This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/xuwefTEiNegQBQcBPh0ERtu0cOs.roa File: xuwefTEiNegQBQcBPh0ERtu0cOs.roa (raw, json) Hash identifier: YDvEuAnVAMdDplu8YmKi/X+Cb66+Vsr/rx1XXrorfkI= Subject key identifier: C6:EC:1E:7D:31:22:35:E8:10:05:07:01:3E:1D:04:46:DB:B4:70:EB Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C1370AF38028E3993C0F738DB77BA1F Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/xuwefTEiNegQBQcBPh0ERtu0cOs.roa Signing time: Fri 02 Jan 2026 00:20:07 +0000 ROA not before: Fri 02 Jan 2026 00:20:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49600 IP address blocks: 185.121.12.0/24 maxlen: 24 185.121.15.0/24 maxlen: 24 185.196.43.0/24 maxlen: 24 185.230.54.0/23 maxlen: 23 185.230.55.0/24 maxlen: 24 185.232.205.0/24 maxlen: 24 193.17.183.0/24 maxlen: 24 193.37.64.0/24 maxlen: 24 193.37.65.0/24 maxlen: 24 194.35.41.0/24 maxlen: 24 194.35.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:70:af:38:02:8e:39:93:c0:f7:38:db:77:ba:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6ec1e7d312235e8100507013e1d0446dbb470eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b5:53:83:fe:5d:d4:cc:b0:7d:43:74:96:16: a9:c0:70:22:58:2d:d9:c3:75:f9:18:bd:c7:22:fa: 1b:56:6e:58:4f:8b:2d:83:cb:86:a5:1b:35:06:ce: 5e:e7:38:89:a2:37:5f:ff:6c:09:f7:78:bf:0e:55: 2e:82:da:d5:92:d9:17:ec:5b:35:02:03:54:11:7b: 86:c9:36:3d:f4:4b:7c:9c:0a:18:fe:0b:b3:04:25: f2:7c:2c:ca:47:fd:35:24:d4:08:54:86:07:83:5c: 78:88:9f:fa:5d:0b:d1:d1:bd:b0:63:e5:f6:84:56: dc:e8:87:f2:50:02:d5:3d:50:25:59:bf:9e:d6:2f: c0:0b:a8:46:88:dd:98:70:fa:43:b2:75:82:64:2c: 48:75:92:2e:68:28:35:58:80:8a:a0:63:bd:9e:67: 01:df:d3:3e:12:67:f6:04:61:14:97:f7:90:3c:ed: f2:53:3e:b7:30:74:21:dc:01:70:3a:64:04:54:0d: 53:93:ae:5d:1c:e9:ef:98:74:6d:e2:cc:6a:0a:1a: 75:d9:4f:cf:98:3d:7f:d5:e0:15:b9:11:74:f5:27: 00:74:90:77:e8:15:d3:4b:83:32:5c:ff:38:1b:c3: 17:7e:01:68:37:04:52:ea:91:72:aa:39:59:37:b4: dc:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:EC:1E:7D:31:22:35:E8:10:05:07:01:3E:1D:04:46:DB:B4:70:EB X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/xuwefTEiNegQBQcBPh0ERtu0cOs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.121.12.0/24 185.121.15.0/24 185.196.43.0/24 185.230.54.0/23 185.232.205.0/24 193.17.183.0/24 193.37.64.0/23 194.35.41.0-194.35.42.255 Signature Algorithm: sha256WithRSAEncryption 56:f2:6e:b4:ef:e6:e6:63:f0:3b:f8:17:49:b8:d1:33:fc:58: 6f:08:9f:cb:55:2d:be:df:b1:63:8a:9d:4c:62:3f:2e:58:3a: db:b1:1f:40:32:fc:17:24:b5:38:ea:85:29:c1:ab:d7:f5:68: 04:f1:a3:eb:3a:d4:4b:8f:54:9c:60:41:78:b1:a9:47:2e:e6: 93:a0:44:57:36:4e:83:21:7c:cf:df:48:e6:60:00:68:77:f5: cd:85:dd:7f:bd:7f:50:83:c0:83:5d:4c:7e:c7:bb:ba:c4:50: 64:f2:3d:f5:04:06:c4:25:c9:21:06:33:93:d5:39:9f:88:55: f6:58:e6:84:7e:9e:20:13:09:ba:8b:de:70:c7:6a:3a:2c:c3: 4d:00:ec:d3:7f:47:76:05:ac:b5:e7:7a:fc:9e:a8:80:ae:ad: 03:46:10:11:53:8f:56:f8:e0:42:0a:88:35:68:94:bb:c1:72: 78:00:69:68:54:7e:92:46:a4:3b:27:30:d2:06:53:17:d6:e0: 67:de:83:9a:e8:8d:66:52:63:46:81:1d:ea:60:72:c6:d0:83: 17:4f:15:49:84:38:2b:a6:8a:85:61:a2:a6:49:bb:76:bb:b0: 92:33:52:f6:3e:12:54:7d:aa:cf:59:d0:6a:5b:d4:b2:e2:29: 3d:65:a6:b1 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgISAZt8E3CvOAKOOZPA9zjbd7ofMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmVjMWU3ZDMxMjIzNWU4MTAwNTA3MDEzZTFkMDQ0NmRiYjQ3MGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLVTg/5d1MywfUN0lhapwHAiWC3Z w3X5GL3HIvobVm5YT4stg8uGpRs1Bs5e5ziJojdf/2wJ93i/DlUugtrVktkX7Fs1 AgNUEXuGyTY99Et8nAoY/guzBCXyfCzKR/01JNQIVIYHg1x4iJ/6XQvR0b2wY+X2 hFbc6IfyUALVPVAlWb+e1i/AC6hGiN2YcPpDsnWCZCxIdZIuaCg1WICKoGO9nmcB 39M+Emf2BGEUl/eQPO3yUz63MHQh3AFwOmQEVA1Tk65dHOnvmHRt4sxqChp12U/P mD1/1eAVuRF09ScAdJB36BXTS4MyXP84G8MXfgFoNwRS6pFyqjlZN7Tc7QIDAQAB o4ICOzCCAjcwHQYDVR0OBBYEFMbsHn0xIjXoEAUHAT4dBEbbtHDrMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEveHV3ZWZURWlOZWdRQlFjQlBoMEVSdHUwY09zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQAuXkMAwQA uXkPAwQAucQrAwQBueY2AwQAuejNAwQAwRG3AwQBwSVAMAwDBADCIykDBADCIyow DQYJKoZIhvcNAQELBQADggEBAFbybrTv5uZj8Dv4F0m40TP8WG8In8tVLb7fsWOK nUxiPy5YOtuxH0Ay/BcktTjqhSnBq9f1aATxo+s61EuPVJxgQXixqUcu5pOgRFc2 ToMhfM/fSOZgAGh39c2F3X+9f1CDwINdTH7Hu7rEUGTyPfUEBsQlySEGM5PVOZ+I VfZY5oR+niATCbqL3nDHajosw00A7NN/R3YFrLXnevyeqICurQNGEBFTj1b44EIK iDVolLvBcngAaWhUfpJGpDsnMNIGUxfW4Gfeg5rojWZSY0aBHepgcsbQgxdPFUmE OCumioVhoqZJu3a7sJIzUvY+ElR9qs9Z0Gpb1LLiKT1lprE= -----END CERTIFICATE-----Generated at Fri Jan 2 23:53:24 2026 by rpki-client