This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/XlkFVkF--DH6a3m4HUUOHqI0Vwc.roa File: XlkFVkF--DH6a3m4HUUOHqI0Vwc.roa (raw, json) Hash identifier: k4WPfbMFjDQqLKA715ECgm8KNngpmBPkDKMv0Wo+8X0= Subject key identifier: 5E:59:05:56:41:7E:F8:31:FA:6B:79:B8:1D:45:0E:1E:A2:34:57:07 Certificate issuer: /CN=ddead919b85a13051d0208b7e28ddccb398b14d6 Certificate serial: 019B7F856ADD02727B7BF2184F16066821A8 Authority key identifier: DD:EA:D9:19:B8:5A:13:05:1D:02:08:B7:E2:8D:DC:CB:39:8B:14:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/XlkFVkF--DH6a3m4HUUOHqI0Vwc.roa Signing time: Fri 02 Jan 2026 16:23:28 +0000 ROA not before: Fri 02 Jan 2026 16:23:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42845 IP address blocks: 37.157.224.0/21 maxlen: 24 45.137.144.0/22 maxlen: 22 77.74.208.0/21 maxlen: 24 89.46.96.0/22 maxlen: 24 95.128.144.0/21 maxlen: 24 149.255.48.0/21 maxlen: 21 185.40.224.0/22 maxlen: 22 185.135.124.0/22 maxlen: 22 185.185.116.0/22 maxlen: 22 185.232.224.0/22 maxlen: 22 193.28.233.0/24 maxlen: 24 194.150.92.0/22 maxlen: 22 2a00:7200::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:6a:dd:02:72:7b:7b:f2:18:4f:16:06:68:21:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddead919b85a13051d0208b7e28ddccb398b14d6 Validity Not Before: Jan 2 16:23:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e590556417ef831fa6b79b81d450e1ea2345707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d1:05:76:98:dd:c1:06:96:76:8f:cd:53:00: 25:81:8b:3c:61:7a:49:6b:a0:1c:48:f1:3a:63:0c: 4d:5b:be:82:84:7b:8f:83:9c:6f:8f:09:6e:63:11: 15:3c:44:da:81:f3:9b:4f:86:e9:0d:7b:14:e7:6d: 31:7a:54:91:d3:39:e7:aa:cf:27:75:22:ee:34:08: e3:27:42:31:45:a0:a8:d6:40:a2:b9:c6:09:41:bd: d2:5b:5f:90:4f:5b:bc:4d:05:58:85:db:07:33:84: 3f:02:4d:3d:4f:1c:5f:be:5b:11:f2:3f:d3:a0:8c: 13:c3:f4:86:ef:a3:d5:33:e8:99:f5:bb:64:ef:8f: 2e:6a:3e:c8:ff:25:52:61:22:5b:77:f0:50:19:de: 3a:61:66:d1:63:71:f5:0f:27:f9:4e:47:5a:20:5e: 38:e6:43:10:c7:69:79:d4:b1:95:f3:ae:ba:4f:7a: ad:0a:5e:ac:45:27:a3:e3:cb:c8:d6:0c:f0:ae:66: b1:b4:ee:dc:ac:60:00:02:af:98:5f:93:6b:13:0a: 66:51:34:98:d2:f3:56:1a:3b:e8:00:46:e4:6f:ae: 0d:9e:58:02:16:af:d5:b5:13:36:14:0e:45:ca:36: 3b:55:2c:dc:01:2b:7d:d1:62:52:ea:98:23:5c:e3: 12:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:59:05:56:41:7E:F8:31:FA:6B:79:B8:1D:45:0E:1E:A2:34:57:07 X509v3 Authority Key Identifier: keyid:DD:EA:D9:19:B8:5A:13:05:1D:02:08:B7:E2:8D:DC:CB:39:8B:14:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/XlkFVkF--DH6a3m4HUUOHqI0Vwc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.157.224.0/21 45.137.144.0/22 77.74.208.0/21 89.46.96.0/22 95.128.144.0/21 149.255.48.0/21 185.40.224.0/22 185.135.124.0/22 185.185.116.0/22 185.232.224.0/22 193.28.233.0/24 194.150.92.0/22 IPv6: 2a00:7200::/32 Signature Algorithm: sha256WithRSAEncryption 29:28:c6:8f:9b:63:d6:55:1d:41:3e:f6:22:04:59:a8:ec:f5: 5f:f0:2d:97:38:4b:8b:60:6a:a8:89:ae:86:0b:d8:7f:90:09: 88:69:ff:9e:f2:85:a2:9b:29:1a:c5:39:af:3e:49:31:e6:95: 24:2b:e7:c6:46:4b:66:80:49:1f:e3:9d:c0:83:66:d5:57:e8: 3e:75:4d:7f:cf:27:5d:8c:0d:43:71:93:42:ca:32:8f:d5:af: 50:5b:9e:49:cc:09:bd:af:b6:07:ed:73:39:86:5c:33:ba:44: fd:15:d1:bd:8d:d8:21:8b:b6:26:4f:e3:ce:f9:8e:0d:e9:c0: 9e:1e:b2:87:7f:92:39:6a:69:75:26:34:66:60:c2:bf:88:39: 64:5a:9c:8f:b2:d8:65:ca:04:2c:c0:e4:c4:1d:6a:5e:9a:6a: 90:44:ef:8a:f4:93:d4:1d:b7:97:87:02:4a:89:ee:4e:96:cd: 59:85:90:9c:aa:d3:28:d1:d7:d3:3e:4b:f1:17:0b:12:b9:5b: dc:04:76:72:55:2d:44:1f:e2:c3:7c:c1:dd:30:44:f4:d1:32: f0:f4:6c:17:cd:f7:57:b1:4c:e9:41:ff:1f:90:b1:74:6c:a5: 49:54:ea:c5:d0:e4:b4:3f:3b:c3:93:ea:53:88:22:f8:98:60: 98:9f:f2:e0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgISAZt/hWrdAnJ7e/IYTxYGaCGoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkZWFkOTE5Yjg1YTEzMDUxZDAyMDhiN2UyOGRkY2NiMzk4 YjE0ZDYwHhcNMjYwMTAyMTYyMzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTU5MDU1NjQxN2VmODMxZmE2Yjc5YjgxZDQ1MGUxZWEyMzQ1NzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NEFdpjdwQaWdo/NUwAlgYs8YXpJ a6AcSPE6YwxNW76ChHuPg5xvjwluYxEVPETagfObT4bpDXsU520xelSR0znnqs8n dSLuNAjjJ0IxRaCo1kCiucYJQb3SW1+QT1u8TQVYhdsHM4Q/Ak09TxxfvlsR8j/T oIwTw/SG76PVM+iZ9btk748uaj7I/yVSYSJbd/BQGd46YWbRY3H1Dyf5TkdaIF44 5kMQx2l51LGV8666T3qtCl6sRSej48vI1gzwrmaxtO7crGAAAq+YX5NrEwpmUTSY 0vNWGjvoAEbkb64NnlgCFq/VtRM2FA5FyjY7VSzcASt90WJS6pgjXOMSgwIDAQAB o4ICWjCCAlYwHQYDVR0OBBYEFF5ZBVZBfvgx+mt5uB1FDh6iNFcHMB8GA1UdIwQY MBaAFN3q2Rm4WhMFHQIIt+KN3Ms5ixTWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2VyWkdiaGFFd1VkQWdpMzRvM2N5em1MRk5ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS84ZWZmZTQtZWRiYi00ZGQ0LTg1ZDQt NDhiOGI1YTliNDExLzEvWGxrRlZrRi0tREg2YTNtNEhVVU9IcUkwVndjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS84ZWZmZTQtZWRiYi00ZGQ0LTg1ZDQtNDhiOGI1YTliNDEx LzEvM2VyWkdiaGFFd1VkQWdpMzRvM2N5em1MRk5ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHAGCCsGAQUFBwEHAQH/BGEwXzBOBAIAATBIAwQDJZ3gAwQC LYmQAwQDTUrQAwQCWS5gAwQDX4CQAwQDlf8wAwQCuSjgAwQCuYd8AwQCubl0AwQC uejgAwQAwRzpAwQCwpZcMA0EAgACMAcDBQAqAHIAMA0GCSqGSIb3DQEBCwUAA4IB AQApKMaPm2PWVR1BPvYiBFmo7PVf8C2XOEuLYGqoia6GC9h/kAmIaf+e8oWimyka xTmvPkkx5pUkK+fGRktmgEkf453Ag2bVV+g+dU1/zyddjA1DcZNCyjKP1a9QW55J zAm9r7YH7XM5hlwzukT9FdG9jdghi7YmT+PO+Y4N6cCeHrKHf5I5aml1JjRmYMK/ iDlkWpyPsthlygQswOTEHWpemmqQRO+K9JPUHbeXhwJKie5Ols1ZhZCcqtMo0dfT PkvxFwsSuVvcBHZyVS1EH+LDfMHdMET00TLw9GwXzfdXsUzpQf8fkLF0bKVJVOrF 0OS0PzvDk+pTiCL4mGCYn/Lg -----END CERTIFICATE-----Generated at Mon Feb 9 19:38:23 2026 by rpki-client