This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/xeT78wcPTTpFTx_ZDSn-jPOj960.roa File: xeT78wcPTTpFTx_ZDSn-jPOj960.roa (raw, json) Hash identifier: YEu+TOkba5EcfR4vL4O+vAIH2BMk3hjKJVmwS8XvNmw= Subject key identifier: C5:E4:FB:F3:07:0F:4D:3A:45:4F:1F:D9:0D:29:FE:8C:F3:A3:F7:AD Certificate issuer: /CN=e27e66e403d31c7958335298168de60a215c0c0f Certificate serial: 019B7F1346F3DC739D45153948E9DE5926DD Authority key identifier: E2:7E:66:E4:03:D3:1C:79:58:33:52:98:16:8D:E6:0A:21:5C:0C:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4n5m5APTHHlYM1KYFo3mCiFcDA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/xeT78wcPTTpFTx_ZDSn-jPOj960.roa Signing time: Fri 02 Jan 2026 14:18:48 +0000 ROA not before: Fri 02 Jan 2026 14:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 85.204.106.0/24 maxlen: 24 188.241.220.0/24 maxlen: 24 194.127.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.crl rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft rsync://rpki.ripe.net/repository/DEFAULT/4n5m5APTHHlYM1KYFo3mCiFcDA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:46:f3:dc:73:9d:45:15:39:48:e9:de:59:26:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e27e66e403d31c7958335298168de60a215c0c0f Validity Not Before: Jan 2 14:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5e4fbf3070f4d3a454f1fd90d29fe8cf3a3f7ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e7:d2:fa:77:51:35:59:a5:74:3b:cc:84:e6: ee:82:b4:fc:58:c1:9b:6d:85:a1:a6:d8:f8:21:76: 6d:a0:1d:19:54:ee:00:c5:43:77:16:bf:5a:80:81: 10:89:56:f9:15:53:99:a1:63:80:a7:a3:e4:f3:b2: e2:d1:58:2b:99:c2:17:90:5f:48:e2:56:a6:ea:4a: 6e:eb:0d:de:e4:e9:1d:a8:ef:06:ca:8a:0c:0e:13: 52:29:80:8a:e8:bf:6c:45:a3:8e:8c:0d:44:1e:59: 01:38:9c:15:77:0d:c3:6a:5c:67:dc:c3:9c:41:98: 0c:51:63:ce:e6:1f:25:b3:dc:bb:7c:53:f1:be:a3: 2f:ed:8f:ff:d6:17:27:8c:25:61:37:2d:7c:ec:2c: 55:84:36:b7:87:17:f7:45:d9:14:f9:2c:07:c5:f5: 49:db:04:ad:c4:94:fc:1e:79:20:ef:f4:5d:28:ce: a4:63:77:63:2a:c2:d6:6d:c2:09:c9:5f:a1:71:26: 19:ba:ed:2e:cf:e5:a7:4c:7c:f1:65:2e:68:9f:ca: 70:01:7d:ab:cf:c3:14:49:fa:ad:ec:45:83:f3:5c: fc:b2:df:9e:55:1e:01:62:46:d1:54:41:7f:e7:61: b4:28:37:34:11:7d:33:53:a0:44:4f:83:12:6f:bc: 20:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E4:FB:F3:07:0F:4D:3A:45:4F:1F:D9:0D:29:FE:8C:F3:A3:F7:AD X509v3 Authority Key Identifier: keyid:E2:7E:66:E4:03:D3:1C:79:58:33:52:98:16:8D:E6:0A:21:5C:0C:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4n5m5APTHHlYM1KYFo3mCiFcDA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/xeT78wcPTTpFTx_ZDSn-jPOj960.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.204.106.0/24 188.241.220.0/24 194.127.197.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:d8:6b:44:26:d9:5c:41:3e:fe:66:c9:64:5e:0c:f9:2b:8a: 8f:ea:5f:fa:e2:4a:76:61:08:2d:5c:b8:55:29:d4:f7:15:11: 24:be:31:d7:23:48:a0:42:d7:8d:a9:4e:48:52:85:a2:3d:da: 2a:87:46:fe:14:63:ca:03:8d:0f:3e:d0:d2:54:2b:c9:9e:25: cc:6b:dc:9a:7c:ca:cc:75:84:fb:d1:cf:ab:cd:41:cf:69:d9: ab:de:63:bd:b0:54:a2:3f:d0:93:7e:50:ea:95:1d:05:54:90: 2b:93:a1:ef:17:72:47:5d:aa:d5:c1:21:78:50:40:0d:3b:38: 0d:83:3b:2b:7f:4d:fe:12:65:e1:90:d7:88:81:31:66:6e:db: 36:36:cb:b7:d6:67:93:fe:1b:dd:3d:97:ad:dc:e4:58:61:91: 2a:a6:5e:4f:66:31:1c:5f:8d:fa:c7:e1:5e:5d:d6:2f:a4:31: c6:72:15:24:f1:03:e2:f1:53:20:e5:d5:a8:ad:77:d6:cb:ad: d6:2c:71:a6:b5:7d:0d:22:ca:d3:89:31:42:8f:01:8c:c0:fe: 4f:e5:1a:8b:04:72:81:42:9e:e6:6a:79:0e:6c:d7:8e:f2:a5: 56:59:86:73:5d:14:bd:bb:75:4e:05:96:c0:19:bb:4d:82:fd: a3:ed:9f:e1 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/E0bz3HOdRRU5SOneWSbdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyN2U2NmU0MDNkMzFjNzk1ODMzNTI5ODE2OGRlNjBhMjE1 YzBjMGYwHhcNMjYwMTAyMTQxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNWU0ZmJmMzA3MGY0ZDNhNDU0ZjFmZDkwZDI5ZmU4Y2YzYTNmN2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuefS+ndRNVmldDvMhObugrT8WMGb bYWhptj4IXZtoB0ZVO4AxUN3Fr9agIEQiVb5FVOZoWOAp6Pk87Li0VgrmcIXkF9I 4lam6kpu6w3e5OkdqO8GyooMDhNSKYCK6L9sRaOOjA1EHlkBOJwVdw3Dalxn3MOc QZgMUWPO5h8ls9y7fFPxvqMv7Y//1hcnjCVhNy187CxVhDa3hxf3RdkU+SwHxfVJ 2wStxJT8Hnkg7/RdKM6kY3djKsLWbcIJyV+hcSYZuu0uz+WnTHzxZS5on8pwAX2r z8MUSfqt7EWD81z8st+eVR4BYkbRVEF/52G0KDc0EX0zU6BET4MSb7wgkQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMXk+/MHD006RU8f2Q0p/ozzo/etMB8GA1UdIwQY MBaAFOJ+ZuQD0xx5WDNSmBaN5gohXAwPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNG41bTVBUFRISGxZTTFLWUZvM21DaUZjREE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8yNmE5NzEtZjJmZC00ZjJkLTgzMDMt NmU2ZTc2ZjM3OTQ2LzEveGVUNzh3Y1BUVHBGVHhfWkRTbi1qUE9qOTYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8yNmE5NzEtZjJmZC00ZjJkLTgzMDMtNmU2ZTc2ZjM3OTQ2 LzEvNG41bTVBUFRISGxZTTFLWUZvM21DaUZjREE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVcxqAwQA vPHcAwQAwn/FMA0GCSqGSIb3DQEBCwUAA4IBAQAd2GtEJtlcQT7+ZslkXgz5K4qP 6l/64kp2YQgtXLhVKdT3FREkvjHXI0igQteNqU5IUoWiPdoqh0b+FGPKA40PPtDS VCvJniXMa9yafMrMdYT70c+rzUHPadmr3mO9sFSiP9CTflDqlR0FVJArk6HvF3JH XarVwSF4UEANOzgNgzsrf03+EmXhkNeIgTFmbts2Nsu31meT/hvdPZet3ORYYZEq pl5PZjEcX436x+FeXdYvpDHGchUk8QPi8VMg5dWorXfWy63WLHGmtX0NIsrTiTFC jwGMwP5P5RqLBHKBQp7mankObNeO8qVWWYZzXRS9u3VOBZbAGbtNgv2j7Z/h -----END CERTIFICATE-----Generated at Tue Jan 27 02:51:27 2026 by rpki-client