This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/XIxZD227ioGX0cqqVFAINXLyX6Q.roa File: XIxZD227ioGX0cqqVFAINXLyX6Q.roa (raw, json) Hash identifier: sDleWGEf+rrGs4/hbX/4+JTQcRgaaTHiE45KWqHpF+s= Subject key identifier: 5C:8C:59:0F:6D:BB:8A:81:97:D1:CA:AA:54:50:08:35:72:F2:5F:A4 Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Certificate serial: 019C32D20E882646B1E133555A7FAD3FD727 Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/XIxZD227ioGX0cqqVFAINXLyX6Q.roa Signing time: Fri 06 Feb 2026 11:59:12 +0000 ROA not before: Fri 06 Feb 2026 11:59:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 109.107.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:32:d2:0e:88:26:46:b1:e1:33:55:5a:7f:ad:3f:d7:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Validity Not Before: Feb 6 11:59:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c8c590f6dbb8a8197d1caaa5450083572f25fa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0c:32:dc:fe:dc:97:57:e2:09:93:21:37:67: 56:37:9d:62:6f:ae:5d:63:47:a4:e6:26:02:0f:e0: 00:7c:bd:b6:0f:7f:75:4f:58:dc:c2:88:75:cf:68: 52:eb:b1:8f:3f:8c:fc:50:b0:31:ce:d8:a6:57:64: 24:ac:2a:63:dc:1a:83:68:05:47:96:35:5a:8d:ef: 1e:5c:a8:6a:73:70:ad:1a:a9:42:a9:1b:12:c7:b6: 8e:20:b1:18:fd:18:98:87:90:c3:23:08:50:06:83: 61:8d:4d:18:96:47:35:4d:4a:e1:fd:f5:f3:34:ef: c7:d6:e3:d7:a6:4e:98:c0:91:8b:d3:af:42:af:af: 92:c1:23:41:2e:a5:fa:a5:97:6d:f3:78:2a:46:59: 21:99:49:d0:5a:5c:f0:0e:76:22:ab:68:81:2d:a0: 26:3e:c4:4c:f8:02:87:a5:06:93:d2:35:a3:78:78: b1:46:14:fa:bb:8d:d5:73:52:44:0b:91:4b:01:54: 3d:e4:74:ed:2f:1b:93:e2:33:7e:62:6e:51:3e:de: be:e9:4b:60:76:a0:77:5e:01:42:df:15:63:51:ae: cb:a4:9e:52:31:db:7f:91:91:5f:d8:4a:f6:55:78: 90:d1:33:0e:28:fe:d4:68:30:4e:7c:89:2a:f1:11: d6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:8C:59:0F:6D:BB:8A:81:97:D1:CA:AA:54:50:08:35:72:F2:5F:A4 X509v3 Authority Key Identifier: keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/XIxZD227ioGX0cqqVFAINXLyX6Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.107.145.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:06:54:c9:92:5f:85:74:99:c2:f1:ac:62:cf:36:5e:0e:c8: ea:40:86:96:4c:1b:c3:e1:c6:f2:3c:a6:6a:9a:33:7d:14:f5: ed:7c:f9:cd:3e:5b:f4:42:5a:9e:07:03:84:41:0a:aa:b2:58: a8:aa:11:cf:b0:92:d9:26:bd:e3:41:09:46:81:f6:0e:18:18: 93:fe:e5:93:33:73:99:e6:55:c5:5c:d6:a1:19:c0:1d:97:0c: 38:1c:9b:fc:5d:d9:d7:aa:00:76:22:27:b5:01:c8:21:32:ff: c9:b7:6f:bc:31:ab:6f:dd:9a:55:ac:55:f5:1e:19:e1:01:5a: 52:55:fd:e4:de:d8:e3:a1:10:fd:08:df:85:95:51:6e:64:7c: 1f:b2:af:09:c1:a5:0b:56:68:35:f5:8e:c7:f7:b6:c2:8c:12: 23:43:5a:40:7a:0c:2e:fa:cb:b3:a7:04:95:44:db:10:db:e7: 8d:cd:fa:39:3d:94:55:11:03:20:29:2e:26:ac:31:52:0e:0d: 83:14:e6:49:de:18:a2:ac:ae:aa:29:88:81:21:4e:8c:82:c5: 13:33:d9:e0:6a:2b:5c:23:22:b2:c9:fa:34:db:35:67:a7:6d: 46:4c:66:f6:57:79:51:b6:6a:e7:5a:ff:87:95:e0:0b:0c:9f: 77:62:7f:db -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwy0g6IJkax4TNVWn+tP9cnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4N2Q2ZGY3ZWI3NTQyZTAzMzNhZWVkZDE0YWRmZjhmNTFm OGNiZDgwHhcNMjYwMjA2MTE1OTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzhjNTkwZjZkYmI4YTgxOTdkMWNhYWE1NDUwMDgzNTcyZjI1ZmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugwy3P7cl1fiCZMhN2dWN51ib65d Y0ek5iYCD+AAfL22D391T1jcwoh1z2hS67GPP4z8ULAxztimV2QkrCpj3BqDaAVH ljVaje8eXKhqc3CtGqlCqRsSx7aOILEY/RiYh5DDIwhQBoNhjU0Ylkc1TUrh/fXz NO/H1uPXpk6YwJGL069Cr6+SwSNBLqX6pZdt83gqRlkhmUnQWlzwDnYiq2iBLaAm PsRM+AKHpQaT0jWjeHixRhT6u43Vc1JEC5FLAVQ95HTtLxuT4jN+Ym5RPt6+6Utg dqB3XgFC3xVjUa7LpJ5SMdt/kZFf2Er2VXiQ0TMOKP7UaDBOfIkq8RHW6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFyMWQ9tu4qBl9HKqlRQCDVy8l+kMB8GA1UdIwQY MBaAFDh9bffrdULgMzru3RSt/49R+MvYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2Mt NjA5YTQ4YjJiMTRkLzEvWEl4WkQyMjdpb0dYMGNxcVZGQUlOWEx5WDZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2MtNjA5YTQ4YjJiMTRk LzEvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbWuRMA0G CSqGSIb3DQEBCwUAA4IBAQBqBlTJkl+FdJnC8axizzZeDsjqQIaWTBvD4cbyPKZq mjN9FPXtfPnNPlv0QlqeBwOEQQqqslioqhHPsJLZJr3jQQlGgfYOGBiT/uWTM3OZ 5lXFXNahGcAdlww4HJv8XdnXqgB2Iie1AcghMv/Jt2+8Matv3ZpVrFX1HhnhAVpS Vf3k3tjjoRD9CN+FlVFuZHwfsq8JwaULVmg19Y7H97bCjBIjQ1pAegwu+suzpwSV RNsQ2+eNzfo5PZRVEQMgKS4mrDFSDg2DFOZJ3hiirK6qKYiBIU6MgsUTM9ngaitc IyKyyfo02zVnp21GTGb2V3lRtmrnWv+HleALDJ93Yn/b -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:01 2026 by rpki-client