This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/xV6FBBeDoPLgKQuqzg8O7q-72L4.roa File: xV6FBBeDoPLgKQuqzg8O7q-72L4.roa (raw, json) Hash identifier: bdyv+UoIDEOcCmHbnZjDztZ9hQAFyZKMucdHwquQvzY= Subject key identifier: C5:5E:85:04:17:83:A0:F2:E0:29:0B:AA:CE:0F:0E:EE:AF:BB:D8:BE Certificate issuer: /CN=ab7ba43576667664ad6f29a666270e3357836f1a Certificate serial: 019B7C80C1AC7842470D5BEB45F59504DBF7 Authority key identifier: AB:7B:A4:35:76:66:76:64:AD:6F:29:A6:66:27:0E:33:57:83:6F:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/xV6FBBeDoPLgKQuqzg8O7q-72L4.roa Signing time: Fri 02 Jan 2026 02:19:31 +0000 ROA not before: Fri 02 Jan 2026 02:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60216 IP address blocks: 176.121.20.0/22 maxlen: 24 176.121.20.0/24 maxlen: 24 176.121.21.0/24 maxlen: 24 176.121.22.0/24 maxlen: 24 176.121.23.0/24 maxlen: 24 2001:67c:fb0::/48 maxlen: 48 2001:67c:18d0::/48 maxlen: 48 2001:67c:1bc0::/48 maxlen: 48 2001:67c:2390::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.crl rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:c1:ac:78:42:47:0d:5b:eb:45:f5:95:04:db:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab7ba43576667664ad6f29a666270e3357836f1a Validity Not Before: Jan 2 02:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c55e85041783a0f2e0290baace0f0eeeafbbd8be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:05:d6:de:67:05:bb:64:ec:2f:8f:01:3b:e3: 0e:4f:0d:5f:4c:a5:f3:4d:48:56:87:a6:83:c4:a3: 73:c8:76:71:4c:40:67:3b:99:27:fd:92:04:24:67: 35:f7:23:4b:9b:69:7d:d2:4a:b6:b8:9f:bc:88:80: 42:af:75:d0:1e:ff:44:ed:8b:de:a8:96:97:2b:a0: 1f:1d:f8:dc:1d:57:c9:55:b6:99:d2:c9:72:38:6d: 8c:1e:1e:99:69:b0:78:f4:02:c3:43:4f:e9:f4:fe: cb:c6:b8:b9:7f:56:49:b4:42:12:5b:0c:60:fa:e9: dd:5d:8f:f0:a4:bf:19:4c:e8:0c:91:ca:1f:d3:ff: 9b:38:88:31:dd:f6:6c:b1:c0:6c:16:48:58:be:af: 29:a2:a3:74:34:1c:81:ba:1c:53:76:9d:00:56:55: 5b:4e:65:60:0d:99:72:37:b3:00:df:9d:bb:d7:82: 0e:e1:6c:9a:10:7b:3b:a1:4c:ce:92:39:f1:13:75: 42:57:13:85:44:dd:d5:af:9a:f3:f3:fd:93:0c:6e: 11:2b:e2:79:25:3a:63:f9:12:1d:9a:df:a1:14:c8: 94:22:89:3c:e2:89:81:ef:e5:d5:c2:20:00:a2:6e: 01:5a:ef:8d:85:dc:fd:3b:ee:15:3e:ae:04:9e:5e: 1f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:5E:85:04:17:83:A0:F2:E0:29:0B:AA:CE:0F:0E:EE:AF:BB:D8:BE X509v3 Authority Key Identifier: keyid:AB:7B:A4:35:76:66:76:64:AD:6F:29:A6:66:27:0E:33:57:83:6F:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/xV6FBBeDoPLgKQuqzg8O7q-72L4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.121.20.0/22 IPv6: 2001:67c:fb0::/48 2001:67c:18d0::/48 2001:67c:1bc0::/48 2001:67c:2390::/48 Signature Algorithm: sha256WithRSAEncryption 31:f9:90:2e:65:d6:e0:8c:e5:4a:c5:71:b0:5e:d2:59:c4:9f: f9:78:2d:77:e6:ce:3d:ee:6b:f7:74:4b:e0:04:77:99:3a:76: 13:b7:11:35:62:7e:29:1a:15:0e:36:02:c7:23:76:8f:7d:c7: 7e:00:79:5f:15:2e:74:b4:8a:bc:2c:85:ac:17:45:9b:26:64: cd:f7:3a:b2:7c:23:dd:aa:fe:f3:16:bd:09:af:1a:cf:38:c5: b6:7c:cc:b5:4a:b9:64:6a:14:fa:1e:ea:c2:4b:f7:5c:ec:e3: 68:8a:3d:a5:75:04:db:9b:7a:b4:0d:a6:47:64:94:6a:7b:2d: 02:74:93:db:09:80:8f:73:31:12:f2:82:34:b6:dd:bb:42:40: 71:f6:21:3d:40:b2:38:b4:cc:ad:7c:f3:0b:f8:87:aa:37:6c: 43:b7:91:1c:43:db:4a:1d:d4:af:cc:df:cb:f9:ed:bf:ac:9e: 5a:77:24:c7:80:20:c0:b2:d2:de:f7:e4:4c:7b:bd:c5:67:0c: 79:ca:4c:c5:ee:a6:c4:01:72:32:82:e9:63:d5:c4:24:05:c5: d1:b9:77:f6:55:90:31:bc:35:c9:76:7a:67:f6:ef:b5:00:37: 81:7a:e8:3d:25:1c:b8:84:ca:97:89:3c:1d:4e:c1:f1:4b:60: 0f:91:fe:07 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZt8gMGseEJHDVvrRfWVBNv3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiN2JhNDM1NzY2Njc2NjRhZDZmMjlhNjY2MjcwZTMzNTc4 MzZmMWEwHhcNMjYwMTAyMDIxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTVlODUwNDE3ODNhMGYyZTAyOTBiYWFjZTBmMGVlZWFmYmJkOGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgXW3mcFu2TsL48BO+MOTw1fTKXz TUhWh6aDxKNzyHZxTEBnO5kn/ZIEJGc19yNLm2l90kq2uJ+8iIBCr3XQHv9E7Yve qJaXK6AfHfjcHVfJVbaZ0slyOG2MHh6ZabB49ALDQ0/p9P7Lxri5f1ZJtEISWwxg +undXY/wpL8ZTOgMkcof0/+bOIgx3fZsscBsFkhYvq8poqN0NByBuhxTdp0AVlVb TmVgDZlyN7MA352714IO4WyaEHs7oUzOkjnxE3VCVxOFRN3Vr5rz8/2TDG4RK+J5 JTpj+RIdmt+hFMiUIok84omB7+XVwiAAom4BWu+Nhdz9O+4VPq4Enl4f9wIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFMVehQQXg6Dy4CkLqs4PDu6vu9i+MB8GA1UdIwQY MBaAFKt7pDV2ZnZkrW8ppmYnDjNXg28aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTN1a05YWm1kbVN0YnltbVppY09NMWVEYnhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8wZTFmOTEtYzNlZC00MzVkLWE0NWYt MjNhYzc1ODA0OGVjLzEveFY2RkJCZURvUExnS1F1cXpnOE83cS03Mkw0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8wZTFmOTEtYzNlZC00MzVkLWE0NWYtMjNhYzc1ODA0OGVj LzEvcTN1a05YWm1kbVN0YnltbVppY09NMWVEYnhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjAMBAIAATAGAwQCsHkUMCoE AgACMCQDBwAgAQZ8D7ADBwAgAQZ8GNADBwAgAQZ8G8ADBwAgAQZ8I5AwDQYJKoZI hvcNAQELBQADggEBADH5kC5l1uCM5UrFcbBe0lnEn/l4LXfmzj3ua/d0S+AEd5k6 dhO3ETVifikaFQ42Ascjdo99x34AeV8VLnS0irwshawXRZsmZM33OrJ8I92q/vMW vQmvGs84xbZ8zLVKuWRqFPoe6sJL91zs42iKPaV1BNuberQNpkdklGp7LQJ0k9sJ gI9zMRLygjS23btCQHH2IT1Asji0zK188wv4h6o3bEO3kRxD20od1K/M38v57b+s nlp3JMeAIMCy0t735Ex7vcVnDHnKTMXupsQBcjKC6WPVxCQFxdG5d/ZVkDG8Ncl2 emf277UAN4F66D0lHLiEypeJPB1OwfFLYA+R/gc= -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:30 2026 by rpki-client