This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/xLfq7fHWOKfAm3-LjGEX86KU2PU.roa File: xLfq7fHWOKfAm3-LjGEX86KU2PU.roa (raw, json) Hash identifier: vmgwgfjyeiWhoQrfreo459MoQX1wxVVEmAYNgnHfUwI= Subject key identifier: C4:B7:EA:ED:F1:D6:38:A7:C0:9B:7F:8B:8C:61:17:F3:A2:94:D8:F5 Certificate issuer: /CN=2557fa956f0f53980d79c32ce1e6e93efd488fd7 Certificate serial: 019B7834841DB5C9984A02CE804856076513 Authority key identifier: 25:57:FA:95:6F:0F:53:98:0D:79:C3:2C:E1:E6:E9:3E:FD:48:8F:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVf6lW8PU5gNecMs4ebpPv1Ij9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/xLfq7fHWOKfAm3-LjGEX86KU2PU.roa Signing time: Thu 01 Jan 2026 06:17:46 +0000 ROA not before: Thu 01 Jan 2026 06:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208118 IP address blocks: 152.89.65.0/24 maxlen: 24 152.89.66.0/24 maxlen: 24 152.89.67.0/24 maxlen: 24 2a09:2e40::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.mft rsync://rpki.ripe.net/repository/DEFAULT/JVf6lW8PU5gNecMs4ebpPv1Ij9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:84:1d:b5:c9:98:4a:02:ce:80:48:56:07:65:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2557fa956f0f53980d79c32ce1e6e93efd488fd7 Validity Not Before: Jan 1 06:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4b7eaedf1d638a7c09b7f8b8c6117f3a294d8f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9e:2f:e7:dd:f8:0b:31:e0:55:d3:3e:98:e1: 99:4a:23:52:0e:14:ba:7a:35:e6:e9:be:7e:b6:60: c4:f0:0e:a6:5d:4c:b0:08:f7:c1:bb:69:b2:ee:ca: fa:f6:06:38:34:15:ea:41:9e:63:af:12:cd:de:7a: 5a:c4:f3:c3:3e:01:da:29:f9:14:a7:ad:00:4b:ab: 73:e5:49:e8:98:57:db:74:c6:63:75:97:b0:89:12: cb:51:b4:07:33:f3:65:e5:07:48:61:ac:e7:85:24: e8:56:b7:96:1f:63:e0:4b:11:1e:a7:55:d9:4b:53: c9:92:14:65:c4:d4:72:87:50:54:2d:c0:fb:cb:ca: bf:9a:b2:6f:b6:77:c1:73:45:34:df:5f:88:fc:fd: 40:a6:36:d1:74:6d:4e:41:5e:29:35:90:7f:90:b5: 88:08:20:9e:fd:4c:23:2e:be:e1:3b:33:f0:0d:45: 40:85:a0:30:5d:8b:10:57:7c:cd:2c:c9:40:5f:46: e6:00:4b:d9:ac:ca:c1:2c:46:ef:ba:de:c1:7e:44: e1:1d:ab:b1:65:af:de:36:25:03:f3:53:16:95:55: 57:4d:80:c1:ee:78:57:5f:73:c4:96:bc:00:ad:9c: be:86:2d:ce:a1:f9:ef:1f:8c:8e:24:90:63:ca:db: 77:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B7:EA:ED:F1:D6:38:A7:C0:9B:7F:8B:8C:61:17:F3:A2:94:D8:F5 X509v3 Authority Key Identifier: keyid:25:57:FA:95:6F:0F:53:98:0D:79:C3:2C:E1:E6:E9:3E:FD:48:8F:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVf6lW8PU5gNecMs4ebpPv1Ij9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/xLfq7fHWOKfAm3-LjGEX86KU2PU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.89.65.0-152.89.67.255 IPv6: 2a09:2e40::/29 Signature Algorithm: sha256WithRSAEncryption 19:d0:0c:b5:ab:af:e1:44:9c:33:1a:7c:06:b7:3b:87:16:9b: e8:fa:a1:70:1f:c3:72:23:5a:83:dd:75:e9:38:2a:f8:b6:2f: 77:2f:8d:d7:9e:9e:db:eb:84:dd:fa:9d:93:9c:f6:11:3c:69: 64:38:00:76:92:e2:43:84:e9:d9:ab:10:48:8f:77:e6:ee:99: 7e:38:f3:30:d6:63:28:87:0e:91:b2:98:17:af:c9:a7:ea:40: 1d:9a:38:73:70:87:59:46:fe:9c:b3:da:f0:26:38:50:10:4a: dd:67:61:8f:e5:a8:33:78:d9:11:58:45:7f:13:3f:a4:46:62: 14:5c:e9:b6:db:3e:13:6e:ac:c3:1f:11:09:28:ec:8c:50:67: c9:69:5b:5d:12:98:a7:3a:0a:23:55:96:75:71:ca:42:42:01: 45:65:63:48:75:e6:2e:87:45:60:7d:80:85:04:7c:47:25:c5: 81:f9:ff:f6:9d:47:4f:48:f4:37:c5:0b:08:8a:53:7b:dd:7c: d2:b1:29:b9:72:f0:ea:de:63:4f:08:e6:3f:4b:6f:8b:04:01: 00:85:10:be:01:83:46:d2:c8:97:bc:84:0e:6e:5b:a6:77:69: 39:10:14:ee:a8:5f:5e:45:59:e6:4b:13:c8:26:80:ed:36:16: b6:10:b1:a6 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt4NIQdtcmYSgLOgEhWB2UTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NTdmYTk1NmYwZjUzOTgwZDc5YzMyY2UxZTZlOTNlZmQ0 ODhmZDcwHhcNMjYwMTAxMDYxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNGI3ZWFlZGYxZDYzOGE3YzA5YjdmOGI4YzYxMTdmM2EyOTRkOGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn54v5934CzHgVdM+mOGZSiNSDhS6 ejXm6b5+tmDE8A6mXUywCPfBu2my7sr69gY4NBXqQZ5jrxLN3npaxPPDPgHaKfkU p60AS6tz5UnomFfbdMZjdZewiRLLUbQHM/Nl5QdIYaznhSToVreWH2PgSxEep1XZ S1PJkhRlxNRyh1BULcD7y8q/mrJvtnfBc0U031+I/P1ApjbRdG1OQV4pNZB/kLWI CCCe/UwjLr7hOzPwDUVAhaAwXYsQV3zNLMlAX0bmAEvZrMrBLEbvut7BfkThHaux Za/eNiUD81MWlVVXTYDB7nhXX3PElrwArZy+hi3OofnvH4yOJJBjytt3AQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFMS36u3x1jinwJt/i4xhF/OilNj1MB8GA1UdIwQY MBaAFCVX+pVvD1OYDXnDLOHm6T79SI/XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlZmNmxXOFBVNWdOZWNNczRlYnBQdjFJajljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy84MjBmZWEtM2M4ZC00OTc3LTgwMDAt NmQ3MTYzNDQyMjQ0LzEveExmcTdmSFdPS2ZBbTMtTGpHRVg4NktVMlBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy84MjBmZWEtM2M4ZC00OTc3LTgwMDAtNmQ3MTYzNDQyMjQ0 LzEvSlZmNmxXOFBVNWdOZWNNczRlYnBQdjFJajljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBACYWUED BAKYWUAwDQQCAAIwBwMFAyoJLkAwDQYJKoZIhvcNAQELBQADggEBABnQDLWrr+FE nDMafAa3O4cWm+j6oXAfw3IjWoPddek4Kvi2L3cvjdeentvrhN36nZOc9hE8aWQ4 AHaS4kOE6dmrEEiPd+bumX448zDWYyiHDpGymBevyafqQB2aOHNwh1lG/pyz2vAm OFAQSt1nYY/lqDN42RFYRX8TP6RGYhRc6bbbPhNurMMfEQko7IxQZ8lpW10SmKc6 CiNVlnVxykJCAUVlY0h15i6HRWB9gIUEfEclxYH5//adR09I9DfFCwiKU3vdfNKx Kbly8OreY08I5j9Lb4sEAQCFEL4Bg0bSyJe8hA5uW6Z3aTkQFO6oX15FWeZLE8gm gO02FrYQsaY= -----END CERTIFICATE-----Generated at Mon Feb 9 22:26:52 2026 by rpki-client