This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/xkqaFyScT3tt_zXtJp9u8XbxO6I.roa File: xkqaFyScT3tt_zXtJp9u8XbxO6I.roa (raw, json) Hash identifier: aJ+eX79Vv4WjVnjJVg9dBF6RFdmGsnbBHDjP6SlCJ8o= Subject key identifier: C6:4A:9A:17:24:9C:4F:7B:6D:FF:35:ED:26:9F:6E:F1:76:F1:3B:A2 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019C256745CE2AD348BB2A4D403EC791564C Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/xkqaFyScT3tt_zXtJp9u8XbxO6I.roa Signing time: Tue 03 Feb 2026 21:27:30 +0000 ROA not before: Tue 03 Feb 2026 21:27:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201907 IP address blocks: 185.226.105.0/24 maxlen: 24 185.228.72.0/24 maxlen: 24 194.76.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 18:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:25:67:45:ce:2a:d3:48:bb:2a:4d:40:3e:c7:91:56:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Feb 3 21:27:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c64a9a17249c4f7b6dff35ed269f6ef176f13ba2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c6:76:a1:1b:7d:32:f2:d5:c6:45:fc:87:1e: 02:da:3e:a0:f0:69:1c:04:a5:38:09:20:ad:58:33: a8:67:40:13:c8:05:8d:68:8c:ff:49:b0:7b:a3:91: 37:be:95:60:1f:44:16:af:72:62:a0:ae:e7:27:7d: f8:2d:a6:6f:9b:be:52:5a:3c:53:a2:ff:ce:29:ba: 86:16:50:84:fc:77:7c:8b:32:2e:8e:3e:34:48:fc: e2:a7:2f:9e:b6:c4:2f:1e:50:c3:2a:09:50:36:83: ea:f8:2b:d6:ef:59:0d:0f:21:1a:af:2e:31:a4:14: af:cc:1c:a6:9a:d6:a7:99:2a:20:9b:72:2a:8a:42: f8:54:09:52:83:53:1e:70:fe:2c:99:0d:ce:2a:6c: d2:44:34:bb:f8:b7:42:34:8c:6b:5d:ca:90:37:e4: 2c:90:9b:63:55:b9:a6:ee:3f:20:90:7c:54:85:71: 40:c8:4d:85:03:09:2a:79:38:ea:12:7d:2d:e5:cd: bd:66:36:ca:83:0e:24:49:43:a7:38:e9:de:c6:da: 91:43:3a:6c:d7:b8:73:e3:e6:94:82:05:13:2a:db: 31:a9:d4:b9:f8:70:9e:32:6e:8a:4e:19:e8:f8:9d: 60:4f:db:71:70:f0:1a:51:0b:e8:d6:24:9e:77:51: 5c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:4A:9A:17:24:9C:4F:7B:6D:FF:35:ED:26:9F:6E:F1:76:F1:3B:A2 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/xkqaFyScT3tt_zXtJp9u8XbxO6I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.226.105.0/24 185.228.72.0/24 194.76.172.0/24 Signature Algorithm: sha256WithRSAEncryption 46:ca:af:65:5b:db:fd:06:c3:12:8e:d7:0f:bd:94:13:a6:08: 5f:cd:38:c7:80:fb:10:a5:f9:6f:77:0d:ed:eb:0f:55:0d:ec: 98:00:70:93:7a:84:16:55:eb:27:fa:ac:da:e0:2a:15:87:94: f0:f0:c1:87:0a:c1:ab:a7:ec:94:84:27:c4:9f:3e:c8:8e:3b: 0d:2b:a8:3b:bd:e2:4a:5c:81:0f:f6:2d:16:b6:ea:e3:7b:b6: d9:57:4e:58:fc:a3:03:91:fc:ef:68:36:2d:26:4f:f9:56:11: 54:14:5f:ea:31:8c:48:ba:e4:b9:d7:47:e4:60:6f:ba:a3:6b: f4:d9:9e:e1:72:ea:34:3b:a5:68:85:27:67:11:a6:c9:e1:4c: c3:f6:7c:33:9b:aa:10:5e:2c:e8:67:dc:7f:41:6d:bb:c2:f8: 7c:f9:a7:37:9d:1c:be:fd:8b:f5:c6:25:e5:a4:d6:47:dc:d6: 2e:08:6a:60:b7:40:23:cc:e2:40:c3:b2:74:15:11:d4:f4:16: 4a:81:74:ad:09:8d:b7:17:7e:f9:20:d6:0a:db:8f:9a:98:f9: df:20:f8:37:ce:27:9f:00:47:03:1c:a9:67:4f:5f:f4:34:87: f7:3c:9e:68:80:ba:3c:24:43:de:bf:6e:98:63:db:47:6f:4a: c7:11:c8:c9 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZwlZ0XOKtNIuypNQD7HkVZMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMjAzMjEyNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjRhOWExNzI0OWM0ZjdiNmRmZjM1ZWQyNjlmNmVmMTc2ZjEzYmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8Z2oRt9MvLVxkX8hx4C2j6g8Gkc BKU4CSCtWDOoZ0ATyAWNaIz/SbB7o5E3vpVgH0QWr3JioK7nJ334LaZvm75SWjxT ov/OKbqGFlCE/Hd8izIujj40SPzipy+etsQvHlDDKglQNoPq+CvW71kNDyEary4x pBSvzBymmtanmSogm3IqikL4VAlSg1MecP4smQ3OKmzSRDS7+LdCNIxrXcqQN+Qs kJtjVbmm7j8gkHxUhXFAyE2FAwkqeTjqEn0t5c29ZjbKgw4kSUOnOOnextqRQzps 17hz4+aUggUTKtsxqdS5+HCeMm6KThno+J1gT9txcPAaUQvo1iSed1FcQQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMZKmhcknE97bf817SafbvF28TuiMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEveGtxYUZ5U2NUM3R0X3pYdEpwOXU4WGJ4TzZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAueJpAwQA ueRIAwQAwkysMA0GCSqGSIb3DQEBCwUAA4IBAQBGyq9lW9v9BsMSjtcPvZQTpghf zTjHgPsQpflvdw3t6w9VDeyYAHCTeoQWVesn+qza4CoVh5Tw8MGHCsGrp+yUhCfE nz7IjjsNK6g7veJKXIEP9i0Wturje7bZV05Y/KMDkfzvaDYtJk/5VhFUFF/qMYxI uuS510fkYG+6o2v02Z7hcuo0O6VohSdnEabJ4UzD9nwzm6oQXizoZ9x/QW27wvh8 +ac3nRy+/Yv1xiXlpNZH3NYuCGpgt0AjzOJAw7J0FRHU9BZKgXStCY23F375INYK 24+amPnfIPg3ziefAEcDHKlnT1/0NIf3PJ5ogLo8JEPev26YY9tHb0rHEcjJ -----END CERTIFICATE-----Generated at Thu Feb 5 02:35:04 2026 by rpki-client