This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Xb_UxkTLphBRNKX2yNK75AG36EQ.roa File: Xb_UxkTLphBRNKX2yNK75AG36EQ.roa (raw, json) Hash identifier: nzBS6PUFvNrMnbC6+OYPNfj5wT/zJrxr4Je+bYGhPXI= Subject key identifier: 5D:BF:D4:C6:44:CB:A6:10:51:34:A5:F6:C8:D2:BB:E4:01:B7:E8:44 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019BD1C66D2A4A6D2128563563280B1CE46A Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Xb_UxkTLphBRNKX2yNK75AG36EQ.roa Signing time: Sun 18 Jan 2026 15:43:20 +0000 ROA not before: Sun 18 Jan 2026 15:43:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 266539 IP address blocks: 217.60.12.0/24 maxlen: 24 217.60.14.0/24 maxlen: 24 217.60.24.0/24 maxlen: 24 217.60.26.0/24 maxlen: 24 217.60.184.0/23 maxlen: 24 217.60.193.0/24 maxlen: 24 217.60.198.0/24 maxlen: 24 217.60.242.0/24 maxlen: 24 217.60.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 10:42:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d1:c6:6d:2a:4a:6d:21:28:56:35:63:28:0b:1c:e4:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 18 15:43:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5dbfd4c644cba6105134a5f6c8d2bbe401b7e844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:74:b1:5f:e7:95:55:62:1a:cb:e7:5c:ab:17: 56:6e:00:c9:2c:cc:a7:1d:72:09:c6:f8:e8:a3:10: 2a:ac:08:3f:7b:7f:98:1c:00:1e:3d:8b:61:a6:de: a5:28:10:c5:c6:fe:fa:05:b3:a7:75:07:50:d9:fe: c6:d0:41:74:a8:9f:07:ff:b6:5e:f1:b2:be:b7:18: 84:73:69:e4:d8:dc:67:b0:a8:8a:5e:3f:1c:53:0c: 3a:a2:75:25:e3:67:e1:30:f6:6c:21:fd:b0:9e:44: 23:50:b6:ad:c0:bb:2b:54:25:43:13:d1:69:f9:ea: 51:72:6b:17:34:54:e3:7a:f4:5b:47:af:ac:2f:52: fe:db:f1:e0:3f:df:c5:1f:b1:1e:45:31:e8:eb:8b: 3b:7b:07:ce:93:af:56:06:f5:55:63:18:99:c8:c1: fa:cc:b7:5d:31:16:6a:14:ed:c6:2c:b5:ea:2d:83: 6f:56:20:c0:32:53:d2:6d:ff:9a:64:20:c8:fb:cc: 9b:b6:65:64:3a:99:19:1c:b8:89:0e:40:79:e0:91: 1e:2f:54:79:d7:78:d6:a0:56:3e:28:c1:2a:95:61: 7b:a9:cf:59:7f:86:75:8e:73:18:5a:01:3a:b3:bf: 86:85:a5:6e:6e:82:7e:8b:2d:d3:d3:1b:e4:76:0e: e1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:BF:D4:C6:44:CB:A6:10:51:34:A5:F6:C8:D2:BB:E4:01:B7:E8:44 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Xb_UxkTLphBRNKX2yNK75AG36EQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.60.12.0/24 217.60.14.0/24 217.60.24.0/24 217.60.26.0/24 217.60.184.0/23 217.60.193.0/24 217.60.198.0/24 217.60.242.0/24 217.60.250.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:7d:d5:05:e5:05:e6:c7:bf:af:57:10:1c:c4:b4:87:05:86: 12:56:ab:cf:27:58:bc:11:ab:d8:a5:a5:a7:fe:fd:4e:72:f1: 3c:a4:6a:09:85:b1:51:b4:3e:ac:57:9e:15:ee:b4:5b:e9:5a: 15:12:35:a3:71:2f:8f:96:86:08:ef:c9:53:15:eb:3f:91:ce: 23:ce:68:db:db:11:6c:47:bc:24:55:5d:89:b7:27:95:fe:d6: 91:47:c2:d7:55:52:c0:d7:56:37:f9:f9:a5:13:89:f6:dc:0c: 19:bd:ed:a8:e3:49:a0:15:96:28:29:34:8d:50:9e:bf:d0:bb: 98:c7:31:7e:b6:05:66:80:87:77:01:bf:e9:c2:22:67:da:dc: 83:5b:31:40:b5:c8:a1:15:58:6a:82:12:53:06:fd:25:20:d3: 7b:ce:6d:8b:4c:36:ea:92:d9:1f:de:55:1c:11:a6:ef:c5:95: fa:a1:a8:72:ec:5d:cc:a1:09:d6:c9:b3:b2:33:7e:5c:fe:b9: d4:da:a9:80:49:4f:2c:45:8c:be:d8:ee:ad:ad:09:c2:7b:42: 73:4b:a5:06:22:05:61:6e:e5:c9:37:42:c5:b5:0e:da:d0:f9: 71:05:d5:53:90:5b:53:46:30:a8:c8:4a:49:ea:37:e6:cc:26: 0f:9b:ea:4e -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZvRxm0qSm0hKFY1YygLHORqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTE4MTU0MzIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZGJmZDRjNjQ0Y2JhNjEwNTEzNGE1ZjZjOGQyYmJlNDAxYjdlODQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnSxX+eVVWIay+dcqxdWbgDJLMyn HXIJxvjooxAqrAg/e3+YHAAePYthpt6lKBDFxv76BbOndQdQ2f7G0EF0qJ8H/7Ze 8bK+txiEc2nk2NxnsKiKXj8cUww6onUl42fhMPZsIf2wnkQjULatwLsrVCVDE9Fp +epRcmsXNFTjevRbR6+sL1L+2/HgP9/FH7EeRTHo64s7ewfOk69WBvVVYxiZyMH6 zLddMRZqFO3GLLXqLYNvViDAMlPSbf+aZCDI+8ybtmVkOpkZHLiJDkB54JEeL1R5 13jWoFY+KMEqlWF7qc9Zf4Z1jnMYWgE6s7+GhaVuboJ+iy3T0xvkdg7hpwIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFF2/1MZEy6YQUTSl9sjSu+QBt+hEMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvWGJfVXhrVExwaEJSTktYMnlOSzc1QUczNkVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQA2TwMAwQA 2TwOAwQA2TwYAwQA2TwaAwQB2Ty4AwQA2TzBAwQA2TzGAwQA2TzyAwQA2Tz6MA0G CSqGSIb3DQEBCwUAA4IBAQBPfdUF5QXmx7+vVxAcxLSHBYYSVqvPJ1i8EavYpaWn /v1OcvE8pGoJhbFRtD6sV54V7rRb6VoVEjWjcS+PloYI78lTFes/kc4jzmjb2xFs R7wkVV2JtyeV/taRR8LXVVLA11Y3+fmlE4n23AwZve2o40mgFZYoKTSNUJ6/0LuY xzF+tgVmgId3Ab/pwiJn2tyDWzFAtcihFVhqghJTBv0lINN7zm2LTDbqktkf3lUc EabvxZX6oahy7F3MoQnWybOyM35c/rnU2qmASU8sRYy+2O6trQnCe0JzS6UGIgVh buXJN0LFtQ7a0PlxBdVTkFtTRjCoyEpJ6jfmzCYPm+pO -----END CERTIFICATE-----Generated at Tue Jan 20 20:33:30 2026 by rpki-client