This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/x8LHw7zDa42zMdIg9zthvEzV2kE.roa File: x8LHw7zDa42zMdIg9zthvEzV2kE.roa (raw, json) Hash identifier: 4t3LBnliu+TFNqK0uHC8bitBdGAkSxERgzaOQAy67TM= Subject key identifier: C7:C2:C7:C3:BC:C3:6B:8D:B3:31:D2:20:F7:3B:61:BC:4C:D5:DA:41 Certificate issuer: /CN=5ce1aae0c93ad04b7298082b68bf6a54fa68bcf0 Certificate serial: 019B7A5B5FDDAC5D5FADD85EBD718B18C470 Authority key identifier: 5C:E1:AA:E0:C9:3A:D0:4B:72:98:08:2B:68:BF:6A:54:FA:68:BC:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XOGq4Mk60EtymAgraL9qVPpovPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/x8LHw7zDa42zMdIg9zthvEzV2kE.roa Signing time: Thu 01 Jan 2026 16:19:27 +0000 ROA not before: Thu 01 Jan 2026 16:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42831 IP address blocks: 94.136.168.0/22 maxlen: 22 185.75.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.mft rsync://rpki.ripe.net/repository/DEFAULT/XOGq4Mk60EtymAgraL9qVPpovPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:5f:dd:ac:5d:5f:ad:d8:5e:bd:71:8b:18:c4:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ce1aae0c93ad04b7298082b68bf6a54fa68bcf0 Validity Not Before: Jan 1 16:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7c2c7c3bcc36b8db331d220f73b61bc4cd5da41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2c:77:02:bf:b4:01:2f:ff:61:b7:87:48:69: 47:3c:0a:50:64:85:c3:bb:51:9e:f9:17:e3:a8:7d: 09:38:a6:24:c5:56:89:d4:5c:89:f1:ae:3b:e9:9b: b3:0f:86:1a:0e:8b:b7:5b:2b:02:fe:2b:b7:94:e0: 02:1d:05:63:be:ba:54:24:b8:2a:e1:55:36:69:9e: e9:6e:97:18:39:bd:b1:76:12:ba:7d:32:2a:0c:42: c7:ab:24:e8:93:64:24:17:f9:b0:10:a1:b3:50:de: ec:6a:ca:2f:0e:6c:d4:ff:07:ef:1a:0b:c5:1c:c9: 42:87:db:20:43:05:36:46:02:eb:aa:85:0a:33:f0: 07:27:92:44:f0:7c:52:69:a9:87:97:8e:ac:fa:a8: 5f:7b:e3:9b:51:70:8b:a1:2a:fe:75:db:18:44:6b: 98:81:a8:cf:2a:dc:27:fd:9b:a5:75:e4:04:27:69: 00:0f:98:e1:34:16:b3:7b:04:a1:53:c2:63:85:67: 1d:a6:b2:96:b5:f5:7e:b6:f0:e7:04:b9:1d:ad:6e: 7b:ea:d7:93:a9:78:a4:9a:b9:b1:34:03:3f:4d:da: f0:e1:17:ae:a9:06:2d:3c:58:96:08:6c:7c:7e:d7: 0e:c9:cb:44:12:c7:41:75:aa:0c:81:5a:d3:92:ed: e5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:C2:C7:C3:BC:C3:6B:8D:B3:31:D2:20:F7:3B:61:BC:4C:D5:DA:41 X509v3 Authority Key Identifier: keyid:5C:E1:AA:E0:C9:3A:D0:4B:72:98:08:2B:68:BF:6A:54:FA:68:BC:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOGq4Mk60EtymAgraL9qVPpovPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/x8LHw7zDa42zMdIg9zthvEzV2kE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.136.168.0/22 185.75.20.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:47:a2:93:72:ba:f9:c0:54:93:d0:37:1e:bf:ca:e7:96:91: 12:58:0a:00:25:e8:95:f2:38:65:46:7f:6a:a1:27:fb:e1:d3: 4f:5b:54:9f:9b:20:3c:b2:cb:9d:33:cf:7d:46:9c:5f:2c:92: 3b:0f:57:0d:d3:93:d2:41:cb:91:75:a0:b9:5a:ec:52:6b:ae: 8b:67:42:32:af:50:40:bb:83:ec:5d:cf:6a:6f:f7:90:70:4c: 6b:fb:8a:93:4d:8e:de:c5:67:95:42:b8:28:03:bc:e8:36:c0: dc:87:0f:1b:8b:ac:d9:e4:da:4b:01:47:da:31:a0:cd:a9:bb: 62:61:bc:4d:91:0e:90:b9:31:4f:b3:fc:66:dc:b4:1c:2b:a5: c4:9f:99:14:0b:31:09:ec:d7:65:a0:80:0e:3b:4b:85:82:4b: 5a:fc:3b:ce:45:33:93:fd:03:fe:01:a6:51:78:9c:9e:18:58: da:0b:ad:e5:6f:c9:b1:ee:ca:41:0a:2c:52:d9:c3:32:c7:fc: 58:d0:71:4e:b8:52:49:e3:7d:36:37:e2:1a:ae:17:b5:6a:51: 04:54:49:41:75:a1:8e:c2:42:34:df:dd:74:7e:77:3e:1f:cd: 1d:ea:d9:19:07:4a:99:33:f8:65:4d:78:8a:58:31:03:38:dc: 45:ce:fe:0e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6W1/drF1frdhevXGLGMRwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZTFhYWUwYzkzYWQwNGI3Mjk4MDgyYjY4YmY2YTU0ZmE2 OGJjZjAwHhcNMjYwMTAxMTYxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjN2MyYzdjM2JjYzM2YjhkYjMzMWQyMjBmNzNiNjFiYzRjZDVkYTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlix3Ar+0AS//YbeHSGlHPApQZIXD u1Ge+RfjqH0JOKYkxVaJ1FyJ8a476ZuzD4YaDou3WysC/iu3lOACHQVjvrpUJLgq 4VU2aZ7pbpcYOb2xdhK6fTIqDELHqyTok2QkF/mwEKGzUN7sasovDmzU/wfvGgvF HMlCh9sgQwU2RgLrqoUKM/AHJ5JE8HxSaamHl46s+qhfe+ObUXCLoSr+ddsYRGuY gajPKtwn/ZuldeQEJ2kAD5jhNBazewShU8JjhWcdprKWtfV+tvDnBLkdrW576teT qXikmrmxNAM/Tdrw4ReuqQYtPFiWCGx8ftcOyctEEsdBdaoMgVrTku3lgwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMfCx8O8w2uNszHSIPc7YbxM1dpBMB8GA1UdIwQY MBaAFFzhquDJOtBLcpgIK2i/alT6aLzwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWE9HcTRNazYwRXR5bUFncmFMOXFWUHBvdlBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9mZjM2MTgtNzAzMi00MTQzLTkzNzQt YmExNDE4ZDIyMDg3LzEveDhMSHc3ekRhNDJ6TWRJZzl6dGh2RXpWMmtFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9mZjM2MTgtNzAzMi00MTQzLTkzNzQtYmExNDE4ZDIyMDg3 LzEvWE9HcTRNazYwRXR5bUFncmFMOXFWUHBvdlBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCXoioAwQB uUsUMA0GCSqGSIb3DQEBCwUAA4IBAQA9R6KTcrr5wFST0Dcev8rnlpESWAoAJeiV 8jhlRn9qoSf74dNPW1SfmyA8ssudM899RpxfLJI7D1cN05PSQcuRdaC5WuxSa66L Z0Iyr1BAu4PsXc9qb/eQcExr+4qTTY7exWeVQrgoA7zoNsDchw8bi6zZ5NpLAUfa MaDNqbtiYbxNkQ6QuTFPs/xm3LQcK6XEn5kUCzEJ7NdloIAOO0uFgkta/DvORTOT /QP+AaZReJyeGFjaC63lb8mx7spBCixS2cMyx/xY0HFOuFJJ4302N+Iarhe1alEE VElBdaGOwkI03910fnc+H80d6tkZB0qZM/hlTXiKWDEDONxFzv4O -----END CERTIFICATE-----Generated at Mon Jan 19 23:23:23 2026 by rpki-client