This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/_XCByCxFBKANq12XdZWECkMAA3Y.roa File: _XCByCxFBKANq12XdZWECkMAA3Y.roa (raw, json) Hash identifier: oHqiL33AB0xPFPQsxqmyj9smm3TyY15mUkV98xtynZk= Subject key identifier: FD:70:81:C8:2C:45:04:A0:0D:AB:5D:97:75:95:84:0A:43:00:03:76 Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B76EAB22D61EAC0D2B59F4FB82B356703 Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/_XCByCxFBKANq12XdZWECkMAA3Y.roa Signing time: Thu 01 Jan 2026 00:17:31 +0000 ROA not before: Thu 01 Jan 2026 00:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 45.8.195.0/24 maxlen: 24 45.8.197.0/24 maxlen: 24 45.8.198.0/24 maxlen: 24 193.168.208.0/24 maxlen: 24 193.168.209.0/24 maxlen: 24 193.168.210.0/24 maxlen: 24 193.168.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:b2:2d:61:ea:c0:d2:b5:9f:4f:b8:2b:35:67:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Jan 1 00:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd7081c82c4504a00dab5d977595840a43000376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:62:ed:24:f7:ac:2a:af:00:ca:5c:e0:a5:25: 53:03:2e:51:f7:8a:a8:c4:40:06:a9:ed:8d:40:0f: 51:dc:ed:de:62:f9:14:a7:91:99:5f:2b:0e:dc:a3: bc:9e:e9:c4:cb:be:7d:3f:50:bb:b3:e7:e1:9c:2a: dc:c8:35:c7:7c:b5:ca:41:2d:32:7a:61:cc:c7:68: 6a:3a:5b:e7:a9:da:53:c0:dc:ff:99:ee:8a:47:b2: f7:ba:e9:62:71:cb:02:52:17:69:19:29:03:cd:3c: 28:99:22:5e:2b:14:00:37:59:69:e6:11:73:26:0a: e7:3c:a2:3e:0c:c4:68:16:7d:af:b2:39:35:f0:9c: ce:ce:d1:60:08:e7:a4:45:c3:05:5e:6d:fe:70:fd: c4:24:c5:c6:87:c2:e8:9c:3c:e8:d4:6a:df:28:6e: 9c:6f:0e:9f:a4:5a:df:b9:17:2d:47:6f:b8:0b:b2: 87:fc:47:2c:13:02:19:64:10:aa:31:b2:2e:14:94: b9:44:cf:b9:0e:d5:0e:eb:ea:7e:ce:98:db:90:4b: 5b:d6:de:32:d8:4b:0b:8c:b7:d9:10:27:57:30:b9: 96:5f:77:20:e7:07:22:b0:38:f2:c7:ab:f3:b9:fd: e8:dc:49:86:f0:68:40:2d:b3:cf:1a:f7:c7:bb:de: 38:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:70:81:C8:2C:45:04:A0:0D:AB:5D:97:75:95:84:0A:43:00:03:76 X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/_XCByCxFBKANq12XdZWECkMAA3Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.195.0/24 45.8.197.0-45.8.198.255 193.168.208.0/22 Signature Algorithm: sha256WithRSAEncryption 59:ad:27:b8:c0:04:fb:58:03:e8:62:02:38:d4:b9:ae:0e:b3: cd:9d:08:0e:2f:2e:33:68:28:a0:51:b9:5b:88:2a:27:be:af: 40:0c:00:bf:42:d9:8f:76:2d:19:61:08:ac:57:59:57:dc:d3: ba:6a:de:66:c7:0c:e9:13:0d:ad:8c:02:dd:36:52:21:ea:95: 30:f7:ee:75:26:e0:7c:83:69:30:c1:06:28:ab:b2:2d:18:63: 3d:1a:eb:f6:2f:0a:1c:1e:f6:f5:be:cb:60:f8:ef:64:83:d5: 1e:2e:21:a7:f9:0a:44:4d:31:b5:18:ee:1d:cd:1a:97:99:c5: 54:c0:3b:26:33:db:7c:36:b7:fb:2d:ac:87:48:58:b4:fd:95: 78:ed:d1:08:54:b3:61:40:d0:4e:9a:f4:73:60:b3:26:7e:4a: 13:bb:2d:6a:2a:5d:c8:bd:d3:c5:ae:46:8a:85:1f:05:d0:46: 8a:76:f6:a5:03:f5:8c:71:fb:68:09:a1:01:a8:87:11:19:1d: 24:b1:2d:e0:ba:46:03:8d:d4:f5:5b:61:d0:be:1d:49:23:25: 30:4c:7d:19:4c:06:27:e4:8b:f6:64:22:35:d4:12:b3:c9:5f: 8c:9a:f7:cc:c4:f2:c6:2b:38:e7:2a:3e:69:54:06:dc:3c:19: e6:e3:6e:94 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt26rItYerA0rWfT7grNWcDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjYwMTAxMDAxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDcwODFjODJjNDUwNGEwMGRhYjVkOTc3NTk1ODQwYTQzMDAwMzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7WLtJPesKq8AylzgpSVTAy5R94qo xEAGqe2NQA9R3O3eYvkUp5GZXysO3KO8nunEy759P1C7s+fhnCrcyDXHfLXKQS0y emHMx2hqOlvnqdpTwNz/me6KR7L3uuliccsCUhdpGSkDzTwomSJeKxQAN1lp5hFz JgrnPKI+DMRoFn2vsjk18JzOztFgCOekRcMFXm3+cP3EJMXGh8LonDzo1GrfKG6c bw6fpFrfuRctR2+4C7KH/EcsEwIZZBCqMbIuFJS5RM+5DtUO6+p+zpjbkEtb1t4y 2EsLjLfZECdXMLmWX3cg5wcisDjyx6vzuf3o3EmG8GhALbPPGvfHu944FQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFP1wgcgsRQSgDatdl3WVhApDAAN2MB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvX1hDQnlDeEZCS0FOcTEyWGRaV0VDa01BQTNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQALQjDMAwD BAAtCMUDBAAtCMYDBALBqNAwDQYJKoZIhvcNAQELBQADggEBAFmtJ7jABPtYA+hi AjjUua4Os82dCA4vLjNoKKBRuVuIKie+r0AMAL9C2Y92LRlhCKxXWVfc07pq3mbH DOkTDa2MAt02UiHqlTD37nUm4HyDaTDBBiirsi0YYz0a6/YvChwe9vW+y2D472SD 1R4uIaf5CkRNMbUY7h3NGpeZxVTAOyYz23w2t/strIdIWLT9lXjt0QhUs2FA0E6a 9HNgsyZ+ShO7LWoqXci908WuRoqFHwXQRop29qUD9Yxx+2gJoQGohxEZHSSxLeC6 RgON1PVbYdC+HUkjJTBMfRlMBifki/ZkIjXUErPJX4ya98zE8sYrOOcqPmlUBtw8 GebjbpQ= -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:00 2026 by rpki-client