This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/xuPytDWWOm0n5Q8kqhQeYQRc770.roa File: xuPytDWWOm0n5Q8kqhQeYQRc770.roa (raw, json) Hash identifier: nV8TEsZ35qIOpq9/LxSQCX5axEhmxxpZi06Zd6Qworo= Subject key identifier: C6:E3:F2:B4:35:96:3A:6D:27:E5:0F:24:AA:14:1E:61:04:5C:EF:BD Certificate issuer: /CN=7f9b4cfdc9b0d9e3c31e0ebb81e6f1b1cbbdc9e4 Certificate serial: 019B7B36535E7AAC80E95FA39FF80BC82BA9 Authority key identifier: 7F:9B:4C:FD:C9:B0:D9:E3:C3:1E:0E:BB:81:E6:F1:B1:CB:BD:C9:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f5tM_cmw2ePDHg67gebxscu9yeQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/xuPytDWWOm0n5Q8kqhQeYQRc770.roa Signing time: Thu 01 Jan 2026 20:18:36 +0000 ROA not before: Thu 01 Jan 2026 20:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59874 IP address blocks: 185.175.192.0/24 maxlen: 24 185.175.193.0/24 maxlen: 24 185.175.194.0/24 maxlen: 24 185.175.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.mft rsync://rpki.ripe.net/repository/DEFAULT/f5tM_cmw2ePDHg67gebxscu9yeQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:53:5e:7a:ac:80:e9:5f:a3:9f:f8:0b:c8:2b:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f9b4cfdc9b0d9e3c31e0ebb81e6f1b1cbbdc9e4 Validity Not Before: Jan 1 20:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6e3f2b435963a6d27e50f24aa141e61045cefbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:df:33:a3:c1:85:a0:38:aa:00:dd:91:83:a1: 19:05:b6:d3:88:4b:a6:7c:21:81:a5:c9:a9:bf:8b: 1a:02:ef:d0:9b:51:00:70:ca:68:9a:06:1f:ab:d5: 44:f6:fc:ec:24:6e:fd:43:db:e4:4a:15:25:9d:63: 40:db:ac:95:52:54:5d:89:14:50:3d:ce:c4:80:f4: 76:d4:06:bc:29:77:98:f2:0a:1d:5b:9c:44:74:47: c1:e1:db:65:fb:03:44:e3:f0:42:d4:cb:60:0d:ea: 99:d3:43:64:d4:54:4d:83:5b:29:57:b8:6a:8c:7b: 14:10:13:9f:78:be:e3:04:63:15:14:e1:5e:cd:cf: 94:4f:2b:c3:0e:50:1c:82:c8:4a:e1:0d:98:df:31: 3f:bb:b1:fc:c0:bc:8f:a4:79:70:11:30:e8:ee:28: f3:85:cb:59:61:58:e5:a0:c1:c8:fe:86:62:c9:2a: 25:4c:dd:5d:d2:4a:cf:77:75:6a:9a:eb:28:cb:98: c3:80:f7:1a:1e:2c:53:f5:b5:2e:58:f1:e7:3c:33: dd:ee:d3:70:10:dd:bd:c5:40:c9:a6:03:a7:d7:a3: e9:99:70:ff:5b:90:38:d4:37:53:89:f4:57:4f:62: 10:2a:7a:5d:b3:a8:99:8c:48:8d:32:55:7b:d9:fa: 57:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E3:F2:B4:35:96:3A:6D:27:E5:0F:24:AA:14:1E:61:04:5C:EF:BD X509v3 Authority Key Identifier: keyid:7F:9B:4C:FD:C9:B0:D9:E3:C3:1E:0E:BB:81:E6:F1:B1:CB:BD:C9:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5tM_cmw2ePDHg67gebxscu9yeQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/xuPytDWWOm0n5Q8kqhQeYQRc770.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.175.192.0/22 Signature Algorithm: sha256WithRSAEncryption 92:f5:1f:ba:6e:3f:f7:42:f9:9b:74:1e:52:14:05:48:69:96: 02:5c:74:a1:e8:06:cb:ea:fa:a6:01:05:6f:82:05:ae:6e:38: 8c:2a:15:98:a2:e8:c2:a8:ed:a5:82:5a:2a:d9:92:6b:06:89: 82:62:87:42:cf:6c:ec:4d:68:90:9c:e7:c6:ca:e5:84:8f:f2: aa:0c:09:1e:bc:51:59:57:50:6b:2d:45:79:30:99:9c:9a:2a: 04:5c:bb:6a:ef:0f:f6:11:4d:6b:d2:97:21:17:cb:3c:80:91: 41:a6:1e:2c:1e:c3:ab:34:51:06:8d:d5:32:d6:b2:fd:5b:5d: b3:d1:76:b7:92:6a:8f:1a:17:0d:f1:f5:5a:37:8c:b0:f9:ec: 81:3c:f5:01:00:af:d0:c2:79:ef:d9:ed:bb:f9:3b:b9:e4:ac: 90:4d:68:2f:b5:f4:4a:5a:eb:a6:a5:88:d1:0f:cb:36:f0:a2: 08:92:3e:bf:e2:2b:ee:d5:cc:ec:4c:56:42:52:7d:72:ff:55: a1:99:3f:29:7d:e5:ae:58:33:eb:85:c1:ea:15:9e:a6:0e:1a: d0:3d:4a:32:46:3a:01:4e:dd:a2:98:ae:88:03:5e:5f:53:fc: 00:1d:fc:03:8f:f3:9d:b7:3f:a1:f0:8a:2c:f1:14:84:1e:22: 0b:55:65:19 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NlNeeqyA6V+jn/gLyCupMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmOWI0Y2ZkYzliMGQ5ZTNjMzFlMGViYjgxZTZmMWIxY2Ji ZGM5ZTQwHhcNMjYwMTAxMjAxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmUzZjJiNDM1OTYzYTZkMjdlNTBmMjRhYTE0MWU2MTA0NWNlZmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAud8zo8GFoDiqAN2Rg6EZBbbTiEum fCGBpcmpv4saAu/Qm1EAcMpomgYfq9VE9vzsJG79Q9vkShUlnWNA26yVUlRdiRRQ Pc7EgPR21Aa8KXeY8godW5xEdEfB4dtl+wNE4/BC1MtgDeqZ00Nk1FRNg1spV7hq jHsUEBOfeL7jBGMVFOFezc+UTyvDDlAcgshK4Q2Y3zE/u7H8wLyPpHlwETDo7ijz hctZYVjloMHI/oZiySolTN1d0krPd3Vqmusoy5jDgPcaHixT9bUuWPHnPDPd7tNw EN29xUDJpgOn16PpmXD/W5A41DdTifRXT2IQKnpds6iZjEiNMlV72fpXMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMbj8rQ1ljptJ+UPJKoUHmEEXO+9MB8GA1UdIwQY MBaAFH+bTP3JsNnjwx4Ou4Hm8bHLvcnkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjV0TV9jbXcyZVBESGc2N2dlYnhzY3U5eWVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi84MjQ2ZWItODQ2OS00MmRmLWEwOGYt OTBjNDIxZjU1YWRiLzEveHVQeXREV1dPbTBuNVE4a3FoUWVZUVJjNzcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi84MjQ2ZWItODQ2OS00MmRmLWEwOGYtOTBjNDIxZjU1YWRi LzEvZjV0TV9jbXcyZVBESGc2N2dlYnhzY3U5eWVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCua/AMA0G CSqGSIb3DQEBCwUAA4IBAQCS9R+6bj/3QvmbdB5SFAVIaZYCXHSh6AbL6vqmAQVv ggWubjiMKhWYoujCqO2lgloq2ZJrBomCYodCz2zsTWiQnOfGyuWEj/KqDAkevFFZ V1BrLUV5MJmcmioEXLtq7w/2EU1r0pchF8s8gJFBph4sHsOrNFEGjdUy1rL9W12z 0Xa3kmqPGhcN8fVaN4yw+eyBPPUBAK/Qwnnv2e27+Tu55KyQTWgvtfRKWuumpYjR D8s28KIIkj6/4ivu1czsTFZCUn1y/1WhmT8pfeWuWDPrhcHqFZ6mDhrQPUoyRjoB Tt2imK6IA15fU/wAHfwDj/Odtz+h8Ios8RSEHiILVWUZ -----END CERTIFICATE-----Generated at Mon Feb 9 22:37:09 2026 by rpki-client