This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/xgcIl72OMRsTXzMLl7PIGrHb2sQ.roa File: xgcIl72OMRsTXzMLl7PIGrHb2sQ.roa (raw, json) Hash identifier: 2SWmpy8UdVqECkthus0V0cF6NslAcNvMaIDq36UHafw= Subject key identifier: C6:07:08:97:BD:8E:31:1B:13:5F:33:0B:97:B3:C8:1A:B1:DB:DA:C4 Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Certificate serial: 019B7C1310AB29242690BD79546C74A02BD2 Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/xgcIl72OMRsTXzMLl7PIGrHb2sQ.roa Signing time: Fri 02 Jan 2026 00:19:42 +0000 ROA not before: Fri 02 Jan 2026 00:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1239 IP address blocks: 92.51.32.0/23 maxlen: 24 92.51.34.0/23 maxlen: 24 92.51.40.0/23 maxlen: 24 92.51.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:10:ab:29:24:26:90:bd:79:54:6c:74:a0:2b:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Validity Not Before: Jan 2 00:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6070897bd8e311b135f330b97b3c81ab1dbdac4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f6:03:98:2b:85:c3:07:be:35:57:0d:f8:2b: 30:76:aa:c4:02:6b:04:fb:df:1e:52:d1:99:3c:da: 16:23:ae:16:e7:be:b8:cc:ee:fb:4b:8b:b3:36:98: 7a:d8:5d:da:32:64:34:5a:2c:ba:ce:18:e2:16:fe: 6a:db:fc:2f:a7:d8:6a:56:78:4d:cd:be:4f:d6:78: 7c:2d:e3:37:80:c9:07:c5:ba:e4:f6:22:8a:94:ee: bb:53:60:26:68:38:30:aa:49:17:eb:bd:57:d9:f7: 70:fd:85:5f:ef:ac:b0:5e:b5:8c:09:f4:c4:bf:8f: 35:32:ae:bc:20:1d:b1:8c:46:e0:a2:54:bc:62:4e: e4:73:62:f2:43:08:12:13:94:cd:bc:33:a6:61:1d: 94:f5:e4:b9:f7:45:8e:b9:6f:de:0d:f2:0a:5a:78: 28:1c:ca:95:fe:7e:0f:5e:68:8e:bd:4e:3b:a2:44: e7:85:a9:80:3b:82:d4:98:0e:3a:80:20:17:65:87: 3c:94:84:4c:b1:cb:f6:74:c7:49:37:31:87:da:d2: 99:60:e9:24:a8:ae:35:4c:47:ee:9b:92:12:f1:e4: a4:ef:30:9c:3c:31:8c:15:77:02:f2:d2:77:ea:07: 02:4e:4d:73:38:c8:6e:f6:36:ad:15:b6:d0:4c:86: 81:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:07:08:97:BD:8E:31:1B:13:5F:33:0B:97:B3:C8:1A:B1:DB:DA:C4 X509v3 Authority Key Identifier: keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/xgcIl72OMRsTXzMLl7PIGrHb2sQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.51.32.0/22 92.51.40.0/22 Signature Algorithm: sha256WithRSAEncryption 16:21:10:6d:25:49:a4:bd:68:12:ea:c5:53:ce:e4:16:1c:b8: 25:b9:15:48:f6:78:61:b1:44:a9:f5:61:24:47:a9:da:be:d8: 4c:be:81:ba:3c:d9:52:10:bd:02:d4:98:9b:82:e3:42:4b:c4: fc:56:7e:61:6e:ee:40:ff:b9:35:c2:f4:1c:72:18:60:f9:1e: cf:31:ff:29:71:d8:6f:a0:51:c7:3e:65:ca:0e:60:52:a8:fc: 70:30:db:56:a4:d4:f9:9b:09:a6:7b:49:cd:e5:31:70:57:09: dd:19:e7:c6:e6:b5:c6:cc:6e:9b:7c:77:01:af:4d:1f:31:ab: fe:40:d8:77:0e:a0:a7:0a:48:c5:8d:39:f8:ce:ac:a4:d7:1a: 56:89:f3:20:78:95:0e:cf:ad:4c:41:98:84:1e:25:86:c3:bc: 26:98:9b:0e:c5:7b:13:72:eb:e9:12:cf:dd:eb:31:ef:6a:f6: 37:37:7a:34:f1:55:9f:59:92:36:05:49:85:ea:5f:4f:03:1f: f2:9d:e0:e1:16:cd:ee:51:37:0a:9e:5e:bc:7f:f5:ed:db:6f: de:5d:10:82:2e:e2:02:74:0f:84:d5:c5:24:57:48:2a:ce:ec: 74:63:b0:c6:cb:0d:46:4c:cc:f6:2a:53:6e:ad:34:eb:a9:f7: b5:bb:bb:34 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8ExCrKSQmkL15VGx0oCvSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTdjMmQ5ZDkzYWM3Y2Y5YjJmMTdjYWE3ODU5YjY5ODVi MzliOWQwHhcNMjYwMTAyMDAxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjA3MDg5N2JkOGUzMTFiMTM1ZjMzMGI5N2IzYzgxYWIxZGJkYWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPYDmCuFwwe+NVcN+CswdqrEAmsE +98eUtGZPNoWI64W5764zO77S4uzNph62F3aMmQ0Wiy6zhjiFv5q2/wvp9hqVnhN zb5P1nh8LeM3gMkHxbrk9iKKlO67U2AmaDgwqkkX671X2fdw/YVf76ywXrWMCfTE v481Mq68IB2xjEbgolS8Yk7kc2LyQwgSE5TNvDOmYR2U9eS590WOuW/eDfIKWngo HMqV/n4PXmiOvU47okTnhamAO4LUmA46gCAXZYc8lIRMscv2dMdJNzGH2tKZYOkk qK41TEfum5IS8eSk7zCcPDGMFXcC8tJ36gcCTk1zOMhu9jatFbbQTIaBNwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMYHCJe9jjEbE18zC5ezyBqx29rEMB8GA1UdIwQY MBaAFO9XwtnZOsfPmy8XyqeFm2mFs5udMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2Njct OGU2Zjg3OGRiNWY0LzEveGdjSWw3Mk9NUnNUWHpNTGw3UElHckhiMnNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2NjctOGU2Zjg3OGRiNWY0 LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCXDMgAwQC XDMoMA0GCSqGSIb3DQEBCwUAA4IBAQAWIRBtJUmkvWgS6sVTzuQWHLgluRVI9nhh sUSp9WEkR6navthMvoG6PNlSEL0C1JibguNCS8T8Vn5hbu5A/7k1wvQcchhg+R7P Mf8pcdhvoFHHPmXKDmBSqPxwMNtWpNT5mwmme0nN5TFwVwndGefG5rXGzG6bfHcB r00fMav+QNh3DqCnCkjFjTn4zqyk1xpWifMgeJUOz61MQZiEHiWGw7wmmJsOxXsT cuvpEs/d6zHvavY3N3o08VWfWZI2BUmF6l9PAx/yneDhFs3uUTcKnl68f/Xt22/e XRCCLuICdA+E1cUkV0gqzux0Y7DGyw1GTMz2KlNurTTrqfe1u7s0 -----END CERTIFICATE-----Generated at Tue Jan 20 04:47:38 2026 by rpki-client