This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/xr4G4AB_AR4j_OI_eGUKjUXwtsM.roa File: xr4G4AB_AR4j_OI_eGUKjUXwtsM.roa (raw, json) Hash identifier: ZiOVREpXF5T9n1Gn20Mw/Ok/C+wzMcLT/qo+mEByx40= Subject key identifier: C6:BE:06:E0:00:7F:01:1E:23:FC:E2:3F:78:65:0A:8D:45:F0:B6:C3 Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Certificate serial: 019B797E40731C1574FA779A275E01AF19A8 Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/xr4G4AB_AR4j_OI_eGUKjUXwtsM.roa Signing time: Thu 01 Jan 2026 12:17:55 +0000 ROA not before: Thu 01 Jan 2026 12:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212177 IP address blocks: 128.0.117.0/24 maxlen: 32 185.120.15.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 06:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:40:73:1c:15:74:fa:77:9a:27:5e:01:af:19:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Validity Not Before: Jan 1 12:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6be06e0007f011e23fce23f78650a8d45f0b6c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:78:d4:14:b7:3b:e1:86:77:19:51:14:28:3d: c0:f1:7c:94:0b:83:8c:d1:32:bd:9a:9a:71:48:2f: 55:6f:13:4a:e9:f5:47:41:dc:d3:97:84:91:7c:13: d8:1b:47:da:19:17:dc:95:19:ad:42:20:51:49:69: 1d:03:68:ed:1c:c0:ad:69:7c:ef:10:a5:27:b2:a3: 0a:e4:85:f1:8a:b2:fb:89:a2:1b:bf:d9:cc:60:80: 12:71:61:83:60:74:3b:16:f0:89:89:16:4f:84:e6: 35:7f:81:5f:bc:00:1a:e6:ab:f5:b8:d6:de:8a:9b: c2:94:b4:2d:57:91:f7:29:b1:a0:97:32:75:85:67: a5:49:90:a3:d0:8a:9e:bc:c5:0f:31:9b:40:54:50: d9:f3:89:cf:bc:fb:2b:29:5e:a7:69:84:a2:b5:e2: da:ad:66:0d:70:3f:7e:9c:cf:32:65:d2:8d:8e:08: 34:6f:e7:6d:8b:7b:69:2c:23:6f:1d:22:32:b6:56: 08:2e:a9:00:c1:2b:78:05:6c:02:db:19:18:6b:5b: dc:1e:4f:d5:48:0b:9a:10:4a:0d:77:9b:9d:99:75: 79:6b:c1:8f:9e:15:26:e8:a4:d3:8a:c0:30:cf:5b: 6d:ef:e6:03:fa:f3:3b:3c:cd:53:3d:fd:a5:67:53: aa:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:BE:06:E0:00:7F:01:1E:23:FC:E2:3F:78:65:0A:8D:45:F0:B6:C3 X509v3 Authority Key Identifier: keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/xr4G4AB_AR4j_OI_eGUKjUXwtsM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.0.117.0/24 185.120.15.0/24 Signature Algorithm: sha256WithRSAEncryption 65:80:3c:26:06:64:f5:14:ac:e3:7d:3d:4a:b5:81:ca:6e:90: ba:eb:f3:90:7c:8b:c7:4e:d8:6b:1e:70:2f:38:69:b1:99:d9: 7d:e4:17:6f:e8:69:06:36:37:7e:b9:2e:62:14:2f:fc:3b:a0: d3:c5:58:3e:31:0f:4e:9c:9c:2b:d2:70:f8:a1:61:9f:56:84: 1d:22:0f:ce:c9:be:28:ef:c7:3b:12:a7:a3:aa:03:26:48:0f: dc:0c:a0:2f:c8:95:7d:df:ac:bd:5a:1b:90:bd:b1:f8:aa:7a: c7:75:63:b2:29:d2:08:9c:9b:e3:77:6f:97:b4:94:a6:f1:58: 8f:88:dc:fa:b7:a6:08:7e:86:98:39:79:7c:47:0d:41:ff:a5: 87:00:1c:27:f5:ff:c6:cc:52:48:69:f5:7b:c1:02:0d:db:2f: 03:7a:80:a8:11:55:bb:0f:68:5f:b0:52:1b:a4:44:b0:65:31: 50:d1:3c:9c:6b:c8:23:c0:ad:f1:27:ab:f3:ab:dc:8e:bf:e7: e1:a5:d3:f2:0e:56:40:dd:f9:ac:d3:7e:cd:ea:1a:85:10:85: a0:8b:d3:74:d8:57:1d:f3:18:10:85:fa:92:29:4e:1c:83:49: 78:74:ca:e3:4b:88:20:12:d0:2f:e9:a4:14:5e:6e:23:84:24: b9:79:0f:fe -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fkBzHBV0+neaJ14BrxmoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi YTU3NDUwHhcNMjYwMTAxMTIxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmJlMDZlMDAwN2YwMTFlMjNmY2UyM2Y3ODY1MGE4ZDQ1ZjBiNmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3jUFLc74YZ3GVEUKD3A8XyUC4OM 0TK9mppxSC9VbxNK6fVHQdzTl4SRfBPYG0faGRfclRmtQiBRSWkdA2jtHMCtaXzv EKUnsqMK5IXxirL7iaIbv9nMYIAScWGDYHQ7FvCJiRZPhOY1f4FfvAAa5qv1uNbe ipvClLQtV5H3KbGglzJ1hWelSZCj0IqevMUPMZtAVFDZ84nPvPsrKV6naYSiteLa rWYNcD9+nM8yZdKNjgg0b+dti3tpLCNvHSIytlYILqkAwSt4BWwC2xkYa1vcHk/V SAuaEEoNd5udmXV5a8GPnhUm6KTTisAwz1tt7+YD+vM7PM1TPf2lZ1OqcwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMa+BuAAfwEeI/ziP3hlCo1F8LbDMB8GA1UdIwQY MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt ZmVhYzI2ZWFlY2MyLzEveHI0RzRBQl9BUjRqX09JX2VHVUtqVVh3dHNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAgAB1AwQA uXgPMA0GCSqGSIb3DQEBCwUAA4IBAQBlgDwmBmT1FKzjfT1KtYHKbpC66/OQfIvH TthrHnAvOGmxmdl95Bdv6GkGNjd+uS5iFC/8O6DTxVg+MQ9OnJwr0nD4oWGfVoQd Ig/Oyb4o78c7EqejqgMmSA/cDKAvyJV936y9WhuQvbH4qnrHdWOyKdIInJvjd2+X tJSm8ViPiNz6t6YIfoaYOXl8Rw1B/6WHABwn9f/GzFJIafV7wQIN2y8DeoCoEVW7 D2hfsFIbpESwZTFQ0Tyca8gjwK3xJ6vzq9yOv+fhpdPyDlZA3fms037N6hqFEIWg i9N02Fcd8xgQhfqSKU4cg0l4dMrjS4ggEtAv6aQUXm4jhCS5eQ/+ -----END CERTIFICATE-----Generated at Fri Jan 2 15:23:00 2026 by rpki-client