This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/XanHRUj2-HyDyPZ77hmHcGeG2lg.roa File: XanHRUj2-HyDyPZ77hmHcGeG2lg.roa (raw, json) Hash identifier: ugHcdlNxi9RfyCrcntqXJ3Nl+aNon55mzqLGxiiLo0k= Subject key identifier: 5D:A9:C7:45:48:F6:F8:7C:83:C8:F6:7B:EE:19:87:70:67:86:DA:58 Certificate issuer: /CN=00cadc5c7ba262a9a5b1d087369da5be797fba16 Certificate serial: 019B77590B1DAEA2A467D93DD02025B0279F Authority key identifier: 00:CA:DC:5C:7B:A2:62:A9:A5:B1:D0:87:36:9D:A5:BE:79:7F:BA:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMrcXHuiYqmlsdCHNp2lvnl_uhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/XanHRUj2-HyDyPZ77hmHcGeG2lg.roa Signing time: Thu 01 Jan 2026 02:18:02 +0000 ROA not before: Thu 01 Jan 2026 02:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205966 IP address blocks: 167.150.200.0/24 maxlen: 24 2001:678:10dc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.crl rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft rsync://rpki.ripe.net/repository/DEFAULT/AMrcXHuiYqmlsdCHNp2lvnl_uhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:0b:1d:ae:a2:a4:67:d9:3d:d0:20:25:b0:27:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00cadc5c7ba262a9a5b1d087369da5be797fba16 Validity Not Before: Jan 1 02:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5da9c74548f6f87c83c8f67bee1987706786da58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:28:a6:92:83:16:f7:68:c8:a1:75:94:89:01: f7:a1:e0:07:cc:c4:a7:63:90:6e:22:2b:16:f1:f3: 16:0a:f6:5e:26:39:7e:00:66:e6:b0:79:ea:b2:af: df:b0:e4:e2:e7:79:d3:b3:3c:99:40:8b:7c:9b:20: 3f:7e:9e:ad:c7:d5:fa:96:31:0d:33:10:50:6f:21: 12:68:f2:06:b8:1d:ce:e3:f7:60:cc:6b:82:5a:1b: 0f:f4:f3:6a:4c:10:7a:df:09:e7:14:7f:bc:6b:47: b1:7a:40:59:58:cb:6c:57:d2:49:b0:c0:a6:98:50: 88:75:33:be:3c:f4:e4:c0:29:0b:3e:d9:4d:9a:b9: 4e:f0:ab:08:75:ca:e7:a9:d6:f8:c4:cc:79:71:aa: b4:07:3c:b3:fe:fd:29:31:b5:f1:42:4e:ff:93:78: ff:86:62:38:bd:76:1d:c0:01:0d:eb:fc:81:eb:20: 85:91:24:bc:12:d0:39:11:80:05:87:06:9d:61:4a: 18:2e:63:79:f3:97:55:d7:33:fc:81:08:31:78:cd: 67:19:93:58:ed:32:5d:6c:03:cc:69:bd:00:d9:03: 9d:52:e8:b3:d6:2d:22:b5:1e:0d:a8:c1:3e:a3:4f: 68:6f:5e:65:c1:44:5e:3c:ef:ea:ee:b2:59:85:e7: b8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A9:C7:45:48:F6:F8:7C:83:C8:F6:7B:EE:19:87:70:67:86:DA:58 X509v3 Authority Key Identifier: keyid:00:CA:DC:5C:7B:A2:62:A9:A5:B1:D0:87:36:9D:A5:BE:79:7F:BA:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMrcXHuiYqmlsdCHNp2lvnl_uhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/XanHRUj2-HyDyPZ77hmHcGeG2lg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.150.200.0/24 IPv6: 2001:678:10dc::/48 Signature Algorithm: sha256WithRSAEncryption 1d:92:6e:02:5a:97:c4:90:57:f2:f0:0b:b3:92:0e:bb:8a:13: 21:f4:ef:c8:22:4f:d0:2d:4b:9c:43:02:ac:9c:95:c5:75:a4: e1:80:07:26:90:8c:88:9a:59:ec:b8:55:33:36:eb:a5:c7:b2: c6:49:73:c7:b2:5c:6e:6a:aa:1c:4d:a2:fd:6a:fb:e5:ff:23: 45:f8:60:a5:33:2e:79:52:f2:20:61:2e:fa:27:11:7a:0e:c6: c6:4e:9a:e2:4e:ee:70:2a:e1:63:78:08:3c:b1:b4:14:59:68: 86:15:be:85:70:5f:b2:a5:67:bf:90:e8:75:32:5d:cb:98:e3: ac:3d:ef:71:33:de:73:cc:0b:dc:e6:b1:82:3f:a0:46:40:63: 5c:76:e2:97:45:7a:f4:62:59:21:c4:e1:45:3d:5e:3b:e2:84: c2:6b:c5:0d:27:56:4b:1d:a9:12:d0:ac:8c:19:82:44:fb:c9: 3b:e2:ca:fb:18:15:02:1e:c3:4c:e4:b9:3a:6d:c3:44:92:d9: 5f:e5:39:96:ac:44:57:85:b2:f9:a8:32:a2:f2:87:92:39:20: f3:16:d0:28:c5:df:a7:08:35:cd:c3:84:4f:44:69:aa:2d:61: 75:85:db:74:cf:d8:2a:58:5f:f1:a2:84:00:d0:52:51:5f:74: 8d:47:f7:46 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt3WQsdrqKkZ9k90CAlsCefMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwY2FkYzVjN2JhMjYyYTlhNWIxZDA4NzM2OWRhNWJlNzk3 ZmJhMTYwHhcNMjYwMTAxMDIxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZGE5Yzc0NTQ4ZjZmODdjODNjOGY2N2JlZTE5ODc3MDY3ODZkYTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyimkoMW92jIoXWUiQH3oeAHzMSn Y5BuIisW8fMWCvZeJjl+AGbmsHnqsq/fsOTi53nTszyZQIt8myA/fp6tx9X6ljEN MxBQbyESaPIGuB3O4/dgzGuCWhsP9PNqTBB63wnnFH+8a0exekBZWMtsV9JJsMCm mFCIdTO+PPTkwCkLPtlNmrlO8KsIdcrnqdb4xMx5caq0Bzyz/v0pMbXxQk7/k3j/ hmI4vXYdwAEN6/yB6yCFkSS8EtA5EYAFhwadYUoYLmN585dV1zP8gQgxeM1nGZNY 7TJdbAPMab0A2QOdUuiz1i0itR4NqME+o09ob15lwURePO/q7rJZhee45QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFF2px0VI9vh8g8j2e+4Zh3BnhtpYMB8GA1UdIwQY MBaAFADK3Fx7omKppbHQhzadpb55f7oWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQU1yY1hIdWlZcW1sc2RDSE5wMmx2bmxfdWhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9lMmRhYmEtMTZhMC00MThhLWI3YzUt MzRhNDg0NWMxZDhjLzEvWGFuSFJVajItSHlEeVBaNzdobUhjR2VHMmxnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9lMmRhYmEtMTZhMC00MThhLWI3YzUtMzRhNDg0NWMxZDhj LzEvQU1yY1hIdWlZcW1sc2RDSE5wMmx2bmxfdWhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAp5bIMA8E AgACMAkDBwAgAQZ4ENwwDQYJKoZIhvcNAQELBQADggEBAB2SbgJal8SQV/LwC7OS DruKEyH078giT9AtS5xDAqyclcV1pOGAByaQjIiaWey4VTM266XHssZJc8eyXG5q qhxNov1q++X/I0X4YKUzLnlS8iBhLvonEXoOxsZOmuJO7nAq4WN4CDyxtBRZaIYV voVwX7KlZ7+Q6HUyXcuY46w973Ez3nPMC9zmsYI/oEZAY1x24pdFevRiWSHE4UU9 XjvihMJrxQ0nVksdqRLQrIwZgkT7yTviyvsYFQIew0zkuTptw0SS2V/lOZasRFeF svmoMqLyh5I5IPMW0CjF36cINc3DhE9EaaotYXWF23TP2CpYX/GihADQUlFfdI1H 90Y= -----END CERTIFICATE-----Generated at Mon Feb 2 08:07:42 2026 by rpki-client