This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/x40glMhaHcuiDd1Hx4pjzBZLPj8.roa File: x40glMhaHcuiDd1Hx4pjzBZLPj8.roa (raw, json) Hash identifier: 0EWiZVfEZM7raoyLyp8rfdMjQ1dRv4sDR1ByEg/5VuI= Subject key identifier: C7:8D:20:94:C8:5A:1D:CB:A2:0D:DD:47:C7:8A:63:CC:16:4B:3E:3F Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Certificate serial: 019B7F839BDEDF9C3D55430F3C3A54011CE8 Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/x40glMhaHcuiDd1Hx4pjzBZLPj8.roa Signing time: Fri 02 Jan 2026 16:21:30 +0000 ROA not before: Fri 02 Jan 2026 16:21:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48219 IP address blocks: 37.230.143.0/24 maxlen: 24 141.101.246.0/24 maxlen: 24 185.2.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:9b:de:df:9c:3d:55:43:0f:3c:3a:54:01:1c:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Validity Not Before: Jan 2 16:21:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c78d2094c85a1dcba20ddd47c78a63cc164b3e3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:74:88:d5:f2:01:32:3e:f7:05:cc:0c:db:bd: 4d:0d:a6:5b:76:d5:9d:02:6a:ac:2a:7e:7b:86:02: f4:6a:3d:1f:1a:a6:94:f5:92:91:3d:bb:23:a8:ae: 8c:06:05:68:5c:b9:17:22:55:e8:c8:1b:b3:88:69: 8d:06:65:e8:df:d5:ad:8f:c9:9c:7c:fd:a4:0c:ad: 17:21:03:47:c1:92:99:5c:90:42:ed:ac:65:ab:62: ee:27:9d:8f:b8:e2:0b:25:70:f4:b8:ba:61:b6:81: 63:d2:6e:3e:93:6b:e7:e7:d7:ab:7c:a9:a5:58:d3: fc:f9:a2:cd:69:79:74:8e:24:2d:5a:fa:2a:80:aa: 35:55:d5:70:21:d7:89:6e:82:a9:63:48:83:46:f5: a9:b8:93:de:27:80:69:16:ab:6a:49:8c:9d:98:83: 58:82:7c:a9:5e:b1:82:10:b4:2c:f5:e4:84:92:90: c1:d7:04:65:83:f7:62:f1:79:e0:76:a4:72:1e:b3: 0a:cb:02:26:49:f4:77:a0:5b:d2:fc:cb:2e:f4:7a: 8d:d1:e8:99:44:cb:45:cd:db:26:ad:22:19:e4:f0: ae:6e:fe:cf:31:10:78:0b:f2:39:27:fe:fb:1e:72: 36:55:d9:ad:17:89:5e:ad:2e:b3:da:cc:25:dc:da: fb:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:8D:20:94:C8:5A:1D:CB:A2:0D:DD:47:C7:8A:63:CC:16:4B:3E:3F X509v3 Authority Key Identifier: keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/x40glMhaHcuiDd1Hx4pjzBZLPj8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.230.143.0/24 141.101.246.0/24 185.2.35.0/24 Signature Algorithm: sha256WithRSAEncryption b5:ea:fc:ae:72:97:7f:64:34:29:25:0a:fa:c8:ff:ce:8b:16: ca:d7:db:cb:7d:11:79:55:66:27:8a:94:a0:7d:a3:89:91:5d: 92:d3:22:3f:80:f3:38:d6:0d:f9:bf:29:2f:7b:f5:0f:0e:02: 97:70:36:95:27:05:30:93:cf:3c:13:4e:e5:75:bc:4e:55:3d: 7c:84:80:7c:4d:8f:86:f5:ea:bf:c4:6f:a7:43:7c:16:c3:f5: 3a:63:eb:f2:25:b0:a1:22:16:30:e2:37:b0:da:5e:44:b8:d7: 5b:55:4e:3e:79:bd:da:b1:c1:47:a4:df:fa:48:77:2c:99:5c: e3:14:c7:4e:d5:b4:cf:93:eb:86:9c:6c:44:03:16:07:f4:47: 41:5d:0e:51:2f:75:45:90:f6:7d:8a:8c:d5:cb:8e:e2:2d:4d: 15:7c:38:76:21:91:94:ea:2a:48:2b:19:d2:5e:1b:c4:0f:f6: 32:14:e4:18:d8:3b:62:0e:e4:5f:44:49:9a:6f:6b:c4:69:75: dc:b9:87:89:4a:88:05:ac:47:d2:05:0e:1f:e7:99:e9:c6:1d: 44:75:9b:27:4a:95:a3:c2:8f:de:b1:bc:b3:06:20:22:5e:e7: 20:8e:9a:15:c6:1b:e0:ab:23:c0:6d:78:37:8c:2b:ac:32:e7: 95:31:01:6a -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/g5ve35w9VUMPPDpUARzoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0 NzA2N2UwHhcNMjYwMTAyMTYyMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzhkMjA5NGM4NWExZGNiYTIwZGRkNDdjNzhhNjNjYzE2NGIzZTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXSI1fIBMj73BcwM271NDaZbdtWd AmqsKn57hgL0aj0fGqaU9ZKRPbsjqK6MBgVoXLkXIlXoyBuziGmNBmXo39Wtj8mc fP2kDK0XIQNHwZKZXJBC7axlq2LuJ52PuOILJXD0uLphtoFj0m4+k2vn59erfKml WNP8+aLNaXl0jiQtWvoqgKo1VdVwIdeJboKpY0iDRvWpuJPeJ4BpFqtqSYydmINY gnypXrGCELQs9eSEkpDB1wRlg/di8XngdqRyHrMKywImSfR3oFvS/Msu9HqN0eiZ RMtFzdsmrSIZ5PCubv7PMRB4C/I5J/77HnI2VdmtF4lerS6z2swl3Nr7cQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMeNIJTIWh3Log3dR8eKY8wWSz4/MB8GA1UdIwQY MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt OGM5NTgxZDk2ZDhmLzEveDQwZ2xNaGFIY3VpRGQxSHg0cGp6QlpMUGo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAJeaPAwQA jWX2AwQAuQIjMA0GCSqGSIb3DQEBCwUAA4IBAQC16vyucpd/ZDQpJQr6yP/OixbK 19vLfRF5VWYnipSgfaOJkV2S0yI/gPM41g35vykve/UPDgKXcDaVJwUwk888E07l dbxOVT18hIB8TY+G9eq/xG+nQ3wWw/U6Y+vyJbChIhYw4jew2l5EuNdbVU4+eb3a scFHpN/6SHcsmVzjFMdO1bTPk+uGnGxEAxYH9EdBXQ5RL3VFkPZ9iozVy47iLU0V fDh2IZGU6ipIKxnSXhvED/YyFOQY2DtiDuRfREmab2vEaXXcuYeJSogFrEfSBQ4f 55npxh1EdZsnSpWjwo/esbyzBiAiXucgjpoVxhvgqyPAbXg3jCusMueVMQFq -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:24 2026 by rpki-client