This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/x3vNaEefLYUx8tHcpY_oauTTJwc.roa File: x3vNaEefLYUx8tHcpY_oauTTJwc.roa (raw, json) Hash identifier: dyWV+oMmr7EfZc4eOAPl2tv84wwyt+B8i28SlwZr3yg= Subject key identifier: C7:7B:CD:68:47:9F:2D:85:31:F2:D1:DC:A5:8F:E8:6A:E4:D3:27:07 Certificate issuer: /CN=4eeb6b2c3e09ca1c45fd7547e458946cc8a468b4 Certificate serial: 019B7B36B4F9A2D02BB4958908C3E19F6287 Authority key identifier: 4E:EB:6B:2C:3E:09:CA:1C:45:FD:75:47:E4:58:94:6C:C8:A4:68:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TutrLD4JyhxF_XVH5FiUbMikaLQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/x3vNaEefLYUx8tHcpY_oauTTJwc.roa Signing time: Thu 01 Jan 2026 20:19:01 +0000 ROA not before: Thu 01 Jan 2026 20:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 4755 IP address blocks: 185.109.120.0/22 maxlen: 24 193.188.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/TutrLD4JyhxF_XVH5FiUbMikaLQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/TutrLD4JyhxF_XVH5FiUbMikaLQ.mft rsync://rpki.ripe.net/repository/DEFAULT/TutrLD4JyhxF_XVH5FiUbMikaLQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:b4:f9:a2:d0:2b:b4:95:89:08:c3:e1:9f:62:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eeb6b2c3e09ca1c45fd7547e458946cc8a468b4 Validity Not Before: Jan 1 20:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c77bcd68479f2d8531f2d1dca58fe86ae4d32707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8a:98:6d:ff:c0:49:03:1c:71:e1:93:b0:ff: 76:6d:44:3e:e6:27:d3:e3:52:32:5f:5a:37:57:8f: 8a:0f:6a:d5:d5:f7:28:8e:a8:7c:40:02:50:ff:4a: 3b:49:2c:b9:86:0c:4a:25:51:84:d6:19:83:9f:9a: 06:be:05:65:01:b3:f8:96:11:28:cc:8c:c3:fd:98: 9a:8c:c7:af:48:b8:ad:80:1f:e7:dc:b7:2c:4a:56: 13:b5:88:5a:8a:f2:88:4b:e9:75:f4:80:e9:d0:d9: 85:3b:2b:3b:35:2c:15:50:07:a4:3b:66:b8:48:72: 43:ec:24:31:22:a2:7a:d9:30:07:17:c1:ff:d2:c3: 89:84:fa:0d:aa:38:eb:77:dd:9b:19:0a:5e:fd:d0: f3:37:3a:3f:1c:a0:b7:26:54:68:b3:62:28:44:51: 30:d3:1a:12:96:c5:9b:5a:87:2b:6b:d2:ae:82:76: 3d:2c:ed:2f:72:76:55:53:b0:00:48:88:f8:f8:46: de:b3:14:3f:80:ac:8c:ff:02:2a:cd:3b:e0:b5:31: ba:ba:aa:cb:87:f0:e9:f8:1b:68:2d:4f:5d:71:00: 64:7d:3b:ff:b6:12:73:7a:1a:d7:e4:7b:eb:81:23: 27:aa:99:14:22:f4:92:14:3b:51:75:76:4a:27:7b: 22:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:7B:CD:68:47:9F:2D:85:31:F2:D1:DC:A5:8F:E8:6A:E4:D3:27:07 X509v3 Authority Key Identifier: keyid:4E:EB:6B:2C:3E:09:CA:1C:45:FD:75:47:E4:58:94:6C:C8:A4:68:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TutrLD4JyhxF_XVH5FiUbMikaLQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/x3vNaEefLYUx8tHcpY_oauTTJwc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/TutrLD4JyhxF_XVH5FiUbMikaLQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.109.120.0/22 193.188.64.0/19 Signature Algorithm: sha256WithRSAEncryption a1:a4:cd:a9:f8:03:30:5b:2a:f3:5d:fd:cf:03:d8:cd:91:c7: 30:07:4c:81:53:d6:9e:24:12:a8:dc:8c:8b:61:2c:a6:5f:8e: b5:f4:0b:61:ff:81:55:0d:db:ab:8f:4f:3d:83:64:84:f4:d9: 95:be:0a:69:72:c6:48:5b:a0:44:66:ab:5a:fb:02:50:b7:2e: 7c:49:39:a5:88:8f:d5:99:e1:22:2a:fe:02:51:57:45:3f:e7: f4:02:44:a2:5b:fc:b1:49:2b:f4:14:ec:c0:38:d9:92:22:93: 96:62:06:f1:ea:e4:a3:69:ed:4a:b0:42:a9:5b:7b:f6:00:fc: c3:97:2c:65:03:fc:cb:5a:dc:9b:2f:a9:e0:71:e7:a7:3b:17: 6c:25:b6:53:c9:8e:ec:64:b5:69:29:e8:e7:0f:a2:1a:73:74: 76:69:50:1a:45:2f:f9:a0:32:0f:c6:94:6e:81:25:75:fe:24: 79:4e:49:53:41:59:66:1f:6c:62:25:5a:d5:2e:b1:73:6e:33: ae:02:99:56:ab:bd:35:a6:67:fd:a3:69:36:e0:6c:a6:40:43: 44:3b:61:ea:41:2c:dd:6d:95:8d:c7:17:6e:18:13:80:3c:7f: 4c:0f:7d:9b:03:36:f5:44:9f:ab:05:8a:8b:d4:3b:89:f0:38: e3:be:9f:b4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NrT5otArtJWJCMPhn2KHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZWI2YjJjM2UwOWNhMWM0NWZkNzU0N2U0NTg5NDZjYzhh NDY4YjQwHhcNMjYwMTAxMjAxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzdiY2Q2ODQ3OWYyZDg1MzFmMmQxZGNhNThmZTg2YWU0ZDMyNzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYqYbf/ASQMcceGTsP92bUQ+5ifT 41IyX1o3V4+KD2rV1fcojqh8QAJQ/0o7SSy5hgxKJVGE1hmDn5oGvgVlAbP4lhEo zIzD/ZiajMevSLitgB/n3LcsSlYTtYhaivKIS+l19IDp0NmFOys7NSwVUAekO2a4 SHJD7CQxIqJ62TAHF8H/0sOJhPoNqjjrd92bGQpe/dDzNzo/HKC3JlRos2IoRFEw 0xoSlsWbWocra9KugnY9LO0vcnZVU7AASIj4+EbesxQ/gKyM/wIqzTvgtTG6uqrL h/Dp+BtoLU9dcQBkfTv/thJzehrX5HvrgSMnqpkUIvSSFDtRdXZKJ3siEwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMd7zWhHny2FMfLR3KWP6Grk0ycHMB8GA1UdIwQY MBaAFE7rayw+CcocRf11R+RYlGzIpGi0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHV0ckxENEp5aHhGX1hWSDVGaVViTWlrYUxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi84ZjU5ZWMtZjkyYy00MjNkLThmYjct NmU5YWRkYzgxNjJiLzEveDN2TmFFZWZMWVV4OHRIY3BZX29hdVRUSndjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi84ZjU5ZWMtZjkyYy00MjNkLThmYjctNmU5YWRkYzgxNjJi LzEvVHV0ckxENEp5aHhGX1hWSDVGaVViTWlrYUxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuW14AwQF wbxAMA0GCSqGSIb3DQEBCwUAA4IBAQChpM2p+AMwWyrzXf3PA9jNkccwB0yBU9ae JBKo3IyLYSymX4619Ath/4FVDdurj089g2SE9NmVvgppcsZIW6BEZqta+wJQty58 STmliI/VmeEiKv4CUVdFP+f0AkSiW/yxSSv0FOzAONmSIpOWYgbx6uSjae1KsEKp W3v2APzDlyxlA/zLWtybL6ngceenOxdsJbZTyY7sZLVpKejnD6Iac3R2aVAaRS/5 oDIPxpRugSV1/iR5TklTQVlmH2xiJVrVLrFzbjOuAplWq701pmf9o2k24GymQENE O2HqQSzdbZWNxxduGBOAPH9MD32bAzb1RJ+rBYqL1DuJ8Djjvp+0 -----END CERTIFICATE-----Generated at Tue Jan 20 02:58:34 2026 by rpki-client