This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/xot7g_9IEpX7nqMvFq-wwLeROuE.roa File: xot7g_9IEpX7nqMvFq-wwLeROuE.roa (raw, json) Hash identifier: BUy2y8M8+y90r9tXXuvE0w/voVjqhyVcI4GOXww68dE= Subject key identifier: C6:8B:7B:83:FF:48:12:95:FB:9E:A3:2F:16:AF:B0:C0:B7:91:3A:E1 Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9 Certificate serial: 019B79113A5A566F4E88668D434524E1016A Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/xot7g_9IEpX7nqMvFq-wwLeROuE.roa Signing time: Thu 01 Jan 2026 10:18:50 +0000 ROA not before: Thu 01 Jan 2026 10:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7018 IP address blocks: 104.243.199.0/24 maxlen: 24 104.243.200.0/24 maxlen: 24 104.243.201.0/24 maxlen: 24 104.243.202.0/24 maxlen: 24 104.243.204.0/24 maxlen: 24 216.173.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:3a:5a:56:6f:4e:88:66:8d:43:45:24:e1:01:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9 Validity Not Before: Jan 1 10:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c68b7b83ff481295fb9ea32f16afb0c0b7913ae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:72:0b:53:d7:42:bb:75:ae:f3:ea:b7:46:a9: e0:49:a3:8a:45:49:f7:2a:48:ee:a5:87:39:0d:be: 7e:32:cd:26:5b:72:4d:46:10:47:9e:cb:1b:c0:59: 0f:3e:32:98:8e:5a:a7:0d:2f:1b:46:7a:71:93:ed: 47:b1:14:c6:54:47:3a:4c:80:b3:29:d6:4a:ed:e5: df:bc:a5:18:51:79:ab:36:12:44:0e:05:8e:e8:da: 46:95:4a:9c:43:f9:82:b1:8c:93:53:22:56:46:f4: da:e8:ea:5a:ee:fa:98:ca:a0:c0:61:8a:36:c7:e4: 85:fa:99:54:07:e7:92:3a:40:61:77:62:d5:01:81: 89:cc:ee:ae:6b:05:47:f4:88:db:28:db:5f:2a:ac: 69:69:bd:d3:85:73:db:72:88:3d:d2:f8:03:6c:6e: cf:b7:17:e7:b8:09:6f:d2:e0:eb:54:22:fe:45:cb: 9e:93:98:79:61:c2:16:ee:46:56:c9:29:fe:ab:35: ca:51:de:da:e6:9e:86:37:9d:30:0b:2a:e9:c4:f0: 1e:55:8b:7a:3a:ee:15:7c:82:86:ab:b9:cf:e7:57: 34:db:f7:26:d9:ea:58:43:d8:f7:a7:fa:22:04:54: 07:ef:13:30:20:62:8f:e3:45:44:99:53:06:b9:15: 4c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:8B:7B:83:FF:48:12:95:FB:9E:A3:2F:16:AF:B0:C0:B7:91:3A:E1 X509v3 Authority Key Identifier: keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/xot7g_9IEpX7nqMvFq-wwLeROuE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.243.199.0-104.243.202.255 104.243.204.0/24 216.173.87.0/24 Signature Algorithm: sha256WithRSAEncryption 65:b3:07:e2:5c:3c:85:b3:23:f8:c9:0a:d3:cc:b4:ca:94:e5: 5a:c0:f7:fe:6d:cc:6a:fd:9a:58:71:38:20:81:16:5a:3e:5a: 7a:aa:84:01:9c:e6:8e:2b:11:62:93:04:b1:ff:1d:8d:73:93: 97:a9:77:d4:cb:42:ea:c1:0f:33:cb:32:76:e4:50:ac:74:7f: 31:a9:12:1e:d9:94:e5:5c:e5:de:16:58:3e:4c:bf:25:ec:1d: b7:cf:0d:71:b1:11:31:cf:b0:5a:a4:38:18:e5:58:ff:a2:8e: a5:d9:2d:a8:d2:7f:ae:54:83:e2:4a:7e:2d:23:8d:d7:fe:66: fa:43:5e:38:89:7f:70:9a:53:94:6b:d0:f3:3a:6f:7d:4f:06: 95:5a:48:be:d7:38:74:19:0f:2d:9e:5d:52:dd:74:c0:5c:e1: cc:68:fb:eb:88:96:0a:9f:a6:91:18:64:42:e9:d9:18:3a:94: 2f:32:10:2b:b6:07:58:a3:c6:8e:24:61:dc:45:b2:07:b3:99: 0b:7c:ac:4b:79:bc:75:ed:29:6c:f9:01:33:9d:ae:92:17:b9: fc:cf:77:d5:c7:de:89:8c:e7:da:ed:20:b4:97:c9:e9:17:5b: fa:c3:2d:0d:33:2a:ad:e0:5a:71:d8:6a:e1:e2:de:96:5a:ce: 31:79:07:ac -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt5ETpaVm9OiGaNQ0Uk4QFqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj Mzg1ZTkwHhcNMjYwMTAxMTAxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjhiN2I4M2ZmNDgxMjk1ZmI5ZWEzMmYxNmFmYjBjMGI3OTEzYWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3ILU9dCu3Wu8+q3RqngSaOKRUn3 KkjupYc5Db5+Ms0mW3JNRhBHnssbwFkPPjKYjlqnDS8bRnpxk+1HsRTGVEc6TICz KdZK7eXfvKUYUXmrNhJEDgWO6NpGlUqcQ/mCsYyTUyJWRvTa6Opa7vqYyqDAYYo2 x+SF+plUB+eSOkBhd2LVAYGJzO6uawVH9IjbKNtfKqxpab3ThXPbcog90vgDbG7P txfnuAlv0uDrVCL+Rcuek5h5YcIW7kZWySn+qzXKUd7a5p6GN50wCyrpxPAeVYt6 Ou4VfIKGq7nP51c02/cm2epYQ9j3p/oiBFQH7xMwIGKP40VEmVMGuRVM9QIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFMaLe4P/SBKV+56jLxavsMC3kTrhMB8GA1UdIwQY MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt ZmIwNzk1NWYzYWFhLzEveG90N2dfOUlFcFg3bnFNdkZxLXd3TGVST3VFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBABo88cD BABo88oDBABo88wDBADYrVcwDQYJKoZIhvcNAQELBQADggEBAGWzB+JcPIWzI/jJ CtPMtMqU5VrA9/5tzGr9mlhxOCCBFlo+WnqqhAGc5o4rEWKTBLH/HY1zk5epd9TL QurBDzPLMnbkUKx0fzGpEh7ZlOVc5d4WWD5MvyXsHbfPDXGxETHPsFqkOBjlWP+i jqXZLajSf65Ug+JKfi0jjdf+ZvpDXjiJf3CaU5Rr0PM6b31PBpVaSL7XOHQZDy2e XVLddMBc4cxo++uIlgqfppEYZELp2Rg6lC8yECu2B1ijxo4kYdxFsgezmQt8rEt5 vHXtKWz5ATOdrpIXufzPd9XH3omM59rtILSXyekXW/rDLQ0zKq3gWnHYauHi3pZa zjF5B6w= -----END CERTIFICATE-----Generated at Fri Jan 2 02:41:19 2026 by rpki-client