This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/XJYerDR0PpzOzzlvepGEResfgcE.roa File: XJYerDR0PpzOzzlvepGEResfgcE.roa (raw, json) Hash identifier: 5wfEN3Q7d2uKbWDp8Mpxi1eFLJLct6OeAjh4AL/cHTg= Subject key identifier: 5C:96:1E:AC:34:74:3E:9C:CE:CF:39:6F:7A:91:84:45:EB:1F:81:C1 Certificate issuer: /CN=b61bc97b98276eb3babd9e7aa67e2705ae11e658 Certificate serial: 019B7E3899134D57DB5935545B5E71915FC4 Authority key identifier: B6:1B:C9:7B:98:27:6E:B3:BA:BD:9E:7A:A6:7E:27:05:AE:11:E6:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thvJe5gnbrO6vZ56pn4nBa4R5lg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/XJYerDR0PpzOzzlvepGEResfgcE.roa Signing time: Fri 02 Jan 2026 10:19:57 +0000 ROA not before: Fri 02 Jan 2026 10:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207630 IP address blocks: 37.32.103.0/24 maxlen: 24 194.76.156.0/22 maxlen: 24 2a04:55c0::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.mft rsync://rpki.ripe.net/repository/DEFAULT/thvJe5gnbrO6vZ56pn4nBa4R5lg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:99:13:4d:57:db:59:35:54:5b:5e:71:91:5f:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b61bc97b98276eb3babd9e7aa67e2705ae11e658 Validity Not Before: Jan 2 10:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c961eac34743e9ccecf396f7a918445eb1f81c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1a:ca:ef:c1:c4:a5:ee:42:95:19:a8:f3:46: 2d:eb:56:c6:0e:64:7e:93:b4:30:1f:ec:ec:0b:37: 71:12:fb:bb:bf:1d:5a:57:e7:b9:e6:1b:00:4d:e3: 30:a8:5a:50:b9:92:55:b3:bf:d0:a8:ea:93:50:0d: ca:61:c1:34:ce:e8:ff:76:84:ee:f1:5f:43:3c:c4: b4:8e:e0:30:04:22:4a:bf:0e:dd:69:f4:eb:b3:32: df:f4:c4:b1:9b:8a:95:b7:bd:75:7f:35:ae:70:50: 82:b5:b4:98:4b:49:6e:c7:a3:9d:32:e6:f8:09:3a: b5:a5:ee:cb:27:98:87:15:11:42:93:30:05:ca:11: 2b:f0:f8:b3:c7:76:92:d4:21:58:db:6d:d1:5b:38: 53:5a:54:c1:55:c2:6b:cc:c4:df:0f:1e:99:ce:9b: 9a:ea:c6:6c:1d:73:27:e4:b7:85:1c:26:c0:b0:5c: fe:ff:96:4d:66:43:00:be:94:4b:6e:30:6f:e3:b1: 15:9f:ac:1c:de:d8:51:9b:fa:b3:36:b8:7a:92:8e: fa:97:fd:04:67:a6:3f:5f:a3:eb:09:62:56:17:58: f0:4a:f1:18:0f:51:36:62:85:c6:71:3c:0b:d4:82: 81:63:72:de:af:25:48:c8:3e:1c:81:8d:8f:3a:91: 20:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:96:1E:AC:34:74:3E:9C:CE:CF:39:6F:7A:91:84:45:EB:1F:81:C1 X509v3 Authority Key Identifier: keyid:B6:1B:C9:7B:98:27:6E:B3:BA:BD:9E:7A:A6:7E:27:05:AE:11:E6:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thvJe5gnbrO6vZ56pn4nBa4R5lg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/XJYerDR0PpzOzzlvepGEResfgcE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.32.103.0/24 194.76.156.0/22 IPv6: 2a04:55c0::/29 Signature Algorithm: sha256WithRSAEncryption 88:33:53:44:8c:df:00:11:c6:97:3b:57:eb:7d:14:56:f0:37: dd:83:31:23:c0:d4:bb:78:94:d6:37:67:ee:44:7b:e1:9a:66: a5:2a:87:3d:5e:f8:bd:51:8c:1f:44:b5:7a:e5:da:a7:a0:dc: d5:ae:68:24:c9:3a:5a:44:c7:44:c3:91:8f:96:b4:f9:de:ab: d1:7e:c8:0e:b2:a6:23:ba:98:54:5a:ea:95:6f:f6:3a:b9:12: 49:98:e9:49:ce:d7:89:af:b4:2d:40:59:92:dc:33:5d:97:e8: 00:40:5b:0e:01:2a:c2:26:17:50:47:02:45:11:bc:1a:03:86: c8:7e:6e:26:cf:49:8c:8f:6c:a1:e6:45:b7:2a:8a:8f:02:67: 6f:ba:de:b6:7e:21:05:9b:c6:57:8f:59:6a:a6:31:79:3d:38: f4:f7:a4:0e:9c:b1:af:3c:2f:bd:d1:ea:c1:ed:26:70:37:84: fc:5e:bb:7e:fd:eb:44:d0:c7:71:26:d4:14:bd:b2:ce:96:cc: 69:e2:ac:7b:ac:38:af:40:88:20:72:d9:1c:80:db:ed:0f:40: 78:45:7b:06:49:6a:a9:ea:e3:a0:2f:6a:de:b0:34:e0:d5:92: bc:af:72:79:48:8c:08:3d:00:2a:27:e4:9e:4d:ce:36:85:f9: 52:bf:2d:90 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt+OJkTTVfbWTVUW15xkV/EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MWJjOTdiOTgyNzZlYjNiYWJkOWU3YWE2N2UyNzA1YWUx MWU2NTgwHhcNMjYwMTAyMTAxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Yzk2MWVhYzM0NzQzZTljY2VjZjM5NmY3YTkxODQ0NWViMWY4MWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxrK78HEpe5ClRmo80Yt61bGDmR+ k7QwH+zsCzdxEvu7vx1aV+e55hsATeMwqFpQuZJVs7/QqOqTUA3KYcE0zuj/doTu 8V9DPMS0juAwBCJKvw7dafTrszLf9MSxm4qVt711fzWucFCCtbSYS0lux6OdMub4 CTq1pe7LJ5iHFRFCkzAFyhEr8Pizx3aS1CFY223RWzhTWlTBVcJrzMTfDx6Zzpua 6sZsHXMn5LeFHCbAsFz+/5ZNZkMAvpRLbjBv47EVn6wc3thRm/qzNrh6ko76l/0E Z6Y/X6PrCWJWF1jwSvEYD1E2YoXGcTwL1IKBY3LeryVIyD4cgY2POpEgfQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFFyWHqw0dD6czs85b3qRhEXrH4HBMB8GA1UdIwQY MBaAFLYbyXuYJ26zur2eeqZ+JwWuEeZYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGh2SmU1Z25ick82dlo1NnBuNG5CYTRSNWxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9mMjZmNjItZmZhMi00MTcwLWJlNGYt OTgzZDRkYTEzNDQ3LzEvWEpZZXJEUjBQcHpPenpsdmVwR0VSZXNmZ2NFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9mMjZmNjItZmZhMi00MTcwLWJlNGYtOTgzZDRkYTEzNDQ3 LzEvdGh2SmU1Z25ick82dlo1NnBuNG5CYTRSNWxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAJSBnAwQC wkycMA0EAgACMAcDBQMqBFXAMA0GCSqGSIb3DQEBCwUAA4IBAQCIM1NEjN8AEcaX O1frfRRW8DfdgzEjwNS7eJTWN2fuRHvhmmalKoc9Xvi9UYwfRLV65dqnoNzVrmgk yTpaRMdEw5GPlrT53qvRfsgOsqYjuphUWuqVb/Y6uRJJmOlJzteJr7QtQFmS3DNd l+gAQFsOASrCJhdQRwJFEbwaA4bIfm4mz0mMj2yh5kW3KoqPAmdvut62fiEFm8ZX j1lqpjF5PTj096QOnLGvPC+90erB7SZwN4T8Xrt+/etE0MdxJtQUvbLOlsxp4qx7 rDivQIggctkcgNvtD0B4RXsGSWqp6uOgL2resDTg1ZK8r3J5SIwIPQAqJ+SeTc42 hflSvy2Q -----END CERTIFICATE-----Generated at Mon Feb 9 22:26:50 2026 by rpki-client