This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/XpjCQMf0z0asRx8m6HQ4jQq6RFg.roa File: XpjCQMf0z0asRx8m6HQ4jQq6RFg.roa (raw, json) Hash identifier: 7XlSc07gOQZF0Z/C01cKSEvLGoVHil1OFtCK26yZIw0= Subject key identifier: 5E:98:C2:40:C7:F4:CF:46:AC:47:1F:26:E8:74:38:8D:0A:BA:44:58 Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Certificate serial: 019B79ED691C50BEFD67A17FB7A36CA61E13 Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/XpjCQMf0z0asRx8m6HQ4jQq6RFg.roa Signing time: Thu 01 Jan 2026 14:19:20 +0000 ROA not before: Thu 01 Jan 2026 14:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61254 IP address blocks: 87.248.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 15 Jan 2026 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:69:1c:50:be:fd:67:a1:7f:b7:a3:6c:a6:1e:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Validity Not Before: Jan 1 14:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e98c240c7f4cf46ac471f26e874388d0aba4458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:99:b9:f2:76:81:00:f8:7c:2c:94:19:18:82: 6e:e0:07:fa:f8:08:a6:11:12:16:23:a0:e1:25:31: 4e:9c:b8:66:05:4e:13:be:b9:2b:ee:52:a5:d4:5f: 17:74:30:2b:99:db:53:8f:cf:6c:69:0e:5d:6a:ee: 66:41:88:87:f6:33:60:f2:20:9f:45:ec:2b:22:d5: 68:32:4d:5d:7b:38:b6:a5:9c:50:9f:a6:8e:9b:49: 9a:fb:6e:de:04:a8:49:8a:bb:e6:da:84:e3:5d:1c: e8:39:21:63:a9:cd:5c:78:ec:83:b5:9f:1b:5a:43: b9:8e:cd:80:2b:25:82:7c:04:fe:ff:b0:6e:a2:45: a2:f5:64:66:e2:9d:b3:3c:cf:86:b9:67:4b:c2:7d: 4c:a9:3e:c2:00:07:0c:99:e9:b2:92:2a:3e:c4:2e: d1:a2:a6:09:1d:d3:f9:b7:16:a2:29:0f:38:fc:8e: 64:4f:36:32:7c:fd:be:70:45:a1:f4:67:5f:0c:34: 18:f9:be:0b:0c:c8:ce:72:7b:6c:0b:00:9d:45:f0: 92:4e:49:c8:12:e9:60:1b:32:dd:34:85:7a:13:97: 39:6e:0c:0a:93:32:2d:cb:1f:01:5a:d3:c3:da:46: 1d:ef:35:53:9d:5e:da:52:01:2c:6d:c3:2e:e1:a5: 9d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:98:C2:40:C7:F4:CF:46:AC:47:1F:26:E8:74:38:8D:0A:BA:44:58 X509v3 Authority Key Identifier: keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/XpjCQMf0z0asRx8m6HQ4jQq6RFg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.248.149.0/24 Signature Algorithm: sha256WithRSAEncryption 23:7a:9b:c7:d7:70:ec:ec:db:c2:ec:24:a1:85:28:84:29:39: c2:d4:8d:72:b3:30:ac:df:cb:9f:a0:f1:90:fa:0d:77:bb:d6: e0:24:13:b1:f0:83:2b:93:6c:90:d9:35:40:e3:7d:dd:22:02: 23:c3:4a:3a:2e:a6:6d:b7:1e:fe:ff:61:7d:c7:35:51:ae:56: a0:c5:0c:2a:e3:1b:ce:39:4c:ee:14:28:aa:2e:19:cd:f1:fd: 86:7f:58:a0:74:a8:88:ae:fe:28:eb:b7:b9:9f:11:d8:8e:ec: 56:6e:79:26:df:6a:10:f4:5b:e6:cc:03:0f:95:65:0c:c0:b3: 94:55:4b:c2:30:51:dd:5a:50:a3:e2:68:52:5f:a8:1e:f4:4b: fc:c1:4b:d3:78:a7:95:96:61:24:62:0b:3f:71:15:72:83:9d: fe:62:f5:ff:26:7b:1e:2c:3b:84:e1:68:00:8e:b9:54:47:a2: 59:c7:d5:b0:c8:b8:eb:88:b4:f2:13:22:ce:93:1c:db:f3:5f: e5:94:d8:46:34:ec:79:7a:87:56:5f:85:06:df:b0:72:3f:20: e4:52:8b:07:b3:0b:f4:fb:87:10:ff:f9:a4:31:da:03:84:1e: 6d:bf:ed:16:03:3a:d2:53:36:ab:73:a8:d1:c4:0e:c3:a9:1e: b2:00:4f:7b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57WkcUL79Z6F/t6Nsph4TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MGNlZTc1ODJlOTc1OWJlMDE2YzkzMWFiMzRkOTI4NWQy ZmM4YjQwHhcNMjYwMTAxMTQxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTk4YzI0MGM3ZjRjZjQ2YWM0NzFmMjZlODc0Mzg4ZDBhYmE0NDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpm58naBAPh8LJQZGIJu4Af6+Aim ERIWI6DhJTFOnLhmBU4Tvrkr7lKl1F8XdDArmdtTj89saQ5dau5mQYiH9jNg8iCf RewrItVoMk1dezi2pZxQn6aOm0ma+27eBKhJirvm2oTjXRzoOSFjqc1ceOyDtZ8b WkO5js2AKyWCfAT+/7BuokWi9WRm4p2zPM+GuWdLwn1MqT7CAAcMmemykio+xC7R oqYJHdP5txaiKQ84/I5kTzYyfP2+cEWh9GdfDDQY+b4LDMjOcntsCwCdRfCSTknI EulgGzLdNIV6E5c5bgwKkzItyx8BWtPD2kYd7zVTnV7aUgEsbcMu4aWdIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF6YwkDH9M9GrEcfJuh0OI0KukRYMB8GA1UdIwQY MBaAFKYM7nWC6XWb4BbJMas02ShdL8i0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTct ZDNiMzhjZTlkYzM0LzEvWHBqQ1FNZjB6MGFzUng4bTZIUTRqUXE2UkZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTctZDNiMzhjZTlkYzM0 LzEvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/iVMA0G CSqGSIb3DQEBCwUAA4IBAQAjepvH13Ds7NvC7CShhSiEKTnC1I1yszCs38ufoPGQ +g13u9bgJBOx8IMrk2yQ2TVA433dIgIjw0o6LqZttx7+/2F9xzVRrlagxQwq4xvO OUzuFCiqLhnN8f2Gf1igdKiIrv4o67e5nxHYjuxWbnkm32oQ9FvmzAMPlWUMwLOU VUvCMFHdWlCj4mhSX6ge9Ev8wUvTeKeVlmEkYgs/cRVyg53+YvX/JnseLDuE4WgA jrlUR6JZx9WwyLjriLTyEyLOkxzb81/llNhGNOx5eodWX4UG37ByPyDkUosHswv0 +4cQ//mkMdoDhB5tv+0WAzrSUzarc6jRxA7DqR6yAE97 -----END CERTIFICATE-----Generated at Wed Jan 14 09:32:35 2026 by rpki-client