This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/xvwDcfflNhrll8OAcknLHmeLhZ8.roa File: xvwDcfflNhrll8OAcknLHmeLhZ8.roa (raw, json) Hash identifier: NhUIayXWOvj4OQX85etQy6/OzA0Bt8vGHwSzYoEdJ+g= Subject key identifier: C6:FC:03:71:F7:E5:36:1A:E5:97:C3:80:72:49:CB:1E:67:8B:85:9F Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Certificate serial: 019B7BA49FB22E0C24659458E1C1FEC933F6 Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/xvwDcfflNhrll8OAcknLHmeLhZ8.roa Signing time: Thu 01 Jan 2026 22:19:04 +0000 ROA not before: Thu 01 Jan 2026 22:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202656 IP address blocks: 2.59.212.0/24 maxlen: 24 188.64.162.0/24 maxlen: 24 193.38.50.0/24 maxlen: 24 193.38.51.0/24 maxlen: 24 194.169.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:9f:b2:2e:0c:24:65:94:58:e1:c1:fe:c9:33:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Validity Not Before: Jan 1 22:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6fc0371f7e5361ae597c3807249cb1e678b859f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0e:77:e3:3c:6f:e7:4d:6d:5d:8e:69:7d:95: 70:ea:7a:53:d9:16:40:b7:7a:31:67:fc:6d:d6:83: cf:51:b1:b7:4d:8c:20:5d:d7:e9:1c:cd:90:21:6c: 44:6a:18:0e:18:28:ea:0f:f0:19:47:4c:ed:67:b6: c6:e8:9b:a7:8a:2a:74:f5:bb:84:64:90:67:1c:95: 9e:3f:c5:08:2d:9a:69:7e:fe:cc:ec:31:f7:b6:66: 37:34:b4:7f:f1:b8:f9:30:6b:51:5a:74:f8:8b:85: f3:4c:21:01:72:2e:64:51:96:e3:79:d0:9b:62:75: 2a:6f:39:6b:1f:e7:66:e0:54:42:2a:67:41:99:d2: a7:7a:04:71:bc:d0:9b:44:68:fa:ed:fc:a0:c6:93: 44:2b:c8:13:38:4c:c9:7c:2e:83:dc:7e:98:31:2d: a7:c7:69:2f:f8:67:16:74:ac:2b:8b:bf:8b:b7:d4: 5b:ca:c0:f9:85:aa:55:ba:08:f6:b6:07:ef:6a:ab: f2:54:b3:a2:66:dd:f4:da:ea:85:03:38:53:78:f4: b2:51:30:b8:56:0f:3d:c4:d2:af:7c:d7:f7:5b:28: 44:46:cf:0e:c2:c5:4e:bd:15:99:4a:b2:0e:b2:e0: 28:21:d6:85:27:db:aa:24:11:4c:6b:1b:ee:8d:9e: 0c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:FC:03:71:F7:E5:36:1A:E5:97:C3:80:72:49:CB:1E:67:8B:85:9F X509v3 Authority Key Identifier: keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/xvwDcfflNhrll8OAcknLHmeLhZ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.212.0/24 188.64.162.0/24 193.38.50.0/23 194.169.162.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:8d:4d:46:89:4e:8e:e3:35:2f:e1:b0:ad:1b:03:4b:fd:47: 23:8e:fc:ba:f7:55:87:7e:3d:06:cb:8f:cc:dc:25:19:2c:f5: 42:5d:68:cf:5e:da:ba:51:13:53:1a:21:c6:34:94:8e:52:26: 89:ed:c5:8c:39:46:8c:7f:a9:22:a4:93:10:79:11:2d:c8:3d: 33:ad:87:6a:0d:00:51:0c:6f:2a:df:ad:67:75:fd:96:34:1e: b0:ce:be:1b:84:ec:08:82:37:02:83:6d:25:f5:20:f6:a9:11: 9b:06:1a:aa:61:84:5b:15:45:63:93:25:2e:08:ba:cd:e7:a4: ad:4d:77:3d:6e:36:bf:7e:c6:1b:53:31:90:8c:63:a0:ca:7e: 39:25:5e:bb:0b:3b:ab:a1:50:f7:68:11:63:9e:91:17:83:0f: dc:9a:25:ec:68:24:15:b5:f8:26:ab:da:95:b6:e7:27:d3:61: 28:71:f6:81:6d:fa:64:11:fe:15:f3:79:81:f2:0c:52:98:9e: ad:e2:87:f1:42:86:71:8e:95:74:5f:02:d2:e9:47:78:63:29: cb:99:d9:ee:c0:df:ec:51:b6:f0:77:0d:b6:9e:4f:8b:09:ba: 0e:a9:00:54:e7:e7:f1:c0:c3:e5:0d:9d:bd:27:82:a8:0c:21: f7:c6:ea:1d -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt7pJ+yLgwkZZRY4cH+yTP2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4 YWJjYzUwHhcNMjYwMTAxMjIxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmZjMDM3MWY3ZTUzNjFhZTU5N2MzODA3MjQ5Y2IxZTY3OGI4NTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqw534zxv501tXY5pfZVw6npT2RZA t3oxZ/xt1oPPUbG3TYwgXdfpHM2QIWxEahgOGCjqD/AZR0ztZ7bG6Juniip09buE ZJBnHJWeP8UILZppfv7M7DH3tmY3NLR/8bj5MGtRWnT4i4XzTCEBci5kUZbjedCb YnUqbzlrH+dm4FRCKmdBmdKnegRxvNCbRGj67fygxpNEK8gTOEzJfC6D3H6YMS2n x2kv+GcWdKwri7+Lt9RbysD5hapVugj2tgfvaqvyVLOiZt302uqFAzhTePSyUTC4 Vg89xNKvfNf3WyhERs8OwsVOvRWZSrIOsuAoIdaFJ9uqJBFMaxvujZ4MkwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFMb8A3H35TYa5ZfDgHJJyx5ni4WfMB8GA1UdIwQY MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt NmZlOWJmNjA1NjFjLzEveHZ3RGNmZmxOaHJsbDhPQWNrbkxIbWVMaFo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAAjvUAwQA vECiAwQBwSYyAwQAwqmiMA0GCSqGSIb3DQEBCwUAA4IBAQAvjU1GiU6O4zUv4bCt GwNL/Ucjjvy691WHfj0Gy4/M3CUZLPVCXWjPXtq6URNTGiHGNJSOUiaJ7cWMOUaM f6kipJMQeREtyD0zrYdqDQBRDG8q361ndf2WNB6wzr4bhOwIgjcCg20l9SD2qRGb BhqqYYRbFUVjkyUuCLrN56StTXc9bja/fsYbUzGQjGOgyn45JV67CzuroVD3aBFj npEXgw/cmiXsaCQVtfgmq9qVtucn02EocfaBbfpkEf4V83mB8gxSmJ6t4ofxQoZx jpV0XwLS6Ud4YynLmdnuwN/sUbbwdw22nk+LCboOqQBU5+fxwMPlDZ29J4KoDCH3 xuod -----END CERTIFICATE-----Generated at Mon Jan 19 23:20:56 2026 by rpki-client