ripe.net/repository/DEFAULT/k_0m06C2k6ApvGLcud2pUZ5HdkA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:96:c0:5a:e7:18:0a:9a:e0:79:3a:ef:f9:89:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93fd26d3a0b693a029bc62dcb9dda9519e477640 Validity Not Before: Jan 1 00:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c67198d0613b83f10d56ee7a7b98317a51f26c6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:44:f0:8b:a8:28:d1:69:51:f0:50:65:ad:84: cd:ed:71:79:0d:7e:5e:0a:37:17:bc:c1:c9:c9:95: ab:23:9e:ba:e5:71:c2:f6:61:4c:c0:89:50:29:3e: 46:12:bd:70:2c:9f:d9:ce:d0:4c:7d:4b:fd:0d:1b: b6:a9:64:ba:bf:2a:80:45:2e:bb:f2:85:57:5c:9e: 35:4c:47:45:8c:7a:1e:d5:e2:90:b7:c4:23:d2:46: b4:77:d6:e6:ba:57:8a:6c:14:ff:dd:d6:55:87:cb: 8a:b3:3e:0c:49:c4:79:44:b1:0e:14:f9:6e:08:cd: d5:c7:66:70:7d:87:30:b4:70:82:ab:ab:6c:a8:e9: 96:5a:d5:42:8f:79:87:87:79:c5:d3:42:8c:6e:6d: ed:38:48:a0:69:4f:f4:7d:9f:cc:31:d1:c1:56:9b: 09:cc:ea:ad:a0:49:9d:31:d8:f0:12:55:e7:af:57: 60:42:5f:65:de:45:36:f2:52:79:b2:3d:17:9b:14: 89:d4:ef:13:21:51:60:41:b1:14:9d:34:84:41:71: 53:64:7b:16:7c:16:fd:08:6e:54:5d:56:a0:a0:ab: 33:d8:09:df:a2:76:bd:df:de:87:0f:08:e3:f1:f7: 0b:20:19:0a:a8:f2:5e:a8:7b:ff:f3:63:5e:e1:f3: cf:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:71:98:D0:61:3B:83:F1:0D:56:EE:7A:7B:98:31:7A:51:F2:6C:6F X509v3 Authority Key Identifier: keyid:93:FD:26:D3:A0:B6:93:A0:29:BC:62:DC:B9:DD:A9:51:9E:47:76:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_0m06C2k6ApvGLcud2pUZ5HdkA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/xnGY0GE7g_ENVu56e5gxelHybG8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.88.32.0/22 Signature Algorithm: sha256WithRSAEncryption 49:51:c7:ea:29:80:9b:65:3b:32:d1:70:d8:c2:47:e5:54:55: 83:3e:98:9e:0f:8c:fe:f6:d6:25:ae:7a:76:8e:bf:81:bf:db: 17:b3:80:f9:64:8d:27:65:6b:75:dc:cb:ea:cb:28:4f:e6:9e: 1d:2e:97:93:bc:5c:26:ec:be:a7:ed:c3:19:d3:f6:f3:84:41: 39:8d:e6:87:08:31:85:ae:de:5c:1d:76:2a:0a:48:b5:04:f0: 51:17:43:70:bb:fb:37:4a:ef:9a:3d:fd:26:a1:79:e8:84:83: 9a:89:a8:c0:3b:d5:70:db:da:79:5c:66:8d:56:87:22:6e:6e: 30:82:0f:24:f9:f2:f6:76:af:b0:de:66:6e:98:96:48:31:a8: 56:d7:bc:84:ac:88:f7:1a:78:ac:9d:1b:29:36:b4:8d:75:6b: 16:6a:d1:51:d8:d8:0f:97:b6:04:c6:41:b9:81:bb:6d:c8:c6: 40:66:a0:10:fb:f6:89:23:58:fc:ef:45:d4:4b:ac:56:9d:f0: 56:a8:fc:ee:16:ec:31:e2:90:30:c3:55:78:2f:45:fd:af:48: ac:21:34:39:25:f0:c0:9c:87:56:11:5e:ec:6c:e6:9b:ff:fd: 8b:d9:cd:ee:df:85:34:05:6b:7f:29:ba:b0:50:29:81:3c:0b: 08:65:a0:2d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt265bAWucYCprgeTrv+YmBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZmQyNmQzYTBiNjkzYTAyOWJjNjJkY2I5ZGRhOTUxOWU0 Nzc2NDAwHhcNMjYwMTAxMDAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjcxOThkMDYxM2I4M2YxMGQ1NmVlN2E3Yjk4MzE3YTUxZjI2YzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUTwi6go0WlR8FBlrYTN7XF5DX5e CjcXvMHJyZWrI5665XHC9mFMwIlQKT5GEr1wLJ/ZztBMfUv9DRu2qWS6vyqARS67 8oVXXJ41TEdFjHoe1eKQt8Qj0ka0d9bmuleKbBT/3dZVh8uKsz4MScR5RLEOFPlu CM3Vx2ZwfYcwtHCCq6tsqOmWWtVCj3mHh3nF00KMbm3tOEigaU/0fZ/MMdHBVpsJ zOqtoEmdMdjwElXnr1dgQl9l3kU28lJ5sj0XmxSJ1O8TIVFgQbEUnTSEQXFTZHsW fBb9CG5UXVagoKsz2Anfona9396HDwjj8fcLIBkKqPJeqHv/82Ne4fPPEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMZxmNBhO4PxDVbuenuYMXpR8mxvMB8GA1UdIwQY MBaAFJP9JtOgtpOgKbxi3LndqVGeR3ZAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva18wbTA2QzJrNkFwdkdMY3VkMnBVWjVIZGtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wZGY5YWItMmU3OC00Yjk4LWE2ZWYt NzNiYjkzMDBmNTc1LzEveG5HWTBHRTdnX0VOVnU1NmU1Z3hlbEh5Ykc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wZGY5YWItMmU3OC00Yjk4LWE2ZWYtNzNiYjkzMDBmNTc1 LzEva18wbTA2QzJrNkFwdkdMY3VkMnBVWjVIZGtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVggMA0G CSqGSIb3DQEBCwUAA4IBAQBJUcfqKYCbZTsy0XDYwkflVFWDPpieD4z+9tYlrnp2 jr+Bv9sXs4D5ZI0nZWt13MvqyyhP5p4dLpeTvFwm7L6n7cMZ0/bzhEE5jeaHCDGF rt5cHXYqCki1BPBRF0Nwu/s3Su+aPf0moXnohIOaiajAO9Vw29p5XGaNVocibm4w gg8k+fL2dq+w3mZumJZIMahW17yErIj3GnisnRspNrSNdWsWatFR2NgPl7YExkG5 gbttyMZAZqAQ+/aJI1j870XUS6xWnfBWqPzuFuwx4pAww1V4L0X9r0isITQ5JfDA nIdWEV7sbOab//2L2c3u34U0BWt/KbqwUCmBPAsIZaAt -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:21 2026 by rpki-client