This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/x8ylXyHKFLaCsjlaJO4VWKyWI_4.roa File: x8ylXyHKFLaCsjlaJO4VWKyWI_4.roa (raw, json) Hash identifier: 7vnEm2NdMdejMyVEM/bfqmw0nAnwn/zb7nuUX/UxYl0= Subject key identifier: C7:CC:A5:5F:21:CA:14:B6:82:B2:39:5A:24:EE:15:58:AC:96:23:FE Certificate issuer: /CN=64e90627021adcfa5624342d3e5f8b48035acfb4 Certificate serial: 019B78349B7B526FF2879F3CA684EDBE2CBA Authority key identifier: 64:E9:06:27:02:1A:DC:FA:56:24:34:2D:3E:5F:8B:48:03:5A:CF:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/x8ylXyHKFLaCsjlaJO4VWKyWI_4.roa Signing time: Thu 01 Jan 2026 06:17:52 +0000 ROA not before: Thu 01 Jan 2026 06:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198336 IP address blocks: 176.227.224.0/20 maxlen: 20 176.227.224.0/21 maxlen: 21 176.227.232.0/23 maxlen: 23 176.227.234.0/23 maxlen: 23 176.227.236.0/24 maxlen: 24 176.227.237.0/24 maxlen: 24 176.227.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:9b:7b:52:6f:f2:87:9f:3c:a6:84:ed:be:2c:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64e90627021adcfa5624342d3e5f8b48035acfb4 Validity Not Before: Jan 1 06:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7cca55f21ca14b682b2395a24ee1558ac9623fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:98:ce:73:bb:de:69:38:ab:45:b7:c6:6a:47: a2:1d:7b:90:96:1b:57:bc:52:b4:55:88:ad:3f:1c: 56:aa:07:e3:aa:3c:cc:c9:83:e2:cc:88:87:7b:7e: 02:ab:26:a9:84:aa:73:05:f5:a1:ba:6c:46:29:a9: 6e:fe:24:e6:9d:ce:3f:4a:c0:90:16:92:7e:98:f1: f8:49:40:81:85:ce:ee:b1:35:cb:78:57:14:50:ef: e9:97:b3:4a:44:9b:62:f4:2b:e6:31:32:18:60:ff: 92:c2:e9:0e:c1:f0:39:e0:7d:86:54:0e:42:cf:03: 3e:8f:13:b7:ad:38:07:7b:7d:da:34:95:57:9c:46: 14:cb:51:a1:6f:2b:62:cb:15:fb:20:6d:51:ec:00: 5a:25:1d:63:7b:b5:ee:29:a5:9a:1e:b3:22:f9:37: 06:4f:4f:df:d5:ee:76:8a:9c:cb:a1:29:f6:45:a2: 08:92:d4:20:38:d5:35:f0:fc:8a:c0:ef:ee:8b:8f: 00:87:ea:b3:31:4b:56:db:15:26:03:12:53:74:59: 5b:51:d6:a7:1d:09:09:54:e5:c8:75:79:36:6d:ba: 2a:96:9e:f5:c1:ef:c2:9c:4b:f5:c0:5d:4e:ef:54: 71:93:09:2f:7e:8b:f8:db:dd:36:83:5d:35:46:d2: de:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:CC:A5:5F:21:CA:14:B6:82:B2:39:5A:24:EE:15:58:AC:96:23:FE X509v3 Authority Key Identifier: keyid:64:E9:06:27:02:1A:DC:FA:56:24:34:2D:3E:5F:8B:48:03:5A:CF:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/x8ylXyHKFLaCsjlaJO4VWKyWI_4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.227.224.0/20 Signature Algorithm: sha256WithRSAEncryption 7b:f2:5e:6a:f3:b6:87:e6:68:0c:69:4c:e3:1c:aa:9e:a8:7b: c0:4b:34:fc:95:2b:df:44:e4:69:c2:44:03:4d:d4:e9:f3:50: 89:7e:69:a3:4a:88:28:54:0e:ca:d2:34:e9:42:68:b0:72:fc: 67:ef:55:34:fd:a4:d4:c6:28:43:ca:58:7f:9c:2b:0f:30:ab: 4a:a0:02:a5:d4:32:b5:4a:c7:d7:4f:27:83:ae:32:32:d1:2a: c7:95:4c:c2:3e:11:77:a9:92:ac:55:e6:88:a9:2d:21:89:f4: 36:d1:2b:c0:4c:01:87:a0:e1:7c:d8:da:29:96:10:bd:e5:5d: 86:2a:5c:4a:07:e5:cb:69:a4:0d:2e:52:36:98:ad:57:20:65: 14:ab:a8:77:21:1b:4a:95:72:88:d3:5b:ff:ae:76:ce:b1:8d: 86:4e:98:51:08:8c:cd:da:b7:ae:2f:0c:30:1d:dd:4b:3e:c7: 3e:1a:31:ee:28:c9:78:09:85:45:e9:73:ba:2b:05:1b:b9:16: e7:41:41:84:fb:0a:96:2a:76:e3:47:47:e8:78:20:70:30:ce: 5b:f9:92:48:d8:2c:04:82:94:16:9d:3c:e0:4d:8e:bb:b9:14: 9f:d1:a9:7a:4b:ec:72:0f:cf:b4:e6:11:78:da:f4:95:3b:18: 9a:eb:ba:eb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NJt7Um/yh588poTtviy6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZTkwNjI3MDIxYWRjZmE1NjI0MzQyZDNlNWY4YjQ4MDM1 YWNmYjQwHhcNMjYwMTAxMDYxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjN2NjYTU1ZjIxY2ExNGI2ODJiMjM5NWEyNGVlMTU1OGFjOTYyM2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5jOc7veaTirRbfGakeiHXuQlhtX vFK0VYitPxxWqgfjqjzMyYPizIiHe34CqyaphKpzBfWhumxGKalu/iTmnc4/SsCQ FpJ+mPH4SUCBhc7usTXLeFcUUO/pl7NKRJti9CvmMTIYYP+SwukOwfA54H2GVA5C zwM+jxO3rTgHe33aNJVXnEYUy1GhbytiyxX7IG1R7ABaJR1je7XuKaWaHrMi+TcG T0/f1e52ipzLoSn2RaIIktQgONU18PyKwO/ui48Ah+qzMUtW2xUmAxJTdFlbUdan HQkJVOXIdXk2bboqlp71we/CnEv1wF1O71Rxkwkvfov42902g101RtLeZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMfMpV8hyhS2grI5WiTuFVisliP+MB8GA1UdIwQY MBaAFGTpBicCGtz6ViQ0LT5fi0gDWs+0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk9rR0p3SWEzUHBXSkRRdFBsLUxTQU5hejdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy82ZTNmYmEtNGQzYS00M2NiLWJhYmYt NWYyODgyZGUzZWM3LzEveDh5bFh5SEtGTGFDc2psYUpPNFZXS3lXSV80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy82ZTNmYmEtNGQzYS00M2NiLWJhYmYtNWYyODgyZGUzZWM3 LzEvWk9rR0p3SWEzUHBXSkRRdFBsLUxTQU5hejdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEsOPgMA0G CSqGSIb3DQEBCwUAA4IBAQB78l5q87aH5mgMaUzjHKqeqHvASzT8lSvfRORpwkQD TdTp81CJfmmjSogoVA7K0jTpQmiwcvxn71U0/aTUxihDylh/nCsPMKtKoAKl1DK1 SsfXTyeDrjIy0SrHlUzCPhF3qZKsVeaIqS0hifQ20SvATAGHoOF82NoplhC95V2G KlxKB+XLaaQNLlI2mK1XIGUUq6h3IRtKlXKI01v/rnbOsY2GTphRCIzN2reuLwww Hd1LPsc+GjHuKMl4CYVF6XO6KwUbuRbnQUGE+wqWKnbjR0foeCBwMM5b+ZJI2CwE gpQWnTzgTY67uRSf0al6S+xyD8+05hF42vSVOxia67rr -----END CERTIFICATE-----Generated at Mon Feb 9 23:46:45 2026 by rpki-client