This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/rXhlV92N2dDSt5AEBQFXZP4vo18.roa File: rXhlV92N2dDSt5AEBQFXZP4vo18.roa (raw, json) Hash identifier: jl3fY0i3pjZygoyHbd5i+NKaykHgJYGsXxeJwuO3F+0= Subject key identifier: AD:78:65:57:DD:8D:D9:D0:D2:B7:90:04:05:01:57:64:FE:2F:A3:5F Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c Certificate serial: 019B77C766E4D2C034010C83042899549775 Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/rXhlV92N2dDSt5AEBQFXZP4vo18.roa Signing time: Thu 01 Jan 2026 04:18:35 +0000 ROA not before: Thu 01 Jan 2026 04:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48467 IP address blocks: 94.228.160.0/24 maxlen: 24 94.228.167.0/24 maxlen: 24 94.228.171.0/24 maxlen: 24 94.228.172.0/22 maxlen: 22 94.228.172.0/24 maxlen: 24 178.236.240.0/23 maxlen: 23 178.236.241.0/24 maxlen: 24 178.236.242.0/24 maxlen: 24 178.236.248.0/22 maxlen: 22 178.236.255.0/24 maxlen: 24 185.46.44.0/22 maxlen: 22 185.46.44.0/23 maxlen: 23 185.46.44.0/24 maxlen: 24 185.46.45.0/24 maxlen: 24 185.46.46.0/23 maxlen: 23 185.46.46.0/24 maxlen: 24 185.46.47.0/24 maxlen: 24 2a02:2070::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:66:e4:d2:c0:34:01:0c:83:04:28:99:54:97:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c Validity Not Before: Jan 1 04:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad786557dd8dd9d0d2b7900405015764fe2fa35f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c6:45:b2:43:a0:44:54:38:c7:33:f2:ed:c1: c4:31:7f:d7:56:d2:07:7c:db:7b:a7:8a:15:ce:8a: c1:30:c5:f6:dd:03:9f:a0:20:51:41:86:7c:d5:2b: de:b9:76:de:36:10:7e:bc:19:37:aa:65:3d:92:e7: f0:d1:4c:d1:82:18:42:48:74:b9:8b:5a:fe:2a:1a: 43:a3:9e:85:97:44:a0:5b:72:62:0e:0c:68:b5:72: fb:e8:be:97:6a:d0:a0:0c:cf:d3:09:7c:86:d3:e0: 91:3d:94:f4:bf:ef:ac:83:c0:96:75:76:72:2b:05: 0a:be:9b:33:5a:19:47:1b:80:ab:f9:a7:e5:e8:5f: 8d:d7:b9:a9:71:34:6a:cf:e6:90:f7:fd:9e:cf:f7: b3:7c:23:e0:d1:63:4a:71:32:b5:0e:2f:c9:2f:78: 9c:ed:fd:6d:e1:9f:d8:a8:82:31:b9:63:72:35:91: e7:a5:79:3b:7b:01:19:b8:38:d1:75:37:19:26:ce: b2:93:7b:36:a2:d6:d2:bc:98:cf:8c:f2:16:c0:81: c1:9b:60:c6:11:94:55:36:27:39:f4:0c:dd:35:40: b6:9f:f3:fb:40:9a:90:f5:51:d4:f6:9a:4d:ac:52: c4:57:ec:a2:26:72:a3:8c:28:d8:b6:46:14:ef:37: e4:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:78:65:57:DD:8D:D9:D0:D2:B7:90:04:05:01:57:64:FE:2F:A3:5F X509v3 Authority Key Identifier: keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/rXhlV92N2dDSt5AEBQFXZP4vo18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.228.160.0/24 94.228.167.0/24 94.228.171.0-94.228.175.255 178.236.240.0-178.236.242.255 178.236.248.0/22 178.236.255.0/24 185.46.44.0/22 IPv6: 2a02:2070::/32 Signature Algorithm: sha256WithRSAEncryption ad:d3:99:d7:a4:d2:38:f8:4d:fd:8d:3c:fc:68:d5:0a:fd:fb: 1e:5b:59:f2:5c:17:17:e2:9c:8f:72:25:1a:0c:b3:96:19:01: af:02:0b:45:e0:e4:00:7f:a0:30:6a:89:2c:90:3e:12:23:e7: 7b:36:4c:80:28:ec:92:0f:a8:25:26:58:fa:d5:1e:ba:63:74: b7:1c:ae:07:9b:5b:b7:6e:6d:35:e6:fa:51:a5:dc:3d:32:47: da:09:ca:5f:c6:6e:e5:9b:56:57:29:f1:ae:b1:b6:20:a7:98: b6:b3:19:c2:d7:1a:14:45:df:38:cd:51:a2:24:c1:55:18:e7: c6:9f:00:04:da:ff:21:d9:b3:69:31:84:8c:30:b7:4e:3b:dd: 5a:9b:68:b2:1e:f2:0a:5a:7d:c4:73:58:42:9d:09:41:90:82: aa:09:8a:62:8f:11:1c:6e:6d:f1:c4:e6:b1:d5:44:ca:5a:d9: 43:5e:26:6e:ec:58:3c:8f:05:fa:fc:5b:36:5b:17:5b:c0:3a: 0d:41:9f:ff:68:ee:a6:a2:b4:21:39:94:84:8f:f6:fb:b5:b0: 13:28:5c:64:8b:01:39:86:c4:21:70:f3:46:61:88:43:a3:2a: 21:49:24:0b:38:b2:c4:7e:38:fd:92:1e:d2:29:e6:18:b8:a4: 8c:2f:25:84 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgISAZt3x2bk0sA0AQyDBCiZVJd1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExN2Y5ZDU1ODI2YjQyNDg2ZGZjODRkMzVjMWE2M2E1Y2U4 NzUwN2MwHhcNMjYwMTAxMDQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDc4NjU1N2RkOGRkOWQwZDJiNzkwMDQwNTAxNTc2NGZlMmZhMzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosZFskOgRFQ4xzPy7cHEMX/XVtIH fNt7p4oVzorBMMX23QOfoCBRQYZ81SveuXbeNhB+vBk3qmU9kufw0UzRghhCSHS5 i1r+KhpDo56Fl0SgW3JiDgxotXL76L6XatCgDM/TCXyG0+CRPZT0v++sg8CWdXZy KwUKvpszWhlHG4Cr+afl6F+N17mpcTRqz+aQ9/2ez/ezfCPg0WNKcTK1Di/JL3ic 7f1t4Z/YqIIxuWNyNZHnpXk7ewEZuDjRdTcZJs6yk3s2otbSvJjPjPIWwIHBm2DG EZRVNic59AzdNUC2n/P7QJqQ9VHU9ppNrFLEV+yiJnKjjCjYtkYU7zfkQwIDAQAB o4ICTDCCAkgwHQYDVR0OBBYEFK14ZVfdjdnQ0reQBAUBV2T+L6NfMB8GA1UdIwQY MBaAFBF/nVWCa0JIbfyE01waY6XOh1B8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMt M2ZiYmJhOTI0OWNkLzEvclhobFY5Mk4yZERTdDVBRUJRRlhaUDR2bzE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMtM2ZiYmJhOTI0OWNk LzEvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGIGCCsGAQUFBwEHAQH/BFMwUTBABAIAATA6AwQAXuSgAwQA XuSnMAwDBABe5KsDBARe5KAwDAMEBLLs8AMEALLs8gMEArLs+AMEALLs/wMEArku LDANBAIAAjAHAwUAKgIgcDANBgkqhkiG9w0BAQsFAAOCAQEArdOZ16TSOPhN/Y08 /GjVCv37HltZ8lwXF+Kcj3IlGgyzlhkBrwILReDkAH+gMGqJLJA+EiPnezZMgCjs kg+oJSZY+tUeumN0txyuB5tbt25tNeb6UaXcPTJH2gnKX8Zu5ZtWVynxrrG2IKeY trMZwtcaFEXfOM1RoiTBVRjnxp8ABNr/IdmzaTGEjDC3TjvdWptosh7yClp9xHNY Qp0JQZCCqgmKYo8RHG5t8cTmsdVEylrZQ14mbuxYPI8F+vxbNlsXW8A6DUGf/2ju pqK0ITmUhI/2+7WwEyhcZIsBOYbEIXDzRmGIQ6MqIUkkCziyxH44/ZIe0inmGLik jC8lhA== -----END CERTIFICATE-----Generated at Mon Jan 26 03:03:29 2026 by rpki-client