This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/xGU0bYEQZqKtXvz-wOQxKTPLHDM.roa File: xGU0bYEQZqKtXvz-wOQxKTPLHDM.roa (raw, json) Hash identifier: Pww3BJWwUmNPj1/iW/aWXYB7NNqY6jVB3VyHrlLqwhA= Subject key identifier: C4:65:34:6D:81:10:66:A2:AD:5E:FC:FE:C0:E4:31:29:33:CB:1C:33 Certificate issuer: /CN=ceb86983547113359bade1f3f38104091e3a6439 Certificate serial: 019B7C7F7669953B5E7031E37E0EDF7368A5 Authority key identifier: CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/xGU0bYEQZqKtXvz-wOQxKTPLHDM.roa Signing time: Fri 02 Jan 2026 02:18:06 +0000 ROA not before: Fri 02 Jan 2026 02:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 195.130.248.0/22 maxlen: 24 212.123.79.0/24 maxlen: 24 212.123.82.0/23 maxlen: 24 212.123.84.0/23 maxlen: 24 212.123.93.0/24 maxlen: 24 213.205.0.0/19 maxlen: 24 213.205.32.0/19 maxlen: 24 213.205.32.0/24 maxlen: 24 213.205.33.0/24 maxlen: 24 213.205.34.0/24 maxlen: 24 213.205.36.0/24 maxlen: 24 213.205.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:76:69:95:3b:5e:70:31:e3:7e:0e:df:73:68:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ceb86983547113359bade1f3f38104091e3a6439 Validity Not Before: Jan 2 02:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c465346d811066a2ad5efcfec0e4312933cb1c33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:13:0e:cc:8c:7a:e4:3d:a0:cf:d1:d6:38:e2: ef:30:a0:d1:d4:4c:ee:95:ac:a7:8f:3c:40:76:39: 60:c2:d1:d2:51:ca:94:3a:66:b9:9d:a0:27:69:a6: 6c:8f:36:54:57:bb:d6:eb:00:de:13:ff:d7:2d:12: bd:62:c5:9f:b2:bc:8d:2f:aa:a7:05:db:e7:2c:12: 0e:c7:f0:57:29:46:36:83:24:b9:2b:77:21:98:ad: c1:de:4f:a6:9c:84:9d:a0:b8:f1:71:42:18:1b:ec: 0f:53:a5:2f:b9:6d:df:5b:bd:98:08:25:8e:fc:c9: 67:61:b8:1b:3b:73:c0:ba:25:3d:25:b3:e6:8c:99: 90:10:d8:14:b7:c7:9c:c4:e1:a8:e3:2e:86:b8:5e: 98:b8:36:11:58:ea:55:19:d4:25:f4:d2:3a:f7:f0: 0e:1a:a3:34:27:8c:eb:aa:be:af:55:5b:d7:ad:3a: 3e:a6:03:6a:4f:f4:15:89:75:31:f1:dd:19:e9:f1: b9:57:d6:d0:94:35:de:eb:8b:76:d0:93:e1:9d:0b: f2:1f:5e:53:dd:da:23:0c:b4:54:1c:0d:e2:d4:a6: c2:98:46:02:66:c2:39:90:39:b4:86:72:0c:67:ba: 8f:68:05:a6:ad:71:5c:34:55:27:80:35:48:87:8a: 0b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:65:34:6D:81:10:66:A2:AD:5E:FC:FE:C0:E4:31:29:33:CB:1C:33 X509v3 Authority Key Identifier: keyid:CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/xGU0bYEQZqKtXvz-wOQxKTPLHDM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.130.248.0/22 212.123.79.0/24 212.123.82.0-212.123.85.255 212.123.93.0/24 213.205.0.0/18 Signature Algorithm: sha256WithRSAEncryption 5f:ef:b7:81:e6:ad:48:bf:ae:8b:f6:d0:0d:b7:f7:d8:2e:7c: 28:99:cc:26:54:01:2e:1b:09:cb:50:fb:0e:6e:57:03:f5:56: fa:65:32:3b:5b:8b:f0:c3:6e:db:bb:cd:78:dc:3c:ee:22:f1: 8b:6f:5a:a2:19:06:6f:1d:49:74:da:e6:72:c2:97:b4:7b:05: f7:07:b5:dc:77:27:ee:86:f0:9c:f7:e0:e4:77:2d:12:0c:32: f0:f8:47:fe:7d:b3:a8:5e:53:ff:13:91:45:a7:69:51:ae:2e: 34:0e:f9:e8:ed:ce:f9:a3:d4:2a:da:32:02:1b:7c:e3:53:5b: a4:ce:99:24:0f:80:f0:a8:f9:f3:08:45:a0:53:a1:43:ae:3c: 4c:c6:7b:9a:45:af:cf:df:25:88:cc:ef:47:97:aa:45:99:43: 7a:ff:a0:dc:5d:84:0f:e7:8c:c5:4e:96:41:cd:b8:a8:f8:c0: 86:a7:b3:fa:c9:65:59:5f:02:72:d3:10:57:08:4f:79:c2:78: ed:8e:72:a0:f4:fb:31:55:b5:6c:6f:1a:8c:7f:9a:cb:6b:55: e8:09:21:ef:bf:28:21:7b:65:bd:f1:27:32:b8:98:51:0e:2d: b5:77:1e:19:8d:73:6d:dd:30:ef:3d:fa:9d:88:08:c0:83:c6: 9b:f5:11:fe -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt8f3ZplTtecDHjfg7fc2ilMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYjg2OTgzNTQ3MTEzMzU5YmFkZTFmM2YzODEwNDA5MWUz YTY0MzkwHhcNMjYwMTAyMDIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDY1MzQ2ZDgxMTA2NmEyYWQ1ZWZjZmVjMGU0MzEyOTMzY2IxYzMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRMOzIx65D2gz9HWOOLvMKDR1Ezu laynjzxAdjlgwtHSUcqUOma5naAnaaZsjzZUV7vW6wDeE//XLRK9YsWfsryNL6qn BdvnLBIOx/BXKUY2gyS5K3chmK3B3k+mnISdoLjxcUIYG+wPU6UvuW3fW72YCCWO /MlnYbgbO3PAuiU9JbPmjJmQENgUt8ecxOGo4y6GuF6YuDYRWOpVGdQl9NI69/AO GqM0J4zrqr6vVVvXrTo+pgNqT/QViXUx8d0Z6fG5V9bQlDXe64t20JPhnQvyH15T 3dojDLRUHA3i1KbCmEYCZsI5kDm0hnIMZ7qPaAWmrXFcNFUngDVIh4oLGQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFMRlNG2BEGairV78/sDkMSkzyxwzMB8GA1UdIwQY MBaAFM64aYNUcRM1m63h8/OBBAkeOmQ5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenJocGcxUnhFeldicmVIejg0RUVDUjQ2WkRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9mMzUzOWQtMzhjZC00NjVlLWE1N2Qt ZGVlMmY2NTBkZDg2LzEveEdVMGJZRVFacUt0WHZ6LXdPUXhLVFBMSERNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9mMzUzOWQtMzhjZC00NjVlLWE1N2QtZGVlMmY2NTBkZDg2 LzEvenJocGcxUnhFeldicmVIejg0RUVDUjQ2WkRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQCw4L4AwQA 1HtPMAwDBAHUe1IDBAHUe1QDBADUe10DBAbVzQAwDQYJKoZIhvcNAQELBQADggEB AF/vt4HmrUi/rov20A2399gufCiZzCZUAS4bCctQ+w5uVwP1VvplMjtbi/DDbtu7 zXjcPO4i8YtvWqIZBm8dSXTa5nLCl7R7BfcHtdx3J+6G8Jz34OR3LRIMMvD4R/59 s6heU/8TkUWnaVGuLjQO+ejtzvmj1CraMgIbfONTW6TOmSQPgPCo+fMIRaBToUOu PEzGe5pFr8/fJYjM70eXqkWZQ3r/oNxdhA/njMVOlkHNuKj4wIans/rJZVlfAnLT EFcIT3nCeO2OcqD0+zFVtWxvGox/mstrVegJIe+/KCF7Zb3xJzK4mFEOLbV3HhmN c23dMO89+p2ICMCDxpv1Ef4= -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:10 2026 by rpki-client