This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/XyYjURWnDtL6j5DL-ST6SPw7rFI.roa File: XyYjURWnDtL6j5DL-ST6SPw7rFI.roa (raw, json) Hash identifier: 26mKNoH4079E9ccWRUpU/d+cgxVIAOMCoINSih0nzDo= Subject key identifier: 5F:26:23:51:15:A7:0E:D2:FA:8F:90:CB:F9:24:FA:48:FC:3B:AC:52 Certificate issuer: /CN=79101035d53377c5a72bedca522fc1456e0b8419 Certificate serial: 019B7C80B1F3A95B287C0641591AFEF17F35 Authority key identifier: 79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/XyYjURWnDtL6j5DL-ST6SPw7rFI.roa Signing time: Fri 02 Jan 2026 02:19:27 +0000 ROA not before: Fri 02 Jan 2026 02:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62197 IP address blocks: 185.15.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:b1:f3:a9:5b:28:7c:06:41:59:1a:fe:f1:7f:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79101035d53377c5a72bedca522fc1456e0b8419 Validity Not Before: Jan 2 02:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f26235115a70ed2fa8f90cbf924fa48fc3bac52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f0:8d:33:d5:f3:28:11:9f:7b:f5:9b:5e:5e: 69:de:cf:6e:71:a8:bd:60:f8:b7:94:97:70:39:48: 6b:c1:15:ef:41:1b:71:41:b0:60:90:86:7d:c9:93: 37:2a:a8:1a:9f:1b:9b:2b:73:cb:b8:a7:df:ae:6a: 4b:55:26:91:de:0c:ac:b5:2d:a7:e8:49:b3:a3:5d: e3:8f:90:bc:ed:3f:a4:02:be:97:23:97:51:04:98: 5c:e1:7c:82:04:84:e0:a4:a3:14:ca:86:67:b1:81: 4b:67:a2:bb:e4:39:92:35:f9:c6:31:29:7f:ba:cc: 0d:bf:61:63:0c:3b:9b:bd:16:57:e9:80:21:ac:70: 85:b3:65:bf:02:66:cb:4b:bd:a7:2e:59:41:c7:77: ad:0d:78:66:99:32:bf:90:d9:b2:2d:ca:3f:88:63: ec:2a:8d:d8:9f:58:a9:41:60:1b:d0:29:2c:a1:36: 72:35:80:40:c1:e7:1d:f6:f3:f4:4c:dd:f5:fb:cb: be:b5:be:4c:d1:97:f6:14:fb:6e:7a:fd:be:be:7b: ef:c9:e8:0c:89:1b:ac:84:d6:3c:1a:97:ed:2f:4f: da:b8:59:6c:96:9b:76:a6:a4:e4:9a:55:c8:58:3e: 24:f9:a5:0d:f2:aa:ec:4d:8b:24:22:1a:8a:6e:9d: 97:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:26:23:51:15:A7:0E:D2:FA:8F:90:CB:F9:24:FA:48:FC:3B:AC:52 X509v3 Authority Key Identifier: keyid:79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/XyYjURWnDtL6j5DL-ST6SPw7rFI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.15.158.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:e3:22:c8:cf:7d:07:65:bd:f3:53:bf:ed:1b:25:fc:30:9f: 7c:f3:37:9b:47:36:02:49:9d:30:f3:c4:61:53:bd:7a:de:f9: 3d:32:ca:2d:5b:63:09:49:26:8c:09:90:50:ed:34:27:38:c1: 39:92:08:f5:94:fd:85:8c:8d:71:19:df:75:12:7c:d0:ed:1a: 47:2a:13:82:45:14:79:5a:69:e4:ea:18:6f:96:12:ca:16:08: 3f:f7:dc:ae:07:79:71:57:a7:36:e8:9b:b1:8d:f6:43:f9:bc: 5f:39:a8:b1:fe:24:27:f9:ab:5a:51:a5:05:97:5a:74:e0:4d: cd:75:a1:36:1a:00:69:52:e9:4d:49:d8:a1:5b:8f:f0:33:53: 6e:29:de:9b:24:58:d0:de:48:e3:d0:f1:a3:46:8d:1b:a3:b6: 9e:a6:9b:4e:aa:5f:c4:64:ad:dc:4a:a4:a7:60:83:6f:80:2e: bd:a2:68:9f:69:7a:42:ee:a1:51:d7:66:87:f3:a5:72:37:ed: bc:ed:af:bc:76:3e:24:f3:ad:d2:dc:27:e3:c8:59:3b:76:a8: d8:5f:03:e2:5c:a3:e1:d5:26:77:75:c6:3d:31:8e:a2:b8:9f: e7:0c:86:b4:bb:3a:e1:91:f8:75:e3:74:40:f2:29:80:03:f7: fa:d8:32:ca -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gLHzqVsofAZBWRr+8X81MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5MTAxMDM1ZDUzMzc3YzVhNzJiZWRjYTUyMmZjMTQ1NmUw Yjg0MTkwHhcNMjYwMTAyMDIxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjI2MjM1MTE1YTcwZWQyZmE4ZjkwY2JmOTI0ZmE0OGZjM2JhYzUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/CNM9XzKBGfe/WbXl5p3s9ucai9 YPi3lJdwOUhrwRXvQRtxQbBgkIZ9yZM3KqganxubK3PLuKffrmpLVSaR3gystS2n 6Emzo13jj5C87T+kAr6XI5dRBJhc4XyCBITgpKMUyoZnsYFLZ6K75DmSNfnGMSl/ uswNv2FjDDubvRZX6YAhrHCFs2W/AmbLS72nLllBx3etDXhmmTK/kNmyLco/iGPs Ko3Yn1ipQWAb0CksoTZyNYBAwecd9vP0TN31+8u+tb5M0Zf2FPtuev2+vnvvyegM iRushNY8GpftL0/auFlslpt2pqTkmlXIWD4k+aUN8qrsTYskIhqKbp2X6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF8mI1EVpw7S+o+Qy/kk+kj8O6xSMB8GA1UdIwQY MBaAFHkQEDXVM3fFpyvtylIvwUVuC4QZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVJBUU5kVXpkOFduSy0zS1VpX0JSVzRMaEJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS85NThjMmMtYjRjMy00MzJkLTlhYjEt MGNjODNiMDBmYzU4LzEvWHlZalVSV25EdEw2ajVETC1TVDZTUHc3ckZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS85NThjMmMtYjRjMy00MzJkLTlhYjEtMGNjODNiMDBmYzU4 LzEvZVJBUU5kVXpkOFduSy0zS1VpX0JSVzRMaEJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQ+eMA0G CSqGSIb3DQEBCwUAA4IBAQBL4yLIz30HZb3zU7/tGyX8MJ988zebRzYCSZ0w88Rh U7163vk9MsotW2MJSSaMCZBQ7TQnOME5kgj1lP2FjI1xGd91EnzQ7RpHKhOCRRR5 Wmnk6hhvlhLKFgg/99yuB3lxV6c26JuxjfZD+bxfOaix/iQn+ataUaUFl1p04E3N daE2GgBpUulNSdihW4/wM1NuKd6bJFjQ3kjj0PGjRo0bo7aepptOql/EZK3cSqSn YINvgC69omifaXpC7qFR12aH86VyN+287a+8dj4k863S3CfjyFk7dqjYXwPiXKPh 1SZ3dcY9MY6iuJ/nDIa0uzrhkfh143RA8imAA/f62DLK -----END CERTIFICATE-----Generated at Tue Feb 10 02:47:03 2026 by rpki-client