This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/xoCyTYq3JkKW4BK4zaSxkOZubuM.roa File: xoCyTYq3JkKW4BK4zaSxkOZubuM.roa (raw, json) Hash identifier: gtNFd3CA4+aXuTCUqDqV1r9txHsasodxyZ7Ic/3d83E= Subject key identifier: C6:80:B2:4D:8A:B7:26:42:96:E0:12:B8:CD:A4:B1:90:E6:6E:6E:E3 Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430 Certificate serial: 019B7FF19618E1AE85B3FF6005CA30805E22 Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/xoCyTYq3JkKW4BK4zaSxkOZubuM.roa Signing time: Fri 02 Jan 2026 18:21:37 +0000 ROA not before: Fri 02 Jan 2026 18:21:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201021 IP address blocks: 46.38.141.0/24 maxlen: 24 185.143.74.0/24 maxlen: 24 185.143.75.0/24 maxlen: 24 212.16.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:96:18:e1:ae:85:b3:ff:60:05:ca:30:80:5e:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430 Validity Not Before: Jan 2 18:21:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c680b24d8ab7264296e012b8cda4b190e66e6ee3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fb:fc:66:67:2a:d2:c7:09:92:c7:97:7c:f2: ac:fa:fd:84:c5:08:50:5c:b5:4c:a9:51:10:8a:d2: 0a:03:b9:f3:98:89:56:0d:56:fb:35:52:d9:92:d2: fc:66:eb:da:7b:68:6d:ef:a6:ab:bc:88:0b:b9:d9: 82:50:11:ec:24:4d:a2:68:ee:8f:71:2b:1e:cf:8c: 68:9d:66:7e:ad:c7:bc:33:cd:40:42:01:c4:c9:2f: 12:cc:ff:f4:c5:97:db:b5:81:5f:1f:5d:32:bc:70: 92:8f:c1:c6:c7:5d:e5:4c:e3:b5:a8:82:51:a9:4a: 95:d1:6a:d5:3e:7f:7a:31:90:c2:9e:6f:2c:c7:33: 1c:72:c5:87:f3:8c:0d:5d:98:2f:4f:b4:89:a2:38: 61:0e:04:7e:bb:3f:92:45:dc:0b:a0:fb:56:52:f8: 1d:3f:a9:b4:03:ec:c5:a1:de:31:2c:cc:46:89:ba: c0:3f:cd:08:db:b3:1f:86:90:40:4d:15:8a:fb:bb: b4:1a:90:5f:1b:a1:cb:d6:7b:3f:f7:b8:a3:ef:be: 50:a0:b6:e2:cc:4a:e5:84:18:1e:28:f8:23:e7:9c: c6:3d:49:bf:fa:a1:c5:82:79:14:e7:e9:08:4a:0e: 1c:d2:09:e9:a6:1c:c8:73:23:0d:33:30:93:87:f7: ea:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:80:B2:4D:8A:B7:26:42:96:E0:12:B8:CD:A4:B1:90:E6:6E:6E:E3 X509v3 Authority Key Identifier: keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/xoCyTYq3JkKW4BK4zaSxkOZubuM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.38.141.0/24 185.143.74.0/23 212.16.85.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:ac:9f:e7:14:74:b1:24:e1:be:3f:49:04:a1:b3:39:bc:b9: da:54:63:14:02:0e:1c:71:7a:51:36:11:9c:f1:8f:9e:4d:aa: 7e:c7:4b:e4:6f:8e:14:d0:b4:02:fd:1a:bf:93:f7:b0:8e:e7: 79:39:4d:f5:00:55:df:3d:9b:46:70:3c:00:c4:f6:c2:7e:c3: b1:99:da:37:e1:09:33:3c:8b:86:fa:dc:19:a7:8a:80:15:48: e0:59:06:1b:7d:67:06:79:dc:48:00:29:ab:ab:66:27:bb:33: 13:9d:e3:22:df:3d:0e:eb:e7:08:ad:ab:bd:ca:23:68:d0:e7: 5d:be:8c:c4:df:3b:75:62:67:25:b5:27:7a:11:f5:60:79:42: c7:43:74:e0:74:79:33:3b:78:8f:2a:0d:8f:23:0c:82:50:34: d2:f9:77:87:bb:c8:d5:dd:68:49:f3:bb:ab:9b:15:8b:43:02: 79:b9:55:88:96:58:86:71:6b:85:4a:7f:91:df:0f:47:61:82: 75:d9:25:e9:fd:bb:51:93:70:08:10:ff:41:52:7e:ad:59:7f: 3c:8b:f1:a0:fd:d7:5d:cf:eb:2e:6e:84:a0:09:7e:b6:ed:dd: c2:a7:e5:36:5a:ac:07:f2:90:d1:81:f1:40:c9:d8:fb:a5:cb: ff:47:4e:7a -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/8ZYY4a6Fs/9gBcowgF4iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj NWY0MzAwHhcNMjYwMTAyMTgyMTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjgwYjI0ZDhhYjcyNjQyOTZlMDEyYjhjZGE0YjE5MGU2NmU2ZWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/v8Zmcq0scJkseXfPKs+v2ExQhQ XLVMqVEQitIKA7nzmIlWDVb7NVLZktL8Zuvae2ht76arvIgLudmCUBHsJE2iaO6P cSsez4xonWZ+rce8M81AQgHEyS8SzP/0xZfbtYFfH10yvHCSj8HGx13lTOO1qIJR qUqV0WrVPn96MZDCnm8sxzMccsWH84wNXZgvT7SJojhhDgR+uz+SRdwLoPtWUvgd P6m0A+zFod4xLMxGibrAP80I27MfhpBATRWK+7u0GpBfG6HL1ns/97ij775QoLbi zErlhBgeKPgj55zGPUm/+qHFgnkU5+kISg4c0gnpphzIcyMNMzCTh/fqjwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMaAsk2KtyZCluASuM2ksZDmbm7jMB8GA1UdIwQY MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt MmEwOWNjNTNhODA1LzEveG9DeVRZcTNKa0tXNEJLNHphU3hrT1p1YnVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1 LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALiaNAwQB uY9KAwQA1BBVMA0GCSqGSIb3DQEBCwUAA4IBAQCfrJ/nFHSxJOG+P0kEobM5vLna VGMUAg4ccXpRNhGc8Y+eTap+x0vkb44U0LQC/Rq/k/ewjud5OU31AFXfPZtGcDwA xPbCfsOxmdo34QkzPIuG+twZp4qAFUjgWQYbfWcGedxIACmrq2YnuzMTneMi3z0O 6+cIrau9yiNo0OddvozE3zt1YmcltSd6EfVgeULHQ3TgdHkzO3iPKg2PIwyCUDTS +XeHu8jV3WhJ87urmxWLQwJ5uVWIlliGcWuFSn+R3w9HYYJ12SXp/btRk3AIEP9B Un6tWX88i/Gg/dddz+suboSgCX627d3Cp+U2WqwH8pDRgfFAydj7pcv/R056 -----END CERTIFICATE-----Generated at Wed Jan 21 04:04:10 2026 by rpki-client