This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/X2-StnXGjfI9wfKhZQp0793U3Io.roa File: X2-StnXGjfI9wfKhZQp0793U3Io.roa (raw, json) Hash identifier: l8ocH0IxQsjfL6ukdiPqqCpYZzs3R9sEM3Pe+2LGF84= Subject key identifier: 5F:6F:92:B6:75:C6:8D:F2:3D:C1:F2:A1:65:0A:74:EF:DD:D4:DC:8A Certificate issuer: /CN=464d733de81fbd486d442358e0c15370520f9312 Certificate serial: 019B7A5ADC7AE2A2B615A7EF2F746E325673 Authority key identifier: 46:4D:73:3D:E8:1F:BD:48:6D:44:23:58:E0:C1:53:70:52:0F:93:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk1zPegfvUhtRCNY4MFTcFIPkxI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/X2-StnXGjfI9wfKhZQp0793U3Io.roa Signing time: Thu 01 Jan 2026 16:18:53 +0000 ROA not before: Thu 01 Jan 2026 16:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209759 IP address blocks: 185.246.32.0/22 maxlen: 22 213.181.20.0/22 maxlen: 22 213.181.24.0/22 maxlen: 22 213.181.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft rsync://rpki.ripe.net/repository/DEFAULT/Rk1zPegfvUhtRCNY4MFTcFIPkxI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 10:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:dc:7a:e2:a2:b6:15:a7:ef:2f:74:6e:32:56:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464d733de81fbd486d442358e0c15370520f9312 Validity Not Before: Jan 1 16:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f6f92b675c68df23dc1f2a1650a74efddd4dc8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:89:80:ee:b4:03:b1:fe:b2:6d:27:2d:ee:92: 72:05:37:5a:b1:e7:d5:2f:88:40:df:82:b2:fa:7c: 68:46:b7:b9:94:5b:f6:4f:2c:dc:0b:70:b6:f0:42: 73:25:c5:31:bc:e4:da:8a:07:b1:a1:32:bc:85:10: 3f:4b:ea:a6:f8:f1:36:cf:7f:b1:83:63:57:f1:74: b1:27:de:d5:5d:a4:0c:f4:e2:26:a2:39:cd:54:83: 6b:25:60:a1:5f:07:0e:a4:f7:ea:aa:25:29:05:fd: 08:ed:b9:8b:da:9c:b2:69:3d:9d:c5:23:68:07:7b: d2:7e:67:c4:36:f3:23:50:c6:b2:a2:99:4a:a9:32: 92:d8:0e:10:43:21:e7:cd:64:a5:3b:8d:de:a7:92: c3:4f:7a:ca:17:06:cf:b6:a2:1c:49:f7:3c:4f:2b: c3:62:76:cd:9e:fe:0a:de:dd:27:5d:23:ed:36:7b: 26:df:53:82:8d:6b:56:d3:02:02:ca:59:18:44:d5: a2:49:32:97:e1:66:11:95:79:52:52:f0:ac:49:77: 3d:12:d7:fa:11:33:54:dc:62:22:e1:10:58:74:ec: 54:31:da:b4:86:35:b2:38:45:cb:97:d4:5b:7d:90: 29:29:35:5e:f5:69:d7:9d:61:f8:18:64:d9:0a:a0: 63:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:6F:92:B6:75:C6:8D:F2:3D:C1:F2:A1:65:0A:74:EF:DD:D4:DC:8A X509v3 Authority Key Identifier: keyid:46:4D:73:3D:E8:1F:BD:48:6D:44:23:58:E0:C1:53:70:52:0F:93:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk1zPegfvUhtRCNY4MFTcFIPkxI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/X2-StnXGjfI9wfKhZQp0793U3Io.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.246.32.0/22 213.181.20.0-213.181.31.255 Signature Algorithm: sha256WithRSAEncryption 46:7f:cd:41:79:f9:6e:43:de:f1:0f:ae:08:15:9a:f7:d0:04: 85:4d:f6:2f:95:bc:a8:2b:85:33:e2:c1:6f:4a:a5:3d:67:52: 06:d5:9b:d8:0a:cc:ef:1b:26:d2:fc:33:c4:15:29:8b:d2:47: c8:b8:3b:22:b9:e8:3d:73:04:90:58:a7:75:90:ec:c8:13:20: cb:07:49:99:f8:e6:39:d2:6b:44:22:a7:bc:e6:de:80:5a:68: 18:c1:cd:99:00:58:0b:cb:4e:90:64:2b:17:9f:e3:b2:7d:ec: 5b:ae:d5:0e:40:d8:2e:53:bf:ff:6b:05:f6:7f:ed:bb:13:4d: 42:cc:56:52:57:9b:1f:53:65:3c:23:c1:62:88:12:9a:79:4e: 40:34:4f:36:da:a5:2c:0a:51:75:c1:5f:61:48:6c:9f:27:1f: e7:14:25:6c:6b:17:56:c2:fc:91:02:99:7a:db:c6:6a:02:7d: 2a:10:ec:bd:44:2f:3d:d6:37:b1:41:aa:4c:ec:60:70:b0:d7: d8:46:72:90:44:90:04:c7:b4:23:b1:ab:28:45:09:fe:ed:d6: fc:b6:b8:9d:51:12:48:05:08:a6:e9:66:85:75:be:4c:82:39: c3:b5:bb:b8:df:a4:9b:64:f3:68:e9:f4:ac:a6:93:1a:d4:2f: 41:7c:24:a3 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt6Wtx64qK2FafvL3RuMlZzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NGQ3MzNkZTgxZmJkNDg2ZDQ0MjM1OGUwYzE1MzcwNTIw ZjkzMTIwHhcNMjYwMTAxMTYxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjZmOTJiNjc1YzY4ZGYyM2RjMWYyYTE2NTBhNzRlZmRkZDRkYzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4mA7rQDsf6ybSct7pJyBTdasefV L4hA34Ky+nxoRre5lFv2TyzcC3C28EJzJcUxvOTaigexoTK8hRA/S+qm+PE2z3+x g2NX8XSxJ97VXaQM9OImojnNVINrJWChXwcOpPfqqiUpBf0I7bmL2pyyaT2dxSNo B3vSfmfENvMjUMayoplKqTKS2A4QQyHnzWSlO43ep5LDT3rKFwbPtqIcSfc8TyvD YnbNnv4K3t0nXSPtNnsm31OCjWtW0wICylkYRNWiSTKX4WYRlXlSUvCsSXc9Etf6 ETNU3GIi4RBYdOxUMdq0hjWyOEXLl9RbfZApKTVe9WnXnWH4GGTZCqBjCwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFF9vkrZ1xo3yPcHyoWUKdO/d1NyKMB8GA1UdIwQY MBaAFEZNcz3oH71IbUQjWODBU3BSD5MSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmsxelBlZ2Z2VWh0UkNOWTRNRlRjRklQa3hJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kN2ZmZWQtNmMxZC00MTMxLTk1MGYt YTQ5ZDFhMDA2ZGM5LzEvWDItU3RuWEdqZkk5d2ZLaFpRcDA3OTNVM0lvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9kN2ZmZWQtNmMxZC00MTMxLTk1MGYtYTQ5ZDFhMDA2ZGM5 LzEvUmsxelBlZ2Z2VWh0UkNOWTRNRlRjRklQa3hJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCufYgMAwD BALVtRQDBAXVtQAwDQYJKoZIhvcNAQELBQADggEBAEZ/zUF5+W5D3vEPrggVmvfQ BIVN9i+VvKgrhTPiwW9KpT1nUgbVm9gKzO8bJtL8M8QVKYvSR8i4OyK56D1zBJBY p3WQ7MgTIMsHSZn45jnSa0Qip7zm3oBaaBjBzZkAWAvLTpBkKxef47J97Fuu1Q5A 2C5Tv/9rBfZ/7bsTTULMVlJXmx9TZTwjwWKIEpp5TkA0TzbapSwKUXXBX2FIbJ8n H+cUJWxrF1bC/JECmXrbxmoCfSoQ7L1ELz3WN7FBqkzsYHCw19hGcpBEkATHtCOx qyhFCf7t1vy2uJ1REkgFCKbpZoV1vkyCOcO1u7jfpJtk82jp9KymkxrUL0F8JKM= -----END CERTIFICATE-----Generated at Tue Jan 20 14:13:47 2026 by rpki-client