This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/XR8VM1EvNL7sWYYKJOlMIsJdia0.roa File: XR8VM1EvNL7sWYYKJOlMIsJdia0.roa (raw, json) Hash identifier: fBss7mgIT+jvqqxAE/g6H97kqC0eCcZI1+zi2IjDIjw= Subject key identifier: 5D:1F:15:33:51:2F:34:BE:EC:59:86:0A:24:E9:4C:22:C2:5D:89:AD Certificate issuer: /CN=571cb51cba68eb7ef9867a75d17ab28018196aa1 Certificate serial: 019B7F15DACE033C68508524190242A6B1F6 Authority key identifier: 57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/XR8VM1EvNL7sWYYKJOlMIsJdia0.roa Signing time: Fri 02 Jan 2026 14:21:37 +0000 ROA not before: Fri 02 Jan 2026 14:21:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7018 IP address blocks: 185.188.192.0/22 maxlen: 22 195.211.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:da:ce:03:3c:68:50:85:24:19:02:42:a6:b1:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=571cb51cba68eb7ef9867a75d17ab28018196aa1 Validity Not Before: Jan 2 14:21:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d1f1533512f34beec59860a24e94c22c25d89ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a7:56:ed:02:4c:c2:5c:06:51:7c:1d:eb:ad: ce:98:07:70:6f:93:0f:36:99:94:56:5f:ff:72:81: 0b:1b:38:24:66:e1:9b:fa:ba:9a:a0:b9:0c:83:85: 90:0b:a5:48:63:21:b9:41:43:7b:da:9c:4e:e7:4f: ad:6b:a3:22:68:f8:fa:85:bb:a8:42:1b:a2:fa:ff: 27:60:f5:1d:23:f2:21:04:94:ac:f8:77:b2:88:ad: 98:46:3f:d9:2b:30:82:77:f1:48:dc:7a:46:64:3f: ef:12:8a:e0:07:dd:fd:00:75:7b:92:60:f7:d7:5c: a9:86:a0:e7:f0:17:de:99:0c:b5:0d:e2:9d:68:9e: 46:93:f4:bd:dc:f4:ff:15:68:8f:de:ce:60:28:f2: ad:c5:b9:fb:09:71:b5:5b:cb:a9:b1:34:61:7b:6a: 6c:32:3e:a5:61:04:26:20:96:0b:83:53:af:be:12: c4:50:4b:b2:71:18:fd:93:94:a5:5f:c9:8d:d3:eb: b8:ea:10:16:1d:8f:85:77:ac:16:7a:c8:c3:d7:71: fa:aa:67:eb:82:91:ef:43:35:7d:ef:83:73:f3:86: 2e:97:a8:e1:9a:f9:db:0a:15:b6:6c:49:b7:f9:e0: ae:01:b8:a1:d6:e7:af:e9:4f:87:11:b1:39:eb:d8: 51:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:1F:15:33:51:2F:34:BE:EC:59:86:0A:24:E9:4C:22:C2:5D:89:AD X509v3 Authority Key Identifier: keyid:57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/XR8VM1EvNL7sWYYKJOlMIsJdia0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.188.192.0/22 195.211.116.0/22 Signature Algorithm: sha256WithRSAEncryption 5c:fb:e4:01:58:f8:d4:77:19:30:05:9c:c7:f8:c4:0d:34:83: fb:35:c3:e3:a6:22:9f:0c:72:cb:c3:de:73:63:1f:b6:f6:9d: c3:93:22:2f:b4:31:42:c1:75:de:52:c3:ef:1f:29:ef:93:ad: bc:15:03:bb:2f:b1:a2:62:f5:c1:5d:d8:f9:ea:5b:60:15:3e: f3:0c:b2:c8:5a:95:3c:58:cf:90:1d:da:67:09:66:36:e7:5f: 77:1b:9a:3e:83:79:0e:9a:50:fd:28:0f:36:2f:6f:d5:f9:c6: e2:09:40:a7:ab:3c:dc:be:72:ff:21:1d:ac:c1:1d:7b:00:56: 72:f4:6f:4b:9d:78:a2:77:1f:3b:eb:d8:0b:4c:28:3f:aa:26: b7:82:1d:06:34:6d:2b:7e:b4:04:be:52:f4:4d:6e:9d:86:c9: 97:fe:7b:c5:9a:56:8c:4b:32:e0:f1:cb:aa:7b:e0:52:30:b1: 98:42:95:cb:e3:a5:48:5e:42:0f:91:52:3d:72:d5:b1:1c:13: 2f:82:58:59:3b:0b:b3:96:b4:f3:4c:53:a7:97:19:6a:d3:e4: 86:ae:eb:cd:39:95:e7:46:b6:05:cf:6b:e3:9a:a8:4a:8d:14: 29:80:14:fa:5d:0a:b1:fa:53:fd:de:8a:4e:82:53:c8:38:ff: d5:b9:54:08 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FdrOAzxoUIUkGQJCprH2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MWNiNTFjYmE2OGViN2VmOTg2N2E3NWQxN2FiMjgwMTgx OTZhYTEwHhcNMjYwMTAyMTQyMTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDFmMTUzMzUxMmYzNGJlZWM1OTg2MGEyNGU5NGMyMmMyNWQ4OWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqdW7QJMwlwGUXwd663OmAdwb5MP NpmUVl//coELGzgkZuGb+rqaoLkMg4WQC6VIYyG5QUN72pxO50+ta6MiaPj6hbuo Qhui+v8nYPUdI/IhBJSs+HeyiK2YRj/ZKzCCd/FI3HpGZD/vEorgB939AHV7kmD3 11yphqDn8BfemQy1DeKdaJ5Gk/S93PT/FWiP3s5gKPKtxbn7CXG1W8upsTRhe2ps Mj6lYQQmIJYLg1OvvhLEUEuycRj9k5SlX8mN0+u46hAWHY+Fd6wWesjD13H6qmfr gpHvQzV974Nz84Yul6jhmvnbChW2bEm3+eCuAbih1uev6U+HEbE569hR6QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFF0fFTNRLzS+7FmGCiTpTCLCXYmtMB8GA1UdIwQY MBaAFFcctRy6aOt++YZ6ddF6soAYGWqhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnh5MUhMcG82Mzc1aG5wMTBYcXlnQmdaYXFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9iOGQyYTgtNTNhOS00MmMwLWI3Yzkt ZGQ4NjI3NzRhMDkyLzEvWFI4Vk0xRXZOTDdzV1lZS0pPbE1Jc0pkaWEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9iOGQyYTgtNTNhOS00MmMwLWI3YzktZGQ4NjI3NzRhMDky LzEvVnh5MUhMcG82Mzc1aG5wMTBYcXlnQmdaYXFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCubzAAwQC w9N0MA0GCSqGSIb3DQEBCwUAA4IBAQBc++QBWPjUdxkwBZzH+MQNNIP7NcPjpiKf DHLLw95zYx+29p3DkyIvtDFCwXXeUsPvHynvk628FQO7L7GiYvXBXdj56ltgFT7z DLLIWpU8WM+QHdpnCWY25193G5o+g3kOmlD9KA82L2/V+cbiCUCnqzzcvnL/IR2s wR17AFZy9G9LnXiidx8769gLTCg/qia3gh0GNG0rfrQEvlL0TW6dhsmX/nvFmlaM SzLg8cuqe+BSMLGYQpXL46VIXkIPkVI9ctWxHBMvglhZOwuzlrTzTFOnlxlq0+SG ruvNOZXnRrYFz2vjmqhKjRQpgBT6XQqx+lP93opOglPIOP/VuVQI -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:12 2026 by rpki-client