This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/xhF6836ZAZ1v6FMBtDsruSd1XhM.roa File: xhF6836ZAZ1v6FMBtDsruSd1XhM.roa (raw, json) Hash identifier: CMajZTVB+UvtUZM05scLZACQyLK6q2OoOtMJquT+J6I= Subject key identifier: C6:11:7A:F3:7E:99:01:9D:6F:E8:53:01:B4:3B:2B:B9:27:75:5E:13 Certificate issuer: /CN=063b660f569b546b530ec6de69b308b3693e7f74 Certificate serial: 019B79EBEE842F9DB80949FE29DD3A5B463C Authority key identifier: 06:3B:66:0F:56:9B:54:6B:53:0E:C6:DE:69:B3:08:B3:69:3E:7F:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/xhF6836ZAZ1v6FMBtDsruSd1XhM.roa Signing time: Thu 01 Jan 2026 14:17:43 +0000 ROA not before: Thu 01 Jan 2026 14:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1930 IP address blocks: 192.92.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:ee:84:2f:9d:b8:09:49:fe:29:dd:3a:5b:46:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=063b660f569b546b530ec6de69b308b3693e7f74 Validity Not Before: Jan 1 14:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6117af37e99019d6fe85301b43b2bb927755e13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a6:2d:17:5f:29:33:9a:93:fb:72:6d:6d:10: 70:bb:b0:0c:6d:18:c9:bc:fb:0c:ea:d7:c5:e3:09: 2e:c8:31:af:c6:41:c1:b7:41:1b:84:dd:83:be:74: b4:dd:ed:f0:67:81:c4:60:e6:73:aa:d3:e3:cf:d3: 84:48:d7:45:6c:1e:b4:23:d7:91:6f:c1:d3:a0:86: d5:bc:79:2f:03:6d:02:21:b2:ef:29:ac:e3:11:81: e8:b6:e1:b0:58:61:52:91:81:98:5f:ce:18:4f:ff: 06:d8:3b:34:1d:83:7e:db:05:29:3b:bb:59:a3:8e: e4:1b:d8:34:16:b8:00:13:dc:1f:b0:8d:ec:f6:a5: 4a:2a:e9:ed:67:6d:3d:15:d2:1c:8e:11:a8:af:9d: 34:66:67:e7:fa:b2:eb:91:8d:87:7d:d3:eb:cf:64: df:9c:3d:16:28:cc:2e:1b:93:b1:b4:7e:cf:9a:7c: 4c:4d:ef:e6:7f:c4:75:0b:9e:c6:8d:be:35:d5:2a: c5:f2:ae:c1:7f:12:d4:b0:30:13:2d:05:f2:2d:ac: 5b:43:75:d7:0e:08:7a:fc:a8:96:19:e6:14:93:f7: 6f:58:3a:72:d4:f0:44:43:ab:c2:d2:d3:93:36:60: f3:91:70:ac:c3:ea:76:16:e6:82:ca:28:f1:b6:15: 08:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:11:7A:F3:7E:99:01:9D:6F:E8:53:01:B4:3B:2B:B9:27:75:5E:13 X509v3 Authority Key Identifier: keyid:06:3B:66:0F:56:9B:54:6B:53:0E:C6:DE:69:B3:08:B3:69:3E:7F:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/xhF6836ZAZ1v6FMBtDsruSd1XhM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.92.152.0/24 Signature Algorithm: sha256WithRSAEncryption 65:55:b0:45:47:0e:16:44:17:39:82:ea:0e:2e:a5:db:3b:a6: 43:79:5b:5c:3f:02:25:89:58:b6:ca:3d:83:58:e5:8c:73:3e: ba:fe:3c:f2:54:cb:1f:24:25:38:f2:42:c7:9d:39:8d:56:9f: 16:91:5b:d5:0c:e5:d4:bf:ee:73:dc:12:09:a6:31:d6:b4:4b: 6e:ae:5f:98:df:21:e2:d2:40:af:3f:3d:48:11:77:2f:ef:2e: 89:2c:37:f0:b7:49:dc:ba:5f:7f:e7:c1:d4:9a:0a:47:a4:4f: 23:6a:d3:d1:d5:9f:ce:1a:09:7a:ea:f9:59:ed:23:e0:73:d4: 7c:a7:0f:b1:10:30:11:c7:18:ea:f0:6a:f9:2b:23:ce:90:97: da:08:4a:86:b0:69:e2:c4:f5:0e:27:61:ef:47:ed:de:0d:d6: a3:c5:0c:fc:75:dc:7a:3b:4c:4e:ec:42:5b:e0:c9:0f:d8:fb: 4f:7b:9a:e2:14:ef:b3:b7:4f:94:74:06:18:cc:9a:8e:e7:73: 6c:1a:c9:fc:db:fd:79:f0:c4:8e:57:c8:d4:22:40:0f:67:4a: d3:3c:d5:a3:63:ed:76:d4:a4:20:9e:d1:39:dc:d2:b1:e1:e1: 5d:62:05:13:11:79:b8:5e:18:4e:45:1e:7d:67:c8:b1:2e:e0: e0:8a:aa:bb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt56+6EL524CUn+Kd06W0Y8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2M2I2NjBmNTY5YjU0NmI1MzBlYzZkZTY5YjMwOGIzNjkz ZTdmNzQwHhcNMjYwMTAxMTQxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjExN2FmMzdlOTkwMTlkNmZlODUzMDFiNDNiMmJiOTI3NzU1ZTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6YtF18pM5qT+3JtbRBwu7AMbRjJ vPsM6tfF4wkuyDGvxkHBt0EbhN2DvnS03e3wZ4HEYOZzqtPjz9OESNdFbB60I9eR b8HToIbVvHkvA20CIbLvKazjEYHotuGwWGFSkYGYX84YT/8G2Ds0HYN+2wUpO7tZ o47kG9g0FrgAE9wfsI3s9qVKKuntZ209FdIcjhGor500Zmfn+rLrkY2HfdPrz2Tf nD0WKMwuG5OxtH7PmnxMTe/mf8R1C57Gjb411SrF8q7BfxLUsDATLQXyLaxbQ3XX Dgh6/KiWGeYUk/dvWDpy1PBEQ6vC0tOTNmDzkXCsw+p2FuaCyijxthUILwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMYRevN+mQGdb+hTAbQ7K7kndV4TMB8GA1UdIwQY MBaAFAY7Zg9Wm1RrUw7G3mmzCLNpPn90MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmp0bUQxYWJWR3RURHNiZWFiTUlzMmstZjNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS85MmJhNWItYzczNS00YTM0LTg1MzQt YmMyNWFlNmViMTNjLzEveGhGNjgzNlpBWjF2NkZNQnREc3J1U2QxWGhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS85MmJhNWItYzczNS00YTM0LTg1MzQtYmMyNWFlNmViMTNj LzEvQmp0bUQxYWJWR3RURHNiZWFiTUlzMmstZjNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFyYMA0G CSqGSIb3DQEBCwUAA4IBAQBlVbBFRw4WRBc5guoOLqXbO6ZDeVtcPwIliVi2yj2D WOWMcz66/jzyVMsfJCU48kLHnTmNVp8WkVvVDOXUv+5z3BIJpjHWtEturl+Y3yHi 0kCvPz1IEXcv7y6JLDfwt0ncul9/58HUmgpHpE8jatPR1Z/OGgl66vlZ7SPgc9R8 pw+xEDARxxjq8Gr5KyPOkJfaCEqGsGnixPUOJ2HvR+3eDdajxQz8ddx6O0xO7EJb 4MkP2PtPe5riFO+zt0+UdAYYzJqO53NsGsn82/158MSOV8jUIkAPZ0rTPNWjY+12 1KQgntE53NKx4eFdYgUTEXm4XhhORR59Z8ixLuDgiqq7 -----END CERTIFICATE-----Generated at Mon Jan 26 22:33:01 2026 by rpki-client