This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/xjZQLy8vRD61BJY6zdBKr_UBjVY.roa File: xjZQLy8vRD61BJY6zdBKr_UBjVY.roa (raw, json) Hash identifier: SELpzilV3F78kMxps90YOTYAH+UvWHxqXIdoDWHgTLM= Subject key identifier: C6:36:50:2F:2F:2F:44:3E:B5:04:96:3A:CD:D0:4A:AF:F5:01:8D:56 Certificate issuer: /CN=1e9a92daf08c20b4691b925cf032e5491fe0acc0 Certificate serial: 019B7BA533D816D01273785D82105AF9AAEE Authority key identifier: 1E:9A:92:DA:F0:8C:20:B4:69:1B:92:5C:F0:32:E5:49:1F:E0:AC:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpqS2vCMILRpG5Jc8DLlSR_grMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/xjZQLy8vRD61BJY6zdBKr_UBjVY.roa Signing time: Thu 01 Jan 2026 22:19:42 +0000 ROA not before: Thu 01 Jan 2026 22:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39785 IP address blocks: 89.105.158.0/24 maxlen: 24 185.26.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft rsync://rpki.ripe.net/repository/DEFAULT/HpqS2vCMILRpG5Jc8DLlSR_grMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:33:d8:16:d0:12:73:78:5d:82:10:5a:f9:aa:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e9a92daf08c20b4691b925cf032e5491fe0acc0 Validity Not Before: Jan 1 22:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c636502f2f2f443eb504963acdd04aaff5018d56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3e:cb:65:fa:86:91:a0:0c:ed:79:6e:0b:31: 25:4c:61:e9:3d:cf:db:81:72:b4:13:48:3b:ed:c8: ac:3b:08:58:4d:02:50:7d:74:e9:f3:ac:f4:91:dc: fa:0c:98:4c:ab:b1:b1:b3:b3:e1:ae:11:ba:01:18: c3:53:82:38:63:81:35:bb:4b:ec:02:55:ab:7c:e3: 02:8a:c7:30:1d:ce:80:b8:f2:35:09:d2:7f:5f:b4: 16:8c:cc:2f:bf:e9:36:36:70:ee:36:15:de:b9:25: 26:a5:0e:6f:f5:79:5e:b9:be:07:98:3f:07:c7:f0: 0e:31:ab:82:fb:05:1d:08:17:33:0a:9a:fd:7c:4f: dc:31:df:fd:b9:f3:cd:36:9c:43:2b:90:59:21:77: 86:5d:78:ea:36:32:11:f6:38:f1:a3:c8:f2:36:6e: af:b6:c5:e1:70:2d:97:4e:a9:ed:2b:58:00:7c:6c: c4:25:06:e5:10:4e:c6:a9:e3:9e:f3:11:1e:49:ca: 20:ee:61:ba:fc:7a:60:84:6f:d0:72:a9:cd:1f:63: ed:ca:0b:b5:48:b6:36:3a:7f:09:eb:73:99:73:3a: 1d:3a:8e:61:89:ea:dc:69:a9:5d:01:1e:17:5d:5e: 83:18:82:17:d5:3a:4f:80:0b:82:93:a9:77:8c:ed: b8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:36:50:2F:2F:2F:44:3E:B5:04:96:3A:CD:D0:4A:AF:F5:01:8D:56 X509v3 Authority Key Identifier: keyid:1E:9A:92:DA:F0:8C:20:B4:69:1B:92:5C:F0:32:E5:49:1F:E0:AC:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpqS2vCMILRpG5Jc8DLlSR_grMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/xjZQLy8vRD61BJY6zdBKr_UBjVY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.105.158.0/24 185.26.216.0/23 Signature Algorithm: sha256WithRSAEncryption 51:79:e9:4c:46:44:c4:2d:9e:c1:50:59:84:f3:42:b9:4c:10: 3a:3e:76:4f:c2:33:14:05:70:c8:8e:20:1a:a1:cc:d5:da:c7: 96:ed:38:31:93:3f:3f:9d:da:ec:df:21:f6:be:a8:1b:49:7c: d5:11:7c:f6:8d:fa:ab:26:57:e2:a3:5e:ea:34:37:31:30:5a: 0a:ff:62:2e:12:ae:e2:e4:ce:84:b3:b9:ea:45:46:a7:56:62: 1a:eb:b6:f0:a2:fc:f3:0c:9d:45:54:05:e5:eb:48:a1:f2:4e: c4:92:6e:4a:02:5b:27:9f:48:29:a8:f0:62:84:e6:f6:7a:4a: 30:03:11:cf:63:2e:c2:b2:69:6c:bb:63:f0:a0:92:5b:7a:ad: 50:d1:65:02:30:34:c4:66:3c:47:30:5a:9a:ab:50:27:61:9a: 6d:a3:04:2e:b7:3c:62:97:f8:e1:cd:17:1f:db:9a:d6:94:be: 0f:76:89:45:df:8a:8b:8e:30:c2:61:cc:16:61:0a:ba:b6:92: 3e:9c:ab:84:a9:2c:19:0f:58:8d:b1:eb:6b:6d:b3:7b:8f:32: e3:ea:08:77:45:bf:d8:40:b7:d5:05:57:78:48:81:8d:6f:bb: 70:41:2f:2b:41:68:13:46:71:c5:90:a8:9e:7b:83:4d:23:63: d6:69:c6:d5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7pTPYFtASc3hdghBa+aruMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOWE5MmRhZjA4YzIwYjQ2OTFiOTI1Y2YwMzJlNTQ5MWZl MGFjYzAwHhcNMjYwMTAxMjIxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjM2NTAyZjJmMmY0NDNlYjUwNDk2M2FjZGQwNGFhZmY1MDE4ZDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3T7LZfqGkaAM7XluCzElTGHpPc/b gXK0E0g77cisOwhYTQJQfXTp86z0kdz6DJhMq7Gxs7PhrhG6ARjDU4I4Y4E1u0vs AlWrfOMCiscwHc6AuPI1CdJ/X7QWjMwvv+k2NnDuNhXeuSUmpQ5v9Xleub4HmD8H x/AOMauC+wUdCBczCpr9fE/cMd/9ufPNNpxDK5BZIXeGXXjqNjIR9jjxo8jyNm6v tsXhcC2XTqntK1gAfGzEJQblEE7GqeOe8xEeScog7mG6/HpghG/QcqnNH2Ptygu1 SLY2On8J63OZczodOo5hiercaaldAR4XXV6DGIIX1TpPgAuCk6l3jO24bwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMY2UC8vL0Q+tQSWOs3QSq/1AY1WMB8GA1UdIwQY MBaAFB6aktrwjCC0aRuSXPAy5Ukf4KzAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHBxUzJ2Q01JTFJwRzVKYzhETGxTUl9nck1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9jMTQxMTUtOGNmOC00MGM4LTg3Yzgt Y2U4MmViZTExYWM4LzEveGpaUUx5OHZSRDYxQkpZNnpkQktyX1VCalZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9jMTQxMTUtOGNmOC00MGM4LTg3YzgtY2U4MmViZTExYWM4 LzEvSHBxUzJ2Q01JTFJwRzVKYzhETGxTUl9nck1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWWmeAwQB uRrYMA0GCSqGSIb3DQEBCwUAA4IBAQBReelMRkTELZ7BUFmE80K5TBA6PnZPwjMU BXDIjiAaoczV2seW7Tgxkz8/ndrs3yH2vqgbSXzVEXz2jfqrJlfio17qNDcxMFoK /2IuEq7i5M6Es7nqRUanVmIa67bwovzzDJ1FVAXl60ih8k7Ekm5KAlsnn0gpqPBi hOb2ekowAxHPYy7Csmlsu2PwoJJbeq1Q0WUCMDTEZjxHMFqaq1AnYZptowQutzxi l/jhzRcf25rWlL4PdolF34qLjjDCYcwWYQq6tpI+nKuEqSwZD1iNsetrbbN7jzLj 6gh3Rb/YQLfVBVd4SIGNb7twQS8rQWgTRnHFkKiee4NNI2PWacbV -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:30 2026 by rpki-client