This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa File: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (raw, json) Hash identifier: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk= Subject key identifier: C4:94:28:C1:3F:D3:9D:BE:22:7A:E4:F6:9E:75:F9:EC:4D:62:F0:18 Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78 Certificate serial: 019B7910D75DDC322D06A74397F2DA84E694 Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa Signing time: Thu 01 Jan 2026 10:18:25 +0000 ROA not before: Thu 01 Jan 2026 10:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8283 IP address blocks: 94.142.240.0/21 maxlen: 21 94.142.240.0/24 maxlen: 24 94.142.241.0/24 maxlen: 24 94.142.242.0/24 maxlen: 24 94.142.244.0/24 maxlen: 24 94.142.245.0/24 maxlen: 24 94.142.246.0/24 maxlen: 24 94.142.247.0/24 maxlen: 24 185.52.224.0/22 maxlen: 22 185.52.224.0/24 maxlen: 24 185.52.225.0/24 maxlen: 24 185.52.226.0/24 maxlen: 24 185.52.227.0/24 maxlen: 24 2a02:898::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:d7:5d:dc:32:2d:06:a7:43:97:f2:da:84:e6:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78 Validity Not Before: Jan 1 10:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c49428c13fd39dbe227ae4f69e75f9ec4d62f018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:20:7d:09:d5:41:83:59:58:7c:35:4b:fa:79: 9b:b6:e9:f5:33:f7:6e:e3:0b:47:06:12:9c:1a:dd: fa:04:ab:4f:54:42:04:7c:bb:61:fa:a7:50:fd:2d: 2b:c1:cd:8e:45:57:05:a8:85:85:80:47:e6:94:28: c5:a0:29:4f:a0:b5:84:ae:20:0f:9b:61:14:6f:b6: c3:ac:48:3c:f0:92:5e:0c:da:07:da:9f:4d:6d:a4: 48:69:ba:57:e5:05:2f:19:ad:df:b7:cc:14:64:b0: 02:8f:3e:25:7f:7f:ee:12:dd:d8:18:b9:d0:f6:e1: 65:c2:07:b7:d0:41:57:dd:f9:c0:ff:72:1b:30:ec: b5:4c:b8:54:d1:07:e2:8d:7b:45:6b:c0:67:c0:6a: 98:f5:ab:bb:c7:07:c4:5c:cb:72:18:3c:84:59:5b: 13:61:dd:2a:c1:f3:2c:64:74:90:71:ad:7d:e4:9c: ef:81:c2:1a:38:27:e7:21:cc:92:0a:72:84:08:73: b5:e9:82:23:91:f2:49:e2:96:74:c8:9b:94:20:b4: d4:53:8e:f5:82:62:f3:0d:c6:a7:86:2c:7e:d5:1d: 2f:46:0f:99:ca:77:d8:12:3f:46:b2:0c:72:c5:7b: 88:e4:40:40:09:b5:e3:78:f8:b2:6d:ce:df:c5:5c: cb:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:94:28:C1:3F:D3:9D:BE:22:7A:E4:F6:9E:75:F9:EC:4D:62:F0:18 X509v3 Authority Key Identifier: keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.142.240.0/21 185.52.224.0/22 IPv6: 2a02:898::/32 Signature Algorithm: sha256WithRSAEncryption 21:34:a8:a1:f8:58:10:35:66:26:71:d7:51:35:17:f5:f0:a0: e4:44:31:cd:f3:40:38:6d:66:dd:d9:4f:04:fc:8b:42:7d:55: 7b:c4:ad:71:96:b5:5f:07:21:0a:d9:13:4a:ca:c5:c3:72:e6: fb:da:42:b6:4a:8e:97:84:be:95:b6:ae:cd:ee:a2:0d:86:b5: 3b:77:e8:a7:a6:21:f9:be:e4:5d:3f:eb:9c:cd:2f:94:ca:66: 40:5b:f2:4b:99:a1:94:13:c5:04:89:c1:c9:b9:78:f3:69:f9: 99:ba:54:23:ce:d3:e1:ed:e3:96:38:3d:71:8f:c3:66:f9:e3: b3:73:fb:af:2d:8f:f3:c8:b9:71:27:75:09:23:06:5e:68:cf: 8f:7c:6e:77:67:2f:61:f4:da:6a:40:a4:4d:28:95:52:93:9b: 63:7b:47:89:bc:32:b1:97:d8:47:1f:d8:d7:42:10:37:54:d2: 25:3b:37:42:35:81:4c:07:92:31:ec:a3:2e:f3:31:ef:2d:79: a2:93:45:94:46:04:13:72:09:ce:da:5a:85:6b:1a:ec:fc:34: f6:31:07:c8:00:fc:79:b6:37:c2:3d:34:eb:49:52:06:c3:ee: bf:f5:76:90:51:2c:59:a7:2c:a3:e6:60:b3:91:60:4a:da:b9: 52:20:00:ad -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5ENdd3DItBqdDl/LahOaUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMWI0Yzg1Y2FhOGQ4YjE2NjE5YmY5NDVhMmZkNmFmMWM3 N2ZjNzgwHhcNMjYwMTAxMTAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDk0MjhjMTNmZDM5ZGJlMjI3YWU0ZjY5ZTc1ZjllYzRkNjJmMDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9yB9CdVBg1lYfDVL+nmbtun1M/du 4wtHBhKcGt36BKtPVEIEfLth+qdQ/S0rwc2ORVcFqIWFgEfmlCjFoClPoLWEriAP m2EUb7bDrEg88JJeDNoH2p9NbaRIabpX5QUvGa3ft8wUZLACjz4lf3/uEt3YGLnQ 9uFlwge30EFX3fnA/3IbMOy1TLhU0QfijXtFa8BnwGqY9au7xwfEXMtyGDyEWVsT Yd0qwfMsZHSQca195JzvgcIaOCfnIcySCnKECHO16YIjkfJJ4pZ0yJuUILTUU471 gmLzDcanhix+1R0vRg+ZynfYEj9GsgxyxXuI5EBACbXjePiybc7fxVzLkwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFMSUKME/052+Inrk9p51+exNYvAYMB8GA1UdIwQY MBaAFJIbTIXKqNixZhm/lFov1q8cd/x4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80MmIxNzktNDc5MC00NTIwLWIxNzQt NTA1MDUzODJmZDcyLzEveEpRb3dUX1RuYjRpZXVUMm5uWDU3RTFpOEJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC80MmIxNzktNDc5MC00NTIwLWIxNzQtNTA1MDUzODJmZDcy LzEva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDXo7wAwQC uTTgMA0EAgACMAcDBQAqAgiYMA0GCSqGSIb3DQEBCwUAA4IBAQAhNKih+FgQNWYm cddRNRf18KDkRDHN80A4bWbd2U8E/ItCfVV7xK1xlrVfByEK2RNKysXDcub72kK2 So6XhL6Vtq7N7qINhrU7d+inpiH5vuRdP+uczS+UymZAW/JLmaGUE8UEicHJuXjz afmZulQjztPh7eOWOD1xj8Nm+eOzc/uvLY/zyLlxJ3UJIwZeaM+PfG53Zy9h9Npq QKRNKJVSk5tje0eJvDKxl9hHH9jXQhA3VNIlOzdCNYFMB5Ix7KMu8zHvLXmik0WU RgQTcgnO2lqFaxrs/DT2MQfIAPx5tjfCPTTrSVIGw+6/9XaQUSxZpyyj5mCzkWBK 2rlSIACt -----END CERTIFICATE-----Generated at Fri Jan 9 21:50:23 2026 by rpki-client