This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/080bf2-7b2e-465e-ae9c-c4adbeb5adc0/1/x1B-mdWUUiKHAk3b8SUqN_-EL2I.roa File: x1B-mdWUUiKHAk3b8SUqN_-EL2I.roa (raw, json) Hash identifier: WJUhh7/d5aZNzfyoptLs5bYcLK8fHrUMzT9DKjN5hPs= Subject key identifier: C7:50:7E:99:D5:94:52:22:87:02:4D:DB:F1:25:2A:37:FF:84:2F:62 Certificate issuer: /CN=dfac628a4c5cc6e570f4f41c4e0d6395491b4d7f Certificate serial: 019B79EC189D29566E2D3FBDC45B808DD62C Authority key identifier: DF:AC:62:8A:4C:5C:C6:E5:70:F4:F4:1C:4E:0D:63:95:49:1B:4D:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36xiikxcxuVw9PQcTg1jlUkbTX8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/080bf2-7b2e-465e-ae9c-c4adbeb5adc0/1/x1B-mdWUUiKHAk3b8SUqN_-EL2I.roa Signing time: Thu 01 Jan 2026 14:17:54 +0000 ROA not before: Thu 01 Jan 2026 14:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20647 IP address blocks: 185.231.124.0/22 maxlen: 22 2a0c:5f00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/080bf2-7b2e-465e-ae9c-c4adbeb5adc0/1/36xiikxcxuVw9PQcTg1jlUkbTX8.crl rsync://rpki.ripe.net/repository/DEFAULT/99/080bf2-7b2e-465e-ae9c-c4adbeb5adc0/1/36xiikxcxuVw9PQcTg1jlUkbTX8.mft rsync://rpki.ripe.net/repository/DEFAULT/36xiikxcxuVw9PQcTg1jlUkbTX8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:18:9d:29:56:6e:2d:3f:bd:c4:5b:80:8d:d6:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfac628a4c5cc6e570f4f41c4e0d6395491b4d7f Validity Not Before: Jan 1 14:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7507e99d594522287024ddbf1252a37ff842f62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:99:ce:17:9f:6f:8f:ec:d5:3b:83:19:ba:30: d7:33:e3:a8:0e:50:05:5f:64:96:cf:50:96:b0:8e: f4:fc:f9:8a:18:20:75:fa:bd:f5:fd:ac:a2:67:82: 24:9d:be:22:3f:f5:8c:33:8c:57:15:1f:ae:9f:32: 4e:dd:4e:02:5b:3a:d6:2f:1c:03:ac:89:3e:8e:f5: 07:a2:59:ed:2f:32:cf:a4:e5:ed:2e:59:9a:e8:0e: 41:02:3c:26:30:95:dd:27:30:bc:44:e4:2d:ab:82: 6f:89:ee:2b:37:6e:37:82:41:c7:ef:ca:45:06:df: 40:c5:75:35:ff:0c:91:ec:cb:c8:bc:be:83:94:44: e2:80:23:10:4b:fd:b0:ca:80:ec:6b:ba:1e:f6:db: 5d:48:37:71:c3:29:e5:b4:67:dd:b8:35:85:82:e9: 8f:d0:c3:b0:2a:9f:4b:db:37:d4:f1:9d:85:94:e8: e4:f7:1f:05:5c:b9:75:bc:80:1b:d0:2f:c0:16:dc: b7:d6:b7:3a:35:83:a2:27:0e:a7:e5:6c:02:26:5f: 4d:4e:01:73:52:69:b2:31:cb:de:9b:b0:8c:ca:7d: 1f:cb:b7:bc:80:c6:cd:93:86:29:d0:61:2c:36:6b: 4d:b5:7a:bc:78:e6:0c:a4:d9:28:f5:26:7b:32:31: e7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:50:7E:99:D5:94:52:22:87:02:4D:DB:F1:25:2A:37:FF:84:2F:62 X509v3 Authority Key Identifier: keyid:DF:AC:62:8A:4C:5C:C6:E5:70:F4:F4:1C:4E:0D:63:95:49:1B:4D:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36xiikxcxuVw9PQcTg1jlUkbTX8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/080bf2-7b2e-465e-ae9c-c4adbeb5adc0/1/x1B-mdWUUiKHAk3b8SUqN_-EL2I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/080bf2-7b2e-465e-ae9c-c4adbeb5adc0/1/36xiikxcxuVw9PQcTg1jlUkbTX8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.231.124.0/22 IPv6: 2a0c:5f00::/32 Signature Algorithm: sha256WithRSAEncryption 25:d6:fe:d5:75:70:1e:53:b7:82:76:8b:03:ff:71:96:87:94: 56:b2:b5:76:f9:97:69:1e:41:8c:41:9c:63:19:93:a7:cf:3d: c6:b5:bd:7a:53:1d:2d:ca:d3:d1:4b:7f:48:b7:89:2e:ba:e9: fe:ce:af:50:7d:81:bc:86:9e:28:38:68:d8:9f:6d:31:e9:68: fc:ca:ca:91:62:df:a7:08:74:ad:67:eb:a4:88:1e:bf:32:23: da:73:27:9f:bf:bc:88:83:65:98:c3:11:3c:64:21:94:c8:b1: 76:f0:9a:68:a4:41:7a:7b:52:41:7d:7f:ae:fb:32:77:82:2d: f2:7d:1e:e6:6f:f4:06:62:c8:83:00:8b:48:33:53:1e:4b:c3: 68:62:68:ef:56:6a:08:cc:45:0a:cb:27:6f:19:21:3c:ce:00: c9:45:c9:52:25:b0:6c:9b:f3:b8:b4:bf:a4:bd:0d:92:77:11: 0b:66:8e:57:74:0a:73:d7:fd:29:78:4c:fa:95:03:dc:b9:ff: b7:03:f5:36:84:42:b9:d5:56:21:63:18:58:0f:55:57:e2:85: a2:db:7f:0e:d4:93:24:6d:71:5d:e9:8b:a1:93:1b:59:c1:9e: e7:15:b0:2b:71:e4:ca:7b:45:95:1c:86:cc:f8:67:0e:c2:db: 59:6d:18:0a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57BidKVZuLT+9xFuAjdYsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmYWM2MjhhNGM1Y2M2ZTU3MGY0ZjQxYzRlMGQ2Mzk1NDkx YjRkN2YwHhcNMjYwMTAxMTQxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzUwN2U5OWQ1OTQ1MjIyODcwMjRkZGJmMTI1MmEzN2ZmODQyZjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZnOF59vj+zVO4MZujDXM+OoDlAF X2SWz1CWsI70/PmKGCB1+r31/ayiZ4Iknb4iP/WMM4xXFR+unzJO3U4CWzrWLxwD rIk+jvUHolntLzLPpOXtLlma6A5BAjwmMJXdJzC8ROQtq4Jvie4rN243gkHH78pF Bt9AxXU1/wyR7MvIvL6DlETigCMQS/2wyoDsa7oe9ttdSDdxwynltGfduDWFgumP 0MOwKp9L2zfU8Z2FlOjk9x8FXLl1vIAb0C/AFty31rc6NYOiJw6n5WwCJl9NTgFz UmmyMcvem7CMyn0fy7e8gMbNk4Yp0GEsNmtNtXq8eOYMpNko9SZ7MjHnxQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMdQfpnVlFIihwJN2/ElKjf/hC9iMB8GA1UdIwQY MBaAFN+sYopMXMblcPT0HE4NY5VJG01/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzZ4aWlreGN4dVZ3OVBRY1RnMWpsVWtiVFg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8wODBiZjItN2IyZS00NjVlLWFlOWMt YzRhZGJlYjVhZGMwLzEveDFCLW1kV1VVaUtIQWszYjhTVXFOXy1FTDJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8wODBiZjItN2IyZS00NjVlLWFlOWMtYzRhZGJlYjVhZGMw LzEvMzZ4aWlreGN4dVZ3OVBRY1RnMWpsVWtiVFg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCued8MA0E AgACMAcDBQAqDF8AMA0GCSqGSIb3DQEBCwUAA4IBAQAl1v7VdXAeU7eCdosD/3GW h5RWsrV2+ZdpHkGMQZxjGZOnzz3Gtb16Ux0tytPRS39It4kuuun+zq9QfYG8hp4o OGjYn20x6Wj8ysqRYt+nCHStZ+ukiB6/MiPacyefv7yIg2WYwxE8ZCGUyLF28Jpo pEF6e1JBfX+u+zJ3gi3yfR7mb/QGYsiDAItIM1MeS8NoYmjvVmoIzEUKyydvGSE8 zgDJRclSJbBsm/O4tL+kvQ2SdxELZo5XdApz1/0peEz6lQPcuf+3A/U2hEK51VYh YxhYD1VX4oWi238O1JMkbXFd6YuhkxtZwZ7nFbArceTKe0WVHIbM+GcOwttZbRgK -----END CERTIFICATE-----Generated at Mon Feb 9 23:46:48 2026 by rpki-client