This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/XDt3HSAITAjIP_pvByWqWOCrWbY.roa File: XDt3HSAITAjIP_pvByWqWOCrWbY.roa (raw, json) Hash identifier: rMgBTA98/ykH6kP0xZV6EmOpzcS5GZNFfect/boaoxA= Subject key identifier: 5C:3B:77:1D:20:08:4C:08:C8:3F:FA:6F:07:25:AA:58:E0:AB:59:B6 Certificate issuer: /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b Certificate serial: 019BF58AC2DB26DF3E4DD25BB8CA6CFAB8C8 Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/XDt3HSAITAjIP_pvByWqWOCrWbY.roa Signing time: Sun 25 Jan 2026 14:24:30 +0000 ROA not before: Sun 25 Jan 2026 14:24:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8903 IP address blocks: 77.72.104.0/21 maxlen: 24 84.18.0.0/19 maxlen: 24 92.60.160.0/20 maxlen: 24 92.60.173.0/24 maxlen: 24 176.98.220.0/22 maxlen: 24 185.66.60.0/22 maxlen: 24 185.145.224.0/22 maxlen: 24 185.155.64.0/22 maxlen: 24 185.173.44.0/22 maxlen: 24 185.187.180.0/22 maxlen: 24 185.224.76.0/22 maxlen: 24 193.34.240.0/22 maxlen: 24 195.5.64.0/19 maxlen: 24 212.49.128.0/18 maxlen: 24 212.49.189.0/24 maxlen: 24 212.59.192.0/19 maxlen: 19 212.66.161.0/24 maxlen: 24 212.66.162.0/23 maxlen: 23 212.66.163.0/24 maxlen: 24 212.66.164.0/22 maxlen: 22 212.66.168.0/21 maxlen: 21 212.66.176.0/20 maxlen: 24 212.163.0.0/16 maxlen: 24 213.9.128.0/17 maxlen: 24 213.9.142.0/23 maxlen: 23 213.192.192.0/18 maxlen: 24 213.192.193.0/24 maxlen: 24 213.192.195.0/24 maxlen: 24 213.192.200.0/22 maxlen: 22 213.192.203.0/24 maxlen: 24 213.192.206.0/23 maxlen: 23 213.192.212.0/22 maxlen: 22 213.192.213.0/24 maxlen: 24 213.192.216.0/21 maxlen: 21 213.192.224.0/22 maxlen: 22 213.192.228.0/23 maxlen: 23 213.192.232.0/22 maxlen: 22 213.192.238.0/24 maxlen: 24 213.192.239.0/24 maxlen: 24 213.192.240.0/24 maxlen: 24 213.192.241.0/24 maxlen: 24 213.192.242.0/23 maxlen: 23 213.192.244.0/23 maxlen: 23 213.192.246.0/24 maxlen: 24 213.192.247.0/24 maxlen: 24 213.192.248.0/21 maxlen: 21 213.192.249.0/24 maxlen: 24 213.192.251.0/24 maxlen: 24 213.192.252.0/23 maxlen: 23 213.192.253.0/24 maxlen: 24 213.192.254.0/24 maxlen: 24 213.192.255.0/24 maxlen: 24 2001:ac0::/29 maxlen: 29 2001:ac0::/32 maxlen: 48 2001:ac0:c0c0::/44 maxlen: 44 2001:ac0:c880::/44 maxlen: 44 2a0d:59c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:8a:c2:db:26:df:3e:4d:d2:5b:b8:ca:6c:fa:b8:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b Validity Not Before: Jan 25 14:24:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c3b771d20084c08c83ffa6f0725aa58e0ab59b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:87:20:13:65:9e:c2:ab:ac:35:3f:ed:01:96: d3:10:f0:d1:00:49:0a:65:f5:b7:0c:ac:c9:f5:1e: 34:5c:fc:7c:ce:4b:84:6e:d2:9e:4f:a0:9c:9d:9d: e1:72:b7:a6:68:f4:c0:32:e0:55:1a:26:35:ce:42: d7:35:4f:7a:07:84:2a:f4:5e:fd:f8:54:39:ad:bf: d5:c9:00:28:1c:0f:52:ab:cf:d4:1e:d2:22:48:95: 37:93:5a:76:a5:94:ad:2c:31:7d:9b:c7:53:86:ca: dc:0d:5b:b0:dc:11:15:e5:f2:9d:31:52:46:08:35: 5f:09:8e:f5:fd:6c:7a:94:0c:a8:2d:0a:e2:40:82: 7e:c8:46:95:9a:51:69:d3:29:8e:02:72:82:5a:52: 06:c3:27:3c:d3:1b:d8:09:ea:ea:d2:5f:7e:1f:e1: 07:e4:96:f4:a3:b4:60:6c:97:27:21:d3:fe:3e:0d: 52:a5:5b:9f:00:0b:66:6a:4c:b0:f7:66:3b:1f:48: 0b:b3:18:85:55:ab:2b:c5:8a:20:1a:47:90:d9:56: bc:9b:ad:31:80:47:b0:8d:fd:dc:a4:e3:d3:6b:92: a2:21:9f:19:76:27:47:53:61:31:0f:6a:31:73:bf: 26:04:14:4b:be:63:cc:db:17:a2:d8:9c:ed:cd:70: 9e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:3B:77:1D:20:08:4C:08:C8:3F:FA:6F:07:25:AA:58:E0:AB:59:B6 X509v3 Authority Key Identifier: keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/XDt3HSAITAjIP_pvByWqWOCrWbY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.72.104.0/21 84.18.0.0/19 92.60.160.0/20 176.98.220.0/22 185.66.60.0/22 185.145.224.0/22 185.155.64.0/22 185.173.44.0/22 185.187.180.0/22 185.224.76.0/22 193.34.240.0/22 195.5.64.0/19 212.49.128.0/18 212.59.192.0/19 212.66.161.0-212.66.191.255 212.163.0.0/16 213.9.128.0/17 213.192.192.0/18 IPv6: 2001:ac0::/29 2a0d:59c0::/29 Signature Algorithm: sha256WithRSAEncryption ae:e0:52:5e:b9:c3:76:61:e4:f3:ad:1d:62:ab:0e:68:82:a1: 4e:f0:1c:43:5e:9f:24:dc:c9:39:ca:4f:87:6e:1a:22:d1:33: 7d:78:47:11:ba:fe:bb:e1:c0:5a:92:0b:c5:d7:15:2a:fc:dd: 96:d4:86:77:77:86:ff:38:ca:3e:0f:9d:10:0f:0f:9c:c2:db: 0d:3c:6c:b3:8e:24:28:6f:cf:8b:de:b5:1c:4c:41:b7:9c:f1: 61:f5:a3:e2:97:33:87:6a:4d:99:c7:0d:da:ae:54:14:f1:a0: 10:6b:0d:a6:fa:38:f7:47:dd:46:5c:01:00:6a:34:bb:b4:f0: f9:7f:7b:11:02:4f:d6:2a:f3:5e:3c:42:2c:34:fd:3d:6f:ef: b8:26:41:91:2c:54:b3:c6:47:08:62:e9:90:d9:bc:42:ab:35: ee:28:6e:f8:bf:dc:e4:b7:af:23:28:85:d6:bb:8e:0e:43:2f: 80:77:b3:0c:5f:97:6d:05:cb:9a:1f:53:ba:ff:09:80:2b:23: a0:2d:4f:19:96:e8:8e:2a:dc:7b:8e:fd:11:f8:ab:88:cf:4d: a9:42:6a:71:fa:4e:d6:b9:84:cc:b3:65:00:53:9e:bf:55:ec: 94:d1:dc:ee:99:98:84:0f:fe:d0:5a:2a:6b:cf:43:9d:52:44: 6b:06:a8:f2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgISAZv1isLbJt8+TdJbuMps+rjIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MTQ5NjFmNjdmMjJjNjFlODRhNjZjOGFkOWMxYThjZTUx ZDA5OWIwHhcNMjYwMTI1MTQyNDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzNiNzcxZDIwMDg0YzA4YzgzZmZhNmYwNzI1YWE1OGUwYWI1OWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4cgE2WewqusNT/tAZbTEPDRAEkK ZfW3DKzJ9R40XPx8zkuEbtKeT6CcnZ3hcremaPTAMuBVGiY1zkLXNU96B4Qq9F79 +FQ5rb/VyQAoHA9Sq8/UHtIiSJU3k1p2pZStLDF9m8dThsrcDVuw3BEV5fKdMVJG CDVfCY71/Wx6lAyoLQriQIJ+yEaVmlFp0ymOAnKCWlIGwyc80xvYCerq0l9+H+EH 5Jb0o7RgbJcnIdP+Pg1SpVufAAtmakyw92Y7H0gLsxiFVasrxYogGkeQ2Va8m60x gEewjf3cpOPTa5KiIZ8ZdidHU2ExD2oxc78mBBRLvmPM2xei2JztzXCefwIDAQAB o4ICjzCCAoswHQYDVR0OBBYEFFw7dx0gCEwIyD/6bwclqljgq1m2MB8GA1UdIwQY MBaAFLkUlh9n8ixh6EpmyK2cGozlHQmbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTIt Mjc0NzNjYTYxMmRlLzEvWER0M0hTQUlUQWpJUF9wdkJ5V3FXT0NyV2JZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTItMjc0NzNjYTYxMmRl LzEvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGkBggrBgEFBQcBBwEB/wSBlDCBkTB5BAIAATBzAwQDTUho AwQFVBIAAwQEXDygAwQCsGLcAwQCuUI8AwQCuZHgAwQCuZtAAwQCua0sAwQCubu0 AwQCueBMAwQCwSLwAwQFwwVAAwQG1DGAAwQF1DvAMAwDBADUQqEDBAbUQoADAwDU owMEB9UJgAMEBtXAwDAUBAIAAjAOAwUDIAEKwAMFAyoNWcAwDQYJKoZIhvcNAQEL BQADggEBAK7gUl65w3Zh5POtHWKrDmiCoU7wHENenyTcyTnKT4duGiLRM314RxG6 /rvhwFqSC8XXFSr83ZbUhnd3hv84yj4PnRAPD5zC2w08bLOOJChvz4vetRxMQbec 8WH1o+KXM4dqTZnHDdquVBTxoBBrDab6OPdH3UZcAQBqNLu08Pl/exECT9Yq8148 Qiw0/T1v77gmQZEsVLPGRwhi6ZDZvEKrNe4obvi/3OS3ryMohda7jg5DL4B3swxf l20Fy5ofU7r/CYArI6AtTxmW6I4q3HuO/RH4q4jPTalCanH6Tta5hMyzZQBTnr9V 7JTR3O6ZmIQP/tBaKmvPQ51SRGsGqPI= -----END CERTIFICATE-----Generated at Mon Jan 26 20:41:36 2026 by rpki-client