This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/xxmUvxGlUTZYlS1fzfDsE1LRkDY.roa File: xxmUvxGlUTZYlS1fzfDsE1LRkDY.roa (raw, json) Hash identifier: LHuMkoFuyABxZJIkd6bMQ80Etxt39qZubcGAijE5D7Q= Subject key identifier: C7:19:94:BF:11:A5:51:36:58:95:2D:5F:CD:F0:EC:13:52:D1:90:36 Certificate issuer: /CN=da0047dac8eef8944d78c1b7a26868c03e2ce466 Certificate serial: 019B791017264C10209572D19DF2A9DD889C Authority key identifier: DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/xxmUvxGlUTZYlS1fzfDsE1LRkDY.roa Signing time: Thu 01 Jan 2026 10:17:36 +0000 ROA not before: Thu 01 Jan 2026 10:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60451 IP address blocks: 185.30.180.0/22 maxlen: 24 185.135.92.0/22 maxlen: 24 2a06:f280::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:17:26:4c:10:20:95:72:d1:9d:f2:a9:dd:88:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da0047dac8eef8944d78c1b7a26868c03e2ce466 Validity Not Before: Jan 1 10:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c71994bf11a5513658952d5fcdf0ec1352d19036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:01:fe:9e:ce:48:03:70:96:6d:23:bb:89:28: fa:84:f1:41:01:d3:59:d3:f4:ed:7b:f1:b6:e9:b4: 30:7c:e6:08:c1:40:f6:50:be:4b:e9:2f:fe:27:a1: 7a:01:6d:8d:08:94:f8:97:9a:8d:31:7d:a2:87:cf: 23:29:e8:08:41:ce:62:b9:19:7b:fb:59:75:f7:9a: 9a:95:b0:69:7f:48:36:42:ef:15:ea:55:40:70:8b: 70:f7:c7:04:cc:0e:78:ba:3c:06:b4:7a:14:0c:bc: 0f:9b:79:a8:86:e2:46:b0:b7:6f:90:89:01:88:0d: 22:b1:e7:bb:08:b2:a5:a1:45:7e:0e:09:bb:e2:20: 83:bf:3b:8f:b7:38:a9:e1:0b:b3:e2:3b:8f:3d:e2: 12:f0:af:a1:fa:76:a5:a0:1c:4d:19:6f:95:13:14: 3e:3e:d6:35:98:0a:02:60:09:4d:df:5e:8f:2a:48: 46:cf:42:b6:c3:52:9b:a9:6f:8a:3d:42:13:86:8a: 74:4f:76:fd:6f:a5:41:46:d9:e6:65:83:5f:95:29: db:a1:94:72:9f:e0:4a:31:1b:27:fd:2c:bd:59:8f: 2f:89:6d:ca:9d:62:9d:c3:39:08:63:b6:f5:16:55: c5:69:9c:47:28:5e:f4:01:66:d1:90:77:6b:68:8d: 54:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:19:94:BF:11:A5:51:36:58:95:2D:5F:CD:F0:EC:13:52:D1:90:36 X509v3 Authority Key Identifier: keyid:DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/xxmUvxGlUTZYlS1fzfDsE1LRkDY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.30.180.0/22 185.135.92.0/22 IPv6: 2a06:f280::/29 Signature Algorithm: sha256WithRSAEncryption d9:58:30:2b:27:c9:42:90:89:91:60:b3:88:42:fa:76:b6:98: 9a:44:dd:4a:c2:1d:b8:41:7f:ee:08:29:36:8f:d7:58:ca:5a: 58:63:c0:82:75:4c:27:a5:f6:ac:f5:8d:b6:01:7e:f4:49:1e: ac:b0:e7:07:53:33:5e:0d:2d:28:f7:dd:76:84:62:02:07:75: 73:d8:d3:d7:2d:60:af:af:c9:aa:ed:a2:0a:56:90:e7:ef:51: 1c:30:be:ea:05:cf:4e:8b:c5:0d:6f:fb:c2:2b:dc:7c:18:15: d2:42:fc:76:e6:c2:8b:c8:53:ab:aa:ce:ff:d7:e6:50:15:f0: 95:8c:95:9d:c6:bd:20:ce:3a:6a:8f:94:71:0b:c2:c4:94:58: 08:5c:a4:d5:13:45:36:a7:29:3f:20:28:fe:82:a3:62:a6:4e: 22:d1:e7:5b:47:b1:2a:da:e9:1c:7b:99:2d:a3:61:5b:99:1b: db:3b:d7:47:cd:4a:37:65:25:44:51:97:5e:73:de:69:69:a0: 4b:53:ab:bd:19:cf:54:55:2f:f0:d9:3e:17:4f:07:42:b1:65: 4e:d0:ba:29:1a:26:4f:87:21:71:f5:b8:ec:5d:b9:ca:4f:73: 31:cf:ef:30:9a:b7:ee:1f:41:f4:08:12:27:e5:49:44:63:0e: 9c:40:f7:51 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5EBcmTBAglXLRnfKp3YicMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMDA0N2RhYzhlZWY4OTQ0ZDc4YzFiN2EyNjg2OGMwM2Uy Y2U0NjYwHhcNMjYwMTAxMTAxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzE5OTRiZjExYTU1MTM2NTg5NTJkNWZjZGYwZWMxMzUyZDE5MDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwH+ns5IA3CWbSO7iSj6hPFBAdNZ 0/Tte/G26bQwfOYIwUD2UL5L6S/+J6F6AW2NCJT4l5qNMX2ih88jKegIQc5iuRl7 +1l195qalbBpf0g2Qu8V6lVAcItw98cEzA54ujwGtHoUDLwPm3mohuJGsLdvkIkB iA0isee7CLKloUV+Dgm74iCDvzuPtzip4Quz4juPPeIS8K+h+naloBxNGW+VExQ+ PtY1mAoCYAlN316PKkhGz0K2w1KbqW+KPUIThop0T3b9b6VBRtnmZYNflSnboZRy n+BKMRsn/Sy9WY8viW3KnWKdwzkIY7b1FlXFaZxHKF70AWbRkHdraI1UrwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFMcZlL8RpVE2WJUtX83w7BNS0ZA2MB8GA1UdIwQY MBaAFNoAR9rI7viUTXjBt6JoaMA+LORmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmdCSDJzanUtSlJOZU1HM29taG93RDRzNUdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83Nzk1OWEtNDFkZS00NmJlLWE1ZjEt YWM5YzhhNTBmMjRlLzEveHhtVXZ4R2xVVFpZbFMxZnpmRHNFMUxSa0RZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy83Nzk1OWEtNDFkZS00NmJlLWE1ZjEtYWM5YzhhNTBmMjRl LzEvMmdCSDJzanUtSlJOZU1HM29taG93RDRzNUdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuR60AwQC uYdcMA0EAgACMAcDBQMqBvKAMA0GCSqGSIb3DQEBCwUAA4IBAQDZWDArJ8lCkImR YLOIQvp2tpiaRN1Kwh24QX/uCCk2j9dYylpYY8CCdUwnpfas9Y22AX70SR6ssOcH UzNeDS0o9912hGICB3Vz2NPXLWCvr8mq7aIKVpDn71EcML7qBc9Oi8UNb/vCK9x8 GBXSQvx25sKLyFOrqs7/1+ZQFfCVjJWdxr0gzjpqj5RxC8LElFgIXKTVE0U2pyk/ ICj+gqNipk4i0edbR7Eq2ukce5kto2FbmRvbO9dHzUo3ZSVEUZdec95paaBLU6u9 Gc9UVS/w2T4XTwdCsWVO0LopGiZPhyFx9bjsXbnKT3Mxz+8wmrfuH0H0CBIn5UlE Yw6cQPdR -----END CERTIFICATE-----Generated at Mon Feb 9 23:46:19 2026 by rpki-client