This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/xBgy_H62jp_peWFVNL2jCljFBzw.roa File: xBgy_H62jp_peWFVNL2jCljFBzw.roa (raw, json) Hash identifier: FsGIuRvPcEfadNKC9UqpUs/32O7Qa+ZVXh6PzF+igCo= Subject key identifier: C4:18:32:FC:7E:B6:8E:9F:E9:79:61:55:34:BD:A3:0A:58:C5:07:3C Certificate issuer: /CN=aa8551e851e69db165c6c632af45f21715512939 Certificate serial: 019B7FF15A3C3889F59B19E0338066E494A6 Authority key identifier: AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/xBgy_H62jp_peWFVNL2jCljFBzw.roa Signing time: Fri 02 Jan 2026 18:21:22 +0000 ROA not before: Fri 02 Jan 2026 18:21:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 176.221.80.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:5a:3c:38:89:f5:9b:19:e0:33:80:66:e4:94:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa8551e851e69db165c6c632af45f21715512939 Validity Not Before: Jan 2 18:21:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c41832fc7eb68e9fe979615534bda30a58c5073c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:db:3d:59:18:77:18:88:2d:54:c9:2f:b2:80: 34:47:3c:02:56:29:ed:a7:d8:6c:02:9f:9d:db:24: c9:39:e1:d1:86:4d:fb:fa:18:24:f5:17:16:a3:75: f8:56:00:3b:1c:9e:fd:74:73:7b:3a:3e:92:84:13: dc:85:fd:10:82:c6:5a:e3:87:d2:8f:7c:a7:b1:5e: 18:8c:da:e1:b4:64:4d:7c:86:87:bd:e3:3b:e5:ba: 9c:48:f8:38:e7:73:7e:2b:a6:b6:25:b2:d8:39:6f: 23:6a:05:c0:3d:60:77:ed:90:d0:2c:7d:b4:55:e7: 90:f1:5a:97:be:a6:ea:de:88:b6:9c:06:98:54:78: fd:14:46:eb:fe:33:35:e0:2b:37:fb:09:e1:e3:85: b0:21:84:8d:d0:90:94:eb:60:4b:8b:33:bc:d1:98: 24:4d:6b:35:1d:32:23:0e:48:27:4d:ea:a8:85:20: 6c:17:25:4f:b3:f1:a9:0a:47:66:38:b6:da:b5:2c: 5e:f6:9b:ae:d8:9b:4b:72:5d:74:d3:ee:e8:26:ca: 1a:a9:71:68:81:2d:4e:ba:b8:eb:ef:b6:44:32:0f: 26:06:b0:00:55:ab:63:aa:9c:87:e4:54:5f:60:9a: 4c:2f:57:55:ec:9a:d1:16:6c:56:c4:fa:d4:b5:d0: fa:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:18:32:FC:7E:B6:8E:9F:E9:79:61:55:34:BD:A3:0A:58:C5:07:3C X509v3 Authority Key Identifier: keyid:AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/xBgy_H62jp_peWFVNL2jCljFBzw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.221.80.0/22 Signature Algorithm: sha256WithRSAEncryption 17:40:17:70:49:0f:0c:ca:0f:85:82:c8:40:78:6c:f4:8b:8a: 2f:36:41:b3:ad:2a:67:f5:a2:46:e7:d7:62:8e:19:96:5c:53: 44:e0:f6:37:38:66:73:91:c2:84:f0:a4:35:97:32:38:ba:53: 0c:d0:06:35:82:22:c6:66:ee:4c:72:c2:8e:fd:dd:85:85:8a: bd:77:b3:19:67:cf:7e:af:c9:a1:e6:b8:c4:86:0f:29:cd:27: bd:ee:0c:63:8c:c5:eb:1a:d1:90:87:b9:ce:e3:94:95:6e:97: 07:70:31:e9:1c:3b:2f:d3:16:db:0f:68:cb:7d:7d:e1:38:15: 40:76:b1:a7:f4:55:21:22:71:65:50:be:68:64:8e:b4:a0:c1: 33:5a:52:bb:79:a8:b7:11:79:a8:d2:9b:ce:2c:c5:19:f5:fd: dd:1a:b8:e9:7a:ba:24:cd:2d:02:1b:17:2a:11:f5:c4:e0:08: bc:2c:8a:41:88:bd:66:00:5f:2a:9e:c8:35:67:dc:0f:1d:30: bb:9f:29:cc:4f:6e:da:57:95:e5:cd:e2:92:1d:8a:32:64:d2: 67:fb:bb:30:48:e8:c7:bc:b6:70:c9:79:15:98:04:e5:f2:91: 01:14:3f:0f:08:5d:5e:be:3f:f5:af:e8:43:fa:3c:c1:de:27: 2c:28:eb:79 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8Vo8OIn1mxngM4Bm5JSmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhODU1MWU4NTFlNjlkYjE2NWM2YzYzMmFmNDVmMjE3MTU1 MTI5MzkwHhcNMjYwMTAyMTgyMTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDE4MzJmYzdlYjY4ZTlmZTk3OTYxNTUzNGJkYTMwYTU4YzUwNzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArts9WRh3GIgtVMkvsoA0RzwCVint p9hsAp+d2yTJOeHRhk37+hgk9RcWo3X4VgA7HJ79dHN7Oj6ShBPchf0QgsZa44fS j3ynsV4YjNrhtGRNfIaHveM75bqcSPg453N+K6a2JbLYOW8jagXAPWB37ZDQLH20 VeeQ8VqXvqbq3oi2nAaYVHj9FEbr/jM14Cs3+wnh44WwIYSN0JCU62BLizO80Zgk TWs1HTIjDkgnTeqohSBsFyVPs/GpCkdmOLbatSxe9puu2JtLcl100+7oJsoaqXFo gS1Ourjr77ZEMg8mBrAAVatjqpyH5FRfYJpML1dV7JrRFmxWxPrUtdD6CwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMQYMvx+to6f6XlhVTS9owpYxQc8MB8GA1UdIwQY MBaAFKqFUehR5p2xZcbGMq9F8hcVUSk5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW9WUjZGSG1uYkZseHNZeXIwWHlGeFZSS1RrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9kZTk2MTUtMGJjMC00ZTVlLTgzMTgt ZmIxZDk5MmRlMDAxLzEveEJneV9INjJqcF9wZVdGVk5MMmpDbGpGQnp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9kZTk2MTUtMGJjMC00ZTVlLTgzMTgtZmIxZDk5MmRlMDAx LzEvcW9WUjZGSG1uYkZseHNZeXIwWHlGeFZSS1RrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCsN1QMA0G CSqGSIb3DQEBCwUAA4IBAQAXQBdwSQ8Myg+FgshAeGz0i4ovNkGzrSpn9aJG59di jhmWXFNE4PY3OGZzkcKE8KQ1lzI4ulMM0AY1giLGZu5McsKO/d2FhYq9d7MZZ89+ r8mh5rjEhg8pzSe97gxjjMXrGtGQh7nO45SVbpcHcDHpHDsv0xbbD2jLfX3hOBVA drGn9FUhInFlUL5oZI60oMEzWlK7eai3EXmo0pvOLMUZ9f3dGrjperokzS0CGxcq EfXE4Ai8LIpBiL1mAF8qnsg1Z9wPHTC7nynMT27aV5XlzeKSHYoyZNJn+7swSOjH vLZwyXkVmATl8pEBFD8PCF1evj/1r+hD+jzB3icsKOt5 -----END CERTIFICATE-----Generated at Fri Jan 9 17:05:10 2026 by rpki-client