This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/XMXhjch6dUtmOgx83Yqi0nRepQQ.roa File: XMXhjch6dUtmOgx83Yqi0nRepQQ.roa (raw, json) Hash identifier: oRFDKOQne/iiMrNSPQZj6KyEYS28P2EKV4eyVkAVmEo= Subject key identifier: 5C:C5:E1:8D:C8:7A:75:4B:66:3A:0C:7C:DD:8A:A2:D2:74:5E:A5:04 Certificate issuer: /CN=162d78249b721b4d2ce8cf6dfcfbc4422213ac9d Certificate serial: 019B7758C81069AA5E151B6C5A7AB365C13E Authority key identifier: 16:2D:78:24:9B:72:1B:4D:2C:E8:CF:6D:FC:FB:C4:42:22:13:AC:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fi14JJtyG00s6M9t_PvEQiITrJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/XMXhjch6dUtmOgx83Yqi0nRepQQ.roa Signing time: Thu 01 Jan 2026 02:17:45 +0000 ROA not before: Thu 01 Jan 2026 02:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203944 IP address blocks: 185.118.216.0/22 maxlen: 22 185.118.216.0/23 maxlen: 23 185.118.217.0/24 maxlen: 24 185.118.218.0/23 maxlen: 23 185.118.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/Fi14JJtyG00s6M9t_PvEQiITrJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:c8:10:69:aa:5e:15:1b:6c:5a:7a:b3:65:c1:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=162d78249b721b4d2ce8cf6dfcfbc4422213ac9d Validity Not Before: Jan 1 02:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5cc5e18dc87a754b663a0c7cdd8aa2d2745ea504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b5:ca:7d:7e:4e:8a:68:38:b6:a1:70:56:89: 76:b9:8c:99:14:86:d9:a5:ed:69:c0:40:e9:90:36: a2:24:db:0d:1b:25:4b:c6:89:29:54:22:70:0d:f6: f9:0d:9e:69:3e:3a:0d:ce:b4:77:db:f5:37:ca:f2: 9b:bf:e5:7f:2a:90:27:9d:26:81:43:1d:c7:28:38: 85:2c:d5:ef:89:37:d9:6c:a1:54:a8:02:e8:5e:af: 42:db:af:2c:af:50:fe:cb:c6:46:59:3e:a3:37:70: fd:3d:37:21:58:59:f7:63:c8:50:c0:0c:3e:39:80: 59:36:cd:da:7c:66:4a:09:fb:55:3b:ad:8b:76:43: 8e:e6:30:62:9f:8f:d2:1e:69:04:9c:ec:52:a6:83: 10:22:24:61:5e:19:53:6a:6d:17:08:42:d5:1c:4f: 77:dc:56:44:e0:a6:a4:39:6f:b1:30:3b:ea:ee:51: 35:fa:e1:72:21:b3:86:84:fd:a7:f7:44:46:8d:6c: 59:45:45:d9:ac:28:58:f3:79:ea:ca:62:73:6f:05: 04:dc:1f:64:fe:29:14:bf:19:6e:06:43:50:5e:92: 48:06:3d:21:ce:02:75:45:5f:0b:3f:43:31:8d:8c: 2f:c7:52:c6:fd:26:bb:cb:54:37:15:27:25:a4:cf: 10:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:C5:E1:8D:C8:7A:75:4B:66:3A:0C:7C:DD:8A:A2:D2:74:5E:A5:04 X509v3 Authority Key Identifier: keyid:16:2D:78:24:9B:72:1B:4D:2C:E8:CF:6D:FC:FB:C4:42:22:13:AC:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fi14JJtyG00s6M9t_PvEQiITrJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/XMXhjch6dUtmOgx83Yqi0nRepQQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.118.216.0/22 Signature Algorithm: sha256WithRSAEncryption 96:49:48:13:c8:19:0f:19:08:a6:f0:2b:99:e0:b2:50:86:8e: 8a:76:eb:e9:7d:88:2b:32:9f:79:12:24:35:79:83:0f:23:73: 60:c6:82:2f:eb:72:c1:85:0c:ca:3b:dd:d9:64:a6:3f:f4:1a: 6e:4c:7d:4f:94:7a:9b:4c:f3:17:6c:ce:b9:0d:79:bd:6b:3a: 7d:5f:ff:41:2d:16:c6:c8:a5:ee:b6:e7:8d:c3:56:31:17:5f: b9:58:d5:e4:18:37:75:c9:cd:51:4d:2b:3a:53:04:47:0a:34: 0d:e5:94:20:5b:11:69:25:b2:21:f1:25:e9:d0:7b:39:9e:27: e5:31:a4:45:7e:e3:2f:08:23:cb:40:83:13:d5:0c:de:3e:3a: d2:f2:8d:20:1f:2b:07:0e:bc:eb:fc:bc:b7:65:c4:34:5b:9e: bd:25:f8:bc:b2:63:51:2b:a4:3a:ff:cf:0b:98:c3:ea:fb:f6: 00:78:1d:87:5d:4d:a7:b4:76:e0:eb:f2:04:ef:b2:27:b1:9c: 00:cd:e8:71:63:68:a6:ff:fd:f5:be:42:7b:a9:3f:f3:04:e6: 51:98:a4:57:c3:96:a8:d9:f7:b8:36:92:88:16:64:5b:5c:f3: bd:ed:28:55:0b:58:1c:77:18:42:84:42:a0:a8:23:67:90:8b: 8f:e6:4d:23 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WMgQaapeFRtsWnqzZcE+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MmQ3ODI0OWI3MjFiNGQyY2U4Y2Y2ZGZjZmJjNDQyMjIx M2FjOWQwHhcNMjYwMTAxMDIxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2M1ZTE4ZGM4N2E3NTRiNjYzYTBjN2NkZDhhYTJkMjc0NWVhNTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7XKfX5Oimg4tqFwVol2uYyZFIbZ pe1pwEDpkDaiJNsNGyVLxokpVCJwDfb5DZ5pPjoNzrR32/U3yvKbv+V/KpAnnSaB Qx3HKDiFLNXviTfZbKFUqALoXq9C268sr1D+y8ZGWT6jN3D9PTchWFn3Y8hQwAw+ OYBZNs3afGZKCftVO62LdkOO5jBin4/SHmkEnOxSpoMQIiRhXhlTam0XCELVHE93 3FZE4KakOW+xMDvq7lE1+uFyIbOGhP2n90RGjWxZRUXZrChY83nqymJzbwUE3B9k /ikUvxluBkNQXpJIBj0hzgJ1RV8LP0MxjYwvx1LG/Sa7y1Q3FSclpM8QWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFzF4Y3IenVLZjoMfN2KotJ0XqUEMB8GA1UdIwQY MBaAFBYteCSbchtNLOjPbfz7xEIiE6ydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmkxNEpKdHlHMDBzNk05dF9QdkVRaUlUckowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iY2JkMDMtZDIzMS00ZDMzLWIzYzUt OThmYTgyNzE4NmE5LzEvWE1YaGpjaDZkVXRtT2d4ODNZcWkwblJlcFFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9iY2JkMDMtZDIzMS00ZDMzLWIzYzUtOThmYTgyNzE4NmE5 LzEvRmkxNEpKdHlHMDBzNk05dF9QdkVRaUlUckowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXbYMA0G CSqGSIb3DQEBCwUAA4IBAQCWSUgTyBkPGQim8CuZ4LJQho6KduvpfYgrMp95EiQ1 eYMPI3NgxoIv63LBhQzKO93ZZKY/9BpuTH1PlHqbTPMXbM65DXm9azp9X/9BLRbG yKXutueNw1YxF1+5WNXkGDd1yc1RTSs6UwRHCjQN5ZQgWxFpJbIh8SXp0Hs5nifl MaRFfuMvCCPLQIMT1QzePjrS8o0gHysHDrzr/Ly3ZcQ0W569Jfi8smNRK6Q6/88L mMPq+/YAeB2HXU2ntHbg6/IE77InsZwAzehxY2im//31vkJ7qT/zBOZRmKRXw5ao 2fe4NpKIFmRbXPO97ShVC1gcdxhChEKgqCNnkIuP5k0j -----END CERTIFICATE-----Generated at Mon Feb 9 21:23:20 2026 by rpki-client