This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/xdfBKikKUEgVMVDEgcEcjUCvBGs.roa File: xdfBKikKUEgVMVDEgcEcjUCvBGs.roa (raw, json) Hash identifier: YviAlxSLcVmbJgQT5Fm71/I3mmLSr02haSB45svSNjQ= Subject key identifier: C5:D7:C1:2A:29:0A:50:48:15:31:50:C4:81:C1:1C:8D:40:AF:04:6B Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Certificate serial: 019B797E288F192B067CAAB680DDFF7AAD99 Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/xdfBKikKUEgVMVDEgcEcjUCvBGs.roa Signing time: Thu 01 Jan 2026 12:17:49 +0000 ROA not before: Thu 01 Jan 2026 12:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42198 IP address blocks: 185.115.125.0/24 maxlen: 24 2a06:7246:1::/48 maxlen: 48 2a06:7246:2::/48 maxlen: 48 2a06:7246:3::/48 maxlen: 48 2a06:7246:4::/48 maxlen: 48 2a06:7246:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 15:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:28:8f:19:2b:06:7c:aa:b6:80:dd:ff:7a:ad:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Validity Not Before: Jan 1 12:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5d7c12a290a5048153150c481c11c8d40af046b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4c:cc:e7:5b:15:16:09:8e:a3:8f:63:0b:72: c7:db:c1:f7:4f:ca:b1:86:e6:0c:52:f4:2b:39:c6: eb:1d:da:a0:ec:c7:62:24:7c:e9:5c:92:de:1a:71: 82:67:25:ae:75:19:69:9c:7c:d2:29:8c:bd:df:1a: 85:b9:b8:8d:ce:7b:aa:ba:a7:85:bf:03:32:46:68: 38:38:9d:7b:50:2e:6b:b1:d0:9e:31:9a:f3:32:b0: cb:3a:ae:ef:43:6d:36:f0:fa:57:60:d6:34:2d:d1: 5b:b8:9b:02:1a:72:ed:44:ff:b9:24:1e:4f:5f:7c: 83:3d:b8:2a:18:b7:5c:4f:78:9e:12:72:93:5e:5e: d9:90:6d:91:96:59:65:77:b4:8c:51:c8:cd:f7:91: bd:72:e2:01:27:b5:7d:78:2b:03:9d:5e:45:d0:90: 0e:bb:7f:71:88:73:15:1e:b0:94:b0:39:e6:f5:e3: 78:ff:92:14:9d:81:88:05:8a:2b:1a:6a:f6:e2:a9: 14:7f:fd:7b:3c:f0:33:c0:76:1b:84:51:ab:78:1a: d3:c8:4c:99:25:1a:20:03:1f:2f:2b:80:a1:af:ea: 7f:4b:17:53:bb:d4:fe:3d:fa:12:86:85:ea:e1:be: a2:ce:25:22:48:37:7d:69:d2:d1:3a:c2:e6:12:1a: 9f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D7:C1:2A:29:0A:50:48:15:31:50:C4:81:C1:1C:8D:40:AF:04:6B X509v3 Authority Key Identifier: keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/xdfBKikKUEgVMVDEgcEcjUCvBGs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.115.125.0/24 IPv6: 2a06:7246:1::-2a06:7246:4:ffff:ffff:ffff:ffff:ffff 2a06:7246:6::/48 Signature Algorithm: sha256WithRSAEncryption 11:a2:de:e6:63:46:6b:cc:6c:96:d0:7a:a9:fe:82:0e:c8:d0: a7:97:f3:61:fd:de:78:72:df:43:f1:98:6b:6a:98:22:eb:70: 38:7e:be:93:d8:5e:d4:f8:4f:02:17:c6:3d:3b:50:80:cc:ee: cc:0c:38:fa:69:ee:0d:1c:0f:bd:e9:08:73:06:7c:53:94:61: 92:56:43:ce:b8:dd:eb:a4:c7:58:15:59:1f:c3:9e:90:b0:f4: 92:b0:58:9c:7c:fd:11:00:7c:0c:a7:61:14:f7:ad:d4:16:27: 68:b1:a0:06:d5:31:04:6b:84:2f:5b:4b:65:75:2a:76:84:2a: 42:28:ff:db:ee:7f:4a:27:9c:ed:c2:7a:97:3e:06:15:0a:3d: 14:aa:4b:8a:fa:3d:57:a0:d5:1a:33:d6:50:61:eb:c5:ba:e4: a8:80:74:30:aa:9c:2a:d5:a4:4b:1d:45:af:34:76:7a:a2:e0: c2:b3:49:6e:7a:f0:a0:d1:4f:fd:ee:37:30:31:3e:d9:74:2a: bd:42:02:ad:26:5b:f5:24:a7:34:aa:5e:22:f0:62:7f:ca:68: b5:cf:bf:00:62:2f:be:6d:41:42:25:79:94:5f:fb:78:3f:49: f9:12:84:4d:b5:0c:6e:fb:8d:1f:e2:fa:ae:96:87:4e:3a:14: 1e:8c:22:87 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgISAZt5fiiPGSsGfKq2gN3/eq2ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi YTU3NDUwHhcNMjYwMTAxMTIxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNWQ3YzEyYTI5MGE1MDQ4MTUzMTUwYzQ4MWMxMWM4ZDQwYWYwNDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUzM51sVFgmOo49jC3LH28H3T8qx huYMUvQrOcbrHdqg7MdiJHzpXJLeGnGCZyWudRlpnHzSKYy93xqFubiNznuquqeF vwMyRmg4OJ17UC5rsdCeMZrzMrDLOq7vQ2028PpXYNY0LdFbuJsCGnLtRP+5JB5P X3yDPbgqGLdcT3ieEnKTXl7ZkG2Rlllld7SMUcjN95G9cuIBJ7V9eCsDnV5F0JAO u39xiHMVHrCUsDnm9eN4/5IUnYGIBYorGmr24qkUf/17PPAzwHYbhFGreBrTyEyZ JRogAx8vK4Chr+p/SxdTu9T+PfoShoXq4b6iziUiSDd9adLROsLmEhqfzQIDAQAB o4ICLjCCAiowHQYDVR0OBBYEFMXXwSopClBIFTFQxIHBHI1ArwRrMB8GA1UdIwQY MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt ZmVhYzI2ZWFlY2MyLzEveGRmQktpa0tVRWdWTVZERWdjRWNqVUN2QkdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEQGCCsGAQUFBwEHAQH/BDUwMzAMBAIAATAGAwQAuXN9MCME AgACMB0wEgMHACoGckYAAQMHACoGckYABAMHACoGckYABjANBgkqhkiG9w0BAQsF AAOCAQEAEaLe5mNGa8xsltB6qf6CDsjQp5fzYf3eeHLfQ/GYa2qYIutwOH6+k9he 1PhPAhfGPTtQgMzuzAw4+mnuDRwPvekIcwZ8U5RhklZDzrjd66THWBVZH8OekLD0 krBYnHz9EQB8DKdhFPet1BYnaLGgBtUxBGuEL1tLZXUqdoQqQij/2+5/Siec7cJ6 lz4GFQo9FKpLivo9V6DVGjPWUGHrxbrkqIB0MKqcKtWkSx1FrzR2eqLgwrNJbnrw oNFP/e43MDE+2XQqvUICrSZb9SSnNKpeIvBif8potc+/AGIvvm1BQiV5lF/7eD9J +RKETbUMbvuNH+L6rpaHTjoUHowihw== -----END CERTIFICATE-----Generated at Mon Jan 12 01:03:53 2026 by rpki-client