This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/X_oexMAynHCssJWS1xXVUpjLPDU.roa File: X_oexMAynHCssJWS1xXVUpjLPDU.roa (raw, json) Hash identifier: u2YqA2ZR5BhcCK1zVpI632Qbwf1IqH25NXhdjexdM9w= Subject key identifier: 5F:FA:1E:C4:C0:32:9C:70:AC:B0:95:92:D7:15:D5:52:98:CB:3C:35 Certificate issuer: /CN=8f0adba2604934738c7c9692a0b3ab7b30a82bb2 Certificate serial: 019B7C7F4A4F08D7059E6389EC4135859C50 Authority key identifier: 8F:0A:DB:A2:60:49:34:73:8C:7C:96:92:A0:B3:AB:7B:30:A8:2B:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/X_oexMAynHCssJWS1xXVUpjLPDU.roa Signing time: Fri 02 Jan 2026 02:17:55 +0000 ROA not before: Fri 02 Jan 2026 02:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201179 IP address blocks: 176.110.124.0/24 maxlen: 24 176.110.125.0/24 maxlen: 24 176.110.126.0/24 maxlen: 24 185.18.220.0/24 maxlen: 24 2a13:1240::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:4a:4f:08:d7:05:9e:63:89:ec:41:35:85:9c:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0adba2604934738c7c9692a0b3ab7b30a82bb2 Validity Not Before: Jan 2 02:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ffa1ec4c0329c70acb09592d715d55298cb3c35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ec:6d:cc:f3:24:39:96:76:28:98:d1:b0:94: 72:95:a1:ee:92:d8:09:f6:9f:8e:69:8e:f7:ae:82: d3:39:d7:bb:fc:3b:53:92:ef:ad:74:c0:5d:70:10: 99:79:a2:6d:58:67:e1:a1:48:af:54:94:41:88:7d: db:e3:be:fa:24:4f:48:d7:49:93:5d:bb:26:4b:a3: b1:6e:0d:a4:4d:85:6b:24:27:b8:fc:20:bc:69:db: bf:18:9a:4f:fb:9a:71:00:f2:27:16:6c:ca:a7:b1: 17:d9:0f:51:be:c0:30:61:a0:66:7a:10:0d:c8:68: 57:1d:76:96:21:bd:4f:06:18:3f:37:54:fa:e0:17: 2a:7e:77:21:7f:20:13:54:6c:16:c1:7a:1f:7c:43: 02:e1:47:d2:c3:9e:81:f4:53:37:30:de:ee:4a:91: 1e:85:59:01:a0:57:b6:21:85:98:34:e0:a1:6f:f9: 89:ce:58:8f:68:9a:ec:bc:94:92:c5:e5:cb:c1:6a: 28:e6:8a:e8:34:9c:b4:8d:e7:f6:43:29:5d:12:22: 63:90:1b:e1:44:35:f1:77:7e:67:8d:d3:b6:3c:b4: 08:69:77:33:26:c2:c8:56:92:74:f1:d1:ee:b5:59: 31:0c:96:58:ff:32:d3:04:10:8a:73:41:db:7b:2a: dc:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:FA:1E:C4:C0:32:9C:70:AC:B0:95:92:D7:15:D5:52:98:CB:3C:35 X509v3 Authority Key Identifier: keyid:8F:0A:DB:A2:60:49:34:73:8C:7C:96:92:A0:B3:AB:7B:30:A8:2B:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/X_oexMAynHCssJWS1xXVUpjLPDU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.110.124.0-176.110.126.255 185.18.220.0/24 IPv6: 2a13:1240::/29 Signature Algorithm: sha256WithRSAEncryption 4c:17:20:c6:0c:e1:b2:3b:3c:c9:a0:e3:c4:ea:73:3f:dc:d0: b9:ff:02:db:c9:72:bf:ba:50:c2:f5:65:86:82:20:ca:6d:b9: ec:a1:5f:d7:3e:e2:bf:35:26:67:3f:09:e6:66:b1:7f:cf:b8: ef:49:ff:0d:df:b7:d1:a4:7c:84:97:7b:ac:33:7e:7f:c8:c1: 9a:ad:d4:45:16:18:e6:13:39:11:c9:f1:b1:a5:e7:4e:57:b2: 3d:bf:c3:9c:fc:8f:ae:5a:f3:03:a2:1b:3c:2c:b6:57:d3:cc: 5c:44:b1:e1:1c:ce:9f:7b:27:6f:24:f7:e3:a0:27:1a:e0:9e: d7:4e:97:95:f5:62:1a:f2:ad:b4:d5:40:28:74:86:f5:c3:6d: 18:9f:68:04:90:af:ca:cd:8d:53:f6:f2:9b:19:c3:92:11:ca: dc:16:36:d6:ed:95:f4:ca:dc:53:17:64:77:21:c5:84:21:17: 5e:16:e6:6b:cd:e1:f7:3f:d5:42:e6:1c:db:bb:37:c3:e3:3e: 6f:59:58:07:e7:9c:df:77:0c:2b:e5:ef:ba:7c:2b:0d:2b:a6: 1a:76:30:4c:18:bd:d0:0c:fa:15:9b:5b:69:d4:d3:da:d5:b3: 78:6c:35:69:29:aa:ab:a5:59:56:1f:72:44:66:61:a4:e6:db: 1a:6f:41:d0 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt8f0pPCNcFnmOJ7EE1hZxQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMGFkYmEyNjA0OTM0NzM4YzdjOTY5MmEwYjNhYjdiMzBh ODJiYjIwHhcNMjYwMTAyMDIxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmZhMWVjNGMwMzI5YzcwYWNiMDk1OTJkNzE1ZDU1Mjk4Y2IzYzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuxtzPMkOZZ2KJjRsJRylaHuktgJ 9p+OaY73roLTOde7/DtTku+tdMBdcBCZeaJtWGfhoUivVJRBiH3b4776JE9I10mT XbsmS6Oxbg2kTYVrJCe4/CC8adu/GJpP+5pxAPInFmzKp7EX2Q9RvsAwYaBmehAN yGhXHXaWIb1PBhg/N1T64BcqfnchfyATVGwWwXoffEMC4UfSw56B9FM3MN7uSpEe hVkBoFe2IYWYNOChb/mJzliPaJrsvJSSxeXLwWoo5oroNJy0jef2QyldEiJjkBvh RDXxd35njdO2PLQIaXczJsLIVpJ08dHutVkxDJZY/zLTBBCKc0HbeyrcowIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFF/6HsTAMpxwrLCVktcV1VKYyzw1MB8GA1UdIwQY MBaAFI8K26JgSTRzjHyWkqCzq3swqCuyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvandyYm9tQkpOSE9NZkphU29MT3JlekNvSzdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC83YTg1YzktYzU4YS00ZjhlLTgzYjEt N2JhZmRlNGM0YjI0LzEvWF9vZXhNQXluSENzc0pXUzF4WFZVcGpMUERVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC83YTg1YzktYzU4YS00ZjhlLTgzYjEtN2JhZmRlNGM0YjI0 LzEvandyYm9tQkpOSE9NZkphU29MT3JlekNvSzdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUMAwDBAKwbnwD BACwbn4DBAC5EtwwDQQCAAIwBwMFAyoTEkAwDQYJKoZIhvcNAQELBQADggEBAEwX IMYM4bI7PMmg48Tqcz/c0Ln/AtvJcr+6UML1ZYaCIMptueyhX9c+4r81Jmc/CeZm sX/PuO9J/w3ft9GkfISXe6wzfn/IwZqt1EUWGOYTORHJ8bGl505Xsj2/w5z8j65a 8wOiGzwstlfTzFxEseEczp97J28k9+OgJxrgntdOl5X1YhryrbTVQCh0hvXDbRif aASQr8rNjVP28psZw5IRytwWNtbtlfTK3FMXZHchxYQhF14W5mvN4fc/1ULmHNu7 N8PjPm9ZWAfnnN93DCvl77p8Kw0rphp2MEwYvdAM+hWbW2nU09rVs3hsNWkpqqul WVYfckRmYaTm2xpvQdA= -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:07 2026 by rpki-client