This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/xzpWx6VUIpGcmh-1iUpPlYZppMU.roa File: xzpWx6VUIpGcmh-1iUpPlYZppMU.roa (raw, json) Hash identifier: UNWYOyMIvw/ynQuOswCka5zDXJh3HAZAPdJ+HWke4dU= Subject key identifier: C7:3A:56:C7:A5:54:22:91:9C:9A:1F:B5:89:4A:4F:95:86:69:A4:C5 Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Certificate serial: 019B7CED965562CC2F966169E653EAE11A6F Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/xzpWx6VUIpGcmh-1iUpPlYZppMU.roa Signing time: Fri 02 Jan 2026 04:18:23 +0000 ROA not before: Fri 02 Jan 2026 04:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35280 IP address blocks: 147.234.4.0/24 maxlen: 24 147.234.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:96:55:62:cc:2f:96:61:69:e6:53:ea:e1:1a:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Validity Not Before: Jan 2 04:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c73a56c7a55422919c9a1fb5894a4f958669a4c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:67:6f:b4:6b:d2:f2:99:54:2e:4b:5b:6c:f3: ad:db:15:44:99:cf:d4:7f:00:a6:cc:91:2c:44:68: da:49:ac:ab:36:2f:58:90:95:ed:36:f1:2e:99:68: 8f:85:3d:c7:71:a5:9a:41:dd:a4:cc:92:ef:57:c2: 9d:e3:66:a1:cc:3a:d5:a9:68:c4:a1:4d:14:70:87: eb:29:50:d7:41:b0:2f:1e:a5:0d:d7:28:0a:4f:01: 13:78:2a:78:ef:9d:9d:86:d2:bc:31:05:fd:59:02: 03:d2:6b:9e:2c:1d:e0:9d:65:c6:ec:60:e8:d1:cd: 85:30:9c:87:94:64:cb:7b:cf:2c:60:fa:39:b2:70: 94:86:4e:6e:12:cd:fa:ea:58:0e:13:8b:0a:96:e1: c2:12:c1:d8:d3:5d:55:41:08:d4:d6:c7:1c:aa:42: 3b:b6:6a:3d:19:6b:d1:ea:ae:df:d2:96:44:94:af: 8d:0d:e9:e5:7d:75:13:a9:a3:33:5d:27:8b:fd:be: 88:ff:5e:57:7f:7c:31:2a:2f:2b:57:1b:2f:51:9d: bf:8d:02:1b:3f:fe:f1:69:fe:a3:8c:10:39:79:5f: 8d:08:b2:17:23:56:b9:f1:02:e6:70:0a:c3:66:16: 5e:e1:d1:7c:e1:61:fc:1a:e0:0b:6c:6d:d6:6d:8b: 0f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:3A:56:C7:A5:54:22:91:9C:9A:1F:B5:89:4A:4F:95:86:69:A4:C5 X509v3 Authority Key Identifier: keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/xzpWx6VUIpGcmh-1iUpPlYZppMU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.234.4.0/23 Signature Algorithm: sha256WithRSAEncryption 29:bb:9b:1b:57:c0:7a:ad:5a:71:7b:97:ed:d7:ab:60:c8:b4: 8c:4f:5f:ec:ab:11:f4:b8:9e:70:79:14:e7:7b:16:40:44:96: 9c:74:88:e5:69:e0:4e:fc:4f:de:f2:80:3f:f5:08:94:82:a4: ab:52:af:b7:fa:5d:be:fe:fb:ce:a6:2a:c6:c8:cc:27:f3:0d: 88:e6:ad:b4:59:30:73:b8:55:d6:bf:10:34:fe:78:c8:52:0a: 20:b9:75:03:5f:4b:b3:c2:84:20:0e:bb:b1:3c:36:dc:2e:38: 61:80:dd:09:05:c0:fa:b2:32:8d:63:a4:9c:7b:f8:48:ff:4b: 90:c2:e5:0c:b9:c3:dc:83:6d:68:ef:c0:7b:97:71:0a:bb:d1: ba:e4:7d:26:e6:61:14:b5:04:26:fa:8f:0d:3e:a6:8f:34:1e: f4:c2:48:e8:f4:29:7e:ab:67:f2:f1:97:88:5b:cb:58:97:98: 65:f9:ea:7e:8a:fa:66:a0:00:73:10:f1:2c:30:91:e5:e6:26: 94:9c:39:b6:ea:42:b4:7e:9c:8b:fe:d7:7b:14:17:7d:c6:2f: 9a:67:72:8d:24:90:39:33:5f:e5:df:e3:3c:e6:ab:fd:05:48: 0c:c2:45:57:30:a3:0f:31:01:38:ea:83:da:44:de:fe:83:d6: ea:13:cc:8c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87ZZVYswvlmFp5lPq4RpvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYmFkNzRlN2Y2YzA5NDlhMjczNmE1NzQ3ODQ5NmQ3ZDhi NDUwZTYwHhcNMjYwMTAyMDQxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzNhNTZjN2E1NTQyMjkxOWM5YTFmYjU4OTRhNGY5NTg2NjlhNGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2dvtGvS8plULktbbPOt2xVEmc/U fwCmzJEsRGjaSayrNi9YkJXtNvEumWiPhT3HcaWaQd2kzJLvV8Kd42ahzDrVqWjE oU0UcIfrKVDXQbAvHqUN1ygKTwETeCp4752dhtK8MQX9WQID0mueLB3gnWXG7GDo 0c2FMJyHlGTLe88sYPo5snCUhk5uEs366lgOE4sKluHCEsHY011VQQjU1sccqkI7 tmo9GWvR6q7f0pZElK+NDenlfXUTqaMzXSeL/b6I/15Xf3wxKi8rVxsvUZ2/jQIb P/7xaf6jjBA5eV+NCLIXI1a58QLmcArDZhZe4dF84WH8GuALbG3WbYsPowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMc6VselVCKRnJoftYlKT5WGaaTFMB8GA1UdIwQY MBaAFCG6105/bAlJonNqV0eEltfYtFDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQt NDQzMzIyOWE4NDczLzEveHpwV3g2VlVJcEdjbWgtMWlVcFBsWVpwcE1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQtNDQzMzIyOWE4NDcz LzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBk+oEMA0G CSqGSIb3DQEBCwUAA4IBAQApu5sbV8B6rVpxe5ft16tgyLSMT1/sqxH0uJ5weRTn exZARJacdIjlaeBO/E/e8oA/9QiUgqSrUq+3+l2+/vvOpirGyMwn8w2I5q20WTBz uFXWvxA0/njIUgoguXUDX0uzwoQgDruxPDbcLjhhgN0JBcD6sjKNY6Sce/hI/0uQ wuUMucPcg21o78B7l3EKu9G65H0m5mEUtQQm+o8NPqaPNB70wkjo9Cl+q2fy8ZeI W8tYl5hl+ep+ivpmoABzEPEsMJHl5iaUnDm26kK0fpyL/td7FBd9xi+aZ3KNJJA5 M1/l3+M85qv9BUgMwkVXMKMPMQE46oPaRN7+g9bqE8yM -----END CERTIFICATE-----Generated at Tue Jan 20 08:02:12 2026 by rpki-client