This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/xzVJ4-9mhck3VJg06LxLvbydZ-s.roa File: xzVJ4-9mhck3VJg06LxLvbydZ-s.roa (raw, json) Hash identifier: nar7atg62W69e18ovid53ri/PWihfkF0HJC36yljuuk= Subject key identifier: C7:35:49:E3:EF:66:85:C9:37:54:98:34:E8:BC:4B:BD:BC:9D:67:EB Certificate issuer: /CN=66af1c224db29a5104a61aac32f60956025fad43 Certificate serial: 019B78A26CC7BE60E4C83B4D8D22F6FDF5C4 Authority key identifier: 66:AF:1C:22:4D:B2:9A:51:04:A6:1A:AC:32:F6:09:56:02:5F:AD:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zq8cIk2ymlEEphqsMvYJVgJfrUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/xzVJ4-9mhck3VJg06LxLvbydZ-s.roa Signing time: Thu 01 Jan 2026 08:17:49 +0000 ROA not before: Thu 01 Jan 2026 08:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215037 IP address blocks: 81.177.208.0/22 maxlen: 24 81.177.208.0/23 maxlen: 23 81.177.210.0/23 maxlen: 23 194.117.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.crl rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.mft rsync://rpki.ripe.net/repository/DEFAULT/Zq8cIk2ymlEEphqsMvYJVgJfrUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:6c:c7:be:60:e4:c8:3b:4d:8d:22:f6:fd:f5:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66af1c224db29a5104a61aac32f60956025fad43 Validity Not Before: Jan 1 08:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c73549e3ef6685c937549834e8bc4bbdbc9d67eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b3:1e:24:64:cd:ea:ad:30:85:17:b4:3a:a5: 3e:59:ed:19:61:1d:2c:8d:18:b2:4d:83:14:aa:a1: 54:69:4f:25:bb:ae:ad:d2:f3:2f:73:0e:78:85:11: cc:38:3f:bc:30:bb:20:13:6b:3a:e1:43:14:af:ae: 53:d7:2b:65:df:23:3c:89:7d:5a:9e:9e:a5:5f:24: dc:cd:be:1c:5b:3f:b8:70:e3:90:2c:94:11:72:dd: 36:cb:96:be:39:8a:3b:e5:f8:5f:bb:02:34:93:5f: f3:bd:1a:c1:67:2f:53:bb:c5:03:ba:79:4d:41:fb: f8:27:a7:19:e8:5f:79:f8:93:19:9b:81:6f:ee:62: 9d:9c:fe:b8:4e:73:dd:5c:aa:9f:2a:3a:c3:5b:9c: a2:c4:2f:58:6c:76:3e:3d:d1:b8:55:c3:45:dd:c7: fb:2b:d4:ce:d6:3d:b2:6e:d1:71:d1:1f:22:5d:fb: 52:a3:b5:09:4a:eb:17:48:e1:d7:94:8c:c1:2f:04: a6:0b:aa:c3:b8:be:3b:b4:7f:07:22:a5:da:04:a6: c4:3f:61:82:e7:a4:8d:a6:e8:d0:98:89:d5:b1:f4: 95:94:15:00:3d:f0:0f:98:ea:1e:eb:9e:2b:1f:15: c3:85:93:7b:18:a3:c8:7f:a4:d5:a2:9d:be:34:17: 70:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:35:49:E3:EF:66:85:C9:37:54:98:34:E8:BC:4B:BD:BC:9D:67:EB X509v3 Authority Key Identifier: keyid:66:AF:1C:22:4D:B2:9A:51:04:A6:1A:AC:32:F6:09:56:02:5F:AD:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zq8cIk2ymlEEphqsMvYJVgJfrUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/xzVJ4-9mhck3VJg06LxLvbydZ-s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.177.208.0/22 194.117.65.0/24 Signature Algorithm: sha256WithRSAEncryption 08:50:2a:30:81:7c:2d:ea:cd:f0:62:07:83:5e:1d:b3:00:b1: 52:79:9a:4b:87:2a:f8:47:4e:3b:19:24:90:d7:f2:a3:43:15: 58:fa:e4:3e:75:fa:6e:fb:b0:f4:dd:f2:ac:96:d9:b0:fd:fd: c7:1a:98:b9:16:b9:d0:74:24:28:ac:9f:14:6b:2c:7c:d0:86: 56:03:63:db:ca:79:4b:44:f0:7a:9c:7b:bf:28:8d:c1:2d:9e: 5e:a1:f8:f0:2c:46:d1:6f:ff:8e:29:ef:63:33:a1:12:6a:47: c0:2b:0c:20:6c:da:30:a7:51:54:4f:9d:84:2b:f0:79:8e:24: 2f:fa:61:51:84:aa:dd:96:df:be:16:16:59:59:4a:66:dd:92: e4:19:81:3e:70:bc:76:33:98:be:89:a8:98:9f:e3:c1:6a:e0: 08:6c:d6:6f:4f:d5:61:41:fe:63:ab:72:21:b4:48:b6:c7:b5: 0d:b1:30:7f:1b:a5:38:b7:54:b1:ac:b4:35:0b:0c:d9:3e:51: ff:71:a2:47:b9:2f:cb:bd:6d:ee:79:10:ae:97:d3:f5:2f:7b: 8c:89:09:15:19:ce:41:b5:f2:c5:ba:7c:0f:12:b5:f6:5e:d1: 5e:5c:69:b4:15:91:3b:7f:b2:ad:b4:a8:9b:8d:45:ff:d2:61: e8:6d:02:47 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4omzHvmDkyDtNjSL2/fXEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2YWYxYzIyNGRiMjlhNTEwNGE2MWFhYzMyZjYwOTU2MDI1 ZmFkNDMwHhcNMjYwMTAxMDgxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzM1NDllM2VmNjY4NWM5Mzc1NDk4MzRlOGJjNGJiZGJjOWQ2N2ViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7MeJGTN6q0whRe0OqU+We0ZYR0s jRiyTYMUqqFUaU8lu66t0vMvcw54hRHMOD+8MLsgE2s64UMUr65T1ytl3yM8iX1a np6lXyTczb4cWz+4cOOQLJQRct02y5a+OYo75fhfuwI0k1/zvRrBZy9Tu8UDunlN Qfv4J6cZ6F95+JMZm4Fv7mKdnP64TnPdXKqfKjrDW5yixC9YbHY+PdG4VcNF3cf7 K9TO1j2ybtFx0R8iXftSo7UJSusXSOHXlIzBLwSmC6rDuL47tH8HIqXaBKbEP2GC 56SNpujQmInVsfSVlBUAPfAPmOoe654rHxXDhZN7GKPIf6TVop2+NBdwzwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMc1SePvZoXJN1SYNOi8S728nWfrMB8GA1UdIwQY MBaAFGavHCJNsppRBKYarDL2CVYCX61DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnE4Y0lrMnltbEVFcGhxc012WUpWZ0pmclVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9iMjhhMWQtZjQ3MS00ZWI3LWE4ZGUt YzBjNzQ4MDk0MzllLzEveHpWSjQtOW1oY2szVkpnMDZMeEx2YnlkWi1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9iMjhhMWQtZjQ3MS00ZWI3LWE4ZGUtYzBjNzQ4MDk0Mzll LzEvWnE4Y0lrMnltbEVFcGhxc012WUpWZ0pmclVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCUbHQAwQA wnVBMA0GCSqGSIb3DQEBCwUAA4IBAQAIUCowgXwt6s3wYgeDXh2zALFSeZpLhyr4 R047GSSQ1/KjQxVY+uQ+dfpu+7D03fKsltmw/f3HGpi5FrnQdCQorJ8Uayx80IZW A2PbynlLRPB6nHu/KI3BLZ5eofjwLEbRb/+OKe9jM6ESakfAKwwgbNowp1FUT52E K/B5jiQv+mFRhKrdlt++FhZZWUpm3ZLkGYE+cLx2M5i+iaiYn+PBauAIbNZvT9Vh Qf5jq3IhtEi2x7UNsTB/G6U4t1SxrLQ1CwzZPlH/caJHuS/LvW3ueRCul9P1L3uM iQkVGc5BtfLFunwPErX2XtFeXGm0FZE7f7KttKibjUX/0mHobQJH -----END CERTIFICATE-----Generated at Tue Feb 10 04:50:23 2026 by rpki-client