This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/XphaguuWFSP8UQVU9jupgKQKPTw.roa File: XphaguuWFSP8UQVU9jupgKQKPTw.roa (raw, json) Hash identifier: 7KRxLds07r+kpPQbo12VWuWgRVl+sWP2XMsAOWnoAcY= Subject key identifier: 5E:98:5A:82:EB:96:15:23:FC:51:05:54:F6:3B:A9:80:A4:0A:3D:3C Certificate issuer: /CN=e08e17a781b64119a3a6357000254f5b795b0da8 Certificate serial: 019B7DCA6AE1CE869E4A9A2505941A19B16A Authority key identifier: E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/XphaguuWFSP8UQVU9jupgKQKPTw.roa Signing time: Fri 02 Jan 2026 08:19:36 +0000 ROA not before: Fri 02 Jan 2026 08:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61343 IP address blocks: 185.10.36.0/22 maxlen: 22 185.27.84.0/22 maxlen: 22 192.76.166.0/24 maxlen: 24 192.76.167.0/24 maxlen: 24 192.76.168.0/24 maxlen: 24 192.76.169.0/24 maxlen: 24 2a03:5540::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:6a:e1:ce:86:9e:4a:9a:25:05:94:1a:19:b1:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e08e17a781b64119a3a6357000254f5b795b0da8 Validity Not Before: Jan 2 08:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e985a82eb961523fc510554f63ba980a40a3d3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e4:67:68:fa:b7:b0:21:b5:c8:06:aa:06:d6: 04:b4:44:6f:00:6e:3b:ff:6a:3a:01:a0:fe:25:05: 9b:92:14:d0:35:d1:25:43:68:96:2a:92:9e:e6:25: 3a:9a:42:3e:bd:6b:36:fc:e3:76:52:b5:83:61:57: 86:9c:eb:7f:3a:a5:46:18:58:05:96:52:2e:57:b3: f9:a8:24:04:04:0d:63:40:7c:7d:c5:42:51:2f:3e: a5:6c:99:08:47:24:be:cf:80:3c:5f:90:67:8c:1e: 84:fd:de:c6:1f:e9:c4:cf:40:27:c2:00:b9:7d:1d: 84:79:d4:5d:3a:d4:1a:6e:1d:a2:00:49:aa:b7:c4: 02:d0:8c:9e:33:c3:7e:09:f5:6c:f6:52:0c:8d:82: bc:31:48:a1:92:0e:4e:70:7b:26:db:cd:87:19:b0: 63:e2:14:28:d2:be:e5:4b:45:69:11:63:90:06:f8: 11:10:b5:33:c8:27:81:1a:79:f4:a1:6f:7d:c2:47: 76:26:f1:83:1a:99:b3:ad:50:24:4b:87:4e:bd:76: 69:62:45:c3:60:5a:29:7d:93:2b:8d:53:62:71:49: 0c:36:c8:39:a7:3c:4c:11:c2:28:a5:79:69:42:96: 04:81:66:fc:7a:33:27:a4:30:5f:86:d6:87:49:62: c9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:98:5A:82:EB:96:15:23:FC:51:05:54:F6:3B:A9:80:A4:0A:3D:3C X509v3 Authority Key Identifier: keyid:E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/XphaguuWFSP8UQVU9jupgKQKPTw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.10.36.0/22 185.27.84.0/22 192.76.166.0-192.76.169.255 IPv6: 2a03:5540::/32 Signature Algorithm: sha256WithRSAEncryption 00:f4:ce:65:d3:b4:6d:fe:ac:dd:55:19:ca:dd:7c:13:29:54: a1:c0:50:92:0e:44:97:6c:98:70:d8:e1:26:82:0c:e8:8b:b8: c7:c7:9c:84:76:b6:44:85:45:55:b4:1a:24:0a:b2:c9:29:69: 6d:7d:9d:cf:46:0d:f9:9c:80:05:cb:eb:9f:47:ce:ad:ad:c1: 0d:05:e8:43:b6:f4:e7:d7:d2:fb:d3:87:87:06:d1:72:19:e6: b2:e9:40:32:47:22:cf:58:4c:f4:66:b6:2a:ff:87:3b:40:80: da:18:0d:8d:f2:a8:fc:f0:58:67:31:db:ad:d0:2c:d9:81:db: df:5c:54:78:ba:de:dc:97:21:45:e0:0d:ab:b4:80:67:ec:0f: 50:1f:f2:92:f1:54:54:da:e7:ec:d5:52:bb:3b:8e:b0:32:03: c9:b7:15:00:72:04:2d:4c:c5:1f:9f:8d:a3:21:3b:3f:44:17: 88:9d:95:77:99:7a:17:85:1d:a9:1a:f8:0d:a5:e4:dc:0a:e8: 38:27:19:2e:f0:a2:11:d3:65:4f:0f:96:54:a3:05:bd:f6:ae: be:67:83:eb:bf:9a:ad:c7:12:79:71:2d:d8:98:a0:de:bb:5c: e0:6a:47:72:87:67:9a:5f:34:f3:df:ec:97:26:08:79:fd:34: 42:d5:b7:c5 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt9ymrhzoaeSpolBZQaGbFqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwOGUxN2E3ODFiNjQxMTlhM2E2MzU3MDAwMjU0ZjViNzk1 YjBkYTgwHhcNMjYwMTAyMDgxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTk4NWE4MmViOTYxNTIzZmM1MTA1NTRmNjNiYTk4MGE0MGEzZDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+RnaPq3sCG1yAaqBtYEtERvAG47 /2o6AaD+JQWbkhTQNdElQ2iWKpKe5iU6mkI+vWs2/ON2UrWDYVeGnOt/OqVGGFgF llIuV7P5qCQEBA1jQHx9xUJRLz6lbJkIRyS+z4A8X5BnjB6E/d7GH+nEz0AnwgC5 fR2EedRdOtQabh2iAEmqt8QC0IyeM8N+CfVs9lIMjYK8MUihkg5OcHsm282HGbBj 4hQo0r7lS0VpEWOQBvgRELUzyCeBGnn0oW99wkd2JvGDGpmzrVAkS4dOvXZpYkXD YFopfZMrjVNicUkMNsg5pzxMEcIopXlpQpYEgWb8ejMnpDBfhtaHSWLJ3wIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFF6YWoLrlhUj/FEFVPY7qYCkCj08MB8GA1UdIwQY MBaAFOCOF6eBtkEZo6Y1cAAlT1t5Ww2oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEk0WHA0RzJRUm1qcGpWd0FDVlBXM2xiRGFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9hMTQwMjAtMWJmYi00MTMzLWFmY2Ut ZDVlNDVmMmNhODc5LzEvWHBoYWd1dVdGU1A4VVFWVTlqdXBnS1FLUFR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9hMTQwMjAtMWJmYi00MTMzLWFmY2UtZDVlNDVmMmNhODc5 LzEvNEk0WHA0RzJRUm1qcGpWd0FDVlBXM2xiRGFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaAwQCuQokAwQC uRtUMAwDBAHATKYDBAHATKgwDQQCAAIwBwMFACoDVUAwDQYJKoZIhvcNAQELBQAD ggEBAAD0zmXTtG3+rN1VGcrdfBMpVKHAUJIORJdsmHDY4SaCDOiLuMfHnIR2tkSF RVW0GiQKsskpaW19nc9GDfmcgAXL659Hzq2twQ0F6EO29OfX0vvTh4cG0XIZ5rLp QDJHIs9YTPRmtir/hztAgNoYDY3yqPzwWGcx263QLNmB299cVHi63tyXIUXgDau0 gGfsD1Af8pLxVFTa5+zVUrs7jrAyA8m3FQByBC1MxR+fjaMhOz9EF4idlXeZeheF Haka+A2l5NwK6DgnGS7wohHTZU8PllSjBb32rr5ng+u/mq3HEnlxLdiYoN67XOBq R3KHZ5pfNPPf7JcmCHn9NELVt8U= -----END CERTIFICATE-----Generated at Mon Feb 9 19:38:25 2026 by rpki-client