This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/xNLnZO1cDEAZroKMMXGqZNfuwNY.roa File: xNLnZO1cDEAZroKMMXGqZNfuwNY.roa (raw, json) Hash identifier: yJpc4aql6Gc3JoFlGTZNEOEdKkmxfLQRUHpE9hH09nI= Subject key identifier: C4:D2:E7:64:ED:5C:0C:40:19:AE:82:8C:31:71:AA:64:D7:EE:C0:D6 Certificate issuer: /CN=a4b65da1753fb4eeedb86fda87dd3afa69d862d0 Certificate serial: 019B7FF292221A5BC06D715FCBFC8782CAF8 Authority key identifier: A4:B6:5D:A1:75:3F:B4:EE:ED:B8:6F:DA:87:DD:3A:FA:69:D8:62:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLZdoXU_tO7tuG_ah906-mnYYtA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/xNLnZO1cDEAZroKMMXGqZNfuwNY.roa Signing time: Fri 02 Jan 2026 18:22:42 +0000 ROA not before: Fri 02 Jan 2026 18:22:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44544 IP address blocks: 195.216.222.0/24 maxlen: 24 195.216.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.mft rsync://rpki.ripe.net/repository/DEFAULT/pLZdoXU_tO7tuG_ah906-mnYYtA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:92:22:1a:5b:c0:6d:71:5f:cb:fc:87:82:ca:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4b65da1753fb4eeedb86fda87dd3afa69d862d0 Validity Not Before: Jan 2 18:22:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4d2e764ed5c0c4019ae828c3171aa64d7eec0d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:65:ac:90:0b:9c:6b:5d:55:6c:cc:b2:f8:47: 5b:fb:bb:f6:e0:50:9a:e6:75:c3:0c:55:f4:0d:11: 17:90:bc:7a:54:b1:94:9e:01:04:96:1b:77:8e:c2: 3c:3d:d9:72:4c:5d:1e:75:df:a4:a8:0e:64:cd:4c: bb:b5:f0:79:d1:bf:48:a6:b7:4e:51:a0:f2:e6:9c: b4:ef:ac:85:a9:8d:b4:23:9a:72:48:45:ef:61:dc: ee:f8:e7:c3:82:89:fa:e1:d4:14:22:77:09:b3:8a: dc:7c:a2:cf:fe:39:48:1a:72:0c:b9:74:54:6a:06: 58:d6:bd:b8:8c:47:0f:34:ab:31:b6:1b:43:da:11: 6b:a9:61:ea:56:82:b3:34:81:41:55:f3:c6:bf:f9: ec:e7:3d:ac:59:03:5f:c4:4e:8b:15:d8:7f:a6:84: a8:b8:6c:26:00:15:02:8d:0a:be:14:76:0b:93:77: 9c:b6:1c:22:a8:43:73:79:4e:69:40:62:44:68:92: e0:03:80:0f:b6:75:fd:d1:0a:7b:c1:71:e5:bd:4e: 90:fb:60:87:25:74:14:1e:4f:47:93:51:13:25:d4: e9:e1:d3:11:3a:14:fb:c5:d1:b2:c1:3b:18:2e:83: aa:09:c5:cc:17:a4:72:41:7c:f0:41:6d:f4:35:68: 45:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D2:E7:64:ED:5C:0C:40:19:AE:82:8C:31:71:AA:64:D7:EE:C0:D6 X509v3 Authority Key Identifier: keyid:A4:B6:5D:A1:75:3F:B4:EE:ED:B8:6F:DA:87:DD:3A:FA:69:D8:62:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZdoXU_tO7tuG_ah906-mnYYtA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/xNLnZO1cDEAZroKMMXGqZNfuwNY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.216.222.0/23 Signature Algorithm: sha256WithRSAEncryption a1:72:3a:f7:8f:0c:4e:f5:68:13:ba:82:a4:fb:34:19:90:3d: 8f:a2:18:35:75:89:ef:9c:b6:f1:bc:b4:36:eb:9a:4e:d1:51: eb:df:20:a9:a2:2a:15:42:ef:f2:86:64:3c:1c:e6:3f:98:e5: 77:82:cf:82:ee:a7:55:8e:23:fb:c1:ed:c3:8b:ce:45:ff:95: c2:d2:dc:5d:41:5a:55:2e:de:c7:4a:8b:4d:30:6a:2a:dc:97: 0d:f4:3b:af:7a:7e:2a:15:a7:6a:16:7e:dc:c8:7f:36:bc:3b: 78:35:8f:bd:21:ea:59:ea:a3:61:d8:39:1c:61:75:9c:ca:f4: 5a:78:78:fa:cc:6c:95:41:da:19:eb:a7:35:ca:9d:e1:b1:9f: a3:1a:e7:50:83:1d:29:6d:54:77:12:08:82:7e:f2:b8:33:e1: c8:b3:13:99:23:fd:e4:39:21:f6:7b:2e:00:24:5b:92:91:a5: ab:71:b0:36:8d:5a:0f:22:17:b5:c7:71:c9:d6:4a:60:54:92: 81:02:50:62:68:2c:c3:79:33:d1:03:39:01:73:b3:08:61:3c: 96:8f:34:ba:0f:f0:50:f5:85:9b:ca:af:04:12:04:be:1b:5f: f7:5f:1d:0b:cc:f4:e8:56:97:90:29:97:50:22:b2:a5:a8:6f: 6b:75:da:0c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8pIiGlvAbXFfy/yHgsr4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YjY1ZGExNzUzZmI0ZWVlZGI4NmZkYTg3ZGQzYWZhNjlk ODYyZDAwHhcNMjYwMTAyMTgyMjQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNGQyZTc2NGVkNWMwYzQwMTlhZTgyOGMzMTcxYWE2NGQ3ZWVjMGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWWskAuca11VbMyy+Edb+7v24FCa 5nXDDFX0DREXkLx6VLGUngEElht3jsI8PdlyTF0edd+kqA5kzUy7tfB50b9IprdO UaDy5py076yFqY20I5pySEXvYdzu+OfDgon64dQUIncJs4rcfKLP/jlIGnIMuXRU agZY1r24jEcPNKsxthtD2hFrqWHqVoKzNIFBVfPGv/ns5z2sWQNfxE6LFdh/poSo uGwmABUCjQq+FHYLk3ecthwiqENzeU5pQGJEaJLgA4APtnX90Qp7wXHlvU6Q+2CH JXQUHk9Hk1ETJdTp4dMROhT7xdGywTsYLoOqCcXMF6RyQXzwQW30NWhF3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMTS52TtXAxAGa6CjDFxqmTX7sDWMB8GA1UdIwQY MBaAFKS2XaF1P7Tu7bhv2ofdOvpp2GLQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcExaZG9YVV90Tzd0dUdfYWg5MDYtbW5ZWXRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yYTU3YmUtYmU3Ny00NDI4LThlOTMt YmE1MjAxZWE1ZjgzLzEveE5MblpPMWNERUFacm9LTU1YR3FaTmZ1d05ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8yYTU3YmUtYmU3Ny00NDI4LThlOTMtYmE1MjAxZWE1Zjgz LzEvcExaZG9YVV90Tzd0dUdfYWg5MDYtbW5ZWXRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw9jeMA0G CSqGSIb3DQEBCwUAA4IBAQChcjr3jwxO9WgTuoKk+zQZkD2Pohg1dYnvnLbxvLQ2 65pO0VHr3yCpoioVQu/yhmQ8HOY/mOV3gs+C7qdVjiP7we3Di85F/5XC0txdQVpV Lt7HSotNMGoq3JcN9Duven4qFadqFn7cyH82vDt4NY+9IepZ6qNh2DkcYXWcyvRa eHj6zGyVQdoZ66c1yp3hsZ+jGudQgx0pbVR3EgiCfvK4M+HIsxOZI/3kOSH2ey4A JFuSkaWrcbA2jVoPIhe1x3HJ1kpgVJKBAlBiaCzDeTPRAzkBc7MIYTyWjzS6D/BQ 9YWbyq8EEgS+G1/3Xx0LzPToVpeQKZdQIrKlqG9rddoM -----END CERTIFICATE-----Generated at Tue Jan 27 01:41:42 2026 by rpki-client