This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/xkix9rxtRJKN9muc3A9znVU0wSY.roa File: xkix9rxtRJKN9muc3A9znVU0wSY.roa (raw, json) Hash identifier: qGsESUAEiY6Y+S9TBPbDTAxY1gqMsRCWWSHmRkuLruU= Subject key identifier: C6:48:B1:F6:BC:6D:44:92:8D:F6:6B:9C:DC:0F:73:9D:55:34:C1:26 Certificate issuer: /CN=b3a758904c75856e3585a4433ae5ec57fef1a3c7 Certificate serial: 019B7C7FEEBB8B4EDC404EB8142D4741FBE7 Authority key identifier: B3:A7:58:90:4C:75:85:6E:35:85:A4:43:3A:E5:EC:57:FE:F1:A3:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6dYkEx1hW41haRDOuXsV_7xo8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/xkix9rxtRJKN9muc3A9znVU0wSY.roa Signing time: Fri 02 Jan 2026 02:18:37 +0000 ROA not before: Fri 02 Jan 2026 02:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12662 IP address blocks: 192.162.132.0/22 maxlen: 22 192.162.132.0/23 maxlen: 23 192.162.132.0/24 maxlen: 24 192.162.133.0/24 maxlen: 24 192.162.134.0/23 maxlen: 23 192.162.134.0/24 maxlen: 24 192.162.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.mft rsync://rpki.ripe.net/repository/DEFAULT/s6dYkEx1hW41haRDOuXsV_7xo8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:ee:bb:8b:4e:dc:40:4e:b8:14:2d:47:41:fb:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3a758904c75856e3585a4433ae5ec57fef1a3c7 Validity Not Before: Jan 2 02:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c648b1f6bc6d44928df66b9cdc0f739d5534c126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:2b:50:2b:30:e9:b9:27:f4:23:a9:98:1c:a4: 83:e1:2d:9d:8c:4b:17:b7:3b:17:6b:ad:75:80:d6: 8a:98:4b:96:d7:0d:f9:31:bc:a5:27:81:89:82:1a: 6f:03:1f:68:80:9a:d8:f1:b3:3f:87:0a:15:d6:0b: 9b:6b:f2:e6:5b:89:bc:96:a6:26:ae:ac:ee:9a:8d: db:0f:9a:60:6a:e6:fa:81:56:30:4a:2c:55:a7:72: 7d:99:f4:0a:d7:8f:d0:02:66:ca:01:70:e2:08:13: b7:6a:5e:b3:4d:5d:1f:04:ef:23:a5:3c:13:2f:ad: e5:c0:8c:69:9f:6b:d3:9e:75:5e:ae:ab:4a:ff:a0: 23:ef:05:a2:df:09:40:77:02:2b:a1:ce:59:3d:f3: 8d:39:16:f0:0a:61:2e:5c:92:07:9b:2b:e5:3d:a2: cd:f9:81:ef:e8:a9:f1:1a:d1:79:f4:f3:06:f9:9b: 4a:bd:94:28:f5:59:e9:b6:2f:df:7c:b5:a9:be:c3: 11:e5:2e:5c:28:02:4a:c7:eb:89:ff:a0:9c:53:86: 4c:19:2e:54:fe:16:da:60:6a:67:98:23:9e:b7:d0: a4:bc:8f:97:77:bd:1f:3e:51:43:63:65:83:d0:e6: 2e:ab:f4:f2:7f:c4:86:4f:0a:76:02:ae:d0:2a:93: 52:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:48:B1:F6:BC:6D:44:92:8D:F6:6B:9C:DC:0F:73:9D:55:34:C1:26 X509v3 Authority Key Identifier: keyid:B3:A7:58:90:4C:75:85:6E:35:85:A4:43:3A:E5:EC:57:FE:F1:A3:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6dYkEx1hW41haRDOuXsV_7xo8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/xkix9rxtRJKN9muc3A9znVU0wSY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.162.132.0/22 Signature Algorithm: sha256WithRSAEncryption 7f:23:dd:64:0b:47:ab:83:e7:ab:c9:97:91:b1:ca:45:fc:29: dc:a7:fb:7c:7e:af:82:4f:99:11:b0:c9:5a:fe:ea:56:3c:d8: e5:9e:9a:c5:47:fe:c9:71:be:29:b9:0d:1e:15:13:d2:50:0e: 55:5c:d1:7f:00:70:08:25:6a:b7:98:1e:b9:c8:cd:46:e5:16: ea:da:f0:24:af:40:c2:ac:8e:5c:da:3e:c1:33:b8:30:33:36: 46:cc:74:2b:9b:c9:b3:fa:89:1f:35:5b:d4:3a:10:e7:cc:bd: 74:f7:03:ff:f0:14:bb:93:c5:f4:93:5f:a1:87:a6:62:27:d6: be:fa:bf:a0:5b:17:29:8c:89:67:c0:a1:44:e5:78:a1:a1:04: 80:74:18:72:a4:8d:db:7a:a2:13:da:6c:c1:a6:82:2c:2f:80: 71:c4:17:1e:ba:04:b0:b1:d9:eb:cc:3a:25:b3:e7:94:ee:bf: 72:d7:5f:7f:bc:fe:b1:ac:c0:fb:2e:2f:b4:80:4f:e1:85:72: a4:d3:63:99:5e:88:c1:87:bb:cd:13:19:4b:2e:1e:af:3e:db: d5:b3:da:2a:ee:1d:f9:88:68:bc:bd:6b:7e:54:f0:e8:de:d0: b7:14:4f:5d:b6:2c:60:c5:8e:bf:d4:41:25:3d:b0:91:96:08: ce:6a:44:aa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f+67i07cQE64FC1HQfvnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYTc1ODkwNGM3NTg1NmUzNTg1YTQ0MzNhZTVlYzU3ZmVm MWEzYzcwHhcNMjYwMTAyMDIxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjQ4YjFmNmJjNmQ0NDkyOGRmNjZiOWNkYzBmNzM5ZDU1MzRjMTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiitQKzDpuSf0I6mYHKSD4S2djEsX tzsXa611gNaKmEuW1w35MbylJ4GJghpvAx9ogJrY8bM/hwoV1guba/LmW4m8lqYm rqzumo3bD5pgaub6gVYwSixVp3J9mfQK14/QAmbKAXDiCBO3al6zTV0fBO8jpTwT L63lwIxpn2vTnnVerqtK/6Aj7wWi3wlAdwIroc5ZPfONORbwCmEuXJIHmyvlPaLN +YHv6KnxGtF59PMG+ZtKvZQo9Vnpti/ffLWpvsMR5S5cKAJKx+uJ/6CcU4ZMGS5U /hbaYGpnmCOet9CkvI+Xd70fPlFDY2WD0OYuq/Tyf8SGTwp2Aq7QKpNS2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMZIsfa8bUSSjfZrnNwPc51VNMEmMB8GA1UdIwQY MBaAFLOnWJBMdYVuNYWkQzrl7Ff+8aPHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczZkWWtFeDFoVzQxaGFSRE91WHNWXzd4bzhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8xNDljMDEtODQwZC00NWY2LTgyM2Yt ZTJmMGUxYzI2MTA1LzEveGtpeDlyeHRSSktOOW11YzNBOXpuVlUwd1NZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy8xNDljMDEtODQwZC00NWY2LTgyM2YtZTJmMGUxYzI2MTA1 LzEvczZkWWtFeDFoVzQxaGFSRE91WHNWXzd4bzhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwKKEMA0G CSqGSIb3DQEBCwUAA4IBAQB/I91kC0erg+eryZeRscpF/Cncp/t8fq+CT5kRsMla /upWPNjlnprFR/7Jcb4puQ0eFRPSUA5VXNF/AHAIJWq3mB65yM1G5Rbq2vAkr0DC rI5c2j7BM7gwMzZGzHQrm8mz+okfNVvUOhDnzL109wP/8BS7k8X0k1+hh6ZiJ9a+ +r+gWxcpjIlnwKFE5XihoQSAdBhypI3beqIT2mzBpoIsL4BxxBceugSwsdnrzDol s+eU7r9y119/vP6xrMD7Li+0gE/hhXKk02OZXojBh7vNExlLLh6vPtvVs9oq7h35 iGi8vWt+VPDo3tC3FE9dtixgxY6/1EElPbCRlgjOakSq -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:18 2026 by rpki-client