This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/xlfsHdjgL0s0DnR0JasMTOAC_Hk.roa File: xlfsHdjgL0s0DnR0JasMTOAC_Hk.roa (raw, json) Hash identifier: opYYKa/UHiDOqxczaPBG6CSDhpkNAvhcxCqbZn6B9NY= Subject key identifier: C6:57:EC:1D:D8:E0:2F:4B:34:0E:74:74:25:AB:0C:4C:E0:02:FC:79 Certificate issuer: /CN=7a0a06564d3c717d2d6daa1e833c495976b0bada Certificate serial: 019B78A35FD2028D497862628AEC6D00A4E3 Authority key identifier: 7A:0A:06:56:4D:3C:71:7D:2D:6D:AA:1E:83:3C:49:59:76:B0:BA:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egoGVk08cX0tbaoegzxJWXawuto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/xlfsHdjgL0s0DnR0JasMTOAC_Hk.roa Signing time: Thu 01 Jan 2026 08:18:51 +0000 ROA not before: Thu 01 Jan 2026 08:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 149.249.0.0/24 maxlen: 24 149.249.1.0/24 maxlen: 24 149.249.2.0/24 maxlen: 24 149.249.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/egoGVk08cX0tbaoegzxJWXawuto.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/egoGVk08cX0tbaoegzxJWXawuto.mft rsync://rpki.ripe.net/repository/DEFAULT/egoGVk08cX0tbaoegzxJWXawuto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:5f:d2:02:8d:49:78:62:62:8a:ec:6d:00:a4:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a0a06564d3c717d2d6daa1e833c495976b0bada Validity Not Before: Jan 1 08:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c657ec1dd8e02f4b340e747425ab0c4ce002fc79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:05:d6:4c:62:ce:77:5c:2e:43:0d:83:71:63: 9a:3c:e8:86:49:b3:5f:99:79:ca:d8:a9:60:31:e0: cf:25:b2:c8:87:87:03:37:23:01:44:dc:8d:d7:1f: 57:3c:1e:f6:5e:72:55:fc:30:f4:1f:0b:82:fe:2c: a0:2a:54:87:ef:e1:1a:a7:6b:ee:99:bc:bd:56:17: b2:1a:67:88:6f:ab:ce:eb:e1:8e:b2:1a:f6:c4:3a: ea:a9:32:93:3c:42:86:45:c4:0a:40:dd:bd:bc:4a: 2b:e4:95:14:96:c0:5d:94:ec:67:50:da:dd:5b:fc: c2:27:74:9e:08:3f:a7:b5:be:27:f1:01:c2:09:4d: e6:1f:20:64:91:9a:0c:b2:cd:89:7a:24:08:6a:65: 85:5c:41:8d:04:ec:5d:5c:ce:0a:9e:cf:46:b9:1a: 2d:74:e1:8e:5c:13:9c:0d:4f:10:62:1b:f2:bf:04: 6c:6d:1d:61:d9:6f:32:81:c1:6f:85:07:19:e4:58: b9:6a:7f:e4:ea:57:e4:11:9b:29:aa:8f:d5:cf:b1: ac:70:aa:16:50:92:32:dd:82:19:e0:95:b9:c1:28: eb:2e:2f:40:7d:6c:38:fa:00:76:26:2a:85:e3:ce: 7b:5a:dc:eb:92:af:5f:37:48:56:65:d0:35:19:1f: f4:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:57:EC:1D:D8:E0:2F:4B:34:0E:74:74:25:AB:0C:4C:E0:02:FC:79 X509v3 Authority Key Identifier: keyid:7A:0A:06:56:4D:3C:71:7D:2D:6D:AA:1E:83:3C:49:59:76:B0:BA:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egoGVk08cX0tbaoegzxJWXawuto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/xlfsHdjgL0s0DnR0JasMTOAC_Hk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/egoGVk08cX0tbaoegzxJWXawuto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.249.0.0/22 Signature Algorithm: sha256WithRSAEncryption 17:c5:51:f5:16:c1:e5:d9:e4:bf:42:44:7f:f0:fd:bd:5f:70: 32:2a:c2:b9:2e:11:a2:c7:77:24:3a:04:95:f0:86:76:ae:7f: 31:74:67:af:ce:60:2b:5c:a8:ba:3f:aa:53:ae:ae:17:21:84: 5f:5b:79:6a:6c:9e:ba:54:77:71:88:0d:f5:4a:de:22:e4:b8: 9f:8f:83:22:9b:a5:0d:a5:d9:4d:e6:9f:98:8e:b7:a7:97:41: 54:57:c6:1d:65:a3:69:dd:af:46:9c:81:7d:4b:78:08:07:94: b2:d6:d6:ee:c1:27:ae:22:fe:39:82:8a:3c:a4:c3:be:13:4d: cf:b2:70:95:70:1a:14:5f:fd:ba:eb:b5:74:f0:6d:ee:0d:7a: 23:1b:83:1d:fc:87:b5:88:4c:f9:c5:8b:df:66:1f:60:46:0c: 34:f0:fd:4f:80:3e:0f:13:4f:8b:11:ee:c0:55:4c:61:55:f7: 23:54:ca:73:a8:a4:10:8c:60:6f:83:ec:4a:7a:74:b6:62:68: f5:c7:ed:34:90:84:13:d6:c0:df:7a:10:04:a1:f5:28:3f:47: ce:a9:b4:2c:83:b9:f5:ba:a5:a1:d2:82:5b:76:56:a8:07:47: 30:e1:b9:1e:07:81:6a:b1:e0:99:e9:79:57:8b:fc:23:bd:a7: 9e:0b:6d:aa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o1/SAo1JeGJiiuxtAKTjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMGEwNjU2NGQzYzcxN2QyZDZkYWExZTgzM2M0OTU5NzZi MGJhZGEwHhcNMjYwMTAxMDgxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjU3ZWMxZGQ4ZTAyZjRiMzQwZTc0NzQyNWFiMGM0Y2UwMDJmYzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gXWTGLOd1wuQw2DcWOaPOiGSbNf mXnK2KlgMeDPJbLIh4cDNyMBRNyN1x9XPB72XnJV/DD0HwuC/iygKlSH7+Eap2vu mby9VheyGmeIb6vO6+GOshr2xDrqqTKTPEKGRcQKQN29vEor5JUUlsBdlOxnUNrd W/zCJ3SeCD+ntb4n8QHCCU3mHyBkkZoMss2JeiQIamWFXEGNBOxdXM4Kns9GuRot dOGOXBOcDU8QYhvyvwRsbR1h2W8ygcFvhQcZ5Fi5an/k6lfkEZspqo/Vz7GscKoW UJIy3YIZ4JW5wSjrLi9AfWw4+gB2JiqF4857Wtzrkq9fN0hWZdA1GR/0KwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMZX7B3Y4C9LNA50dCWrDEzgAvx5MB8GA1UdIwQY MBaAFHoKBlZNPHF9LW2qHoM8SVl2sLraMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWdvR1ZrMDhjWDB0YmFvZWd6eEpXWGF3dXRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi82ZjU5OGQtYTVjNS00Yzk5LWExZjAt NTQ4MjYzZWI2ZmI0LzEveGxmc0hkamdMMHMwRG5SMEphc01UT0FDX0hrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi82ZjU5OGQtYTVjNS00Yzk5LWExZjAtNTQ4MjYzZWI2ZmI0 LzEvZWdvR1ZrMDhjWDB0YmFvZWd6eEpXWGF3dXRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClfkAMA0G CSqGSIb3DQEBCwUAA4IBAQAXxVH1FsHl2eS/QkR/8P29X3AyKsK5LhGix3ckOgSV 8IZ2rn8xdGevzmArXKi6P6pTrq4XIYRfW3lqbJ66VHdxiA31St4i5Lifj4Mim6UN pdlN5p+Yjrenl0FUV8YdZaNp3a9GnIF9S3gIB5Sy1tbuwSeuIv45goo8pMO+E03P snCVcBoUX/2667V08G3uDXojG4Md/Ie1iEz5xYvfZh9gRgw08P1PgD4PE0+LEe7A VUxhVfcjVMpzqKQQjGBvg+xKenS2Ymj1x+00kIQT1sDfehAEofUoP0fOqbQsg7n1 uqWh0oJbdlaoB0cw4bkeB4FqseCZ6XlXi/wjvaeeC22q -----END CERTIFICATE-----Generated at Wed Jan 7 22:29:20 2026 by rpki-client