This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/xiXQ7Ju7uKPaOZAIfjnaz5WFcMU.roa File: xiXQ7Ju7uKPaOZAIfjnaz5WFcMU.roa (raw, json) Hash identifier: iBuZkqTWmF5qEyHqfDnsRPYzPSipq5gF9EuzoGnhAUE= Subject key identifier: C6:25:D0:EC:9B:BB:B8:A3:DA:39:90:08:7E:39:DA:CF:95:85:70:C5 Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Certificate serial: 019B7AC80BEB60E84ABDC7686C7B22392E3A Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/xiXQ7Ju7uKPaOZAIfjnaz5WFcMU.roa Signing time: Thu 01 Jan 2026 18:18:09 +0000 ROA not before: Thu 01 Jan 2026 18:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62300 IP address blocks: 185.232.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:0b:eb:60:e8:4a:bd:c7:68:6c:7b:22:39:2e:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Validity Not Before: Jan 1 18:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c625d0ec9bbbb8a3da3990087e39dacf958570c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:fa:bd:54:06:3c:8f:ce:b2:6e:44:85:5e:0a: 52:36:5e:02:59:5e:a5:5c:f7:55:79:c1:ee:b2:fa: b4:d6:dd:13:62:ae:ad:49:22:70:63:80:6f:63:26: 2f:77:51:21:07:e7:44:9d:41:24:5a:aa:25:eb:58: 58:b5:e7:8a:64:f7:dc:ee:91:bc:aa:ab:da:83:5d: 48:a9:6a:06:e4:36:b6:3f:49:af:23:36:63:01:ff: a7:7b:26:56:a1:05:37:f7:2a:2c:e6:4b:18:14:19: ca:0e:ad:42:c4:95:d5:f2:e1:77:e7:f9:56:6f:1b: 9b:42:62:37:7e:81:50:cf:f6:83:8e:b6:47:75:ca: c0:00:45:8e:26:d2:92:38:7c:e8:cd:d0:8b:1f:3b: 42:8d:b9:f1:f5:b9:58:e2:4c:8a:e1:80:6e:e5:82: 61:91:be:01:7a:68:e4:69:1b:b2:58:a4:e4:dd:36: ab:ad:f0:04:22:44:ff:38:a7:f5:69:c9:28:bd:be: 89:35:ea:96:02:ea:09:ad:88:da:3f:00:23:35:52: 3d:da:14:7b:75:56:f4:4b:1f:55:ba:d5:6d:5c:85: d7:f4:b2:f3:b1:ce:5d:1d:37:03:38:8e:a0:22:40: 67:fe:b1:12:84:91:27:ec:19:cd:1c:bf:24:37:be: 80:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:25:D0:EC:9B:BB:B8:A3:DA:39:90:08:7E:39:DA:CF:95:85:70:C5 X509v3 Authority Key Identifier: keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/xiXQ7Ju7uKPaOZAIfjnaz5WFcMU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.232.17.0/24 Signature Algorithm: sha256WithRSAEncryption 91:36:8d:1c:41:1d:f7:b6:3d:e3:c7:db:e1:d4:9e:00:56:57: bd:6a:18:e3:32:94:81:28:77:c7:70:4b:ca:0f:32:77:00:e2: fb:cc:82:47:14:84:36:3e:f2:29:cb:b6:06:0c:99:15:fd:4b: bf:cd:21:81:0b:05:74:33:5f:6c:49:45:10:53:dc:e2:58:cd: f4:b1:4c:ef:d5:91:18:d2:ef:c9:c9:7c:5d:7a:94:43:f4:46: 8c:b8:7b:48:e2:c3:96:ed:8c:cf:81:d0:35:5c:4f:3a:36:95: bd:93:19:7b:83:fb:f4:4a:b9:12:88:ef:4d:f5:5b:17:02:0d: fd:d6:fe:3b:0d:b6:82:02:f1:e3:0c:ae:8f:06:2e:cc:0e:a2: 2e:19:0f:43:0b:85:a2:96:a9:d0:0b:cd:1c:be:19:54:44:85: 5b:37:0b:2d:3f:e8:f3:68:36:94:1d:80:9f:1c:26:f8:c5:f1: 54:b3:41:98:4d:92:85:3c:d3:72:2c:40:58:ab:f3:f8:b0:63: c7:35:b8:5b:ec:1e:b1:46:1b:a9:67:d1:42:a6:31:55:9a:0e: c2:dc:29:60:c4:49:3a:5b:1f:79:4a:e7:3c:45:ce:c6:53:f9: dc:5b:2f:7d:3c:d7:81:37:91:96:b9:d5:19:11:87:b1:58:27: 9f:87:a8:e4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yAvrYOhKvcdobHsiOS46MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOWZkYzdmYjM5ZWJiYmVkNGVlNTRmNzAzZDNhYzYxNTNk ZGVlNjkwHhcNMjYwMTAxMTgxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjI1ZDBlYzliYmJiOGEzZGEzOTkwMDg3ZTM5ZGFjZjk1ODU3MGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+/q9VAY8j86ybkSFXgpSNl4CWV6l XPdVecHusvq01t0TYq6tSSJwY4BvYyYvd1EhB+dEnUEkWqol61hYteeKZPfc7pG8 qqvag11IqWoG5Da2P0mvIzZjAf+neyZWoQU39yos5ksYFBnKDq1CxJXV8uF35/lW bxubQmI3foFQz/aDjrZHdcrAAEWOJtKSOHzozdCLHztCjbnx9blY4kyK4YBu5YJh kb4BemjkaRuyWKTk3TarrfAEIkT/OKf1ackovb6JNeqWAuoJrYjaPwAjNVI92hR7 dVb0Sx9VutVtXIXX9LLzsc5dHTcDOI6gIkBn/rEShJEn7BnNHL8kN76AqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMYl0Oybu7ij2jmQCH452s+VhXDFMB8GA1UdIwQY MBaAFB6f3H+znru+1O5U9wPTrGFT3e5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgt NjkxZmY1YjQ0YjAxLzEveGlYUTdKdTd1S1BhT1pBSWZqbmF6NVdGY01VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgtNjkxZmY1YjQ0YjAx LzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuegRMA0G CSqGSIb3DQEBCwUAA4IBAQCRNo0cQR33tj3jx9vh1J4AVle9ahjjMpSBKHfHcEvK DzJ3AOL7zIJHFIQ2PvIpy7YGDJkV/Uu/zSGBCwV0M19sSUUQU9ziWM30sUzv1ZEY 0u/JyXxdepRD9EaMuHtI4sOW7YzPgdA1XE86NpW9kxl7g/v0SrkSiO9N9VsXAg39 1v47DbaCAvHjDK6PBi7MDqIuGQ9DC4WilqnQC80cvhlURIVbNwstP+jzaDaUHYCf HCb4xfFUs0GYTZKFPNNyLEBYq/P4sGPHNbhb7B6xRhupZ9FCpjFVmg7C3ClgxEk6 Wx95Suc8Rc7GU/ncWy99PNeBN5GWudUZEYexWCefh6jk -----END CERTIFICATE-----Generated at Tue Jan 20 17:24:53 2026 by rpki-client