This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xayOdRIB2OFJdDk_tH7lKKcu9y4.roa File: xayOdRIB2OFJdDk_tH7lKKcu9y4.roa (raw, json) Hash identifier: KcMpRACLnVIcd65I9qrWma5GruVIJIMy6fPWDEBsXBc= Subject key identifier: C5:AC:8E:75:12:01:D8:E1:49:74:39:3F:B4:7E:E5:28:A7:2E:F7:2E Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019BFED37C8665B887BFACD0C6DC580B8285 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xayOdRIB2OFJdDk_tH7lKKcu9y4.roa Signing time: Tue 27 Jan 2026 09:40:31 +0000 ROA not before: Tue 27 Jan 2026 09:40:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203057 IP address blocks: 109.176.83.0/24 maxlen: 24 194.105.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Feb 2026 00:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:d3:7c:86:65:b8:87:bf:ac:d0:c6:dc:58:0b:82:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 27 09:40:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5ac8e751201d8e14974393fb47ee528a72ef72e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:57:a2:50:af:99:c5:6b:19:ed:6c:6d:9d:d8: 4e:82:73:ad:63:1f:35:78:9f:2d:48:84:e8:c6:ec: c0:f4:13:69:67:4a:53:8f:17:d5:28:73:3a:cb:97: 6a:a0:61:b3:d3:b0:dc:2a:e9:ae:a1:fb:65:96:6a: 93:74:ce:99:0f:f8:9c:55:2e:f7:ce:3d:0d:5c:a1: ce:52:c2:9c:6e:8f:ed:9a:fd:db:62:4e:8f:38:bd: 2a:de:d6:3c:47:07:dd:7f:dd:27:a9:1a:a9:35:c4: 1a:dd:e5:08:ff:a5:ac:3a:d8:11:b5:7c:30:89:ed: 60:db:43:62:a9:c4:b9:86:a8:f4:61:24:45:26:f8: 4a:c9:21:41:82:cc:6c:88:6b:5a:65:80:13:74:74: 1b:a3:eb:9c:2a:73:4a:64:d2:e0:ba:a2:9f:41:e6: 5a:8e:b9:ba:72:66:72:01:4e:16:89:ee:da:1a:75: ee:e8:93:e8:98:e8:cf:cd:f1:07:9e:cf:b7:08:68: 63:9e:c6:c1:b9:fc:1f:2c:ed:e4:c9:06:07:88:a9: e8:e3:a2:a5:f5:0a:18:a5:eb:63:3f:2d:7f:a5:98: ff:7c:b9:02:c2:de:8d:5a:a6:45:8a:58:29:78:a7: 2f:46:a4:17:d0:9b:9e:f2:7c:8d:61:b8:3a:b3:e3: 62:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:AC:8E:75:12:01:D8:E1:49:74:39:3F:B4:7E:E5:28:A7:2E:F7:2E X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xayOdRIB2OFJdDk_tH7lKKcu9y4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.176.83.0/24 194.105.76.0/22 Signature Algorithm: sha256WithRSAEncryption 02:17:50:01:0a:8b:77:8c:a1:3f:54:cf:5c:a2:06:56:0f:69: c6:72:41:bb:b5:a5:2a:15:f5:de:93:e7:4e:91:93:12:e1:7d: 20:d2:f7:5b:97:63:a8:32:41:ea:65:38:ee:1d:47:04:67:f7: 57:13:b9:62:01:cf:99:c4:6e:e6:49:b7:91:8c:76:42:e9:b5: 2d:ed:a0:29:7d:78:fe:b1:53:3b:0b:c0:10:63:38:32:78:ab: d0:0c:fc:4d:0d:95:97:cf:3f:c6:f1:b1:58:80:87:47:60:8a: 4b:3f:6c:13:dc:51:a8:81:49:cf:7a:b4:bf:72:f4:9d:6d:4b: 7f:04:00:e7:72:e0:d4:e3:ed:5d:f6:83:e4:40:d2:d7:1f:aa: 8c:79:41:f1:d2:9a:d9:80:57:73:86:27:62:a8:8c:30:de:69: 14:71:40:49:b4:ad:5d:06:66:81:c4:b8:cf:1b:18:2b:80:68: 5c:39:02:45:13:66:75:46:2a:c1:25:65:15:40:fb:09:11:1d: 6e:50:20:d3:25:13:b3:22:f5:dc:c1:d6:af:e7:e3:ca:9d:12: 3f:94:e3:a3:a9:b1:e7:c9:09:ec:46:53:92:3b:96:e0:7b:18: 5d:dd:54:f4:15:be:6f:bc:52:bd:5e:1a:da:ba:23:2c:d4:39: 6c:50:de:f7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZv+03yGZbiHv6zQxtxYC4KFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTI3MDk0MDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNWFjOGU3NTEyMDFkOGUxNDk3NDM5M2ZiNDdlZTUyOGE3MmVmNzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVeiUK+ZxWsZ7WxtndhOgnOtYx81 eJ8tSIToxuzA9BNpZ0pTjxfVKHM6y5dqoGGz07DcKumuoftllmqTdM6ZD/icVS73 zj0NXKHOUsKcbo/tmv3bYk6POL0q3tY8Rwfdf90nqRqpNcQa3eUI/6WsOtgRtXww ie1g20NiqcS5hqj0YSRFJvhKySFBgsxsiGtaZYATdHQbo+ucKnNKZNLguqKfQeZa jrm6cmZyAU4Wie7aGnXu6JPomOjPzfEHns+3CGhjnsbBufwfLO3kyQYHiKno46Kl 9QoYpetjPy1/pZj/fLkCwt6NWqZFilgpeKcvRqQX0Jue8nyNYbg6s+Ni4wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMWsjnUSAdjhSXQ5P7R+5SinLvcuMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEveGF5T2RSSUIyT0ZKZERrX3RIN2xLS2N1OXk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbbBTAwQC wmlMMA0GCSqGSIb3DQEBCwUAA4IBAQACF1ABCot3jKE/VM9cogZWD2nGckG7taUq FfXek+dOkZMS4X0g0vdbl2OoMkHqZTjuHUcEZ/dXE7liAc+ZxG7mSbeRjHZC6bUt 7aApfXj+sVM7C8AQYzgyeKvQDPxNDZWXzz/G8bFYgIdHYIpLP2wT3FGogUnPerS/ cvSdbUt/BADncuDU4+1d9oPkQNLXH6qMeUHx0prZgFdzhidiqIww3mkUcUBJtK1d BmaBxLjPGxgrgGhcOQJFE2Z1RirBJWUVQPsJER1uUCDTJROzIvXcwdav5+PKnRI/ lOOjqbHnyQnsRlOSO5bgexhd3VT0Fb5vvFK9XhrauiMs1DlsUN73 -----END CERTIFICATE-----Generated at Sun Feb 15 07:00:47 2026 by rpki-client