This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/Xy9KAo8RgHqzd9LCgtHpYYSq1Ws.roa File: Xy9KAo8RgHqzd9LCgtHpYYSq1Ws.roa (raw, json) Hash identifier: pkyeg5y/UqA2MwW/DbnlFyqNjdMeUTSbZh1g/kjVAXE= Subject key identifier: 5F:2F:4A:02:8F:11:80:7A:B3:77:D2:C2:82:D1:E9:61:84:AA:D5:6B Certificate issuer: /CN=23b1943087ce69623e76b2145b3479ac204ba1c9 Certificate serial: 019B7F13CE46A82D2EDE4A4C9F5260153AC5 Authority key identifier: 23:B1:94:30:87:CE:69:62:3E:76:B2:14:5B:34:79:AC:20:4B:A1:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/Xy9KAo8RgHqzd9LCgtHpYYSq1Ws.roa Signing time: Fri 02 Jan 2026 14:19:22 +0000 ROA not before: Fri 02 Jan 2026 14:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 87.236.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:ce:46:a8:2d:2e:de:4a:4c:9f:52:60:15:3a:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23b1943087ce69623e76b2145b3479ac204ba1c9 Validity Not Before: Jan 2 14:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f2f4a028f11807ab377d2c282d1e96184aad56b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:48:eb:b5:5a:1c:d3:21:33:81:14:9f:b9:81: 17:a9:f2:56:4c:af:dd:5d:8a:38:79:db:3a:68:f1: 33:51:d8:d9:d0:d1:c4:df:4d:cd:8f:c3:36:aa:ac: e7:3c:45:d0:86:83:64:e2:45:92:5f:dd:16:ba:6a: 37:45:db:7a:21:5d:cb:7f:a2:62:05:33:b2:e6:72: aa:a4:92:8f:a3:e8:41:f7:57:02:0c:31:b1:19:83: e9:17:53:fe:4d:40:5e:d2:8f:22:08:61:2e:a7:35: 7c:2d:88:32:41:c7:63:42:bb:47:2c:65:5a:35:2d: f7:3e:6a:d9:d7:6f:e3:3c:8e:fb:b7:62:b0:1e:03: 47:3f:59:de:8d:16:97:fc:8e:1f:b4:52:c6:52:93: 1f:85:8a:08:29:cc:21:d3:6e:c9:9a:a2:30:96:7b: a0:52:bf:43:09:fa:e4:ec:3f:5e:9b:4d:7d:78:f2: 85:8f:aa:78:4f:d1:3d:eb:6f:d5:0c:6c:84:a1:3e: 9e:eb:7a:a4:32:8e:cf:79:cf:68:c2:28:e3:17:ee: d7:de:ef:77:4b:dc:7b:5a:66:73:84:2a:6a:07:5a: b9:dc:b2:eb:d0:ca:39:9d:71:73:11:fe:fb:64:5f: 7c:51:07:1d:07:78:24:a1:1c:33:84:cf:16:ea:bc: 49:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:2F:4A:02:8F:11:80:7A:B3:77:D2:C2:82:D1:E9:61:84:AA:D5:6B X509v3 Authority Key Identifier: keyid:23:B1:94:30:87:CE:69:62:3E:76:B2:14:5B:34:79:AC:20:4B:A1:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/Xy9KAo8RgHqzd9LCgtHpYYSq1Ws.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.236.67.0/24 Signature Algorithm: sha256WithRSAEncryption 53:19:1a:e0:1a:df:8c:3c:a3:72:67:ef:c9:5b:ca:96:5c:31: 7e:f2:c2:2c:70:97:c2:ea:b8:be:c9:f0:db:09:c2:eb:cb:15: 6a:ec:cb:e4:02:00:f8:18:b6:5d:fd:ef:8f:95:49:49:eb:07: cf:be:80:9c:3c:46:2c:39:0a:b4:09:bb:1f:df:62:49:da:ad: 75:ae:9f:8f:76:38:13:c4:5b:c8:60:d3:6b:0e:26:49:0d:56: 38:96:8c:fe:b7:3c:12:47:0e:21:26:c1:98:8e:55:89:b7:bf: a5:8c:9a:ac:b2:54:6f:c7:fc:71:7b:31:35:5b:d8:59:21:62: 5a:16:c4:25:23:41:57:b1:97:4c:43:a3:96:8b:37:71:f5:5e: 33:6d:f8:3f:22:7c:28:3f:0b:9c:7a:54:db:18:3f:6a:fd:c6: 00:b6:f0:d8:3f:e8:52:d4:41:79:a3:35:71:39:f7:9e:25:17: 6f:a1:07:d3:29:7f:5c:e9:66:4a:8b:a0:6e:f9:c9:28:9d:08: 37:df:ca:3e:2f:3a:6e:e0:41:e0:f9:42:09:6d:12:5e:81:29: 36:70:c1:5c:1d:5a:02:99:5b:7c:4e:14:ee:4a:01:be:c2:c2: cb:95:d2:c7:87:a8:f8:44:c9:c0:d2:55:29:d5:fc:9b:ac:05: 9d:81:94:92 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E85GqC0u3kpMn1JgFTrFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzYjE5NDMwODdjZTY5NjIzZTc2YjIxNDViMzQ3OWFjMjA0 YmExYzkwHhcNMjYwMTAyMTQxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjJmNGEwMjhmMTE4MDdhYjM3N2QyYzI4MmQxZTk2MTg0YWFkNTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUjrtVoc0yEzgRSfuYEXqfJWTK/d XYo4eds6aPEzUdjZ0NHE303Nj8M2qqznPEXQhoNk4kWSX90Wumo3Rdt6IV3Lf6Ji BTOy5nKqpJKPo+hB91cCDDGxGYPpF1P+TUBe0o8iCGEupzV8LYgyQcdjQrtHLGVa NS33PmrZ12/jPI77t2KwHgNHP1nejRaX/I4ftFLGUpMfhYoIKcwh027JmqIwlnug Ur9DCfrk7D9em019ePKFj6p4T9E962/VDGyEoT6e63qkMo7Pec9owijjF+7X3u93 S9x7WmZzhCpqB1q53LLr0Mo5nXFzEf77ZF98UQcdB3gkoRwzhM8W6rxJYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF8vSgKPEYB6s3fSwoLR6WGEqtVrMB8GA1UdIwQY MBaAFCOxlDCHzmliPnayFFs0eawgS6HJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTdHVU1JZk9hV0ktZHJJVVd6UjVyQ0JMb2NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83M2YxYzktODJiMC00ZWRlLWI4OTkt Zjc0MmYzOTVhYWY5LzEvWHk5S0FvOFJnSHF6ZDlMQ2d0SHBZWVNxMVdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83M2YxYzktODJiMC00ZWRlLWI4OTktZjc0MmYzOTVhYWY5 LzEvSTdHVU1JZk9hV0ktZHJJVVd6UjVyQ0JMb2NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+xDMA0G CSqGSIb3DQEBCwUAA4IBAQBTGRrgGt+MPKNyZ+/JW8qWXDF+8sIscJfC6ri+yfDb CcLryxVq7MvkAgD4GLZd/e+PlUlJ6wfPvoCcPEYsOQq0Cbsf32JJ2q11rp+PdjgT xFvIYNNrDiZJDVY4loz+tzwSRw4hJsGYjlWJt7+ljJqsslRvx/xxezE1W9hZIWJa FsQlI0FXsZdMQ6OWizdx9V4zbfg/InwoPwucelTbGD9q/cYAtvDYP+hS1EF5ozVx OfeeJRdvoQfTKX9c6WZKi6Bu+ckonQg338o+Lzpu4EHg+UIJbRJegSk2cMFcHVoC mVt8ThTuSgG+wsLLldLHh6j4RMnA0lUp1fybrAWdgZSS -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:57 2026 by rpki-client