This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/xMgS7QD9_G9EOx5x98EDuY-9yGs.roa File: xMgS7QD9_G9EOx5x98EDuY-9yGs.roa (raw, json) Hash identifier: hMlsCv6vl96geP53LLF12LxkGDU69mGZggpEWqFm3G4= Subject key identifier: C4:C8:12:ED:00:FD:FC:6F:44:3B:1E:71:F7:C1:03:B9:8F:BD:C8:6B Certificate issuer: /CN=8a1f0ad5572bae26e39c8740c68a8fbb46ee4864 Certificate serial: 019B7F827B538C73481D516D721AF4E06859 Authority key identifier: 8A:1F:0A:D5:57:2B:AE:26:E3:9C:87:40:C6:8A:8F:BB:46:EE:48:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ih8K1VcrribjnIdAxoqPu0buSGQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/xMgS7QD9_G9EOx5x98EDuY-9yGs.roa Signing time: Fri 02 Jan 2026 16:20:16 +0000 ROA not before: Fri 02 Jan 2026 16:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201634 IP address blocks: 185.130.50.0/24 maxlen: 24 2a05:c180::/32 maxlen: 32 2a05:c181::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ih8K1VcrribjnIdAxoqPu0buSGQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:7b:53:8c:73:48:1d:51:6d:72:1a:f4:e0:68:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a1f0ad5572bae26e39c8740c68a8fbb46ee4864 Validity Not Before: Jan 2 16:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4c812ed00fdfc6f443b1e71f7c103b98fbdc86b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:75:4e:85:18:4d:55:76:16:f0:c6:b3:f6:d0: 79:09:34:a2:7e:d6:fc:4a:66:c4:8d:60:22:93:c8: af:7f:e7:7c:f5:ee:7d:b0:0f:eb:5b:5f:80:33:a0: 5b:81:2e:dd:bc:22:3d:87:87:7e:3a:b0:ed:00:5d: 90:21:c1:c2:3e:ce:65:80:a3:b3:3a:8d:11:18:ef: bf:81:0e:1f:bb:b5:cb:3e:49:0a:7f:32:61:a7:c4: 49:5b:6e:6f:1b:87:2d:9a:91:bc:21:7d:66:02:6a: 40:2d:0d:1b:4d:ad:54:62:58:c2:c9:07:bc:f5:8b: ee:fe:9d:6d:34:63:31:c6:cd:58:dd:f1:9f:f2:b3: e6:43:ab:7f:72:b6:d4:28:77:7f:e5:b0:03:1c:ff: e2:73:c1:29:31:bb:08:b0:61:49:78:7d:85:f6:5e: 04:fd:56:96:ef:69:8b:e0:4d:91:01:18:77:b0:ca: ad:49:35:cd:45:66:0a:51:76:6b:85:8f:94:29:c4: 8d:43:78:17:c9:e2:eb:2e:eb:25:a1:f0:00:d2:f3: 14:7d:89:89:54:9c:db:9b:f1:0f:fa:87:0a:20:f3: 38:3c:98:41:13:8f:cd:6a:c9:b1:70:1f:0f:9f:b2: 42:ee:e2:5b:90:c1:cd:1a:40:75:46:27:e5:b5:75: 47:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:C8:12:ED:00:FD:FC:6F:44:3B:1E:71:F7:C1:03:B9:8F:BD:C8:6B X509v3 Authority Key Identifier: keyid:8A:1F:0A:D5:57:2B:AE:26:E3:9C:87:40:C6:8A:8F:BB:46:EE:48:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ih8K1VcrribjnIdAxoqPu0buSGQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/xMgS7QD9_G9EOx5x98EDuY-9yGs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.130.50.0/24 IPv6: 2a05:c180::/31 Signature Algorithm: sha256WithRSAEncryption 1b:6a:15:f0:c6:85:13:0f:f7:87:60:42:eb:37:f1:6f:10:49: b2:28:c5:0c:98:15:bc:e3:5e:ed:5d:c1:09:6b:09:0e:0e:6d: 9c:0d:60:e1:1e:db:a5:f7:21:17:af:9e:41:5a:14:ee:47:69: a6:39:7c:03:78:1d:80:a8:aa:d3:6d:95:a1:97:07:89:6f:72: 7f:fa:ae:c6:dd:bf:cb:3f:3c:83:e8:01:21:39:ba:d3:16:e8: 66:00:0f:1b:9e:19:99:64:56:0e:30:0e:9a:a2:6a:55:96:46: c7:39:b4:01:3c:b8:23:1f:ab:b2:e9:9a:dc:03:dd:28:ac:62: e7:ca:f7:e9:ed:ba:63:eb:aa:7f:4b:42:2a:1a:30:9a:4f:71: ca:c1:6c:69:96:b5:49:69:2f:5a:5a:60:ee:64:b9:59:90:8d: 66:b5:05:5e:0a:be:ab:b7:cc:56:8e:27:68:c1:8b:39:40:c2: 6e:99:b5:a5:2f:a6:b8:ae:78:87:d9:d5:61:b7:d9:26:81:cb: f7:38:da:26:a2:66:03:93:d9:71:24:41:aa:fb:34:cb:f9:34: 56:1c:c3:d2:d6:50:47:5a:9d:e4:87:53:a1:b3:29:f8:82:33: d9:5f:18:63:75:a7:13:78:4b:c0:94:72:8b:39:07:4f:80:5e: a3:83:af:1a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/gntTjHNIHVFtchr04GhZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMWYwYWQ1NTcyYmFlMjZlMzljODc0MGM2OGE4ZmJiNDZl ZTQ4NjQwHhcNMjYwMTAyMTYyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNGM4MTJlZDAwZmRmYzZmNDQzYjFlNzFmN2MxMDNiOThmYmRjODZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnVOhRhNVXYW8Maz9tB5CTSiftb8 SmbEjWAik8ivf+d89e59sA/rW1+AM6BbgS7dvCI9h4d+OrDtAF2QIcHCPs5lgKOz Oo0RGO+/gQ4fu7XLPkkKfzJhp8RJW25vG4ctmpG8IX1mAmpALQ0bTa1UYljCyQe8 9Yvu/p1tNGMxxs1Y3fGf8rPmQ6t/crbUKHd/5bADHP/ic8EpMbsIsGFJeH2F9l4E /VaW72mL4E2RARh3sMqtSTXNRWYKUXZrhY+UKcSNQ3gXyeLrLuslofAA0vMUfYmJ VJzbm/EP+ocKIPM4PJhBE4/NasmxcB8Pn7JC7uJbkMHNGkB1RifltXVHRwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMTIEu0A/fxvRDsecffBA7mPvchrMB8GA1UdIwQY MBaAFIofCtVXK64m45yHQMaKj7tG7khkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWg4SzFWY3JyaWJqbklkQXhvcVB1MGJ1U0dRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8yZmQyMGEtNTNhZS00YmVhLTgwYzkt MDNmMjNhNzM5NDFkLzEveE1nUzdRRDlfRzlFT3g1eDk4RUR1WS05eUdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS8yZmQyMGEtNTNhZS00YmVhLTgwYzktMDNmMjNhNzM5NDFk LzEvaWg4SzFWY3JyaWJqbklkQXhvcVB1MGJ1U0dRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuYIyMA0E AgACMAcDBQEqBcGAMA0GCSqGSIb3DQEBCwUAA4IBAQAbahXwxoUTD/eHYELrN/Fv EEmyKMUMmBW8417tXcEJawkODm2cDWDhHtul9yEXr55BWhTuR2mmOXwDeB2AqKrT bZWhlweJb3J/+q7G3b/LPzyD6AEhObrTFuhmAA8bnhmZZFYOMA6aompVlkbHObQB PLgjH6uy6ZrcA90orGLnyvfp7bpj66p/S0IqGjCaT3HKwWxplrVJaS9aWmDuZLlZ kI1mtQVeCr6rt8xWjidowYs5QMJumbWlL6a4rniH2dVht9kmgcv3ONomomYDk9lx JEGq+zTL+TRWHMPS1lBHWp3kh1Ohsyn4gjPZXxhjdacTeEvAlHKLOQdPgF6jg68a -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:29 2026 by rpki-client