This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/xpG2n7uOaA6uJtKoLlPX_didybY.roa File: xpG2n7uOaA6uJtKoLlPX_didybY.roa (raw, json) Hash identifier: yoBkvwTXsxWufbIraEfKOn7JbJXfeY9e9MM70Sw1B2Q= Subject key identifier: C6:91:B6:9F:BB:8E:68:0E:AE:26:D2:A8:2E:53:D7:FD:D8:9D:C9:B6 Certificate issuer: /CN=16f91ff671f1de5143aa21a008e26e27946ab85d Certificate serial: 019B7EA52F47FFBE9E4590E9A5C222608EBF Authority key identifier: 16:F9:1F:F6:71:F1:DE:51:43:AA:21:A0:08:E2:6E:27:94:6A:B8:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/xpG2n7uOaA6uJtKoLlPX_didybY.roa Signing time: Fri 02 Jan 2026 12:18:33 +0000 ROA not before: Fri 02 Jan 2026 12:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3320 IP address blocks: 185.161.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.mft rsync://rpki.ripe.net/repository/DEFAULT/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:2f:47:ff:be:9e:45:90:e9:a5:c2:22:60:8e:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16f91ff671f1de5143aa21a008e26e27946ab85d Validity Not Before: Jan 2 12:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c691b69fbb8e680eae26d2a82e53d7fdd89dc9b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:dc:8e:10:21:86:3e:43:5f:83:ff:8a:55:a1: aa:24:5f:3b:95:89:1b:8c:c6:a4:05:d5:0e:06:9a: 62:64:bd:20:3e:39:ad:ad:88:9d:5e:28:37:20:7e: 94:e8:ff:19:32:c4:23:de:e9:f6:ce:32:9e:a3:56: 52:6e:df:b5:9f:6c:df:f5:ea:ec:4e:08:c5:25:48: 03:2c:ba:9b:c6:0e:f8:29:0c:8f:5d:08:ce:7f:5c: a4:09:c7:36:65:8f:ef:27:7f:29:f0:31:eb:dc:e1: 07:b7:84:59:26:69:af:6d:1c:97:8c:a2:13:4b:07: 36:e9:3a:67:58:9f:ea:5f:4a:93:b8:99:f3:2e:9a: 5e:fd:5d:e4:ec:92:85:b1:22:cf:68:2d:b5:f1:ac: 47:39:de:08:7d:01:a8:cd:e0:4e:67:06:90:e9:fc: 51:8a:4d:57:b3:1a:73:56:13:ab:75:b8:3b:8f:98: 39:fb:06:a0:4e:33:72:88:21:49:52:75:e6:8b:90: 78:e2:bd:57:51:27:f9:17:14:cc:52:08:70:fd:51: a0:9f:21:df:fc:e2:7a:aa:a3:83:41:e5:b9:d3:35: 0b:ec:02:fd:17:4b:ee:70:e8:4a:79:78:6d:7a:2c: b6:dd:74:b1:0a:f5:a7:b8:d2:2c:0f:b7:72:2c:89: 21:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:91:B6:9F:BB:8E:68:0E:AE:26:D2:A8:2E:53:D7:FD:D8:9D:C9:B6 X509v3 Authority Key Identifier: keyid:16:F9:1F:F6:71:F1:DE:51:43:AA:21:A0:08:E2:6E:27:94:6A:B8:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/xpG2n7uOaA6uJtKoLlPX_didybY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.161.176.0/22 Signature Algorithm: sha256WithRSAEncryption 67:64:7f:19:ec:c4:2c:80:02:ec:0f:6f:6a:63:07:1f:42:fe: 80:41:4c:3b:2e:60:48:a5:11:f5:48:99:79:5a:88:9c:de:e9: 2e:86:2b:5f:c1:8c:d1:58:39:e4:41:9c:04:76:ec:dd:b8:2c: b5:8d:d5:49:e9:cd:d2:a6:3a:fb:9d:df:92:34:40:95:4e:9e: 92:35:55:b5:e3:d3:68:00:68:c2:40:c4:fd:1d:e2:cf:03:f7: 25:31:63:df:21:94:6f:01:07:ac:11:03:e9:08:e5:15:25:2b: a3:d2:72:83:2e:db:2a:2f:dc:66:a4:28:43:b5:fa:2b:78:fe: 81:08:5d:67:f9:c4:7b:63:20:ae:8c:d2:c5:25:1d:ba:2e:35: 1f:5d:c1:4e:39:ad:5f:d5:48:dd:9c:cc:5b:89:d0:42:bb:46: 26:85:8b:28:eb:bb:a9:54:66:90:64:36:de:2e:be:d7:91:89: 31:b0:5e:8b:9b:bb:40:9f:8c:b8:0b:a2:01:dc:8a:8d:24:b7: 82:5f:30:2b:b9:f9:09:f9:db:7d:78:a2:36:72:4c:e6:3d:63: 31:78:e2:9d:62:40:ab:e5:23:26:3c:d9:ac:c8:30:01:80:3f: b7:cf:48:81:a4:09:31:6a:03:a5:93:f8:45:8a:cd:19:15:e8: 0f:8e:a1:06 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pS9H/76eRZDppcIiYI6/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2ZjkxZmY2NzFmMWRlNTE0M2FhMjFhMDA4ZTI2ZTI3OTQ2 YWI4NWQwHhcNMjYwMTAyMTIxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjkxYjY5ZmJiOGU2ODBlYWUyNmQyYTgyZTUzZDdmZGQ4OWRjOWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtyOECGGPkNfg/+KVaGqJF87lYkb jMakBdUOBppiZL0gPjmtrYidXig3IH6U6P8ZMsQj3un2zjKeo1ZSbt+1n2zf9ers TgjFJUgDLLqbxg74KQyPXQjOf1ykCcc2ZY/vJ38p8DHr3OEHt4RZJmmvbRyXjKIT Swc26TpnWJ/qX0qTuJnzLppe/V3k7JKFsSLPaC218axHOd4IfQGozeBOZwaQ6fxR ik1XsxpzVhOrdbg7j5g5+wagTjNyiCFJUnXmi5B44r1XUSf5FxTMUghw/VGgnyHf /OJ6qqODQeW50zUL7AL9F0vucOhKeXhteiy23XSxCvWnuNIsD7dyLIkh1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMaRtp+7jmgOribSqC5T1/3Yncm2MB8GA1UdIwQY MBaAFBb5H/Zx8d5RQ6ohoAjibieUarhdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnZrZjluSHgzbEZEcWlHZ0NPSnVKNVJxdUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wOTY5NTEtZDU3My00Y2VlLTk1Zjkt YWE4NWE4YzBhZWMxLzEveHBHMm43dU9hQTZ1SnRLb0xsUFhfZGlkeWJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8wOTY5NTEtZDU3My00Y2VlLTk1ZjktYWE4NWE4YzBhZWMx LzEvRnZrZjluSHgzbEZEcWlHZ0NPSnVKNVJxdUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaGwMA0G CSqGSIb3DQEBCwUAA4IBAQBnZH8Z7MQsgALsD29qYwcfQv6AQUw7LmBIpRH1SJl5 Woic3ukuhitfwYzRWDnkQZwEduzduCy1jdVJ6c3Spjr7nd+SNECVTp6SNVW149No AGjCQMT9HeLPA/clMWPfIZRvAQesEQPpCOUVJSuj0nKDLtsqL9xmpChDtforeP6B CF1n+cR7YyCujNLFJR26LjUfXcFOOa1f1UjdnMxbidBCu0YmhYso67upVGaQZDbe Lr7XkYkxsF6Lm7tAn4y4C6IB3IqNJLeCXzArufkJ+dt9eKI2ckzmPWMxeOKdYkCr 5SMmPNmsyDABgD+3z0iBpAkxagOlk/hFis0ZFegPjqEG -----END CERTIFICATE-----Generated at Mon Jan 19 11:48:43 2026 by rpki-client