This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/XTCQQcjp5CrIeZ-UkyAvlX0BUQg.roa File: XTCQQcjp5CrIeZ-UkyAvlX0BUQg.roa (raw, json) Hash identifier: zFZIfgLA4CAX5/fEuHf+EZA0mBUZ6GpGKY3jWN1rGko= Subject key identifier: 5D:30:90:41:C8:E9:E4:2A:C8:79:9F:94:93:20:2F:95:7D:01:51:08 Certificate issuer: /CN=ee370985f83f41330111c350cd6b1e1eead526aa Certificate serial: 019C09B2AC5348764BF57C1243C20DA3AA4C Authority key identifier: EE:37:09:85:F8:3F:41:33:01:11:C3:50:CD:6B:1E:1E:EA:D5:26:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jcJhfg_QTMBEcNQzWseHurVJqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/XTCQQcjp5CrIeZ-UkyAvlX0BUQg.roa Signing time: Thu 29 Jan 2026 12:20:30 +0000 ROA not before: Thu 29 Jan 2026 12:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7768 IP address blocks: 185.140.125.0/24 maxlen: 24 185.140.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.mft rsync://rpki.ripe.net/repository/DEFAULT/7jcJhfg_QTMBEcNQzWseHurVJqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:09:b2:ac:53:48:76:4b:f5:7c:12:43:c2:0d:a3:aa:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee370985f83f41330111c350cd6b1e1eead526aa Validity Not Before: Jan 29 12:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d309041c8e9e42ac8799f9493202f957d015108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:25:08:d1:9d:6e:33:0e:5e:42:c4:b7:56:fa: 6b:19:f7:b7:b9:59:e1:e1:2d:97:0a:2e:d9:f7:f4: d2:4b:66:44:19:70:c5:22:1e:0e:3c:0d:2a:83:65: 90:3d:6f:0b:42:6f:eb:5d:cc:e9:86:7b:ed:87:a8: ce:af:34:15:6b:70:a0:c2:fb:cf:d2:a9:1c:ad:e2: e5:2c:6b:d9:4d:d2:92:5f:ff:e5:09:b6:f4:04:d9: 49:e0:90:07:ed:77:24:fd:e8:a6:66:6b:ac:c0:66: 33:a1:48:28:66:e5:e9:30:f9:6d:48:35:df:c2:48: 9c:8a:da:cd:2d:e1:45:ff:6c:e3:27:c9:55:ae:81: 46:41:45:03:d3:46:dd:27:8a:5c:82:9a:ac:b9:a3: aa:1f:ac:9c:6c:6f:99:84:f9:1c:b9:73:4a:7c:27: 7f:84:cd:7c:6d:4b:82:85:29:6e:86:42:92:43:83: 63:0f:87:7e:97:7d:9a:e8:95:ab:dd:d6:0c:3e:d6: f9:7e:95:20:f9:f3:a6:47:70:d8:e0:d4:1f:07:26: 8d:95:70:58:aa:13:6b:ff:58:9f:35:6f:dc:3a:da: 59:80:15:6a:2b:e9:ba:32:00:76:e4:d9:10:70:7c: 31:0e:39:af:c4:6e:12:f7:ed:21:cc:f5:b0:aa:3b: 56:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:30:90:41:C8:E9:E4:2A:C8:79:9F:94:93:20:2F:95:7D:01:51:08 X509v3 Authority Key Identifier: keyid:EE:37:09:85:F8:3F:41:33:01:11:C3:50:CD:6B:1E:1E:EA:D5:26:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jcJhfg_QTMBEcNQzWseHurVJqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/XTCQQcjp5CrIeZ-UkyAvlX0BUQg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.140.125.0-185.140.126.255 Signature Algorithm: sha256WithRSAEncryption 4a:df:0d:c4:ae:1a:16:ea:52:46:12:59:2c:65:f2:10:50:6d: e8:03:61:39:3e:61:ab:0d:42:9a:48:e4:58:32:87:67:25:3f: d1:74:b3:a7:8e:4a:4e:99:50:b4:77:24:f5:8f:3c:0e:ce:a8: 13:c5:5b:2b:5d:2e:75:24:ef:fb:19:22:40:11:d9:e0:e4:45: 91:6c:a9:2b:17:86:da:0c:a8:44:73:e2:5c:fa:e3:49:c0:35: 5f:bd:37:00:50:87:b9:a5:a9:33:10:d0:80:95:2d:c9:a9:22: 40:d3:c9:43:33:c0:fa:d5:0f:94:ae:28:17:0f:ab:1f:0d:bb: f4:d7:74:68:63:92:13:34:51:f9:3b:1a:ac:c9:fe:09:73:a2: 72:dd:07:70:f7:38:44:35:ab:6e:d9:e3:8d:b8:73:08:b5:6b: 9f:51:bc:81:33:26:d5:34:5e:bb:63:ce:b9:79:f9:0b:b8:03: 9b:12:aa:c6:71:aa:81:d5:02:b4:5d:09:94:b8:b7:52:29:ba: 0e:9b:bd:04:15:42:91:c0:8e:70:21:a4:78:2d:b0:5a:6d:1e: cb:2f:51:72:b4:1f:6d:e5:e8:17:28:6f:75:b6:4a:8e:74:c2: 76:05:44:fa:12:6f:44:61:88:b3:4b:48:b7:e4:df:28:ca:3d: 70:a9:97:d3 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZwJsqxTSHZL9XwSQ8INo6pMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMzcwOTg1ZjgzZjQxMzMwMTExYzM1MGNkNmIxZTFlZWFk NTI2YWEwHhcNMjYwMTI5MTIyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDMwOTA0MWM4ZTllNDJhYzg3OTlmOTQ5MzIwMmY5NTdkMDE1MTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7SUI0Z1uMw5eQsS3VvprGfe3uVnh 4S2XCi7Z9/TSS2ZEGXDFIh4OPA0qg2WQPW8LQm/rXczphnvth6jOrzQVa3CgwvvP 0qkcreLlLGvZTdKSX//lCbb0BNlJ4JAH7Xck/eimZmuswGYzoUgoZuXpMPltSDXf wkicitrNLeFF/2zjJ8lVroFGQUUD00bdJ4pcgpqsuaOqH6ycbG+ZhPkcuXNKfCd/ hM18bUuChSluhkKSQ4NjD4d+l32a6JWr3dYMPtb5fpUg+fOmR3DY4NQfByaNlXBY qhNr/1ifNW/cOtpZgBVqK+m6MgB25NkQcHwxDjmvxG4S9+0hzPWwqjtWqQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFF0wkEHI6eQqyHmflJMgL5V9AVEIMB8GA1UdIwQY MBaAFO43CYX4P0EzARHDUM1rHh7q1SaqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2pjSmhmZ19RVE1CRWNOUXpXc2VIdXJWSnFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8yNzQ0ZDAtNDFhMC00NDM0LWI2OTAt MzI0NDU0NmY4Y2JmLzEvWFRDUVFjanA1Q3JJZVotVWt5QXZsWDBCVVFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC8yNzQ0ZDAtNDFhMC00NDM0LWI2OTAtMzI0NDU0NmY4Y2Jm LzEvN2pjSmhmZ19RVE1CRWNOUXpXc2VIdXJWSnFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5jH0D BAC5jH4wDQYJKoZIhvcNAQELBQADggEBAErfDcSuGhbqUkYSWSxl8hBQbegDYTk+ YasNQppI5Fgyh2clP9F0s6eOSk6ZULR3JPWPPA7OqBPFWytdLnUk7/sZIkAR2eDk RZFsqSsXhtoMqERz4lz640nANV+9NwBQh7mlqTMQ0ICVLcmpIkDTyUMzwPrVD5Su KBcPqx8Nu/TXdGhjkhM0Ufk7GqzJ/glzonLdB3D3OEQ1q27Z4424cwi1a59RvIEz JtU0Xrtjzrl5+Qu4A5sSqsZxqoHVArRdCZS4t1Ipug6bvQQVQpHAjnAhpHgtsFpt HssvUXK0H23l6Bcob3W2So50wnYFRPoSb0RhiLNLSLfk3yjKPXCpl9M= -----END CERTIFICATE-----Generated at Mon Feb 2 08:08:24 2026 by rpki-client