This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/xrqpTeDLFY6NUCUqp-jy59z7bo8.roa File: xrqpTeDLFY6NUCUqp-jy59z7bo8.roa (raw, json) Hash identifier: F5YBrLYsaLMQbFsezIeMWyMmZuMMM/ub36OTG94cJKk= Subject key identifier: C6:BA:A9:4D:E0:CB:15:8E:8D:50:25:2A:A7:E8:F2:E7:DC:FB:6E:8F Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Certificate serial: 019B77590228F1C1F506F38EA9C42207AE07 Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/xrqpTeDLFY6NUCUqp-jy59z7bo8.roa Signing time: Thu 01 Jan 2026 02:18:00 +0000 ROA not before: Thu 01 Jan 2026 02:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24852 IP address blocks: 79.132.160.0/20 maxlen: 20 84.55.32.0/22 maxlen: 24 84.55.32.0/24 maxlen: 24 84.55.33.0/24 maxlen: 24 84.55.34.0/23 maxlen: 23 84.55.36.0/23 maxlen: 23 84.55.48.0/20 maxlen: 24 84.55.56.0/21 maxlen: 24 84.55.56.0/23 maxlen: 23 84.55.58.0/23 maxlen: 23 84.55.60.0/23 maxlen: 23 84.55.62.0/23 maxlen: 23 88.223.0.0/20 maxlen: 20 88.223.24.0/21 maxlen: 21 88.223.32.0/21 maxlen: 24 88.223.40.0/23 maxlen: 24 88.223.48.0/20 maxlen: 24 88.223.96.0/22 maxlen: 22 88.223.104.0/21 maxlen: 21 88.223.112.0/20 maxlen: 20 88.223.128.0/22 maxlen: 22 88.223.144.0/21 maxlen: 21 88.223.152.0/23 maxlen: 24 88.223.153.0/24 maxlen: 24 88.223.160.0/22 maxlen: 22 88.223.192.0/20 maxlen: 20 95.173.32.0/23 maxlen: 23 185.104.176.0/22 maxlen: 22 213.164.112.0/22 maxlen: 22 213.164.116.0/23 maxlen: 23 213.164.118.0/24 maxlen: 24 217.147.34.0/23 maxlen: 24 217.147.35.0/24 maxlen: 24 217.147.36.0/23 maxlen: 23 217.147.38.0/24 maxlen: 24 217.147.40.0/23 maxlen: 24 217.147.41.0/24 maxlen: 24 217.147.44.0/22 maxlen: 24 217.147.46.0/24 maxlen: 24 217.147.47.0/24 maxlen: 24 2a01:7c80::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:02:28:f1:c1:f5:06:f3:8e:a9:c4:22:07:ae:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Validity Not Before: Jan 1 02:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6baa94de0cb158e8d50252aa7e8f2e7dcfb6e8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:08:49:b4:f7:27:99:e0:9c:ed:dd:a0:89:90: f8:e8:cc:c8:2a:b1:8d:d7:d2:50:fa:4d:fa:fd:0e: c5:c2:3c:5d:45:37:fd:61:d1:6a:2b:43:07:9f:be: 2b:1e:4c:35:7a:49:47:e5:46:a2:b8:f0:ed:86:7e: 68:9f:08:21:af:d4:75:ca:17:bf:5d:a6:01:89:8c: a0:4c:af:c9:37:06:21:29:fd:1b:1f:a2:85:2d:30: 3f:f1:ed:78:1c:bf:c4:34:e7:44:08:e4:d5:9b:20: 07:28:4c:24:2a:23:2a:d1:18:b4:63:1c:2c:a0:0b: 92:23:68:08:9a:75:91:d3:5f:7b:df:cd:01:56:12: f5:cb:08:11:c0:01:0b:00:bd:29:c2:11:95:ef:6a: 88:e2:b9:ef:c5:09:f8:98:74:d6:5a:46:ef:e6:db: c5:58:5b:4f:5e:dc:37:5c:b9:2d:d2:cc:c7:fa:ce: 69:e6:4f:69:8f:77:a7:da:7f:6e:d6:49:81:10:da: a1:19:59:ff:19:12:07:00:6e:9a:a3:8f:57:95:2c: 5f:c8:b3:59:68:c3:26:fd:78:56:de:9a:96:f4:cc: 84:c8:0c:c1:37:68:ee:a4:94:cd:46:7a:d7:cb:b0: e4:c1:dc:76:65:71:35:c9:ed:33:f9:1f:ce:91:e7: c5:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:BA:A9:4D:E0:CB:15:8E:8D:50:25:2A:A7:E8:F2:E7:DC:FB:6E:8F X509v3 Authority Key Identifier: keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/xrqpTeDLFY6NUCUqp-jy59z7bo8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.132.160.0/20 84.55.32.0-84.55.37.255 84.55.48.0/20 88.223.0.0/20 88.223.24.0-88.223.41.255 88.223.48.0/20 88.223.96.0/22 88.223.104.0-88.223.131.255 88.223.144.0-88.223.153.255 88.223.160.0/22 88.223.192.0/20 95.173.32.0/23 185.104.176.0/22 213.164.112.0-213.164.118.255 217.147.34.0-217.147.38.255 217.147.40.0/23 217.147.44.0/22 IPv6: 2a01:7c80::/33 Signature Algorithm: sha256WithRSAEncryption 03:1d:71:46:6b:f7:8d:1c:92:56:2f:69:84:64:a1:69:90:a4: e6:ec:38:ec:45:f3:36:d9:9f:fb:18:1d:0e:56:c9:29:d6:b2: 64:6b:76:65:23:00:bd:9f:78:76:f7:68:70:4d:80:b4:22:7c: 1f:85:99:27:62:eb:b1:ba:04:6d:f1:99:e1:c5:9f:9f:45:b5: 77:8d:5a:df:d1:1c:3b:a8:ea:f7:12:96:ec:a7:d3:6a:4e:da: 8c:06:76:01:bd:b6:13:12:9f:5e:17:82:12:fe:69:6a:d3:b7: ac:fe:67:07:cc:99:56:71:16:52:38:94:5c:98:6a:6c:54:cd: 02:15:3f:77:b1:71:d3:85:f2:38:10:73:98:76:41:b8:80:b2: 3d:6e:1d:4b:d0:87:15:4e:13:cb:51:d6:a3:3a:81:c2:d8:3c: fb:ee:e3:68:57:00:80:aa:05:9a:18:20:26:23:d6:b6:74:5f: 0f:c0:8d:c5:dc:96:39:75:fb:8c:f9:96:5b:6f:b7:8f:ca:ea: d7:76:13:b2:25:d9:55:b4:31:3e:2d:5a:cf:a9:6e:42:b4:6b: 90:d2:d1:12:eb:6b:a4:19:2c:3e:a0:c5:05:7f:c4:04:29:ad: 2a:23:9e:f1:8a:19:67:ba:68:03:51:54:2d:02:d5:53:0d:e0: da:d8:e2:88 -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgISAZt3WQIo8cH1BvOOqcQiB64HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0 ZjgzYzQwHhcNMjYwMTAxMDIxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmJhYTk0ZGUwY2IxNThlOGQ1MDI1MmFhN2U4ZjJlN2RjZmI2ZThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6whJtPcnmeCc7d2giZD46MzIKrGN 19JQ+k36/Q7FwjxdRTf9YdFqK0MHn74rHkw1eklH5UaiuPDthn5onwghr9R1yhe/ XaYBiYygTK/JNwYhKf0bH6KFLTA/8e14HL/ENOdECOTVmyAHKEwkKiMq0Ri0Yxws oAuSI2gImnWR0197380BVhL1ywgRwAELAL0pwhGV72qI4rnvxQn4mHTWWkbv5tvF WFtPXtw3XLkt0szH+s5p5k9pj3en2n9u1kmBENqhGVn/GRIHAG6ao49XlSxfyLNZ aMMm/XhW3pqW9MyEyAzBN2jupJTNRnrXy7Dkwdx2ZXE1ye0z+R/OkefFiwIDAQAB o4ICrjCCAqowHQYDVR0OBBYEFMa6qU3gyxWOjVAlKqfo8ufc+26PMB8GA1UdIwQY MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut MWY4NzQ2OTQ1NDgzLzEveHJxcFRlRExGWTZOVUNVcXAtank1OXo3Ym84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHDBggrBgEFBQcBBwEB/wSBszCBsDCBnQQCAAEwgZYDBARP hKAwDAMEBVQ3IAMEAVQ3JAMEBFQ3MAMEBFjfADAMAwQDWN8YAwQBWN8oAwQEWN8w AwQCWN9gMAwDBANY32gDBAJY34AwDAMEBFjfkAMEAVjfmAMEAljfoAMEBFjfwAME AV+tIAMEArlosDAMAwQE1aRwAwQA1aR2MAwDBAHZkyIDBADZkyYDBAHZkygDBALZ kywwDgQCAAIwCAMGByoBfIAAMA0GCSqGSIb3DQEBCwUAA4IBAQADHXFGa/eNHJJW L2mEZKFpkKTm7DjsRfM22Z/7GB0OVskp1rJka3ZlIwC9n3h292hwTYC0InwfhZkn YuuxugRt8ZnhxZ+fRbV3jVrf0Rw7qOr3Epbsp9NqTtqMBnYBvbYTEp9eF4IS/mlq 07es/mcHzJlWcRZSOJRcmGpsVM0CFT93sXHThfI4EHOYdkG4gLI9bh1L0IcVThPL UdajOoHC2Dz77uNoVwCAqgWaGCAmI9a2dF8PwI3F3JY5dfuM+ZZbb7ePyurXdhOy JdlVtDE+LVrPqW5CtGuQ0tES62ukGSw+oMUFf8QEKa0qI57xihlnumgDUVQtAtVT DeDa2OKI -----END CERTIFICATE-----Generated at Sun Jan 25 13:55:04 2026 by rpki-client