This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/XGLoZ1t3WE712vezFdNpPyi4F9M.roa File: XGLoZ1t3WE712vezFdNpPyi4F9M.roa (raw, json) Hash identifier: qwmyAr6rGmu+/cVj8nXEo+36zXFkr8LlX1oRfxoChFQ= Subject key identifier: 5C:62:E8:67:5B:77:58:4E:F5:DA:F7:B3:15:D3:69:3F:28:B8:17:D3 Certificate issuer: /CN=2c96946c501ddf48696da2cf110fdceb286fac98 Certificate serial: 019B7CED9055BD73BC62253DCDD937C3AB37 Authority key identifier: 2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/XGLoZ1t3WE712vezFdNpPyi4F9M.roa Signing time: Fri 02 Jan 2026 04:18:22 +0000 ROA not before: Fri 02 Jan 2026 04:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210776 IP address blocks: 85.222.238.0/24 maxlen: 24 85.222.239.0/24 maxlen: 24 89.255.205.0/24 maxlen: 24 89.255.206.0/24 maxlen: 24 185.242.220.0/24 maxlen: 24 185.242.221.0/24 maxlen: 24 185.242.222.0/24 maxlen: 24 185.242.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.mft rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:90:55:bd:73:bc:62:25:3d:cd:d9:37:c3:ab:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c96946c501ddf48696da2cf110fdceb286fac98 Validity Not Before: Jan 2 04:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c62e8675b77584ef5daf7b315d3693f28b817d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fb:8a:cd:d4:21:35:30:c7:eb:77:f2:56:3c: bd:b0:d6:44:74:70:52:9a:a1:4e:0a:d7:48:04:04: ba:61:e4:ce:e7:ab:93:91:f7:6d:b1:9c:e4:c5:fa: ad:cd:e0:8e:81:e0:c4:54:01:44:7a:b3:79:34:ca: 33:e5:4a:5b:2b:9d:69:ba:8d:34:66:2f:62:c4:dc: 64:f2:c4:42:ab:0a:e3:68:e5:9f:bd:31:2c:72:95: b7:ed:66:15:b2:a7:1e:5a:f2:24:44:59:9c:9c:6b: 94:6a:12:7a:52:99:1b:ca:ec:62:cc:79:de:30:51: 72:65:a0:c4:4c:14:bc:b2:70:d4:50:74:2f:e0:32: 2b:70:20:28:96:e4:35:2a:5d:f9:b2:0d:4d:35:75: 2a:b9:35:f2:90:36:94:3f:0a:80:60:56:83:38:ec: 5f:59:ca:6d:e5:2c:7e:f2:dc:3d:07:2d:b1:47:24: ce:39:e8:e9:57:a1:17:44:ca:77:75:53:80:46:1b: 06:e3:78:e1:1d:a5:88:52:bb:f9:0f:f5:b9:a4:2e: ff:0d:0a:e6:50:2b:ea:8a:82:87:8d:f4:b7:88:96: 5d:e4:9f:ae:c1:90:59:af:99:a4:85:7a:63:92:a6: ae:a2:da:7c:a9:40:af:98:b9:d7:98:f7:72:b5:c9: ee:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:62:E8:67:5B:77:58:4E:F5:DA:F7:B3:15:D3:69:3F:28:B8:17:D3 X509v3 Authority Key Identifier: keyid:2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/XGLoZ1t3WE712vezFdNpPyi4F9M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.222.238.0/23 89.255.205.0-89.255.206.255 185.242.220.0/22 Signature Algorithm: sha256WithRSAEncryption 11:c7:5e:24:8f:46:fa:cb:92:99:d5:2f:90:61:77:36:9a:f9: 7b:1b:e6:d5:23:51:10:e2:ba:7d:b4:5c:17:ce:14:03:2f:87: be:b1:56:4f:1b:63:87:57:57:9b:20:d5:0f:3e:da:70:60:62: 0d:7c:83:2c:1b:66:57:99:64:b1:c1:08:4a:36:0a:93:31:30: 95:31:e4:5c:6f:0b:5d:f0:50:a6:f4:84:42:c6:3d:75:98:35: fe:81:61:f5:bc:d0:37:27:55:66:37:44:08:6e:d4:04:13:55: 59:e8:0f:8f:d3:66:36:9c:73:2e:72:10:99:e7:46:86:40:f0: 0c:06:2c:6c:60:49:3c:20:88:d1:69:01:17:2b:da:a2:c8:60: eb:c5:dc:e6:47:e3:2c:11:37:2e:ab:83:0a:22:a1:e3:5e:2b: d0:9d:d7:f7:f7:3c:7e:4d:8e:b7:c8:b7:95:50:6f:d8:e0:35: a9:81:74:fa:fd:79:44:be:66:e6:1a:3c:23:0f:44:5d:9e:f8: c5:be:6e:67:49:ad:7a:fb:ad:64:8d:31:4e:4e:b8:d4:f5:5b: 75:85:75:a3:30:73:35:78:8d:57:4f:93:16:df:9b:a4:8d:da: b3:68:69:bf:04:e0:ee:46:4c:f8:bc:b4:1c:06:7c:98:34:bf: 6c:18:33:ff -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt87ZBVvXO8YiU9zdk3w6s3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjOTY5NDZjNTAxZGRmNDg2OTZkYTJjZjExMGZkY2ViMjg2 ZmFjOTgwHhcNMjYwMTAyMDQxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzYyZTg2NzViNzc1ODRlZjVkYWY3YjMxNWQzNjkzZjI4YjgxN2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vuKzdQhNTDH63fyVjy9sNZEdHBS mqFOCtdIBAS6YeTO56uTkfdtsZzkxfqtzeCOgeDEVAFEerN5NMoz5UpbK51puo00 Zi9ixNxk8sRCqwrjaOWfvTEscpW37WYVsqceWvIkRFmcnGuUahJ6UpkbyuxizHne MFFyZaDETBS8snDUUHQv4DIrcCAoluQ1Kl35sg1NNXUquTXykDaUPwqAYFaDOOxf Wcpt5Sx+8tw9By2xRyTOOejpV6EXRMp3dVOARhsG43jhHaWIUrv5D/W5pC7/DQrm UCvqioKHjfS3iJZd5J+uwZBZr5mkhXpjkqauotp8qUCvmLnXmPdytcnuuwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFFxi6Gdbd1hO9dr3sxXTaT8ouBfTMB8GA1UdIwQY MBaAFCyWlGxQHd9IaW2izxEP3Osob6yYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEphVWJGQWQzMGhwYmFMUEVRX2M2eWh2ckpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wNGZlZjgtZDJkZi00ZjdhLTkyYjQt N2Y5NzBhM2FmOWNkLzEvWEdMb1oxdDNXRTcxMnZlekZkTnBQeWk0RjlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8wNGZlZjgtZDJkZi00ZjdhLTkyYjQtN2Y5NzBhM2FmOWNk LzEvTEphVWJGQWQzMGhwYmFMUEVRX2M2eWh2ckpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBVd7uMAwD BABZ/80DBABZ/84DBAK58twwDQYJKoZIhvcNAQELBQADggEBABHHXiSPRvrLkpnV L5Bhdzaa+Xsb5tUjURDiun20XBfOFAMvh76xVk8bY4dXV5sg1Q8+2nBgYg18gywb ZleZZLHBCEo2CpMxMJUx5FxvC13wUKb0hELGPXWYNf6BYfW80DcnVWY3RAhu1AQT VVnoD4/TZjaccy5yEJnnRoZA8AwGLGxgSTwgiNFpARcr2qLIYOvF3OZH4ywRNy6r gwoioeNeK9Cd1/f3PH5NjrfIt5VQb9jgNamBdPr9eUS+ZuYaPCMPRF2e+MW+bmdJ rXr7rWSNMU5OuNT1W3WFdaMwczV4jVdPkxbfm6SN2rNoab8E4O5GTPi8tBwGfJg0 v2wYM/8= -----END CERTIFICATE-----Generated at Tue Jan 27 05:32:51 2026 by rpki-client