This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/XnLh9Ag7LpmDdjFo75cdChWIlGo.roa File: XnLh9Ag7LpmDdjFo75cdChWIlGo.roa (raw, json) Hash identifier: lqvjzhW1oFraa0ZFOkkDT3P/dccT0ABZJev11s7JMpQ= Subject key identifier: 5E:72:E1:F4:08:3B:2E:99:83:76:31:68:EF:97:1D:0A:15:88:94:6A Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Certificate serial: 019BC72A8EE12784A6F7503F278C7A1E783C Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/XnLh9Ag7LpmDdjFo75cdChWIlGo.roa Signing time: Fri 16 Jan 2026 14:16:53 +0000 ROA not before: Fri 16 Jan 2026 14:16:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203355 IP address blocks: 87.110.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c7:2a:8e:e1:27:84:a6:f7:50:3f:27:8c:7a:1e:78:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Validity Not Before: Jan 16 14:16:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e72e1f4083b2e9983763168ef971d0a1588946a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c5:6e:cb:fe:03:8f:59:3a:e2:e2:80:12:65: e2:de:4e:43:f0:2f:f3:17:29:fb:96:ad:22:b0:01: ae:a5:d7:d3:4f:d4:75:9e:65:aa:66:d6:0c:cc:8a: 22:27:c3:4f:de:69:8f:e7:8d:d2:4c:2d:5a:04:90: 6b:ad:5d:4a:82:24:ab:21:df:67:be:d1:97:9a:f4: 0e:cd:a3:8d:8a:2a:36:51:b7:d7:52:39:11:07:76: 3e:ab:1d:de:b5:57:cb:e3:4b:b5:78:74:01:6b:e1: 3a:b3:80:d8:8b:8b:93:8a:23:62:8a:92:00:42:d9: e8:38:67:df:27:44:84:33:e5:89:77:a3:4d:87:9e: 7c:fb:76:21:e8:9c:e2:5f:2d:ac:45:73:d8:10:0f: e2:f8:9e:8b:1f:07:f3:1a:43:62:67:b1:23:7b:05: ea:37:90:7b:c9:9f:8a:d0:91:51:b6:8b:b1:f1:f1: e6:d0:cd:17:14:2e:16:07:25:7a:0a:cc:c0:be:a3: 56:bc:0d:fc:3c:58:a4:4d:74:9a:52:a6:c6:91:5a: e9:52:69:1b:47:fd:02:57:49:0f:df:df:87:c8:b2: 64:83:f2:15:17:75:47:c0:a4:e7:4f:97:f8:c0:2a: ea:bd:3d:5f:fb:98:27:ff:c3:10:9d:5c:6a:12:a6: 35:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:72:E1:F4:08:3B:2E:99:83:76:31:68:EF:97:1D:0A:15:88:94:6A X509v3 Authority Key Identifier: keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/XnLh9Ag7LpmDdjFo75cdChWIlGo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.110.249.0/24 Signature Algorithm: sha256WithRSAEncryption 39:37:99:af:82:37:f8:be:34:62:55:04:4b:8f:19:c8:29:f9: be:f8:2b:8f:8a:5a:77:b7:9d:f9:1f:04:b1:b0:86:b2:ee:88: df:a0:3f:0e:43:de:de:07:1c:59:12:16:e5:0c:1c:91:1f:c6: de:d4:e2:86:cf:e7:34:fa:cf:fc:e7:f6:ed:09:92:43:a1:01: 2e:16:13:74:d5:9a:34:99:39:7a:12:bb:dd:05:25:73:fd:61: 0a:ec:54:82:60:f5:18:5a:c4:04:4a:42:77:26:b2:6c:4a:38: a3:d3:af:a9:fc:a0:69:7e:0d:06:cc:38:9e:14:b7:31:80:99: 21:6f:87:48:d0:2d:c8:ae:02:bb:7a:69:6d:33:80:2a:b8:3c: 15:02:21:26:09:99:e4:43:b0:75:36:3b:30:f4:35:d9:b4:ba: 39:38:73:c6:cb:8d:1d:99:e7:3d:d4:7a:76:0a:14:a8:c1:d3: c1:c2:23:16:b6:06:d3:2e:5f:17:e1:c7:77:11:8b:53:e2:a5: 7e:89:a8:60:3a:7e:29:0a:67:d7:c7:1f:3c:00:48:8b:70:d0: 33:fe:73:64:a5:ee:4f:25:29:0b:14:70:ca:0a:13:51:cc:38: 2f:9a:1d:ed:b8:20:e0:57:a0:74:0d:54:3c:5d:64:b8:1b:7f: 66:a6:36:cb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvHKo7hJ4Sm91A/J4x6Hng8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl NjE0OTEwHhcNMjYwMTE2MTQxNjUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTcyZTFmNDA4M2IyZTk5ODM3NjMxNjhlZjk3MWQwYTE1ODg5NDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMVuy/4Dj1k64uKAEmXi3k5D8C/z Fyn7lq0isAGupdfTT9R1nmWqZtYMzIoiJ8NP3mmP543STC1aBJBrrV1KgiSrId9n vtGXmvQOzaONiio2UbfXUjkRB3Y+qx3etVfL40u1eHQBa+E6s4DYi4uTiiNiipIA QtnoOGffJ0SEM+WJd6NNh558+3Yh6JziXy2sRXPYEA/i+J6LHwfzGkNiZ7EjewXq N5B7yZ+K0JFRtoux8fHm0M0XFC4WByV6CszAvqNWvA38PFikTXSaUqbGkVrpUmkb R/0CV0kP39+HyLJkg/IVF3VHwKTnT5f4wCrqvT1f+5gn/8MQnVxqEqY1bQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF5y4fQIOy6Zg3YxaO+XHQoViJRqMB8GA1UdIwQY MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt ZDRlZTFkMzg5ZTBkLzEvWG5MaDlBZzdMcG1EZGpGbzc1Y2RDaFdJbEdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV275MA0G CSqGSIb3DQEBCwUAA4IBAQA5N5mvgjf4vjRiVQRLjxnIKfm++CuPilp3t535HwSx sIay7ojfoD8OQ97eBxxZEhblDByRH8be1OKGz+c0+s/85/btCZJDoQEuFhN01Zo0 mTl6ErvdBSVz/WEK7FSCYPUYWsQESkJ3JrJsSjij06+p/KBpfg0GzDieFLcxgJkh b4dI0C3IrgK7emltM4AquDwVAiEmCZnkQ7B1Njsw9DXZtLo5OHPGy40dmec91Hp2 ChSowdPBwiMWtgbTLl8X4cd3EYtT4qV+iahgOn4pCmfXxx88AEiLcNAz/nNkpe5P JSkLFHDKChNRzDgvmh3tuCDgV6B0DVQ8XWS4G39mpjbL -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:06 2026 by rpki-client