This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/xhYgnKDXKCLXTlxGKn83qxGD5Wk.roa File: xhYgnKDXKCLXTlxGKn83qxGD5Wk.roa (raw, json) Hash identifier: 4Tr8pcApL7OMPNYK6DHiqFf/BMOwe5lvOFY1rUx8z6A= Subject key identifier: C6:16:20:9C:A0:D7:28:22:D7:4E:5C:46:2A:7F:37:AB:11:83:E5:69 Certificate issuer: /CN=5fa386e97656d648ab5381b29666414081b00084 Certificate serial: 019B7DCA67D211D9BA330528A0C0602B516C Authority key identifier: 5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/xhYgnKDXKCLXTlxGKn83qxGD5Wk.roa Signing time: Fri 02 Jan 2026 08:19:35 +0000 ROA not before: Fri 02 Jan 2026 08:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34254 IP address blocks: 83.142.184.0/21 maxlen: 21 185.70.180.0/22 maxlen: 22 185.232.116.0/24 maxlen: 24 2a04:400::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:67:d2:11:d9:ba:33:05:28:a0:c0:60:2b:51:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fa386e97656d648ab5381b29666414081b00084 Validity Not Before: Jan 2 08:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c616209ca0d72822d74e5c462a7f37ab1183e569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6b:d8:d0:ac:e8:a1:91:58:6f:b0:80:d4:b6: 94:38:75:af:81:ee:9a:f4:b2:2f:8f:6b:0e:4f:4a: f0:72:38:8b:c2:fc:b7:cd:41:7a:bd:96:6f:4a:e7: 2b:a6:4f:ea:9b:74:f7:f9:42:dc:9b:56:d4:5e:c9: d2:9b:a5:4a:68:1c:ff:41:ec:0d:a1:6a:05:48:cb: 40:c1:0e:cb:84:12:09:d0:f9:45:51:28:ad:91:de: 64:07:9b:d5:b0:db:b1:49:8c:a1:bc:7a:9e:f0:60: 24:13:52:b0:6b:40:6e:54:82:93:2b:ed:8c:1f:26: 69:46:8e:76:a4:74:11:73:25:b5:12:b6:b6:24:2d: 2e:f1:47:8f:e5:78:e2:35:37:3b:11:0f:5a:a3:65: 91:9b:a0:f5:2e:38:40:30:51:98:c9:f9:51:49:92: 35:f9:f9:94:e9:df:34:65:fd:27:7b:95:ae:d0:7d: 87:37:49:cf:a8:c4:5d:63:d8:b7:31:a6:c2:77:26: dc:d4:51:cb:72:ad:fc:80:f5:39:87:ad:43:79:df: 8d:7a:b1:fc:5a:da:80:a9:f2:e0:e8:85:a3:01:02: 94:b0:32:b6:0a:4e:cf:4c:14:9d:db:f1:df:1a:b1: fe:e1:49:be:0e:59:6e:a9:0b:9c:90:af:a7:6e:3b: a3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:16:20:9C:A0:D7:28:22:D7:4E:5C:46:2A:7F:37:AB:11:83:E5:69 X509v3 Authority Key Identifier: keyid:5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/xhYgnKDXKCLXTlxGKn83qxGD5Wk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.142.184.0/21 185.70.180.0/22 185.232.116.0/24 IPv6: 2a04:400::/29 Signature Algorithm: sha256WithRSAEncryption 1e:07:14:42:f2:73:08:0f:15:2a:47:51:45:09:0d:5e:7f:ca: a7:12:c7:7f:60:25:76:fd:2a:ce:81:70:a5:1f:84:43:8e:1c: 5c:f4:17:f7:e6:7d:6b:47:1f:79:00:9f:69:66:b0:36:f4:b3: 65:59:c3:28:7a:b2:38:44:38:58:fd:16:5f:1e:b9:27:05:8f: 53:0f:f4:99:4e:ed:8a:ee:8e:50:9c:32:98:c9:a0:da:6b:4b: 64:51:e0:75:5d:48:b1:42:1f:4e:73:f8:0f:ab:ab:97:ce:1e: ee:a1:ae:72:94:f2:c5:f8:f8:5f:ba:db:9f:73:07:ca:c2:f4: a2:d9:c2:78:b3:56:5a:6b:9d:e1:d4:16:81:dd:2e:b6:93:5c: 08:e1:cb:22:77:a9:04:43:9e:7d:cd:d4:90:8c:bb:e4:12:26: 8e:b8:5d:8a:4d:25:8a:f9:aa:d7:2a:0e:39:9c:00:eb:43:54: f0:56:2d:3f:99:18:48:cb:f7:05:c0:4c:05:53:7d:30:13:ff: 51:70:c5:fc:6c:af:60:4d:aa:1b:2f:d6:34:f6:66:2a:fc:82: 2d:49:e9:1f:65:31:bd:f2:0d:68:5a:de:4b:4d:f8:22:0e:4a: 15:8d:33:93:af:b1:00:ec:62:78:14:82:1d:22:62:f2:7a:d5: c7:ac:00:c0 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt9ymfSEdm6MwUooMBgK1FsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYTM4NmU5NzY1NmQ2NDhhYjUzODFiMjk2NjY0MTQwODFi MDAwODQwHhcNMjYwMTAyMDgxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjE2MjA5Y2EwZDcyODIyZDc0ZTVjNDYyYTdmMzdhYjExODNlNTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmvY0KzooZFYb7CA1LaUOHWvge6a 9LIvj2sOT0rwcjiLwvy3zUF6vZZvSucrpk/qm3T3+ULcm1bUXsnSm6VKaBz/QewN oWoFSMtAwQ7LhBIJ0PlFUSitkd5kB5vVsNuxSYyhvHqe8GAkE1Kwa0BuVIKTK+2M HyZpRo52pHQRcyW1Era2JC0u8UeP5XjiNTc7EQ9ao2WRm6D1LjhAMFGYyflRSZI1 +fmU6d80Zf0ne5Wu0H2HN0nPqMRdY9i3MabCdybc1FHLcq38gPU5h61Ded+NerH8 WtqAqfLg6IWjAQKUsDK2Ck7PTBSd2/HfGrH+4Um+DlluqQuckK+nbjujWQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFMYWIJyg1ygi105cRip/N6sRg+VpMB8GA1UdIwQY MBaAFF+jhul2VtZIq1OBspZmQUCBsACEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDZPRzZYWlcxa2lyVTRHeWxtWkJRSUd3QUlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy81NTA1ZTAtMmU4YS00Yzc1LTgxMTgt OTUwY2UzOWE5NzdjLzEveGhZZ25LRFhLQ0xYVGx4R0tuODNxeEdENVdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy81NTA1ZTAtMmU4YS00Yzc1LTgxMTgtOTUwY2UzOWE5Nzdj LzEvWDZPRzZYWlcxa2lyVTRHeWxtWkJRSUd3QUlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDU464AwQC uUa0AwQAueh0MA0EAgACMAcDBQMqBAQAMA0GCSqGSIb3DQEBCwUAA4IBAQAeBxRC 8nMIDxUqR1FFCQ1ef8qnEsd/YCV2/SrOgXClH4RDjhxc9Bf35n1rRx95AJ9pZrA2 9LNlWcMoerI4RDhY/RZfHrknBY9TD/SZTu2K7o5QnDKYyaDaa0tkUeB1XUixQh9O c/gPq6uXzh7uoa5ylPLF+PhfutufcwfKwvSi2cJ4s1Zaa53h1BaB3S62k1wI4csi d6kEQ559zdSQjLvkEiaOuF2KTSWK+arXKg45nADrQ1TwVi0/mRhIy/cFwEwFU30w E/9RcMX8bK9gTaobL9Y09mYq/IItSekfZTG98g1oWt5LTfgiDkoVjTOTr7EA7GJ4 FIIdImLyetXHrADA -----END CERTIFICATE-----Generated at Mon Jan 26 20:26:01 2026 by rpki-client