This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/xIt8lJJjUgwrnGZj8-M-XAKLM8M.roa File: xIt8lJJjUgwrnGZj8-M-XAKLM8M.roa (raw, json) Hash identifier: hFlPZerhEkhi26Lu5WKLWffMM3WUMXgzobrQrYJBZfA= Subject key identifier: C4:8B:7C:94:92:63:52:0C:2B:9C:66:63:F3:E3:3E:5C:02:8B:33:C3 Certificate issuer: /CN=6dbd51576b4a93460a465af35e6bf550f5548894 Certificate serial: 019B7758CC21908FE2FB734BDD075A004504 Authority key identifier: 6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/xIt8lJJjUgwrnGZj8-M-XAKLM8M.roa Signing time: Thu 01 Jan 2026 02:17:46 +0000 ROA not before: Thu 01 Jan 2026 02:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209746 IP address blocks: 185.5.142.0/24 maxlen: 24 185.7.119.0/24 maxlen: 24 188.68.84.0/22 maxlen: 24 188.68.94.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:cc:21:90:8f:e2:fb:73:4b:dd:07:5a:00:45:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dbd51576b4a93460a465af35e6bf550f5548894 Validity Not Before: Jan 1 02:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c48b7c949263520c2b9c6663f3e33e5c028b33c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:63:28:65:c3:f5:1f:e0:bb:48:7c:84:42:ff: ec:fd:0b:fa:f6:50:7c:07:d8:ed:0f:a9:d7:90:e3: b6:df:29:89:b2:53:cc:4d:af:33:81:d6:f3:27:e7: 49:10:f7:23:2d:58:e6:be:dd:29:39:46:78:38:bc: 2b:d9:9b:92:a4:c8:37:b0:49:7a:06:6b:dd:4f:8c: c9:4a:59:9e:2c:68:5f:01:46:4d:f8:bc:4e:c4:a7: 66:e2:c5:84:cb:95:ee:c4:c3:8d:c4:ec:28:56:39: 19:82:cf:a3:95:b6:d5:79:99:9f:68:60:2e:6e:cb: 7a:ff:f5:6d:29:98:82:ee:90:ce:31:df:f1:7e:31: dc:72:28:3b:b9:fd:26:5b:1d:38:55:ac:d8:ba:59: 67:9f:44:ee:f6:5f:5c:8c:be:f1:85:02:9d:94:2b: 8c:6c:e9:5f:d2:d3:c0:19:bd:1e:53:ca:98:5c:c2: 90:9d:32:66:5f:13:91:03:6d:28:11:03:ec:5f:fb: 82:42:44:17:eb:f2:57:87:50:7e:12:53:89:8e:bb: 38:9a:8c:ac:1d:d5:25:0e:1c:3a:04:69:e8:20:1e: 70:35:fb:15:7d:a1:be:d4:aa:14:90:d6:31:a6:64: b2:d0:a6:5d:0f:14:57:0c:2b:b7:ac:c5:08:77:48: ba:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:8B:7C:94:92:63:52:0C:2B:9C:66:63:F3:E3:3E:5C:02:8B:33:C3 X509v3 Authority Key Identifier: keyid:6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/xIt8lJJjUgwrnGZj8-M-XAKLM8M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.5.142.0/24 185.7.119.0/24 188.68.84.0/22 188.68.94.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:f1:25:54:51:fb:98:c4:3e:30:dd:48:db:de:68:69:af:15: 03:11:3b:65:cf:ca:bb:18:fc:ce:95:54:5c:0f:2a:9e:4b:af: f4:bd:70:ff:8e:a0:42:7f:5b:31:19:46:fb:8a:bc:ce:fb:66: 3d:44:c4:9b:40:20:60:71:aa:54:b8:43:ab:ed:35:7b:ca:13: c5:77:12:f1:05:42:3e:1b:24:03:8e:cb:6e:ea:51:ee:33:5f: f1:c5:f1:6e:cd:a1:aa:7a:03:41:de:00:cd:56:05:f1:b2:49: 71:7d:16:c9:79:d7:6b:04:96:f3:8d:fb:af:8c:88:fb:f1:79: 00:82:41:09:e4:60:7a:05:b0:45:66:46:db:47:98:cd:99:4d: 52:81:9c:34:74:4b:ff:96:2d:04:f0:45:18:a8:95:b9:40:75: 14:8e:fb:6f:83:a8:42:98:a7:ce:e1:12:c5:2a:fa:4a:21:cd: 4d:f0:91:33:29:0e:f5:8b:bf:92:7b:9c:d5:44:ac:f6:8c:ae: a4:9b:bb:b8:9b:fa:78:bc:d6:c4:c7:14:e7:75:37:9f:ad:60: 5a:a6:bc:0d:2b:86:c1:1c:f7:81:98:7a:57:c6:79:5b:db:e7: ac:48:91:70:a0:eb:15:59:37:1e:69:2d:64:90:77:cd:52:cc: 91:c7:a6:f0 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt3WMwhkI/i+3NL3QdaAEUEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkYmQ1MTU3NmI0YTkzNDYwYTQ2NWFmMzVlNmJmNTUwZjU1 NDg4OTQwHhcNMjYwMTAxMDIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDhiN2M5NDkyNjM1MjBjMmI5YzY2NjNmM2UzM2U1YzAyOGIzM2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymMoZcP1H+C7SHyEQv/s/Qv69lB8 B9jtD6nXkOO23ymJslPMTa8zgdbzJ+dJEPcjLVjmvt0pOUZ4OLwr2ZuSpMg3sEl6 BmvdT4zJSlmeLGhfAUZN+LxOxKdm4sWEy5XuxMONxOwoVjkZgs+jlbbVeZmfaGAu bst6//VtKZiC7pDOMd/xfjHccig7uf0mWx04VazYullnn0Tu9l9cjL7xhQKdlCuM bOlf0tPAGb0eU8qYXMKQnTJmXxORA20oEQPsX/uCQkQX6/JXh1B+ElOJjrs4moys HdUlDhw6BGnoIB5wNfsVfaG+1KoUkNYxpmSy0KZdDxRXDCu3rMUId0i61QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFMSLfJSSY1IMK5xmY/PjPlwCizPDMB8GA1UdIwQY MBaAFG29UVdrSpNGCkZa815r9VD1VIiUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmIxUlYydEtrMFlLUmxyelhtdjFVUFZVaUpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84ZmY1MzctNzFlMC00MDNiLTk3OWUt MWVmN2VmMTdmYTQzLzEveEl0OGxKSmpVZ3dybkdaajgtTS1YQUtMTThNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS84ZmY1MzctNzFlMC00MDNiLTk3OWUtMWVmN2VmMTdmYTQz LzEvYmIxUlYydEtrMFlLUmxyelhtdjFVUFZVaUpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAuQWOAwQA uQd3AwQCvERUAwQBvEReMA0GCSqGSIb3DQEBCwUAA4IBAQB+8SVUUfuYxD4w3Ujb 3mhprxUDETtlz8q7GPzOlVRcDyqeS6/0vXD/jqBCf1sxGUb7irzO+2Y9RMSbQCBg capUuEOr7TV7yhPFdxLxBUI+GyQDjstu6lHuM1/xxfFuzaGqegNB3gDNVgXxsklx fRbJeddrBJbzjfuvjIj78XkAgkEJ5GB6BbBFZkbbR5jNmU1SgZw0dEv/li0E8EUY qJW5QHUUjvtvg6hCmKfO4RLFKvpKIc1N8JEzKQ71i7+Se5zVRKz2jK6km7u4m/p4 vNbExxTndTefrWBaprwNK4bBHPeBmHpXxnlb2+esSJFwoOsVWTceaS1kkHfNUsyR x6bw -----END CERTIFICATE-----Generated at Mon Jan 19 09:00:04 2026 by rpki-client