This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/xh9-cYUUKhW8R7RtZCiBjbPkinU.roa File: xh9-cYUUKhW8R7RtZCiBjbPkinU.roa (raw, json) Hash identifier: KHkDJpMlqbbJXAmtu6AWC6oa3xuKdiclk8iuepf/pBc= Subject key identifier: C6:1F:7E:71:85:14:2A:15:BC:47:B4:6D:64:28:81:8D:B3:E4:8A:75 Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370 Certificate serial: 019B7F15CA002A31B2A7E4201583B86822CC Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/xh9-cYUUKhW8R7RtZCiBjbPkinU.roa Signing time: Fri 02 Jan 2026 14:21:32 +0000 ROA not before: Fri 02 Jan 2026 14:21:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 27323 IP address blocks: 185.255.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ca:00:2a:31:b2:a7:e4:20:15:83:b8:68:22:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370 Validity Not Before: Jan 2 14:21:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c61f7e7185142a15bc47b46d6428818db3e48a75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0a:29:b3:a5:4a:cd:fb:1f:64:88:77:5c:6a: a4:fc:a7:ed:fd:d7:f0:5c:de:f1:5f:39:7c:a9:6b: 7d:ac:eb:17:28:fa:83:02:82:98:ae:ac:f3:f7:c5: fc:8e:e3:2c:7c:da:27:c7:40:15:26:34:3e:60:4a: 5e:01:ab:68:45:2f:da:41:85:ae:e4:e4:49:20:f2: 7d:3d:0f:55:2a:eb:cf:e5:1d:b5:df:91:2f:cf:01: 29:8b:62:d8:b6:0d:13:da:0f:40:7c:f4:d0:89:01: 2d:d5:a8:1d:93:4c:c2:5d:21:2e:39:dd:45:8f:cb: c1:ab:95:94:fb:9b:a7:76:08:66:fd:cb:c8:0e:3b: 76:62:4c:a5:05:5b:4e:10:4e:01:59:3b:20:c2:83: 0f:3a:c1:7f:5b:2f:04:f8:9d:6a:49:a6:d8:20:f6: 59:f2:44:e2:88:8c:4a:13:aa:90:8c:b5:45:bb:40: ed:c5:5f:66:91:be:55:4e:d6:d5:d5:fc:8e:e5:f5: 4c:dd:0d:07:f7:f4:4f:b4:1e:69:8e:77:9d:76:5e: 34:60:e3:80:2e:39:69:8d:c7:de:6c:b1:63:df:64: 76:71:69:85:30:40:d5:a9:89:61:b8:84:51:68:7b: fb:41:b4:f3:40:47:c5:1e:ce:5f:4e:fd:f1:f7:20: a7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:1F:7E:71:85:14:2A:15:BC:47:B4:6D:64:28:81:8D:B3:E4:8A:75 X509v3 Authority Key Identifier: keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/xh9-cYUUKhW8R7RtZCiBjbPkinU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.255.115.0/24 Signature Algorithm: sha256WithRSAEncryption 75:e2:be:0c:91:a7:e5:59:5e:04:31:30:79:7e:5f:0b:08:11: 80:89:50:c8:6f:1a:db:52:d5:47:8b:1b:1a:96:ce:34:8f:db: 96:59:ff:49:b9:05:f9:57:a9:ab:e3:4b:56:65:38:d6:74:4a: 9c:72:40:58:cf:a3:4b:86:62:b3:7d:10:8d:40:2b:2b:4f:18: ac:5e:21:e7:d3:9c:22:c2:f9:d4:f1:2c:ba:0e:ec:66:33:2f: dd:6b:de:de:db:4d:6c:e1:12:a7:a2:3e:e3:4e:7d:d2:be:e8: f7:38:5e:00:73:5a:2f:8d:0c:b7:29:77:74:20:53:a5:e8:dc: 1e:79:bf:e1:cf:4d:87:a9:17:cd:06:39:45:ae:ac:d3:5a:be: 12:88:46:c2:48:24:d2:d2:43:f2:57:e4:55:22:d0:3a:5f:a5: dc:57:62:fd:32:8a:22:db:7e:4b:7c:6e:80:ff:b9:ae:10:5c: ac:f5:ce:e6:ce:c0:3e:d7:1c:6f:59:61:47:30:a2:a6:e5:5b: d0:36:cd:e9:99:7d:ec:7a:83:1d:37:b7:c0:c3:8b:59:16:23: bf:43:3c:2e:9f:4c:72:26:e7:d9:d6:d7:a7:78:3a:2d:42:8f: e2:95:68:9e:5c:e6:1c:35:9a:e8:7e:8a:cc:be:c7:c1:74:90: 2a:4c:f9:b3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FcoAKjGyp+QgFYO4aCLMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmOGFlYTJmMDI1ZjQ5NWJlYWNlZTdjZTVhODgyMDUxOWRk YTEzNzAwHhcNMjYwMTAyMTQyMTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjFmN2U3MTg1MTQyYTE1YmM0N2I0NmQ2NDI4ODE4ZGIzZTQ4YTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgops6VKzfsfZIh3XGqk/Kft/dfw XN7xXzl8qWt9rOsXKPqDAoKYrqzz98X8juMsfNonx0AVJjQ+YEpeAatoRS/aQYWu 5ORJIPJ9PQ9VKuvP5R2135EvzwEpi2LYtg0T2g9AfPTQiQEt1agdk0zCXSEuOd1F j8vBq5WU+5undghm/cvIDjt2YkylBVtOEE4BWTsgwoMPOsF/Wy8E+J1qSabYIPZZ 8kTiiIxKE6qQjLVFu0DtxV9mkb5VTtbV1fyO5fVM3Q0H9/RPtB5pjneddl40YOOA LjlpjcfebLFj32R2cWmFMEDVqYlhuIRRaHv7QbTzQEfFHs5fTv3x9yCnyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMYffnGFFCoVvEe0bWQogY2z5Ip1MB8GA1UdIwQY MBaAFE+K6i8CX0lb6s7nzlqIIFGd2hNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUt NjA4MDk1MmYwZTA0LzEveGg5LWNZVVVLaFc4UjdSdFpDaUJqYlBraW5VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUtNjA4MDk1MmYwZTA0 LzEvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf9zMA0G CSqGSIb3DQEBCwUAA4IBAQB14r4MkaflWV4EMTB5fl8LCBGAiVDIbxrbUtVHixsa ls40j9uWWf9JuQX5V6mr40tWZTjWdEqcckBYz6NLhmKzfRCNQCsrTxisXiHn05wi wvnU8Sy6DuxmMy/da97e201s4RKnoj7jTn3Svuj3OF4Ac1ovjQy3KXd0IFOl6Nwe eb/hz02HqRfNBjlFrqzTWr4SiEbCSCTS0kPyV+RVItA6X6XcV2L9Mooi235LfG6A /7muEFys9c7mzsA+1xxvWWFHMKKm5VvQNs3pmX3seoMdN7fAw4tZFiO/Qzwun0xy JufZ1teneDotQo/ilWieXOYcNZroforMvsfBdJAqTPmz -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:52 2026 by rpki-client