This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/X6SzNQXiBFFDJhBNdvMhCBPHFfQ.roa File: X6SzNQXiBFFDJhBNdvMhCBPHFfQ.roa (raw, json) Hash identifier: fQujnsKiKmQAa2eiIQn71F8Xhr3SmxLUUr/Q/pLfIgU= Subject key identifier: 5F:A4:B3:35:05:E2:04:51:43:26:10:4D:76:F3:21:08:13:C7:15:F4 Certificate issuer: /CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c Certificate serial: 019B7A5A66ED6E6452177417DF50155C3600 Authority key identifier: A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/X6SzNQXiBFFDJhBNdvMhCBPHFfQ.roa Signing time: Thu 01 Jan 2026 16:18:23 +0000 ROA not before: Thu 01 Jan 2026 16:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201584 IP address blocks: 185.210.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:66:ed:6e:64:52:17:74:17:df:50:15:5c:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c Validity Not Before: Jan 1 16:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5fa4b33505e204514326104d76f3210813c715f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:09:88:ea:5a:8d:60:33:4e:a8:b5:9c:9d:be: 71:1e:da:5e:e7:cd:79:18:cd:2e:07:bd:95:df:b8: fa:a0:63:56:3c:d9:6d:b0:e4:1f:3b:98:82:1a:3b: c3:f5:58:6d:b4:d2:ce:0d:f7:76:76:d1:36:d4:97: cd:8b:c3:db:77:01:c8:ac:2c:0a:93:67:a0:6d:7b: 06:05:ab:35:fc:ed:f4:88:03:8c:96:5d:9d:b1:b6: 36:39:43:89:21:d6:cc:7a:23:11:5f:6d:5e:ba:00: 27:6a:7e:4a:df:e2:5a:22:63:cf:b0:10:15:af:c2: d5:45:99:80:fb:6d:38:73:5f:3d:7a:97:3a:cb:f8: 47:74:94:95:ed:a3:f2:6b:4f:37:2d:80:7f:01:d4: db:40:67:16:43:d4:7b:20:f6:cd:15:4f:8b:64:f9: 91:59:ce:f7:63:ed:ec:4f:b4:eb:2b:a5:4e:41:3d: 0d:94:3d:14:dd:4f:d8:58:2f:b9:14:30:8e:cb:a5: d1:d9:82:b5:60:2f:a1:b7:f7:8c:e0:d0:a8:d0:03: 5a:f6:0f:9d:a7:df:5a:14:42:5e:fb:9c:8b:ec:dc: 25:24:df:0c:4f:12:ba:96:7f:2f:9d:c0:0c:40:08: d7:3c:fd:44:4e:37:e1:18:52:45:0b:f2:bb:cd:67: f3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:A4:B3:35:05:E2:04:51:43:26:10:4D:76:F3:21:08:13:C7:15:F4 X509v3 Authority Key Identifier: keyid:A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/X6SzNQXiBFFDJhBNdvMhCBPHFfQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.210.202.0/24 Signature Algorithm: sha256WithRSAEncryption 89:3f:ab:b1:53:a0:e3:bf:33:a5:11:10:e2:c8:20:d7:8c:64: c7:83:a5:95:4f:f5:ee:16:13:b5:d1:1a:10:84:4a:aa:53:4c: d2:d1:29:f2:ef:19:16:48:8d:08:fa:00:93:59:05:97:0d:17: 2d:83:a4:2b:12:0c:6d:b0:57:c8:e0:2a:46:1c:d7:5e:59:5d: db:0d:2e:d0:df:45:b4:0c:c3:a3:7e:fd:28:a5:cd:d5:ea:09: 7e:e5:1b:39:c9:98:99:d3:28:0b:f2:71:5d:ff:3f:22:83:79: 7c:04:d3:e4:cd:5f:b2:a1:c6:4a:0a:54:8f:4f:0d:95:4b:5f: 63:ad:d6:93:3f:3b:68:a8:8a:6e:6e:17:ab:e9:9d:72:fd:fe: 09:05:88:65:95:0d:b1:24:53:7a:94:d3:56:c6:27:a9:11:c9: 69:f4:77:19:4d:12:fb:c5:07:a8:34:8c:2c:26:56:bf:cd:65: 47:51:d9:77:67:21:a8:99:f5:e8:12:ea:52:09:d2:05:8a:d3: 16:7e:02:9b:79:fc:22:a1:06:b2:9b:22:2f:cd:76:cf:96:c8: 8a:4f:ae:15:3a:27:b4:9e:47:e8:a8:dc:28:89:18:10:8f:b4: d4:d9:ed:30:1a:1b:1d:38:46:21:cc:00:b4:db:54:56:2c:62: 0a:fc:c6:9c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WmbtbmRSF3QX31AVXDYAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NDM4ZWFjZjRkMDY0ZTg3YTc2YmI0NjJkM2I0YjJjYzM4 NThhNGMwHhcNMjYwMTAxMTYxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmE0YjMzNTA1ZTIwNDUxNDMyNjEwNGQ3NmYzMjEwODEzYzcxNWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAmI6lqNYDNOqLWcnb5xHtpe5815 GM0uB72V37j6oGNWPNltsOQfO5iCGjvD9VhttNLODfd2dtE21JfNi8PbdwHIrCwK k2egbXsGBas1/O30iAOMll2dsbY2OUOJIdbMeiMRX21eugAnan5K3+JaImPPsBAV r8LVRZmA+204c189epc6y/hHdJSV7aPya083LYB/AdTbQGcWQ9R7IPbNFU+LZPmR Wc73Y+3sT7TrK6VOQT0NlD0U3U/YWC+5FDCOy6XR2YK1YC+ht/eM4NCo0ANa9g+d p99aFEJe+5yL7NwlJN8MTxK6ln8vncAMQAjXPP1ETjfhGFJFC/K7zWfzswIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF+kszUF4gRRQyYQTXbzIQgTxxX0MB8GA1UdIwQY MBaAFKhDjqz00GToena7Ri07SyzDhYpMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUVPT3JQVFFaT2g2ZHJ0R0xUdExMTU9GaWt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84ZTExMjItOGNiOS00ODcyLTg4MTEt MWMyODAwODMxYzY0LzEvWDZTek5RWGlCRkZESmhCTmR2TWhDQlBIRmZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS84ZTExMjItOGNiOS00ODcyLTg4MTEtMWMyODAwODMxYzY0 LzEvcUVPT3JQVFFaT2g2ZHJ0R0xUdExMTU9GaWt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudLKMA0G CSqGSIb3DQEBCwUAA4IBAQCJP6uxU6DjvzOlERDiyCDXjGTHg6WVT/XuFhO10RoQ hEqqU0zS0Sny7xkWSI0I+gCTWQWXDRctg6QrEgxtsFfI4CpGHNdeWV3bDS7Q30W0 DMOjfv0opc3V6gl+5Rs5yZiZ0ygL8nFd/z8ig3l8BNPkzV+yocZKClSPTw2VS19j rdaTPztoqIpubher6Z1y/f4JBYhllQ2xJFN6lNNWxiepEclp9HcZTRL7xQeoNIws Jla/zWVHUdl3ZyGomfXoEupSCdIFitMWfgKbefwioQaymyIvzXbPlsiKT64VOie0 nkfoqNwoiRgQj7TU2e0wGhsdOEYhzAC021RWLGIK/Mac -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:12 2026 by rpki-client