This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/X2iLay16x5QksfE9JjxyC7WVu-E.roa File: X2iLay16x5QksfE9JjxyC7WVu-E.roa (raw, json) Hash identifier: yT/oNJ7y4V01Lho2cqA94Tff1USrKA6sWC03Mms2Ges= Subject key identifier: 5F:68:8B:6B:2D:7A:C7:94:24:B1:F1:3D:26:3C:72:0B:B5:95:BB:E1 Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f Certificate serial: 019B7A5AA1076DFCFF1FEB9FB9A6DBA8FB19 Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/X2iLay16x5QksfE9JjxyC7WVu-E.roa Signing time: Thu 01 Jan 2026 16:18:38 +0000 ROA not before: Thu 01 Jan 2026 16:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61317 IP address blocks: 83.147.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:a1:07:6d:fc:ff:1f:eb:9f:b9:a6:db:a8:fb:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f Validity Not Before: Jan 1 16:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f688b6b2d7ac79424b1f13d263c720bb595bbe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ce:04:63:84:82:60:5a:fe:0a:4d:94:17:93: 7c:3a:40:ee:01:a9:f6:16:e2:89:33:73:95:68:c0: 21:cc:ee:87:2a:b5:fd:2a:2b:4e:64:f2:9a:95:fc: 56:2f:7d:65:f6:50:39:0f:4c:b8:b1:26:c7:e3:96: ed:9a:66:7d:93:9f:30:de:c8:69:d2:a1:1f:a7:fe: 73:f1:64:a9:2d:f9:c2:ea:cf:f6:de:fe:8b:88:06: d4:93:fe:fb:31:d4:4e:46:f3:70:df:a7:5e:08:17: d9:5a:00:25:5c:a0:cd:b8:71:73:56:39:75:82:cc: 07:70:0a:1d:6e:d3:3e:75:38:06:6a:88:8f:e8:13: ee:61:9d:3a:0c:a5:6b:3d:b1:4a:56:90:c2:ca:b3: 7a:3c:10:29:22:c7:80:89:65:97:72:9e:4c:eb:00: 2e:7a:2a:91:62:d6:77:23:b7:73:1e:cd:c3:27:4d: e9:ed:12:89:b1:e2:7a:79:49:e4:a7:a2:52:19:28: d2:50:71:f7:79:05:91:0c:3f:d0:0c:a8:6e:99:69: 7a:8f:8f:0b:de:97:46:8b:7f:9a:26:8a:4c:4f:d0: 20:05:47:2e:8c:4a:88:d3:1d:23:34:08:a4:7b:2b: 0c:6e:91:3c:67:4c:fc:af:10:df:33:2c:d6:18:ae: 19:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:68:8B:6B:2D:7A:C7:94:24:B1:F1:3D:26:3C:72:0B:B5:95:BB:E1 X509v3 Authority Key Identifier: keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/X2iLay16x5QksfE9JjxyC7WVu-E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.147.32.0/22 Signature Algorithm: sha256WithRSAEncryption 9c:12:7a:1b:4b:4f:42:82:42:77:9a:e0:38:e7:70:d8:ad:67: 15:5f:31:60:4d:df:b1:05:7d:c4:d8:9b:08:c0:3a:37:01:a2: ee:81:98:3e:f5:bb:0c:4d:5f:70:d7:3a:ab:a0:35:cd:dd:fc: 88:b9:35:b2:dd:9a:08:6c:a6:cc:99:2a:65:32:7a:9e:6c:43: 42:a9:62:2f:dd:0d:12:a7:e4:3b:2d:fc:53:3e:12:39:f6:68: 22:ed:87:6f:91:d5:89:b4:c1:bf:c1:23:c8:8a:a6:d6:51:59: 01:4a:35:86:21:d1:c7:2d:f4:3b:e0:24:74:52:31:49:05:f7: 3f:cb:7d:d6:5d:8c:a9:78:9c:cb:f6:f6:62:86:28:ed:ae:d5: a2:8c:4e:b6:b5:79:c1:21:1d:26:b3:f7:fb:20:e3:d0:b2:28: 63:ea:98:57:a2:43:bc:0a:b2:af:cc:6b:44:11:93:f4:51:2f: 4e:5c:40:d9:9f:ee:ac:fd:c7:b6:a4:bd:26:39:43:13:45:e0: 70:4a:1f:a9:d3:14:a1:bd:5b:87:6f:05:a1:82:bc:77:0b:0c: e8:c9:81:a4:78:ab:8e:65:24:8c:73:4e:be:63:87:64:5d:a3: 98:2f:83:d7:11:ca:ec:c3:bd:25:40:6c:73:5d:31:32:ef:60: 08:e5:41:ee -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WqEHbfz/H+ufuabbqPsZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm MzBjOWYwHhcNMjYwMTAxMTYxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjY4OGI2YjJkN2FjNzk0MjRiMWYxM2QyNjNjNzIwYmI1OTViYmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0M4EY4SCYFr+Ck2UF5N8OkDuAan2 FuKJM3OVaMAhzO6HKrX9KitOZPKalfxWL31l9lA5D0y4sSbH45btmmZ9k58w3shp 0qEfp/5z8WSpLfnC6s/23v6LiAbUk/77MdRORvNw36deCBfZWgAlXKDNuHFzVjl1 gswHcAodbtM+dTgGaoiP6BPuYZ06DKVrPbFKVpDCyrN6PBApIseAiWWXcp5M6wAu eiqRYtZ3I7dzHs3DJ03p7RKJseJ6eUnkp6JSGSjSUHH3eQWRDD/QDKhumWl6j48L 3pdGi3+aJopMT9AgBUcujEqI0x0jNAikeysMbpE8Z0z8rxDfMyzWGK4Z6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF9oi2steseUJLHxPSY8cgu1lbvhMB8GA1UdIwQY MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt MDhkMTI3MGMyZTcxLzEvWDJpTGF5MTZ4NVFrc2ZFOUpqeHlDN1dWdS1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCU5MgMA0G CSqGSIb3DQEBCwUAA4IBAQCcEnobS09CgkJ3muA453DYrWcVXzFgTd+xBX3E2JsI wDo3AaLugZg+9bsMTV9w1zqroDXN3fyIuTWy3ZoIbKbMmSplMnqebENCqWIv3Q0S p+Q7LfxTPhI59mgi7YdvkdWJtMG/wSPIiqbWUVkBSjWGIdHHLfQ74CR0UjFJBfc/ y33WXYypeJzL9vZihijtrtWijE62tXnBIR0ms/f7IOPQsihj6phXokO8CrKvzGtE EZP0US9OXEDZn+6s/ce2pL0mOUMTReBwSh+p0xShvVuHbwWhgrx3CwzoyYGkeKuO ZSSMc06+Y4dkXaOYL4PXEcrsw70lQGxzXTEy72AI5UHu -----END CERTIFICATE-----Generated at Thu Jan 8 12:58:20 2026 by rpki-client