This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/xTTTaBdVu0SeLwv0Gx01IddtE50.roa File: xTTTaBdVu0SeLwv0Gx01IddtE50.roa (raw, json) Hash identifier: ivpMuo01dDNrw/GCqkgH0f4L7FOwQRX4fhYsRXB+ZA8= Subject key identifier: C5:34:D3:68:17:55:BB:44:9E:2F:0B:F4:1B:1D:35:21:D7:6D:13:9D Certificate issuer: /CN=b90f40bdb9e664769e917590f78db6e77193d751 Certificate serial: 019B79EC2289370B03DA5FBE7B67B6D679A8 Authority key identifier: B9:0F:40:BD:B9:E6:64:76:9E:91:75:90:F7:8D:B6:E7:71:93:D7:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/xTTTaBdVu0SeLwv0Gx01IddtE50.roa Signing time: Thu 01 Jan 2026 14:17:57 +0000 ROA not before: Thu 01 Jan 2026 14:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204851 IP address blocks: 185.237.240.0/22 maxlen: 22 185.237.240.0/24 maxlen: 24 185.237.241.0/24 maxlen: 24 185.237.242.0/24 maxlen: 24 185.237.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.crl rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:22:89:37:0b:03:da:5f:be:7b:67:b6:d6:79:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b90f40bdb9e664769e917590f78db6e77193d751 Validity Not Before: Jan 1 14:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c534d3681755bb449e2f0bf41b1d3521d76d139d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:43:f3:bc:d0:4e:f8:8c:7b:e6:29:fd:3b:a9: 57:73:50:20:0a:23:bb:83:cc:68:01:d8:63:af:36: 28:2f:43:b7:e0:55:80:8e:aa:fe:ee:d1:c6:83:ab: 8f:28:7b:1f:7c:3d:43:ab:8c:cb:e2:c3:f6:fd:ff: d2:9d:36:a3:74:38:99:ff:8d:f7:6d:4d:99:a0:17: 6b:89:8f:88:05:c2:4f:ab:dc:c9:62:14:36:ab:78: b4:95:c9:36:c6:c3:fd:51:9c:d8:e0:1d:20:31:7a: df:7b:7c:9b:17:81:ae:ef:62:c3:1a:1a:7a:50:1a: 8f:d2:af:c1:ca:b0:5f:f5:e3:51:97:b8:cf:3c:9c: f6:7e:a1:35:51:26:ad:9f:76:da:5e:70:de:e4:0d: b1:02:ea:23:6c:65:fd:07:7a:26:42:8b:50:b0:3f: 60:79:11:33:68:26:3e:12:96:e0:c1:d6:47:26:bc: 38:da:b9:fc:ca:35:99:4f:2e:78:fb:a9:55:1d:41: 68:2b:ba:72:f7:08:ed:49:7c:61:6f:dd:28:74:99: b4:06:f4:fa:6c:c8:9e:82:22:3a:a7:c4:4d:a8:7b: 55:e5:fb:24:12:5e:d1:5a:ca:ea:4f:b3:a3:dc:ba: 0c:e9:51:c2:0b:08:ed:8d:32:a5:80:3d:7a:d5:c4: 8a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:34:D3:68:17:55:BB:44:9E:2F:0B:F4:1B:1D:35:21:D7:6D:13:9D X509v3 Authority Key Identifier: keyid:B9:0F:40:BD:B9:E6:64:76:9E:91:75:90:F7:8D:B6:E7:71:93:D7:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/xTTTaBdVu0SeLwv0Gx01IddtE50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.237.240.0/22 Signature Algorithm: sha256WithRSAEncryption 6b:a1:ba:f1:b6:f4:11:af:67:27:66:82:f3:14:c1:d5:fd:4a: 23:5c:32:6c:2d:86:3e:7e:66:0b:d7:05:66:9d:0a:5e:f7:5d: 50:23:24:b8:6e:9c:79:64:4a:53:8f:fe:2d:c4:e8:f6:1a:99: ce:b4:27:fe:b3:a4:22:ee:d6:c5:e2:a6:e0:e5:59:d2:18:0d: a6:db:b1:b5:87:f5:b5:fc:ba:f2:67:28:ae:9f:5d:b4:47:00: 0f:37:9e:6a:fa:11:1e:d9:3b:56:b1:90:d9:2c:da:c9:98:f1: 0b:5a:05:d2:db:67:64:f4:b5:98:ef:3c:ba:99:02:6a:75:04: b0:2d:70:1e:1e:98:f8:b5:a2:90:9a:88:58:10:00:6d:3a:62: 25:db:7d:f1:d3:03:ca:a1:92:47:af:76:f4:eb:0c:78:3b:64: ad:cd:20:55:d2:85:45:9f:20:ff:5a:55:6a:a7:a1:0d:3d:54: 08:91:86:56:fd:49:d4:24:4a:f4:8c:c2:b1:6f:06:78:72:f0: 95:7d:bd:10:38:18:85:73:1a:4f:8e:8e:49:e0:6d:3f:50:64: 92:85:f9:ef:30:9f:a8:29:9a:59:d6:9c:a2:47:06:ee:2e:bf: 35:90:36:f9:40:a5:fe:ed:60:d3:d4:ef:4f:69:18:73:bf:59: fd:f2:03:81 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57CKJNwsD2l++e2e21nmoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MGY0MGJkYjllNjY0NzY5ZTkxNzU5MGY3OGRiNmU3NzE5 M2Q3NTEwHhcNMjYwMTAxMTQxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTM0ZDM2ODE3NTViYjQ0OWUyZjBiZjQxYjFkMzUyMWQ3NmQxMzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEPzvNBO+Ix75in9O6lXc1AgCiO7 g8xoAdhjrzYoL0O34FWAjqr+7tHGg6uPKHsffD1Dq4zL4sP2/f/SnTajdDiZ/433 bU2ZoBdriY+IBcJPq9zJYhQ2q3i0lck2xsP9UZzY4B0gMXrfe3ybF4Gu72LDGhp6 UBqP0q/ByrBf9eNRl7jPPJz2fqE1USatn3baXnDe5A2xAuojbGX9B3omQotQsD9g eREzaCY+EpbgwdZHJrw42rn8yjWZTy54+6lVHUFoK7py9wjtSXxhb90odJm0BvT6 bMiegiI6p8RNqHtV5fskEl7RWsrqT7Oj3LoM6VHCCwjtjTKlgD161cSKywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMU002gXVbtEni8L9BsdNSHXbROdMB8GA1UdIwQY MBaAFLkPQL255mR2npF1kPeNtudxk9dRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVE5QXZibm1aSGFla1hXUTk0MjI1M0dUMTFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9iOTJjYzMtZGRmMS00M2NiLWI0YjEt NDE1NGRhNWNlYjliLzEveFRUVGFCZFZ1MFNlTHd2MEd4MDFJZGR0RTUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9iOTJjYzMtZGRmMS00M2NiLWI0YjEtNDE1NGRhNWNlYjli LzEvdVE5QXZibm1aSGFla1hXUTk0MjI1M0dUMTFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCue3wMA0G CSqGSIb3DQEBCwUAA4IBAQBrobrxtvQRr2cnZoLzFMHV/UojXDJsLYY+fmYL1wVm nQpe911QIyS4bpx5ZEpTj/4txOj2GpnOtCf+s6Qi7tbF4qbg5VnSGA2m27G1h/W1 /LryZyiun120RwAPN55q+hEe2TtWsZDZLNrJmPELWgXS22dk9LWY7zy6mQJqdQSw LXAeHpj4taKQmohYEABtOmIl233x0wPKoZJHr3b06wx4O2StzSBV0oVFnyD/WlVq p6ENPVQIkYZW/UnUJEr0jMKxbwZ4cvCVfb0QOBiFcxpPjo5J4G0/UGSShfnvMJ+o KZpZ1pyiRwbuLr81kDb5QKX+7WDT1O9PaRhzv1n98gOB -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:35 2026 by rpki-client