This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/XT1DhK1n-LENtaNf69ybqi-40oE.roa File: XT1DhK1n-LENtaNf69ybqi-40oE.roa (raw, json) Hash identifier: iw8DvZCc5wJ/+RRQfpuCqcAs7ScbIsZyNViMpkPkLSw= Subject key identifier: 5D:3D:43:84:AD:67:F8:B1:0D:B5:A3:5F:EB:DC:9B:AA:2F:B8:D2:81 Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f Certificate serial: 019B78349B1D2E55A2473D3BE737C6692A04 Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/XT1DhK1n-LENtaNf69ybqi-40oE.roa Signing time: Thu 01 Jan 2026 06:17:52 +0000 ROA not before: Thu 01 Jan 2026 06:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 46475 IP address blocks: 77.37.64.0/23 maxlen: 23 77.37.64.0/24 maxlen: 24 77.37.65.0/24 maxlen: 24 93.127.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 12:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:9b:1d:2e:55:a2:47:3d:3b:e7:37:c6:69:2a:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f Validity Not Before: Jan 1 06:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d3d4384ad67f8b10db5a35febdc9baa2fb8d281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b0:f4:54:24:e0:ce:82:5e:a4:b8:49:0c:4e: cf:02:97:df:89:7b:c7:9b:7d:79:df:63:70:70:01: d5:58:40:3b:94:1e:95:6a:29:fb:35:c2:b8:7f:45: e7:de:05:c4:c1:d4:35:da:f7:10:56:a7:ef:00:5d: fa:9d:26:32:36:0a:f2:c3:8c:7a:d2:65:de:f8:ac: 15:b4:fd:75:2e:ff:a5:eb:8c:e3:07:e6:6d:a0:ad: d4:58:c2:e1:0d:6f:60:c5:7f:8b:20:af:85:5f:c5: 90:0b:67:bd:18:95:84:a0:aa:07:fe:55:6f:7c:ac: d3:d2:0b:fc:c4:4f:b0:00:dc:9d:ad:ed:12:f6:e4: 33:0f:c8:0b:59:14:21:ce:65:42:64:d1:24:46:0d: fd:db:c0:32:89:d3:5d:f1:fc:75:9c:2c:36:c4:64: 14:21:c5:8e:ca:9f:39:bd:43:53:5b:64:0f:f7:49: 88:9a:c0:c2:79:2d:a3:9e:f0:0e:99:e7:43:88:ce: cf:6f:9f:dc:0b:e7:41:32:4d:36:d3:ed:8b:e9:bb: aa:f1:e3:da:95:3b:0f:d9:b7:86:8b:76:79:57:e8: d2:57:96:98:09:2f:fa:f1:61:7f:25:8f:ec:98:b2: 3c:d2:97:7d:e1:20:8c:75:15:35:0b:8c:62:eb:ed: 21:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:3D:43:84:AD:67:F8:B1:0D:B5:A3:5F:EB:DC:9B:AA:2F:B8:D2:81 X509v3 Authority Key Identifier: keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/XT1DhK1n-LENtaNf69ybqi-40oE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.37.64.0/23 93.127.222.0/23 Signature Algorithm: sha256WithRSAEncryption 1d:89:a1:e1:10:05:47:61:c8:f9:04:43:d3:ea:e8:78:b0:89: 9e:a7:29:2b:d0:d0:f6:da:65:fd:c1:c1:f0:bc:f2:15:32:40: af:bf:d6:7b:a7:00:8d:c8:33:ef:ca:b1:93:24:aa:46:d5:29: 97:ab:3d:13:ca:06:90:eb:5d:84:6c:3a:82:e1:d3:31:17:48: 5c:6d:5f:f3:42:08:52:9c:c1:89:91:e3:a3:af:67:b5:ab:66: 26:86:89:dd:46:b5:ed:1f:91:4c:d5:99:e4:bc:12:cd:a1:0c: 6b:52:be:64:8f:17:ad:49:2d:1c:b5:6d:d5:0c:a7:bb:f7:e5: 7e:17:4d:2b:ab:f1:04:54:c1:a3:4c:7c:73:4b:9d:e6:be:46: 03:cb:fd:7d:43:be:93:ec:4b:2c:6b:6c:e8:f1:66:29:1e:98: cf:f8:76:7a:ee:99:a0:c3:34:1d:76:4a:2f:58:b2:54:b9:17: b4:6e:7e:9a:f3:d3:d2:97:0d:3c:71:cf:0f:76:f9:0b:c5:b8: 28:26:c5:42:10:d8:ec:1f:fa:3e:18:56:e5:eb:db:33:08:71: bf:db:aa:40:3b:a3:4d:f7:b1:bc:01:73:a2:92:09:3f:4c:56: 98:95:d4:42:ec:4e:9a:86:22:54:02:67:63:e1:8a:e6:c1:6c: cc:44:6c:c9 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NJsdLlWiRz075zfGaSoEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNzhiYzNiZDM1MGVlZGM0ZjM3N2MyMjQ1NTZiMjUwZGE2 ZGRlNmYwHhcNMjYwMTAxMDYxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDNkNDM4NGFkNjdmOGIxMGRiNWEzNWZlYmRjOWJhYTJmYjhkMjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7D0VCTgzoJepLhJDE7PApffiXvH m31532NwcAHVWEA7lB6Vain7NcK4f0Xn3gXEwdQ12vcQVqfvAF36nSYyNgryw4x6 0mXe+KwVtP11Lv+l64zjB+ZtoK3UWMLhDW9gxX+LIK+FX8WQC2e9GJWEoKoH/lVv fKzT0gv8xE+wANydre0S9uQzD8gLWRQhzmVCZNEkRg3928AyidNd8fx1nCw2xGQU IcWOyp85vUNTW2QP90mImsDCeS2jnvAOmedDiM7Pb5/cC+dBMk020+2L6buq8ePa lTsP2beGi3Z5V+jSV5aYCS/68WF/JY/smLI80pd94SCMdRU1C4xi6+0hNwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFF09Q4StZ/ixDbWjX+vcm6ovuNKBMB8GA1UdIwQY MBaAFMN4vDvTUO7cTzd8IkVWslDabd5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYt NDQxNDU1OGZkY2JiLzEvWFQxRGhLMW4tTEVOdGFOZjY5eWJxaS00MG9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYtNDQxNDU1OGZkY2Ji LzEvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBTSVAAwQB XX/eMA0GCSqGSIb3DQEBCwUAA4IBAQAdiaHhEAVHYcj5BEPT6uh4sImepykr0ND2 2mX9wcHwvPIVMkCvv9Z7pwCNyDPvyrGTJKpG1SmXqz0TygaQ612EbDqC4dMxF0hc bV/zQghSnMGJkeOjr2e1q2YmhondRrXtH5FM1ZnkvBLNoQxrUr5kjxetSS0ctW3V DKe79+V+F00rq/EEVMGjTHxzS53mvkYDy/19Q76T7Essa2zo8WYpHpjP+HZ67pmg wzQddkovWLJUuRe0bn6a89PSlw08cc8PdvkLxbgoJsVCENjsH/o+GFbl69szCHG/ 26pAO6NN97G8AXOikgk/TFaYldRC7E6ahiJUAmdj4YrmwWzMRGzJ -----END CERTIFICATE-----Generated at Wed Jan 21 17:33:42 2026 by rpki-client