This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/Xe7Q3eQ_zRFoXx82N03IjvhgxdM.roa File: Xe7Q3eQ_zRFoXx82N03IjvhgxdM.roa (raw, json) Hash identifier: f1v3DQ+f28VV3rL9c+CaytHItkv+65iYkUhizFS/GxE= Subject key identifier: 5D:EE:D0:DD:E4:3F:CD:11:68:5F:1F:36:37:4D:C8:8E:F8:60:C5:D3 Certificate issuer: /CN=6faae55613fc89586f7bd6de0edca097b8615a6a Certificate serial: 019B797DDC79061975DDFFB1ABB92A494BAA Authority key identifier: 6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/Xe7Q3eQ_zRFoXx82N03IjvhgxdM.roa Signing time: Thu 01 Jan 2026 12:17:30 +0000 ROA not before: Thu 01 Jan 2026 12:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31898 IP address blocks: 185.208.36.0/22 maxlen: 22 217.74.176.0/22 maxlen: 22 2001:1a30::/48 maxlen: 48 2001:1a30:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 12:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:dc:79:06:19:75:dd:ff:b1:ab:b9:2a:49:4b:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6faae55613fc89586f7bd6de0edca097b8615a6a Validity Not Before: Jan 1 12:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5deed0dde43fcd11685f1f36374dc88ef860c5d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:16:12:a9:c6:1c:b6:7e:47:77:52:1c:bf:98: 7f:ab:c0:fb:e3:7e:f5:cd:f5:42:fa:9d:8a:65:0b: b7:b4:6a:e4:ca:38:29:d8:0e:13:7e:4e:83:d7:b1: 0d:36:03:80:52:8b:b8:5a:aa:4a:8b:45:0b:9c:4e: 7f:57:7d:02:aa:65:43:1a:aa:6c:b0:fc:4b:b1:17: 9b:90:46:fa:0b:3c:e0:59:a1:85:2d:59:40:8d:6f: 14:78:01:83:62:82:77:c4:9c:88:3b:b0:22:2c:67: fd:3a:ad:99:93:93:c6:a4:73:18:22:d7:3b:eb:4a: 55:30:f4:df:24:2f:0a:26:d2:6e:39:bc:59:9f:27: 92:b2:92:35:ec:e8:ee:66:0d:20:15:f0:79:e4:f2: d8:ee:2e:e0:88:5e:e5:fa:56:fb:05:6f:a4:99:25: 03:fc:17:98:a4:0d:d1:81:44:9f:00:2d:b6:16:9c: 2c:5d:49:de:ee:39:73:32:8b:4c:60:48:0a:b4:2d: 94:81:e3:29:ca:d5:16:d4:4f:e6:ad:98:84:b4:05: 64:5b:d0:fa:bc:f0:26:1b:6f:69:4a:61:18:1b:54: 7a:f5:61:0d:93:1a:79:44:4f:81:38:da:59:1e:be: 99:ca:d3:6c:dd:57:91:c8:d5:7d:13:f8:20:89:5b: bc:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:EE:D0:DD:E4:3F:CD:11:68:5F:1F:36:37:4D:C8:8E:F8:60:C5:D3 X509v3 Authority Key Identifier: keyid:6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/Xe7Q3eQ_zRFoXx82N03IjvhgxdM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.208.36.0/22 217.74.176.0/22 IPv6: 2001:1a30::/48 2001:1a30:c000::/48 Signature Algorithm: sha256WithRSAEncryption 32:1b:34:26:dc:5d:13:4e:fb:a4:e6:86:7a:75:f3:88:c2:65: ca:5d:6e:b2:7f:7f:b6:eb:d8:7f:b1:60:43:d4:bf:d8:83:53: 33:1d:5e:e6:0e:ea:29:33:06:15:6b:59:26:62:b8:b1:e3:e1: 57:29:16:04:1b:e3:77:12:88:7f:a8:89:3f:58:68:b9:c9:9b: 29:a5:98:bb:6a:c5:3f:41:d7:dd:65:8e:a0:4c:5d:d9:53:5c: 9f:d2:52:49:aa:2e:9a:12:30:85:ec:37:ff:9e:f3:10:41:c3: 2c:01:51:09:07:ed:c7:64:a2:06:9c:cd:13:63:92:5c:d6:10: 38:b5:44:17:a7:6b:23:b5:de:cf:66:8e:0f:70:37:45:1a:0e: 8e:ad:fe:e1:03:6d:48:e2:96:4d:15:ad:2a:2e:cd:df:c6:83: 5b:77:b7:95:e3:0e:67:92:66:18:71:c3:ba:e9:40:c9:4d:80: 77:5a:0a:89:29:9c:68:1f:bb:6a:ab:f7:44:6f:50:00:49:28: 36:39:d5:85:c8:9d:ff:89:87:b5:f6:b0:0b:3e:9d:b8:bc:6e: 60:35:eb:fc:40:49:15:e6:d3:a3:1f:88:83:e2:cd:7b:00:f7: 75:8d:ec:6f:24:a3:6d:c3:5c:8a:2b:3c:60:cb:e6:6b:f6:79: 49:28:52:5d -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt5fdx5Bhl13f+xq7kqSUuqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYWFlNTU2MTNmYzg5NTg2ZjdiZDZkZTBlZGNhMDk3Yjg2 MTVhNmEwHhcNMjYwMTAxMTIxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZGVlZDBkZGU0M2ZjZDExNjg1ZjFmMzYzNzRkYzg4ZWY4NjBjNWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxYSqcYctn5Hd1Icv5h/q8D74371 zfVC+p2KZQu3tGrkyjgp2A4Tfk6D17ENNgOAUou4WqpKi0ULnE5/V30CqmVDGqps sPxLsRebkEb6CzzgWaGFLVlAjW8UeAGDYoJ3xJyIO7AiLGf9Oq2Zk5PGpHMYItc7 60pVMPTfJC8KJtJuObxZnyeSspI17OjuZg0gFfB55PLY7i7giF7l+lb7BW+kmSUD /BeYpA3RgUSfAC22FpwsXUne7jlzMotMYEgKtC2UgeMpytUW1E/mrZiEtAVkW9D6 vPAmG29pSmEYG1R69WENkxp5RE+BONpZHr6ZytNs3VeRyNV9E/ggiVu82wIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFF3u0N3kP80RaF8fNjdNyI74YMXTMB8GA1UdIwQY MBaAFG+q5VYT/IlYb3vW3g7coJe4YVpqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjZybFZoUDhpVmh2ZTliZUR0eWdsN2hoV21vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi81Nzg4OWEtNTBkZi00YWJmLTgxZTUt MWIxMjY0MWY0OTNiLzEvWGU3UTNlUV96UkZvWHg4Mk4wM0lqdmhneGRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi81Nzg4OWEtNTBkZi00YWJmLTgxZTUtMWIxMjY0MWY0OTNi LzEvYjZybFZoUDhpVmh2ZTliZUR0eWdsN2hoV21vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQCudAkAwQC 2UqwMBgEAgACMBIDBwAgARowAAADBwAgARowwAAwDQYJKoZIhvcNAQELBQADggEB ADIbNCbcXRNO+6Tmhnp184jCZcpdbrJ/f7br2H+xYEPUv9iDUzMdXuYO6ikzBhVr WSZiuLHj4VcpFgQb43cSiH+oiT9YaLnJmymlmLtqxT9B191ljqBMXdlTXJ/SUkmq LpoSMIXsN/+e8xBBwywBUQkH7cdkogaczRNjklzWEDi1RBenayO13s9mjg9wN0Ua Do6t/uEDbUjilk0VrSouzd/Gg1t3t5XjDmeSZhhxw7rpQMlNgHdaCokpnGgfu2qr 90RvUABJKDY51YXInf+Jh7X2sAs+nbi8bmA16/xASRXm06MfiIPizXsA93WN7G8k o23DXIorPGDL5mv2eUkoUl0= -----END CERTIFICATE-----Generated at Sat Jan 10 20:50:16 2026 by rpki-client