This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/XVtEjdzoGD2Cf2ZS_WqTxpdKmHw.roa File: XVtEjdzoGD2Cf2ZS_WqTxpdKmHw.roa (raw, json) Hash identifier: PLd3AjjjU/YjEzgvUwnUvjyB10O7EBQqmUUYsFik7AU= Subject key identifier: 5D:5B:44:8D:DC:E8:18:3D:82:7F:66:52:FD:6A:93:C6:97:4A:98:7C Certificate issuer: /CN=1fc8ed466de2e6ca5964d1eed0f240ddd251de48 Certificate serial: 019B7A5AF48950B226302FC2F40500E021F9 Authority key identifier: 1F:C8:ED:46:6D:E2:E6:CA:59:64:D1:EE:D0:F2:40:DD:D2:51:DE:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8jtRm3i5spZZNHu0PJA3dJR3kg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/XVtEjdzoGD2Cf2ZS_WqTxpdKmHw.roa Signing time: Thu 01 Jan 2026 16:18:59 +0000 ROA not before: Thu 01 Jan 2026 16:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51948 IP address blocks: 91.219.104.0/22 maxlen: 22 185.240.8.0/22 maxlen: 22 195.242.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.mft rsync://rpki.ripe.net/repository/DEFAULT/H8jtRm3i5spZZNHu0PJA3dJR3kg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:f4:89:50:b2:26:30:2f:c2:f4:05:00:e0:21:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fc8ed466de2e6ca5964d1eed0f240ddd251de48 Validity Not Before: Jan 1 16:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d5b448ddce8183d827f6652fd6a93c6974a987c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8f:1b:61:05:f9:9b:c7:07:12:3c:85:2f:9e: 2e:64:f1:fa:b1:49:57:16:1a:51:df:0a:b2:af:2a: 7b:39:5a:d1:7e:ac:46:b0:a5:44:79:c5:e2:79:aa: 83:f2:90:61:77:08:17:94:45:84:4b:98:43:e3:de: cb:a2:40:f8:6b:31:2a:b2:b9:19:96:d5:5e:ff:bc: db:a7:87:31:e1:1c:68:b1:ab:4d:33:d2:0a:24:be: 42:9f:a4:17:65:0d:05:20:1c:0d:72:19:63:cc:44: 79:9c:ef:de:d0:99:44:18:18:00:92:e5:2b:7f:9b: f8:95:07:f2:d9:13:41:63:c4:e3:56:88:51:5c:68: 54:03:91:69:0c:da:d9:a2:79:3c:37:48:72:63:67: d4:8a:3c:1b:b5:07:16:9e:bd:cb:9e:48:6d:e6:3b: 08:c9:3f:7a:79:1a:32:e0:cd:a5:00:11:5e:44:8a: 57:ba:a4:4e:9c:e0:b2:ee:b3:7f:4e:14:b2:cc:aa: b0:fe:c4:cf:ca:88:09:b6:b5:a2:58:b4:51:4a:32: b3:24:37:e6:75:64:39:c7:33:ab:3e:08:31:82:7c: 4f:60:b6:6a:e4:4a:f3:55:97:c8:e2:06:f2:99:68: 85:33:e0:d2:2a:bb:0e:3c:3b:a0:11:cc:ec:26:a9: 63:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:5B:44:8D:DC:E8:18:3D:82:7F:66:52:FD:6A:93:C6:97:4A:98:7C X509v3 Authority Key Identifier: keyid:1F:C8:ED:46:6D:E2:E6:CA:59:64:D1:EE:D0:F2:40:DD:D2:51:DE:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8jtRm3i5spZZNHu0PJA3dJR3kg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/XVtEjdzoGD2Cf2ZS_WqTxpdKmHw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.219.104.0/22 185.240.8.0/22 195.242.64.0/23 Signature Algorithm: sha256WithRSAEncryption be:74:d2:39:de:0c:c6:c2:21:fc:1e:30:1e:b4:77:57:a5:68: 58:24:32:cd:d9:b2:e3:b1:e5:f6:0c:07:38:98:a5:e8:c8:23: 6c:3f:d8:9b:a5:e7:e3:9c:e9:35:d5:de:11:de:72:1e:15:fe: 41:8c:d7:6e:a3:6e:2f:6b:7a:42:65:f5:18:07:22:a9:aa:ff: f8:4a:37:44:00:8b:c5:70:80:69:84:b9:2f:32:1d:85:79:4b: ef:e5:8b:f1:5c:c0:2f:ec:26:b6:3b:a4:db:51:51:d8:75:95: 60:1d:4e:fd:2a:79:cf:94:38:da:7d:d4:8c:38:d3:50:07:e0: e6:80:70:d0:ac:f9:4b:85:b8:a4:0e:7e:c6:7c:a8:02:d4:48: ce:3d:a5:bd:86:89:06:97:0f:7f:aa:ba:a7:27:d8:1a:c3:7b: 08:ac:b8:75:6c:bc:c0:b3:62:86:ad:f7:2a:ff:83:04:5a:ca: 46:ef:4e:6b:0d:9c:f5:87:33:11:f5:b2:20:b4:36:a8:00:df: f2:ba:d2:d1:03:92:29:b8:fd:8d:6d:6e:ce:84:bd:6b:46:34: 18:a2:ab:14:4b:70:4e:dd:39:60:91:b4:23:15:02:d8:2c:50: e3:ca:9d:d6:a9:eb:a0:bb:0d:04:96:11:d0:04:f2:38:fd:21: 1f:65:4f:8b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6WvSJULImMC/C9AUA4CH5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmYzhlZDQ2NmRlMmU2Y2E1OTY0ZDFlZWQwZjI0MGRkZDI1 MWRlNDgwHhcNMjYwMTAxMTYxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDViNDQ4ZGRjZTgxODNkODI3ZjY2NTJmZDZhOTNjNjk3NGE5ODdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwI8bYQX5m8cHEjyFL54uZPH6sUlX FhpR3wqyryp7OVrRfqxGsKVEecXieaqD8pBhdwgXlEWES5hD497LokD4azEqsrkZ ltVe/7zbp4cx4RxosatNM9IKJL5Cn6QXZQ0FIBwNchljzER5nO/e0JlEGBgAkuUr f5v4lQfy2RNBY8TjVohRXGhUA5FpDNrZonk8N0hyY2fUijwbtQcWnr3Lnkht5jsI yT96eRoy4M2lABFeRIpXuqROnOCy7rN/ThSyzKqw/sTPyogJtrWiWLRRSjKzJDfm dWQ5xzOrPggxgnxPYLZq5ErzVZfI4gbymWiFM+DSKrsOPDugEczsJqljfwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFF1bRI3c6Bg9gn9mUv1qk8aXSph8MB8GA1UdIwQY MBaAFB/I7UZt4ubKWWTR7tDyQN3SUd5IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDhqdFJtM2k1c3BaWk5IdTBQSkEzZEpSM2tnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jYTJhY2UtOTRhZC00NGNiLTk4MDkt ZjQ4ZDRiYWJkNTBmLzEvWFZ0RWpkem9HRDJDZjJaU19XcVR4cGRLbUh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9jYTJhY2UtOTRhZC00NGNiLTk4MDktZjQ4ZDRiYWJkNTBm LzEvSDhqdFJtM2k1c3BaWk5IdTBQSkEzZEpSM2tnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCW9toAwQC ufAIAwQBw/JAMA0GCSqGSIb3DQEBCwUAA4IBAQC+dNI53gzGwiH8HjAetHdXpWhY JDLN2bLjseX2DAc4mKXoyCNsP9ibpefjnOk11d4R3nIeFf5BjNduo24va3pCZfUY ByKpqv/4SjdEAIvFcIBphLkvMh2FeUvv5YvxXMAv7Ca2O6TbUVHYdZVgHU79KnnP lDjafdSMONNQB+DmgHDQrPlLhbikDn7GfKgC1EjOPaW9hokGlw9/qrqnJ9gaw3sI rLh1bLzAs2KGrfcq/4MEWspG705rDZz1hzMR9bIgtDaoAN/yutLRA5IpuP2NbW7O hL1rRjQYoqsUS3BO3TlgkbQjFQLYLFDjyp3Wqeuguw0ElhHQBPI4/SEfZU+L -----END CERTIFICATE-----Generated at Mon Feb 9 20:45:41 2026 by rpki-client