This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/xkpxNcA2adKpVuuCSTWU-mMaOLE.roa File: xkpxNcA2adKpVuuCSTWU-mMaOLE.roa (raw, json) Hash identifier: 4wQ26xJn/IIoQPuZaC+D/Tt9NZdGF2m5jTMNBD7TiHo= Subject key identifier: C6:4A:71:35:C0:36:69:D2:A9:56:EB:82:49:35:94:FA:63:1A:38:B1 Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Certificate serial: 019B7BA497458E2CA605C17B7E30535BF742 Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/xkpxNcA2adKpVuuCSTWU-mMaOLE.roa Signing time: Thu 01 Jan 2026 22:19:02 +0000 ROA not before: Thu 01 Jan 2026 22:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50053 IP address blocks: 194.147.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:97:45:8e:2c:a6:05:c1:7b:7e:30:53:5b:f7:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Validity Not Before: Jan 1 22:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c64a7135c03669d2a956eb82493594fa631a38b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:41:e8:e8:3e:12:50:ab:b3:ab:9e:e2:54:00: 6c:7b:07:bd:63:f9:a1:7e:22:5d:96:11:85:ad:93: 3c:be:37:3f:a5:63:8d:28:40:4d:26:07:36:0c:2e: 2b:48:25:bc:87:ae:3d:d1:68:fe:01:05:c4:7c:7d: 9c:33:2c:6e:22:18:b3:18:6d:58:c8:4b:fb:a9:1d: 6e:fd:d1:ed:6a:98:58:c0:c3:d2:ff:6d:ee:80:20: 40:a6:58:1a:ea:40:69:1a:ac:83:51:5c:64:6b:92: 24:f7:0c:de:98:d7:8f:ea:9c:0d:59:7a:dc:f8:91: df:a8:aa:ae:ff:29:d1:d3:be:c4:4c:04:8b:28:e4: cb:49:88:df:e9:40:ef:f7:99:4c:d2:f2:11:2f:19: 1b:cf:8d:2c:19:40:06:fc:23:f0:1c:a1:ad:d6:e5: 1f:d3:0a:08:bd:0d:19:03:11:5a:a5:01:ee:cd:46: 95:d7:1a:30:34:56:91:09:ac:2d:07:e6:5f:ac:49: 78:78:96:fa:81:f9:ec:d6:51:ea:bf:f1:24:b0:3b: 06:45:91:2a:e0:76:00:8d:46:10:3f:40:8d:ef:7c: b7:73:99:41:90:7d:f8:43:f1:93:cd:c2:82:5a:5c: a0:8f:5c:da:9f:9f:50:a0:bf:ac:0f:ac:22:d8:c8: 34:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:4A:71:35:C0:36:69:D2:A9:56:EB:82:49:35:94:FA:63:1A:38:B1 X509v3 Authority Key Identifier: keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/xkpxNcA2adKpVuuCSTWU-mMaOLE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.147.78.0/24 Signature Algorithm: sha256WithRSAEncryption 56:39:1e:b4:70:52:07:71:a3:93:3c:e8:21:3e:22:b7:37:df: bc:27:a1:5c:37:84:9a:b2:b8:a6:f8:03:2b:e4:6f:78:89:32: cb:65:21:6c:d6:32:e4:e9:7e:ea:3d:cf:84:65:c6:0a:38:e7: 5d:92:ec:71:ab:a2:97:2f:2b:6f:28:de:0e:18:34:ec:d2:09: 90:9f:14:dd:23:c1:5c:76:e2:87:04:12:ca:76:d2:93:94:6a: 30:36:05:7e:a7:0f:ef:ba:1b:f6:f1:24:99:1e:21:76:cf:ff: a2:a2:7a:cc:73:e8:07:47:35:8a:bd:f3:c4:12:aa:c5:ec:20: b6:39:2b:ae:96:ef:53:7a:dd:d0:18:03:3d:aa:91:0e:e0:6f: 5b:ae:84:a3:76:5a:02:c2:f3:1a:6d:01:31:87:04:d6:0b:1a: 96:92:0f:a4:06:0e:60:c4:f1:ea:90:a3:45:08:ed:0f:e6:55: d4:3d:26:56:7c:1c:9d:f2:bc:b5:8c:7d:42:5e:4e:5f:0d:44: f4:b2:a6:2d:26:90:d9:33:1e:f8:bf:c3:2a:47:40:53:87:82: ef:27:b8:5a:db:b5:1c:35:4a:a4:d1:23:99:30:ec:19:c9:b7: fc:d2:69:68:b3:4f:a7:5e:83:aa:5c:00:b5:44:b0:bc:30:5f: b2:5e:48:66 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pJdFjiymBcF7fjBTW/dCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4 YWJjYzUwHhcNMjYwMTAxMjIxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjRhNzEzNWMwMzY2OWQyYTk1NmViODI0OTM1OTRmYTYzMWEzOGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEHo6D4SUKuzq57iVABsewe9Y/mh fiJdlhGFrZM8vjc/pWONKEBNJgc2DC4rSCW8h6490Wj+AQXEfH2cMyxuIhizGG1Y yEv7qR1u/dHtaphYwMPS/23ugCBAplga6kBpGqyDUVxka5Ik9wzemNeP6pwNWXrc +JHfqKqu/ynR077ETASLKOTLSYjf6UDv95lM0vIRLxkbz40sGUAG/CPwHKGt1uUf 0woIvQ0ZAxFapQHuzUaV1xowNFaRCawtB+ZfrEl4eJb6gfns1lHqv/EksDsGRZEq 4HYAjUYQP0CN73y3c5lBkH34Q/GTzcKCWlygj1zan59QoL+sD6wi2Mg0SwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMZKcTXANmnSqVbrgkk1lPpjGjixMB8GA1UdIwQY MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt NmZlOWJmNjA1NjFjLzEveGtweE5jQTJhZEtwVnV1Q1NUV1UtbU1hT0xFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpNOMA0G CSqGSIb3DQEBCwUAA4IBAQBWOR60cFIHcaOTPOghPiK3N9+8J6FcN4Sasrim+AMr 5G94iTLLZSFs1jLk6X7qPc+EZcYKOOddkuxxq6KXLytvKN4OGDTs0gmQnxTdI8Fc duKHBBLKdtKTlGowNgV+pw/vuhv28SSZHiF2z/+ionrMc+gHRzWKvfPEEqrF7CC2 OSuulu9Tet3QGAM9qpEO4G9broSjdloCwvMabQExhwTWCxqWkg+kBg5gxPHqkKNF CO0P5lXUPSZWfByd8ry1jH1CXk5fDUT0sqYtJpDZMx74v8MqR0BTh4LvJ7ha27Uc NUqk0SOZMOwZybf80mlos0+nXoOqXAC1RLC8MF+yXkhm -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:13 2026 by rpki-client