This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/X_iDPN1nW5JA7DFaJuaGHWyYxHM.roa File: X_iDPN1nW5JA7DFaJuaGHWyYxHM.roa (raw, json) Hash identifier: 0BXxzNZo7OeS9MP/LttH/fhWliNs3dL+qMaMqaBeflw= Subject key identifier: 5F:F8:83:3C:DD:67:5B:92:40:EC:31:5A:26:E6:86:1D:6C:98:C4:73 Certificate issuer: /CN=a48a87c45d9720464905b6a6b0933f7c3951192d Certificate serial: 019B7C1103E1AC3D695560CC1480D57F32E3 Authority key identifier: A4:8A:87:C4:5D:97:20:46:49:05:B6:A6:B0:93:3F:7C:39:51:19:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pIqHxF2XIEZJBbamsJM_fDlRGS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/X_iDPN1nW5JA7DFaJuaGHWyYxHM.roa Signing time: Fri 02 Jan 2026 00:17:28 +0000 ROA not before: Fri 02 Jan 2026 00:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39542 IP address blocks: 91.213.242.0/24 maxlen: 24 185.43.60.0/22 maxlen: 22 185.137.252.0/23 maxlen: 24 193.201.35.0/24 maxlen: 24 193.201.37.0/24 maxlen: 24 193.201.38.0/24 maxlen: 24 193.201.43.0/24 maxlen: 24 194.50.39.0/24 maxlen: 24 2a01:6960::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.mft rsync://rpki.ripe.net/repository/DEFAULT/pIqHxF2XIEZJBbamsJM_fDlRGS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:03:e1:ac:3d:69:55:60:cc:14:80:d5:7f:32:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a48a87c45d9720464905b6a6b0933f7c3951192d Validity Not Before: Jan 2 00:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ff8833cdd675b9240ec315a26e6861d6c98c473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c0:0b:89:05:95:a3:46:06:cd:65:e7:f8:6b: 81:1a:41:62:0b:28:c2:10:03:b7:9e:51:d4:68:f9: 39:7e:07:c5:47:59:d6:0a:ec:ed:97:8f:17:42:28: bd:b8:51:8b:7f:18:db:ad:99:01:56:68:bc:0b:d7: 56:cb:ac:7b:ac:0d:e1:aa:0e:16:75:50:88:c0:9f: 70:34:02:d6:5a:89:94:71:0d:72:8d:87:11:5f:41: f7:51:2d:ad:27:12:79:bf:a4:26:82:0f:6b:a8:dd: cf:59:48:94:2e:42:e2:2f:c9:07:d8:cb:d8:d1:a8: 51:a5:28:3f:d4:1d:53:cb:97:d4:57:46:e7:c9:3d: 29:05:ba:eb:02:be:68:9f:f7:e2:67:9e:b3:5e:47: ed:4e:7c:77:2c:4b:74:d6:c5:9a:10:4c:4e:59:04: 8e:0c:89:9e:48:b3:98:19:73:3a:df:fd:30:37:c4: 70:12:76:df:3f:c2:da:20:4c:29:31:42:97:2b:4b: 63:c8:85:5d:24:63:01:04:64:82:80:ac:7c:f2:08: 93:1f:48:66:bd:e0:05:0a:ef:e4:98:c3:9d:93:73: 28:47:40:01:c9:07:0d:0e:b7:33:63:b4:cf:d3:ff: f9:73:0b:a4:2d:16:ad:e6:5b:0b:35:39:24:1b:47: 19:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F8:83:3C:DD:67:5B:92:40:EC:31:5A:26:E6:86:1D:6C:98:C4:73 X509v3 Authority Key Identifier: keyid:A4:8A:87:C4:5D:97:20:46:49:05:B6:A6:B0:93:3F:7C:39:51:19:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pIqHxF2XIEZJBbamsJM_fDlRGS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/X_iDPN1nW5JA7DFaJuaGHWyYxHM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.242.0/24 185.43.60.0/22 185.137.252.0/23 193.201.35.0/24 193.201.37.0-193.201.38.255 193.201.43.0/24 194.50.39.0/24 IPv6: 2a01:6960::/32 Signature Algorithm: sha256WithRSAEncryption ae:ac:9e:df:46:eb:c4:30:a4:e7:e3:df:e4:c2:84:bb:b2:e0: 15:d0:91:4d:b1:41:63:0c:a3:18:9e:3d:15:a4:a6:58:25:e2: 23:b3:8d:48:87:23:b3:28:d8:65:d8:e1:06:90:25:4b:1c:e0: 8c:3a:fa:52:84:ac:7f:55:c3:b8:e9:d5:a4:b3:75:a0:df:79: 64:de:fd:d4:fe:7b:5e:15:78:11:9b:82:cd:51:b8:3a:62:a1: 36:8f:50:4a:2d:de:dd:8c:7e:df:0b:94:d1:fd:a7:ab:42:2c: f0:0e:c0:33:03:16:67:cf:b8:2b:77:98:45:de:18:bd:95:5a: fe:f4:a7:48:25:2d:4f:30:7b:00:30:4f:07:3d:23:fe:b2:fa: ee:f3:60:aa:60:f1:0e:c4:c8:1e:a3:46:b9:f8:75:0f:80:8a: ad:ac:9b:54:ca:11:0a:59:39:c6:b5:9d:7e:d0:53:4c:db:6a: db:d0:1a:a0:c7:63:5d:7b:9a:5d:df:59:92:7c:d8:ae:68:13: 27:ee:a3:d2:61:a7:b8:11:de:d9:93:39:81:1f:88:d4:1a:37: e6:23:67:82:1f:e5:53:7f:11:39:2a:ba:c2:5a:3b:89:7b:36: a6:43:89:35:99:2b:fe:eb:7b:48:50:31:e0:62:aa:92:64:ad: b7:7e:d3:07 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgISAZt8EQPhrD1pVWDMFIDVfzLjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0OGE4N2M0NWQ5NzIwNDY0OTA1YjZhNmIwOTMzZjdjMzk1 MTE5MmQwHhcNMjYwMTAyMDAxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmY4ODMzY2RkNjc1YjkyNDBlYzMxNWEyNmU2ODYxZDZjOThjNDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusALiQWVo0YGzWXn+GuBGkFiCyjC EAO3nlHUaPk5fgfFR1nWCuztl48XQii9uFGLfxjbrZkBVmi8C9dWy6x7rA3hqg4W dVCIwJ9wNALWWomUcQ1yjYcRX0H3US2tJxJ5v6Qmgg9rqN3PWUiULkLiL8kH2MvY 0ahRpSg/1B1Ty5fUV0bnyT0pBbrrAr5on/fiZ56zXkftTnx3LEt01sWaEExOWQSO DImeSLOYGXM63/0wN8RwEnbfP8LaIEwpMUKXK0tjyIVdJGMBBGSCgKx88giTH0hm veAFCu/kmMOdk3MoR0AByQcNDrczY7TP0//5cwukLRat5lsLNTkkG0cZ6QIDAQAB o4ICRDCCAkAwHQYDVR0OBBYEFF/4gzzdZ1uSQOwxWibmhh1smMRzMB8GA1UdIwQY MBaAFKSKh8RdlyBGSQW2prCTP3w5URktMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcElxSHhGMlhJRVpKQmJhbXNKTV9mRGxSR1MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi83YTlmMGMtNTg4OC00ZmQ4LWJkOTAt NjgzMzg0YjE5ZWEzLzEvWF9pRFBOMW5XNUpBN0RGYUp1YUdIV3lZeEhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi83YTlmMGMtNTg4OC00ZmQ4LWJkOTAtNjgzMzg0YjE5ZWEz LzEvcElxSHhGMlhJRVpKQmJhbXNKTV9mRGxSR1MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFoGCCsGAQUFBwEHAQH/BEswSTA4BAIAATAyAwQAW9XyAwQC uSs8AwQBuYn8AwQAwckjMAwDBADBySUDBADBySYDBADBySsDBADCMicwDQQCAAIw BwMFACoBaWAwDQYJKoZIhvcNAQELBQADggEBAK6snt9G68QwpOfj3+TChLuy4BXQ kU2xQWMMoxiePRWkplgl4iOzjUiHI7Mo2GXY4QaQJUsc4Iw6+lKErH9Vw7jp1aSz daDfeWTe/dT+e14VeBGbgs1RuDpioTaPUEot3t2Mft8LlNH9p6tCLPAOwDMDFmfP uCt3mEXeGL2VWv70p0glLU8wewAwTwc9I/6y+u7zYKpg8Q7EyB6jRrn4dQ+Aiq2s m1TKEQpZOca1nX7QU0zbatvQGqDHY117ml3fWZJ82K5oEyfuo9Jhp7gR3tmTOYEf iNQaN+YjZ4If5VN/ETkqusJaO4l7NqZDiTWZK/7re0hQMeBiqpJkrbd+0wc= -----END CERTIFICATE-----Generated at Tue Feb 10 06:06:48 2026 by rpki-client