This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/Xw4UeKgRwb2lGPFXPKGIgFV8zIg.roa File: Xw4UeKgRwb2lGPFXPKGIgFV8zIg.roa (raw, json) Hash identifier: O4zDvnneI6b8HVvHo7KP4twgP2izdITJyTreaB9hdaQ= Subject key identifier: 5F:0E:14:78:A8:11:C1:BD:A5:18:F1:57:3C:A1:88:80:55:7C:CC:88 Certificate issuer: /CN=6cc23670f9789c02d83ba7c2e7e4c6e9ede52f7a Certificate serial: 019B7BA48312EF3482FC7A79D8FC088EFF89 Authority key identifier: 6C:C2:36:70:F9:78:9C:02:D8:3B:A7:C2:E7:E4:C6:E9:ED:E5:2F:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/Xw4UeKgRwb2lGPFXPKGIgFV8zIg.roa Signing time: Thu 01 Jan 2026 22:18:57 +0000 ROA not before: Thu 01 Jan 2026 22:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203424 IP address blocks: 147.12.32.0/19 maxlen: 19 185.45.176.0/22 maxlen: 22 195.181.128.0/19 maxlen: 19 213.128.160.0/19 maxlen: 19 217.116.80.0/20 maxlen: 20 2a02:2c00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:83:12:ef:34:82:fc:7a:79:d8:fc:08:8e:ff:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cc23670f9789c02d83ba7c2e7e4c6e9ede52f7a Validity Not Before: Jan 1 22:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f0e1478a811c1bda518f1573ca18880557ccc88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f6:ec:b6:5d:6e:65:be:60:c7:18:38:5f:5a: 15:cf:f4:2c:28:45:0d:d0:82:50:8f:0b:24:5f:f9: 55:ed:40:01:72:76:46:3f:08:20:b0:5e:1b:e7:06: ee:cd:92:ef:38:a9:b4:61:82:41:f3:69:dd:9c:0b: a1:4f:31:c4:cc:86:eb:58:c5:8d:94:eb:9f:1c:da: 9c:d1:71:a7:db:c7:24:72:31:fc:92:00:84:0e:6c: 6c:11:d2:42:e5:1c:59:af:bf:dc:6c:fc:ac:96:bd: ff:0a:a4:0a:f9:05:92:fe:d4:a1:69:07:fd:00:18: e6:08:5d:e8:c8:9f:ba:84:2d:a5:ed:c2:80:e2:a4: a4:1c:af:6c:8a:f9:74:4a:46:fd:22:e2:48:39:31: 3e:1c:9d:f7:b5:3b:b8:02:8a:1f:79:d5:23:0a:91: 1f:3b:e7:5b:24:a8:e4:1c:b0:6f:ca:7a:44:32:93: fd:62:46:f6:2a:1d:d8:f1:1f:14:4b:59:6c:af:b2: da:91:43:d7:75:db:86:77:15:b8:3f:c3:e1:ae:54: 23:9e:02:8f:37:ae:dd:d7:52:3a:bf:be:5f:5d:8c: cc:fd:f4:d2:c4:af:a6:bc:cb:14:57:59:8e:1b:32: 01:42:55:0c:8c:ab:ea:d7:d2:a6:47:e3:2c:16:b5: 14:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:0E:14:78:A8:11:C1:BD:A5:18:F1:57:3C:A1:88:80:55:7C:CC:88 X509v3 Authority Key Identifier: keyid:6C:C2:36:70:F9:78:9C:02:D8:3B:A7:C2:E7:E4:C6:E9:ED:E5:2F:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/Xw4UeKgRwb2lGPFXPKGIgFV8zIg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.12.32.0/19 185.45.176.0/22 195.181.128.0/19 213.128.160.0/19 217.116.80.0/20 IPv6: 2a02:2c00::/29 Signature Algorithm: sha256WithRSAEncryption c5:32:3a:6c:13:c3:06:6f:ba:5a:e8:4d:77:ae:a1:a4:9e:56: 34:66:2f:9b:23:ae:be:cc:be:5a:97:ae:6d:86:27:b5:3a:f0: d4:b6:93:f9:dc:12:eb:7f:da:43:bf:e2:1e:4d:cb:7e:6a:91: 13:3a:42:dc:5e:74:1b:17:86:46:66:b5:ae:05:63:7b:d3:33: 07:aa:a4:df:ac:a7:4a:41:33:b1:82:3c:2f:ae:7e:59:bd:e8: 75:f3:40:a4:a3:25:fd:a1:be:d3:e6:bc:42:46:37:ee:a1:46: a5:a0:90:e0:f7:a1:8b:fd:dd:1c:e0:0c:51:9b:f0:a0:67:cc: 0b:ec:56:ad:72:be:37:c1:95:f8:b1:b4:89:52:65:db:9b:b0: 2d:09:89:db:16:a0:a7:85:f4:d6:06:14:a8:9a:8f:40:2a:17: 22:41:21:17:76:c9:5f:67:80:45:c5:c4:f9:33:58:94:e7:a9: 5c:33:ee:e4:0b:46:93:e2:cf:f1:2a:71:74:3d:78:06:82:a4: 28:f2:c6:e4:5b:ae:56:0b:04:90:d9:cb:6b:38:c2:8d:5a:03: 5e:69:41:a5:b3:de:ca:8b:8c:65:66:5f:21:c1:15:2e:08:b6: a8:f6:85:1d:5b:42:ec:cc:f5:d8:67:fb:b1:e5:be:3b:f4:a0: 6f:da:19:3a -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt7pIMS7zSC/Hp52PwIjv+JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYzIzNjcwZjk3ODljMDJkODNiYTdjMmU3ZTRjNmU5ZWRl NTJmN2EwHhcNMjYwMTAxMjIxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjBlMTQ3OGE4MTFjMWJkYTUxOGYxNTczY2ExODg4MDU1N2NjYzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfbstl1uZb5gxxg4X1oVz/QsKEUN 0IJQjwskX/lV7UABcnZGPwggsF4b5wbuzZLvOKm0YYJB82ndnAuhTzHEzIbrWMWN lOufHNqc0XGn28ckcjH8kgCEDmxsEdJC5RxZr7/cbPyslr3/CqQK+QWS/tShaQf9 ABjmCF3oyJ+6hC2l7cKA4qSkHK9sivl0Skb9IuJIOTE+HJ33tTu4AoofedUjCpEf O+dbJKjkHLBvynpEMpP9Ykb2Kh3Y8R8US1lsr7LakUPXdduGdxW4P8PhrlQjngKP N67d11I6v75fXYzM/fTSxK+mvMsUV1mOGzIBQlUMjKvq19KmR+MsFrUUPwIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFF8OFHioEcG9pRjxVzyhiIBVfMyIMB8GA1UdIwQY MBaAFGzCNnD5eJwC2Dunwufkxunt5S96MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk1JMmNQbDRuQUxZTzZmQzUtVEc2ZTNsTDNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC85ZmQyMGUtMzRkNy00OTQ5LWEzMDct OTA4N2UwZmYzZDM2LzEvWHc0VWVLZ1J3YjJsR1BGWFBLR0lnRlY4eklnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC85ZmQyMGUtMzRkNy00OTQ5LWEzMDctOTA4N2UwZmYzZDM2 LzEvYk1JMmNQbDRuQUxZTzZmQzUtVEc2ZTNsTDNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQFkwwgAwQC uS2wAwQFw7WAAwQF1YCgAwQE2XRQMA0EAgACMAcDBQMqAiwAMA0GCSqGSIb3DQEB CwUAA4IBAQDFMjpsE8MGb7pa6E13rqGknlY0Zi+bI66+zL5al65thie1OvDUtpP5 3BLrf9pDv+IeTct+apETOkLcXnQbF4ZGZrWuBWN70zMHqqTfrKdKQTOxgjwvrn5Z veh180CkoyX9ob7T5rxCRjfuoUaloJDg96GL/d0c4AxRm/CgZ8wL7Fatcr43wZX4 sbSJUmXbm7AtCYnbFqCnhfTWBhSomo9AKhciQSEXdslfZ4BFxcT5M1iU56lcM+7k C0aT4s/xKnF0PXgGgqQo8sbkW65WCwSQ2ctrOMKNWgNeaUGls97Ki4xlZl8hwRUu CLao9oUdW0LszPXYZ/ux5b479KBv2hk6 -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:23 2026 by rpki-client