This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/kXPq71Nlphx1rZqXsjHmTDBfRWw.roa File: kXPq71Nlphx1rZqXsjHmTDBfRWw.roa (raw, json) Hash identifier: lIvS2Lm2lrImO8ZafDgYHnmnc/RehYoq+3k5SiJzIK4= Subject key identifier: 91:73:EA:EF:53:65:A6:1C:75:AD:9A:97:B2:31:E6:4C:30:5F:45:6C Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C137E8D4A34D28D7089AF5A01DA800F Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/kXPq71Nlphx1rZqXsjHmTDBfRWw.roa Signing time: Fri 02 Jan 2026 00:20:10 +0000 ROA not before: Fri 02 Jan 2026 00:20:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 153393 IP address blocks: 185.223.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:7e:8d:4a:34:d2:8d:70:89:af:5a:01:da:80:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9173eaef5365a61c75ad9a97b231e64c305f456c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:4b:a4:27:ee:26:00:07:dd:ab:66:e1:18:14: 8e:a7:f8:e7:68:73:09:4e:d5:c0:a4:c2:72:bc:38: d4:71:5d:1b:85:94:77:2e:fa:55:cf:ae:37:e4:47: 4f:fa:bb:d6:2e:84:86:5b:c1:2c:d7:b4:4f:ff:f4: b1:14:ac:b8:39:4e:4d:fa:30:09:5b:ff:10:c5:b2: d6:20:57:b8:83:fa:f9:bc:16:01:4d:8f:4e:7a:26: 92:15:c2:fc:f0:95:26:92:a7:75:b5:ff:c5:da:6f: 97:af:0e:01:14:86:f2:11:bc:c6:ca:c6:d1:c3:dc: 8e:8c:92:aa:a0:2e:3a:ef:4b:be:2b:e6:32:6a:69: 85:92:f4:e0:28:70:d9:48:ad:63:f8:33:02:01:5f: fb:30:f1:27:dc:40:dc:50:06:e3:9c:de:71:58:46: 00:33:0f:46:de:1f:b5:e9:8c:92:3b:59:04:0d:cf: af:e0:36:62:6f:6b:4a:97:58:71:86:35:f2:c7:a7: 4d:df:aa:44:69:fe:a2:89:e4:77:be:ff:1b:6b:94: ca:af:63:bd:f9:f3:c4:dc:77:65:a4:21:14:ca:fa: 2f:9c:86:cd:85:93:12:da:bd:34:40:3a:94:7d:23: 57:db:3f:34:52:43:8b:d0:25:d7:30:a1:6b:ef:c9: 18:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:73:EA:EF:53:65:A6:1C:75:AD:9A:97:B2:31:E6:4C:30:5F:45:6C X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/kXPq71Nlphx1rZqXsjHmTDBfRWw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.223.78.0/24 Signature Algorithm: sha256WithRSAEncryption 39:4b:f8:51:f1:14:14:b5:30:14:23:51:f7:5d:f6:99:e2:9b: 8d:a2:73:f1:2e:a1:73:80:ae:19:0a:1b:ab:57:b5:fc:bc:9e: a9:3d:8a:db:e9:1a:20:92:0d:62:d4:66:84:6f:90:57:74:66: f8:ce:f0:c3:df:c2:51:88:2d:4e:8f:a8:31:05:b7:2e:b1:f4: cf:5a:1e:18:ca:b2:e5:9d:11:4e:14:cb:04:1a:16:23:03:e6: eb:b4:c3:b6:07:99:79:f1:84:1a:7f:53:ca:d4:1a:a9:1c:b3: 73:28:a0:41:4b:ba:ed:8f:bd:9c:93:ed:75:b2:2f:81:96:38: 91:05:32:0c:66:2c:bd:90:b7:ea:5f:bf:55:fe:6e:83:71:de: 4e:55:b7:51:d8:37:d0:e9:64:30:be:8c:85:ac:93:b8:77:df: 53:cb:fc:05:9e:cd:d9:b1:4b:b5:fe:58:5f:3f:71:42:80:70: c0:0f:2f:bb:19:6f:22:67:26:f0:19:3f:51:c7:37:30:4c:30: 3b:bb:53:ea:74:43:44:b5:98:0e:4c:1d:4d:91:44:aa:e9:b7: 10:e6:31:ae:39:f2:ac:68:cf:49:cf:d6:8f:f2:d9:a5:36:b1: f5:69:6e:0a:3e:30:5f:8b:d0:b4:e1:5f:c6:38:85:56:34:0a: be:01:cb:27 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E36NSjTSjXCJr1oB2oAPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTczZWFlZjUzNjVhNjFjNzVhZDlhOTdiMjMxZTY0YzMwNWY0NTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8EukJ+4mAAfdq2bhGBSOp/jnaHMJ TtXApMJyvDjUcV0bhZR3LvpVz6435EdP+rvWLoSGW8Es17RP//SxFKy4OU5N+jAJ W/8QxbLWIFe4g/r5vBYBTY9OeiaSFcL88JUmkqd1tf/F2m+Xrw4BFIbyEbzGysbR w9yOjJKqoC4670u+K+YyammFkvTgKHDZSK1j+DMCAV/7MPEn3EDcUAbjnN5xWEYA Mw9G3h+16YySO1kEDc+v4DZib2tKl1hxhjXyx6dN36pEaf6iieR3vv8ba5TKr2O9 +fPE3HdlpCEUyvovnIbNhZMS2r00QDqUfSNX2z80UkOL0CXXMKFr78kYLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJFz6u9TZaYcda2al7Ix5kwwX0VsMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEva1hQcTcxTmxwaHgxclpxWHNqSG1UREJmUld3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAud9OMA0G CSqGSIb3DQEBCwUAA4IBAQA5S/hR8RQUtTAUI1H3XfaZ4puNonPxLqFzgK4ZChur V7X8vJ6pPYrb6Rogkg1i1GaEb5BXdGb4zvDD38JRiC1Oj6gxBbcusfTPWh4YyrLl nRFOFMsEGhYjA+brtMO2B5l58YQaf1PK1BqpHLNzKKBBS7rtj72ck+11si+BljiR BTIMZiy9kLfqX79V/m6Dcd5OVbdR2DfQ6WQwvoyFrJO4d99Ty/wFns3ZsUu1/lhf P3FCgHDADy+7GW8iZybwGT9RxzcwTDA7u1PqdENEtZgOTB1NkUSq6bcQ5jGuOfKs aM9Jz9aP8tmlNrH1aW4KPjBfi9C04V/GOIVWNAq+Acsn -----END CERTIFICATE-----Generated at Fri Jan 2 23:48:17 2026 by rpki-client