This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/X2ChAfB0ph2uVDrKp_WAi-SFNpk.roa File: X2ChAfB0ph2uVDrKp_WAi-SFNpk.roa (raw, json) Hash identifier: 2DryVgNmogeZ8uzHcLeC/dodMxU2tvIkUUUdlHnRmV4= Subject key identifier: 5F:60:A1:01:F0:74:A6:1D:AE:54:3A:CA:A7:F5:80:8B:E4:85:36:99 Certificate issuer: /CN=18af6a06050e4ca26b2fdd13a7c0ad146cd26dc8 Certificate serial: 019B79EC90CB67CB66A7F825B9F9B2329ABD Authority key identifier: 18:AF:6A:06:05:0E:4C:A2:6B:2F:DD:13:A7:C0:AD:14:6C:D2:6D:C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GK9qBgUOTKJrL90Tp8CtFGzSbcg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/X2ChAfB0ph2uVDrKp_WAi-SFNpk.roa Signing time: Thu 01 Jan 2026 14:18:25 +0000 ROA not before: Thu 01 Jan 2026 14:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49402 IP address blocks: 185.56.220.0/24 maxlen: 24 185.56.221.0/24 maxlen: 24 185.56.222.0/24 maxlen: 24 193.169.48.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.crl rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft rsync://rpki.ripe.net/repository/DEFAULT/GK9qBgUOTKJrL90Tp8CtFGzSbcg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:90:cb:67:cb:66:a7:f8:25:b9:f9:b2:32:9a:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18af6a06050e4ca26b2fdd13a7c0ad146cd26dc8 Validity Not Before: Jan 1 14:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f60a101f074a61dae543acaa7f5808be4853699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:59:62:8c:21:b8:a7:40:7d:73:44:d3:cf:db: 10:fb:69:d3:71:98:d2:8c:c6:2e:90:24:cd:0a:85: f5:f2:a8:cb:84:ff:4e:38:a0:f4:a3:3f:7e:e0:45: d1:2d:ec:ce:1e:44:43:71:e8:85:a0:e6:81:51:92: 16:f0:4d:d7:b8:7a:46:9e:03:59:93:16:fe:ac:f7: 5c:e6:b7:be:99:07:7e:7e:c5:a2:6d:2d:8f:0a:c4: 8a:dc:4d:be:9f:9d:60:5f:c5:1e:d0:47:b6:71:fe: 74:f5:01:3f:9d:af:55:1b:0f:eb:70:7c:b0:9a:22: d9:ca:71:df:17:d2:94:54:0d:bf:40:03:38:59:08: 42:8f:2f:d0:04:6c:7f:ac:46:c7:54:78:95:3a:33: 48:37:31:57:21:76:2d:26:15:49:7b:63:53:79:bd: d9:ba:76:6f:19:53:ff:cc:c9:60:fb:60:bf:a3:4c: 3a:a8:a5:47:d7:65:0a:00:b3:29:24:80:5c:c5:33: e0:b7:ab:8d:f8:cd:5b:56:c3:55:b4:44:85:1e:56: d1:aa:3a:a4:dd:dd:82:51:85:6c:4d:6b:6d:5d:36: 9e:a4:b7:24:81:ad:46:80:0a:60:07:2d:3c:53:c3: 94:3d:fd:f2:b9:b8:a9:2d:83:9d:44:29:ae:19:a7: a4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:60:A1:01:F0:74:A6:1D:AE:54:3A:CA:A7:F5:80:8B:E4:85:36:99 X509v3 Authority Key Identifier: keyid:18:AF:6A:06:05:0E:4C:A2:6B:2F:DD:13:A7:C0:AD:14:6C:D2:6D:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GK9qBgUOTKJrL90Tp8CtFGzSbcg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/X2ChAfB0ph2uVDrKp_WAi-SFNpk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.56.220.0-185.56.222.255 193.169.48.0/23 Signature Algorithm: sha256WithRSAEncryption 78:e6:a7:6a:2f:c5:5d:45:15:e7:73:0c:67:8f:ce:10:73:96: 33:af:21:54:1a:6b:17:b1:52:07:c8:52:2b:98:3b:29:12:7c: 55:2c:62:2e:fc:19:c1:7d:b1:e9:aa:fc:89:84:1a:89:ea:ee: f8:ef:e3:45:ea:c1:93:4f:2e:07:09:88:d7:fa:7d:2d:7f:0f: 00:9e:21:46:b6:c7:11:37:50:a0:93:e4:6a:e8:86:58:e0:8c: b6:6c:11:01:da:ac:31:f2:e1:97:bd:de:8b:d5:71:c8:ab:6f: 10:22:20:49:98:64:2c:a8:80:37:9e:73:5b:09:be:51:8e:8d: 82:17:b2:af:3e:a3:39:66:8e:ce:9d:4d:10:e8:02:b2:f3:86: 9d:27:4a:ab:6d:4a:67:c6:ed:d1:57:a4:36:7a:6a:33:2c:fb: d8:54:67:4b:69:eb:d3:18:bb:4e:2b:c2:e9:ab:e2:2f:e7:1f: fb:a1:a0:1a:cd:6d:a4:f5:8c:65:54:73:4b:8f:66:05:20:a2: 7c:98:f3:b4:b6:a4:8b:cc:c0:ba:3d:51:85:fd:e0:7d:49:6e: f3:a1:98:45:51:cc:21:67:3d:7e:7e:e9:48:3e:06:f9:ca:ee: ae:7e:bd:02:cf:6b:6a:34:65:c7:46:ff:72:9d:83:81:e6:de: de:59:5a:dc -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt57JDLZ8tmp/glufmyMpq9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4YWY2YTA2MDUwZTRjYTI2YjJmZGQxM2E3YzBhZDE0NmNk MjZkYzgwHhcNMjYwMTAxMTQxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjYwYTEwMWYwNzRhNjFkYWU1NDNhY2FhN2Y1ODA4YmU0ODUzNjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVlijCG4p0B9c0TTz9sQ+2nTcZjS jMYukCTNCoX18qjLhP9OOKD0oz9+4EXRLezOHkRDceiFoOaBUZIW8E3XuHpGngNZ kxb+rPdc5re+mQd+fsWibS2PCsSK3E2+n51gX8Ue0Ee2cf509QE/na9VGw/rcHyw miLZynHfF9KUVA2/QAM4WQhCjy/QBGx/rEbHVHiVOjNINzFXIXYtJhVJe2NTeb3Z unZvGVP/zMlg+2C/o0w6qKVH12UKALMpJIBcxTPgt6uN+M1bVsNVtESFHlbRqjqk 3d2CUYVsTWttXTaepLckga1GgApgBy08U8OUPf3yubipLYOdRCmuGaekfQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFF9goQHwdKYdrlQ6yqf1gIvkhTaZMB8GA1UdIwQY MBaAFBivagYFDkyiay/dE6fArRRs0m3IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0s5cUJnVU9US0pyTDkwVHA4Q3RGR3pTYmNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8xOTkxZmUtYWRmNy00MzUyLWFiODMt MDM5NmU4N2Y1MjAyLzEvWDJDaEFmQjBwaDJ1VkRyS3BfV0FpLVNGTnBrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8xOTkxZmUtYWRmNy00MzUyLWFiODMtMDM5NmU4N2Y1MjAy LzEvR0s5cUJnVU9US0pyTDkwVHA4Q3RGR3pTYmNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAK5ONwD BAC5ON4DBAHBqTAwDQYJKoZIhvcNAQELBQADggEBAHjmp2ovxV1FFedzDGePzhBz ljOvIVQaaxexUgfIUiuYOykSfFUsYi78GcF9semq/ImEGonq7vjv40XqwZNPLgcJ iNf6fS1/DwCeIUa2xxE3UKCT5GrohljgjLZsEQHarDHy4Ze93ovVccirbxAiIEmY ZCyogDeec1sJvlGOjYIXsq8+ozlmjs6dTRDoArLzhp0nSqttSmfG7dFXpDZ6ajMs +9hUZ0tp69MYu04rwumr4i/nH/uhoBrNbaT1jGVUc0uPZgUgonyY87S2pIvMwLo9 UYX94H1JbvOhmEVRzCFnPX5+6Ug+BvnK7q5+vQLPa2o0ZcdG/3Kdg4Hm3t5ZWtw= -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:02 2026 by rpki-client