This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/xyVPs0ecwv7hgKVZwIDRh0zqfGM.roa File: xyVPs0ecwv7hgKVZwIDRh0zqfGM.roa (raw, json) Hash identifier: V+bXCXbV9NnDV0p52d/jRRKy0cavlH8sSqLEer0tVtk= Subject key identifier: C7:25:4F:B3:47:9C:C2:FE:E1:80:A5:59:C0:80:D1:87:4C:EA:7C:63 Certificate issuer: /CN=96dcebaa8cd32dc4bf1d66d0873a1b6f3d73498f Certificate serial: 019B7AC856BAEB2F5CCD569699D8085E1E22 Authority key identifier: 96:DC:EB:AA:8C:D3:2D:C4:BF:1D:66:D0:87:3A:1B:6F:3D:73:49:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltzrqozTLcS_HWbQhzobbz1zSY8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/xyVPs0ecwv7hgKVZwIDRh0zqfGM.roa Signing time: Thu 01 Jan 2026 18:18:28 +0000 ROA not before: Thu 01 Jan 2026 18:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209621 IP address blocks: 139.28.116.0/22 maxlen: 22 2a07:5fc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft rsync://rpki.ripe.net/repository/DEFAULT/ltzrqozTLcS_HWbQhzobbz1zSY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:56:ba:eb:2f:5c:cd:56:96:99:d8:08:5e:1e:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96dcebaa8cd32dc4bf1d66d0873a1b6f3d73498f Validity Not Before: Jan 1 18:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7254fb3479cc2fee180a559c080d1874cea7c63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b8:1d:9a:81:2c:81:47:5c:8e:39:41:a1:e5: 76:fa:54:b4:e3:e0:88:42:80:50:a2:47:4a:28:74: bd:2c:f9:4f:78:2e:db:a0:ad:b2:0e:a6:5f:1d:0e: f5:96:18:bc:82:a7:b0:31:c5:0c:14:f9:59:0a:b8: 4a:69:ac:b2:ea:28:19:7b:b5:cc:77:56:21:df:f5: 73:87:93:d7:cb:a4:bb:bc:14:de:c5:2b:97:6b:79: cb:5c:5e:ce:48:d7:a3:f7:22:0c:00:d7:a6:55:ee: 80:c6:30:25:80:f8:09:61:a7:57:fa:1f:e9:b9:71: 38:21:71:30:76:25:75:01:bb:52:53:19:7e:ad:19: 28:1e:c3:b9:df:c8:51:40:49:92:ba:07:53:05:5a: 9e:dd:42:36:12:55:e6:b4:b6:87:fc:2e:96:e7:cd: 7e:b6:1e:7f:52:6c:ea:03:b1:99:36:20:bc:59:3b: d9:e5:5c:19:82:e0:ae:d9:ba:ab:b7:27:f4:f3:ee: 57:bb:ce:f8:e8:03:29:52:76:71:8c:e6:4a:5d:6e: 4e:35:e0:7f:f1:5d:4c:0f:87:37:f6:fd:25:16:1b: f2:ef:2f:6a:af:65:8c:56:bf:dd:5b:fa:16:32:29: 71:53:74:82:f5:4a:f0:99:21:5e:31:8f:61:8c:a5: 94:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:25:4F:B3:47:9C:C2:FE:E1:80:A5:59:C0:80:D1:87:4C:EA:7C:63 X509v3 Authority Key Identifier: keyid:96:DC:EB:AA:8C:D3:2D:C4:BF:1D:66:D0:87:3A:1B:6F:3D:73:49:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltzrqozTLcS_HWbQhzobbz1zSY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/xyVPs0ecwv7hgKVZwIDRh0zqfGM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.28.116.0/22 IPv6: 2a07:5fc0::/29 Signature Algorithm: sha256WithRSAEncryption 0c:74:5f:35:c2:47:dd:95:7c:f3:8d:a5:4c:6a:f7:2e:1d:b4: fa:a6:d1:32:a9:32:ce:29:15:ea:9d:9f:62:5a:68:66:bb:5e: 1f:b6:32:a6:7a:a7:fa:5f:02:a0:58:08:95:b2:59:c8:d1:73: 9f:85:67:f5:2a:f0:19:e3:55:60:ed:33:71:33:3c:88:96:7e: 3b:dd:02:75:eb:b5:bb:86:26:e1:87:5e:9b:84:b9:1d:fb:6d: c9:cd:cc:99:60:91:87:fa:04:92:00:4f:20:f9:f2:c7:d2:6c: 1c:ce:f4:87:5b:a4:de:24:d5:26:76:e6:17:cb:32:dd:62:51: 83:02:e5:b1:0e:2d:30:43:a0:e7:d7:8d:2b:88:ea:57:01:35: 7b:c0:8e:96:c9:5f:0f:80:49:8c:d6:7a:3e:11:15:72:72:b5: fb:1f:1e:aa:88:3b:48:cc:f6:fc:4f:03:af:22:51:41:2f:b3: 2f:59:25:6c:e2:40:56:b8:af:5d:fa:45:66:c5:16:89:7c:8e: 5b:6f:f5:46:89:f6:a6:d8:75:c2:79:96:0b:07:4b:b1:98:a5: ee:69:6a:13:3b:2d:87:62:f2:fd:74:d6:ac:a0:34:b3:0e:32: 45:cf:2b:8c:0c:54:22:57:ae:e9:e2:81:97:2c:ec:2c:c8:e3: 79:e6:7b:d6 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6yFa66y9czVaWmdgIXh4iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZGNlYmFhOGNkMzJkYzRiZjFkNjZkMDg3M2ExYjZmM2Q3 MzQ5OGYwHhcNMjYwMTAxMTgxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzI1NGZiMzQ3OWNjMmZlZTE4MGE1NTljMDgwZDE4NzRjZWE3YzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7gdmoEsgUdcjjlBoeV2+lS04+CI QoBQokdKKHS9LPlPeC7boK2yDqZfHQ71lhi8gqewMcUMFPlZCrhKaayy6igZe7XM d1Yh3/Vzh5PXy6S7vBTexSuXa3nLXF7OSNej9yIMANemVe6AxjAlgPgJYadX+h/p uXE4IXEwdiV1AbtSUxl+rRkoHsO538hRQEmSugdTBVqe3UI2ElXmtLaH/C6W581+ th5/UmzqA7GZNiC8WTvZ5VwZguCu2bqrtyf08+5Xu8746AMpUnZxjOZKXW5ONeB/ 8V1MD4c39v0lFhvy7y9qr2WMVr/dW/oWMilxU3SC9UrwmSFeMY9hjKWUgwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMclT7NHnML+4YClWcCA0YdM6nxjMB8GA1UdIwQY MBaAFJbc66qM0y3Evx1m0Ic6G289c0mPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHR6cnFvelRMY1NfSFdiUWh6b2JiejF6U1k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8wNjk3YzAtOThhZS00NGFiLWI0YWIt YjYxNWM1YzYwNjUyLzEveHlWUHMwZWN3djdoZ0tWWndJRFJoMHpxZkdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC8wNjk3YzAtOThhZS00NGFiLWI0YWItYjYxNWM1YzYwNjUy LzEvbHR6cnFvelRMY1NfSFdiUWh6b2JiejF6U1k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCixx0MA0E AgACMAcDBQMqB1/AMA0GCSqGSIb3DQEBCwUAA4IBAQAMdF81wkfdlXzzjaVMavcu HbT6ptEyqTLOKRXqnZ9iWmhmu14ftjKmeqf6XwKgWAiVslnI0XOfhWf1KvAZ41Vg 7TNxMzyIln473QJ167W7hibhh16bhLkd+23JzcyZYJGH+gSSAE8g+fLH0mwczvSH W6TeJNUmduYXyzLdYlGDAuWxDi0wQ6Dn140riOpXATV7wI6WyV8PgEmM1no+ERVy crX7Hx6qiDtIzPb8TwOvIlFBL7MvWSVs4kBWuK9d+kVmxRaJfI5bb/VGifam2HXC eZYLB0uxmKXuaWoTOy2HYvL9dNasoDSzDjJFzyuMDFQiV67p4oGXLOwsyON55nvW -----END CERTIFICATE-----Generated at Mon Feb 9 20:11:09 2026 by rpki-client