This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/X7VKKNvOYZTTFDZ8BCWjmPebtX8.roa File: X7VKKNvOYZTTFDZ8BCWjmPebtX8.roa (raw, json) Hash identifier: L/kFEnNplgovPacWJl2tFaydAgsY/9Zn113PwxIDUis= Subject key identifier: 5F:B5:4A:28:DB:CE:61:94:D3:14:36:7C:04:25:A3:98:F7:9B:B5:7F Certificate issuer: /CN=f2e2810f49b36fdd641c326bd1de4e42d128b046 Certificate serial: 019B7C120DDB109FA3911BFDA8ABB4104AC1 Authority key identifier: F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/X7VKKNvOYZTTFDZ8BCWjmPebtX8.roa Signing time: Fri 02 Jan 2026 00:18:36 +0000 ROA not before: Fri 02 Jan 2026 00:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15557 IP address blocks: 46.218.0.0/16 maxlen: 24 77.104.0.0/18 maxlen: 24 82.101.0.0/18 maxlen: 24 83.145.64.0/18 maxlen: 24 89.224.0.0/14 maxlen: 24 92.102.0.0/15 maxlen: 24 185.204.172.0/22 maxlen: 24 195.167.192.0/20 maxlen: 24 195.167.224.0/20 maxlen: 24 195.248.0.0/19 maxlen: 19 212.99.0.0/17 maxlen: 24 212.103.0.0/19 maxlen: 24 213.30.128.0/18 maxlen: 24 213.244.0.0/19 maxlen: 24 217.66.112.0/20 maxlen: 24 2a02:e000::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:0d:db:10:9f:a3:91:1b:fd:a8:ab:b4:10:4a:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2e2810f49b36fdd641c326bd1de4e42d128b046 Validity Not Before: Jan 2 00:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5fb54a28dbce6194d314367c0425a398f79bb57f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cb:f8:fd:c5:a6:21:94:4b:67:79:8f:fb:2e: 29:18:76:db:0e:9f:61:7b:90:b6:60:b0:87:89:69: 60:c3:36:a5:b2:f7:40:06:99:b7:84:e2:27:0a:ed: fa:e1:ec:b7:b9:7b:03:de:34:df:b5:57:5f:b1:c4: 25:30:9c:e3:58:07:d9:53:9a:60:7e:90:22:8c:da: ce:fb:85:87:f9:ee:a2:d5:0f:ad:30:57:12:29:ad: 71:18:cd:c8:42:3d:51:a4:58:2a:8e:51:68:08:83: 00:65:35:1d:b8:fe:b9:43:00:35:b8:66:a3:72:1e: 8c:28:70:49:63:6b:68:e9:8e:42:da:63:e2:fd:ba: da:65:63:54:f6:a3:62:5c:ee:51:7f:07:c8:de:75: 34:61:67:e0:62:f2:70:2a:d3:44:8c:f8:04:0a:25: 6d:5a:3c:f6:28:92:6e:4d:3a:36:e6:d1:37:90:2a: 73:9d:39:6f:57:54:1a:32:c7:a0:4b:90:54:53:86: 06:5c:63:65:76:a9:36:54:24:5b:64:6f:45:a0:21: b7:35:4f:07:82:3e:09:71:b9:12:fd:f1:1a:3e:0e: a5:84:da:3b:7a:3b:e0:81:71:b2:53:3d:ed:f0:e6: 42:13:58:9a:a9:51:94:67:0f:49:b4:f1:89:a1:e1: 97:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:B5:4A:28:DB:CE:61:94:D3:14:36:7C:04:25:A3:98:F7:9B:B5:7F X509v3 Authority Key Identifier: keyid:F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/X7VKKNvOYZTTFDZ8BCWjmPebtX8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.218.0.0/16 77.104.0.0/18 82.101.0.0/18 83.145.64.0/18 89.224.0.0/14 92.102.0.0/15 185.204.172.0/22 195.167.192.0/20 195.167.224.0/20 195.248.0.0/19 212.99.0.0/17 212.103.0.0/19 213.30.128.0/18 213.244.0.0/19 217.66.112.0/20 IPv6: 2a02:e000::/29 Signature Algorithm: sha256WithRSAEncryption 46:fd:70:ed:0d:dd:a5:60:b9:ec:5d:2d:d6:09:3a:3d:71:a5: d7:92:96:d5:9a:33:ce:24:e7:fb:6c:72:ef:94:b4:39:1e:6e: 36:4d:1a:0f:04:d7:94:5d:68:ed:74:ba:53:bc:a0:dd:a9:fd: 40:9b:2f:f5:8b:58:a2:b9:f1:52:df:cc:30:81:db:42:e6:75: 4d:f0:2a:44:41:82:25:a8:43:52:ca:46:ed:4c:6b:e7:9c:bf: da:9b:59:15:57:a4:4d:33:51:ad:54:a9:a8:c0:47:38:2d:1c: 7f:5d:5c:b3:63:7e:4e:37:b8:5d:58:66:06:df:1b:0c:d2:89: 69:a4:0e:c3:0c:40:55:26:a9:0d:1b:e2:72:f5:ea:82:da:95: 9c:05:c6:40:de:7c:d4:37:3e:c3:56:21:c9:05:fe:49:7c:8b: 91:64:ef:8c:78:ee:fe:c5:c5:41:e3:2e:6b:ab:55:48:3f:c1: f7:71:da:c8:ca:b0:26:bd:ee:ec:cf:f1:99:ce:1b:b2:56:b6: 93:3c:de:5f:36:08:6b:26:6e:32:39:9e:aa:8b:b3:9b:b1:ce: d1:6d:fd:73:99:1f:ec:56:cb:cd:62:0d:61:11:22:63:67:7b: 8a:ab:97:30:4b:e1:f7:9d:73:e7:87:21:14:53:5d:af:6c:16: 6a:97:f6:f6 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgISAZt8Eg3bEJ+jkRv9qKu0EErBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyZTI4MTBmNDliMzZmZGQ2NDFjMzI2YmQxZGU0ZTQyZDEy OGIwNDYwHhcNMjYwMTAyMDAxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmI1NGEyOGRiY2U2MTk0ZDMxNDM2N2MwNDI1YTM5OGY3OWJiNTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8v4/cWmIZRLZ3mP+y4pGHbbDp9h e5C2YLCHiWlgwzalsvdABpm3hOInCu364ey3uXsD3jTftVdfscQlMJzjWAfZU5pg fpAijNrO+4WH+e6i1Q+tMFcSKa1xGM3IQj1RpFgqjlFoCIMAZTUduP65QwA1uGaj ch6MKHBJY2to6Y5C2mPi/braZWNU9qNiXO5RfwfI3nU0YWfgYvJwKtNEjPgECiVt Wjz2KJJuTTo25tE3kCpznTlvV1QaMsegS5BUU4YGXGNldqk2VCRbZG9FoCG3NU8H gj4JcbkS/fEaPg6lhNo7ejvggXGyUz3t8OZCE1iaqVGUZw9JtPGJoeGXLwIDAQAB o4ICaTCCAmUwHQYDVR0OBBYEFF+1SijbzmGU0xQ2fAQlo5j3m7V/MB8GA1UdIwQY MBaAFPLigQ9Js2/dZBwya9HeTkLRKLBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHVLQkQwbXpiOTFrSERKcjBkNU9RdEVvc0VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi83OWU5MDUtZmIwZC00YjhiLTkzOTAt NTBkMmI3MGJjZjMxLzEvWDdWS0tOdk9ZWlRURkRaOEJDV2ptUGVidFg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi83OWU5MDUtZmIwZC00YjhiLTkzOTAtNTBkMmI3MGJjZjMx LzEvOHVLQkQwbXpiOTFrSERKcjBkNU9RdEVvc0VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBdBAIAATBXAwMALtoDBAZN aAADBAZSZQADBAZTkUADAwJZ4AMDAVxmAwQCucysAwQEw6fAAwQEw6fgAwQFw/gA AwQH1GMAAwQF1GcAAwQG1R6AAwQF1fQAAwQE2UJwMA0EAgACMAcDBQMqAuAAMA0G CSqGSIb3DQEBCwUAA4IBAQBG/XDtDd2lYLnsXS3WCTo9caXXkpbVmjPOJOf7bHLv lLQ5Hm42TRoPBNeUXWjtdLpTvKDdqf1Amy/1i1iiufFS38wwgdtC5nVN8CpEQYIl qENSykbtTGvnnL/am1kVV6RNM1GtVKmowEc4LRx/XVyzY35ON7hdWGYG3xsM0olp pA7DDEBVJqkNG+Jy9eqC2pWcBcZA3nzUNz7DViHJBf5JfIuRZO+MeO7+xcVB4y5r q1VIP8H3cdrIyrAmve7sz/GZzhuyVraTPN5fNghrJm4yOZ6qi7Obsc7Rbf1zmR/s VsvNYg1hESJjZ3uKq5cwS+H3nXPnhyEUU12vbBZql/b2 -----END CERTIFICATE-----Generated at Wed Jan 21 06:07:27 2026 by rpki-client