This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/xLXzuP-cjQADCvBzNYnmNJBPLL8.roa File: xLXzuP-cjQADCvBzNYnmNJBPLL8.roa (raw, json) Hash identifier: A8Jp9U7r7wLJSaZ007I6zWKtzpDoig9jOp2XhXr4KAA= Subject key identifier: C4:B5:F3:B8:FF:9C:8D:00:03:0A:F0:73:35:89:E6:34:90:4F:2C:BF Certificate issuer: /CN=78703e7a62309bf027c1f10536926a19b7f14b1e Certificate serial: 019B7A5B9190EB960C93AAA8457AE7C262EC Authority key identifier: 78:70:3E:7A:62:30:9B:F0:27:C1:F1:05:36:92:6A:19:B7:F1:4B:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHA-emIwm_AnwfEFNpJqGbfxSx4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/xLXzuP-cjQADCvBzNYnmNJBPLL8.roa Signing time: Thu 01 Jan 2026 16:19:39 +0000 ROA not before: Thu 01 Jan 2026 16:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47447 IP address blocks: 185.117.215.0/24 maxlen: 24 2a06:8781::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.mft rsync://rpki.ripe.net/repository/DEFAULT/eHA-emIwm_AnwfEFNpJqGbfxSx4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 13:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:91:90:eb:96:0c:93:aa:a8:45:7a:e7:c2:62:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78703e7a62309bf027c1f10536926a19b7f14b1e Validity Not Before: Jan 1 16:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4b5f3b8ff9c8d00030af0733589e634904f2cbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:45:a8:12:d2:ba:37:d2:d4:40:e1:b7:07:82: d2:b2:07:bb:dc:23:75:06:0c:90:da:5b:f2:10:f3: 5f:c9:34:b5:25:e1:5d:c0:80:45:84:f4:4d:5e:32: 1e:8b:0b:8a:f7:0f:8b:cf:6d:e8:c2:a4:e5:d7:e2: 63:3f:ae:08:35:a9:00:b7:00:fc:d5:a6:82:75:8d: ff:84:cd:c3:37:0f:25:2e:bf:53:2e:d8:f4:68:8d: d7:26:7b:22:eb:75:4b:4c:5b:75:33:95:02:48:b7: f4:d6:b8:58:43:19:8b:5b:f7:2c:82:21:de:47:fa: 4e:9e:8d:a6:e5:ca:f0:a5:a2:a3:a7:81:2a:2b:72: 99:74:43:51:fe:6a:ac:0d:df:65:6d:9f:a9:dc:d0: fb:06:6e:21:50:6c:0a:94:00:ad:5b:11:f8:33:74: 20:38:12:29:65:a4:0a:cb:8d:6e:a7:75:a4:33:7c: f1:50:88:62:c3:e0:07:66:34:81:9d:d1:a3:cf:ac: fb:84:61:c5:b5:75:d3:30:57:75:4c:4f:98:65:2a: ed:1f:9d:1f:e3:f3:bb:95:8a:c2:68:46:0e:b1:e6: 9a:ff:6f:7e:e2:00:12:69:ab:51:52:77:fe:1b:13: 40:c5:2a:19:09:8d:d3:ae:c5:15:a5:3b:e1:68:56: 18:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B5:F3:B8:FF:9C:8D:00:03:0A:F0:73:35:89:E6:34:90:4F:2C:BF X509v3 Authority Key Identifier: keyid:78:70:3E:7A:62:30:9B:F0:27:C1:F1:05:36:92:6A:19:B7:F1:4B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHA-emIwm_AnwfEFNpJqGbfxSx4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/xLXzuP-cjQADCvBzNYnmNJBPLL8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.117.215.0/24 IPv6: 2a06:8781::/40 Signature Algorithm: sha256WithRSAEncryption 6e:d4:4c:1f:b6:2d:4a:e5:ed:cb:8f:af:e5:bf:3f:91:93:3d: 02:d4:6b:25:23:63:44:82:e6:a4:86:d7:39:a4:7a:e6:be:0c: a8:3a:36:9b:e0:de:a4:bb:aa:3b:1a:e3:fd:01:8a:3e:5c:cb: d3:c1:8a:b6:a2:a7:8e:c6:52:8a:86:cb:a2:86:90:69:18:23: e1:66:5b:55:c5:74:9e:09:2c:a6:4a:c3:f4:e7:74:11:30:25: 74:fa:5b:25:68:e5:3c:39:55:73:46:c4:fd:62:29:95:03:5d: f0:0e:09:0c:b4:4e:bb:49:b0:f0:2a:79:c7:5f:e1:2b:1b:dc: a2:23:20:60:c2:13:9f:1c:cb:02:2e:eb:c0:ce:fe:c4:9e:55: 3a:43:78:5b:c4:b5:50:a5:67:34:b5:e4:9f:52:11:97:04:2c: b6:eb:18:7e:23:4e:87:14:b2:0c:35:3f:ce:18:b7:48:6f:bb: cf:d9:90:87:f0:8a:7e:19:25:6d:72:3a:48:15:17:a0:50:b4: cb:26:d0:04:e4:8e:7f:14:20:0b:f4:23:c3:d8:e7:26:dc:e5: 51:8d:ca:95:fb:e1:1f:79:93:b5:b6:88:82:b7:6b:76:9d:2e: 43:1e:eb:f4:5e:db:c2:8d:a6:aa:ab:8c:2c:fd:85:bb:1e:23: 90:6b:0d:d3 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt6W5GQ65YMk6qoRXrnwmLsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4NzAzZTdhNjIzMDliZjAyN2MxZjEwNTM2OTI2YTE5Yjdm MTRiMWUwHhcNMjYwMTAxMTYxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNGI1ZjNiOGZmOWM4ZDAwMDMwYWYwNzMzNTg5ZTYzNDkwNGYyY2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkWoEtK6N9LUQOG3B4LSsge73CN1 BgyQ2lvyEPNfyTS1JeFdwIBFhPRNXjIeiwuK9w+Lz23owqTl1+JjP64INakAtwD8 1aaCdY3/hM3DNw8lLr9TLtj0aI3XJnsi63VLTFt1M5UCSLf01rhYQxmLW/csgiHe R/pOno2m5crwpaKjp4EqK3KZdENR/mqsDd9lbZ+p3ND7Bm4hUGwKlACtWxH4M3Qg OBIpZaQKy41up3WkM3zxUIhiw+AHZjSBndGjz6z7hGHFtXXTMFd1TE+YZSrtH50f 4/O7lYrCaEYOseaa/29+4gASaatRUnf+GxNAxSoZCY3TrsUVpTvhaFYYVwIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFMS187j/nI0AAwrwczWJ5jSQTyy/MB8GA1UdIwQY MBaAFHhwPnpiMJvwJ8HxBTaSahm38UseMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUhBLWVtSXdtX0Fud2ZFRk5wSnFHYmZ4U3g0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81ZmQ0YmYtNzRkOS00MDcyLWI1NTct MDg0Y2NhMWM4NjIzLzEveExYenVQLWNqUUFEQ3ZCek5Zbm1OSkJQTEw4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy81ZmQ0YmYtNzRkOS00MDcyLWI1NTctMDg0Y2NhMWM4NjIz LzEvZUhBLWVtSXdtX0Fud2ZFRk5wSnFHYmZ4U3g0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAuXXXMA4E AgACMAgDBgAqBoeBADANBgkqhkiG9w0BAQsFAAOCAQEAbtRMH7YtSuXty4+v5b8/ kZM9AtRrJSNjRILmpIbXOaR65r4MqDo2m+DepLuqOxrj/QGKPlzL08GKtqKnjsZS iobLooaQaRgj4WZbVcV0ngkspkrD9Od0ETAldPpbJWjlPDlVc0bE/WIplQNd8A4J DLROu0mw8Cp5x1/hKxvcoiMgYMITnxzLAi7rwM7+xJ5VOkN4W8S1UKVnNLXkn1IR lwQstusYfiNOhxSyDDU/zhi3SG+7z9mQh/CKfhklbXI6SBUXoFC0yybQBOSOfxQg C/Qjw9jnJtzlUY3KlfvhH3mTtbaIgrdrdp0uQx7r9F7bwo2mqquMLP2Fux4jkGsN 0w== -----END CERTIFICATE-----Generated at Wed Jan 21 20:27:33 2026 by rpki-client