This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/X_gWv_MDIxsAWRQKlQjOz4g5JM8.roa File: X_gWv_MDIxsAWRQKlQjOz4g5JM8.roa (raw, json) Hash identifier: QaOK9PZzUJWXqYUnExi4ORuf1TbR9vxmGpvqQoImZcI= Subject key identifier: 5F:F8:16:BF:F3:03:23:1B:00:59:14:0A:95:08:CE:CF:88:39:24:CF Certificate issuer: /CN=e93f3a41e6be524115c6c2b558bc280043a0224e Certificate serial: 019B797F31342EE9D14E191A5349CAC644A8 Authority key identifier: E9:3F:3A:41:E6:BE:52:41:15:C6:C2:B5:58:BC:28:00:43:A0:22:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6T86Qea-UkEVxsK1WLwoAEOgIk4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/X_gWv_MDIxsAWRQKlQjOz4g5JM8.roa Signing time: Thu 01 Jan 2026 12:18:57 +0000 ROA not before: Thu 01 Jan 2026 12:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51859 IP address blocks: 87.237.200.0/21 maxlen: 24 87.237.201.0/24 maxlen: 24 87.237.202.0/23 maxlen: 24 87.237.203.0/24 maxlen: 24 87.237.204.0/22 maxlen: 24 87.237.204.0/24 maxlen: 24 91.214.200.0/22 maxlen: 24 91.222.4.0/22 maxlen: 24 92.249.52.0/22 maxlen: 24 92.249.52.0/24 maxlen: 24 185.29.100.0/22 maxlen: 24 188.93.120.0/22 maxlen: 24 2a04:2e40::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.mft rsync://rpki.ripe.net/repository/DEFAULT/6T86Qea-UkEVxsK1WLwoAEOgIk4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:31:34:2e:e9:d1:4e:19:1a:53:49:ca:c6:44:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e93f3a41e6be524115c6c2b558bc280043a0224e Validity Not Before: Jan 1 12:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ff816bff303231b0059140a9508cecf883924cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3a:82:ae:24:a7:5a:92:51:86:6c:ff:16:b2: bd:5d:2c:3a:bc:0b:79:29:81:ed:82:90:be:8c:cb: 08:d5:7f:b5:d9:7e:c9:dd:7e:12:25:8a:96:6d:32: d4:a5:85:80:d5:52:d0:d9:11:a4:ec:9b:13:83:20: 00:6c:98:10:56:18:f0:00:f9:d6:bc:34:3f:09:67: 1a:6e:0f:f1:27:27:96:7c:20:a0:a7:e0:8e:cc:da: 3b:e2:a9:f8:cd:b5:98:76:18:cc:8e:b4:ce:5a:7e: d7:3b:79:2b:1b:fc:16:37:b1:ba:03:48:ce:cc:de: 91:37:84:2f:f2:18:53:1c:32:63:41:da:4d:68:f6: c3:d3:f8:dc:5b:02:23:44:56:51:cc:d5:aa:a3:e2: 27:be:e9:c2:04:70:35:14:14:86:fd:e1:17:d9:82: 92:af:6d:cd:23:d3:25:b1:0f:f8:74:0f:22:e5:df: d3:31:2a:0e:b5:81:27:d8:ca:99:55:ed:45:3d:44: c5:4f:a3:9f:c3:03:a0:f9:31:76:a3:39:1e:18:bc: 10:d2:90:ce:22:51:65:36:06:ef:15:b4:bc:68:fa: 14:95:6c:44:4c:ba:30:21:4f:67:b8:5c:e3:5c:2a: aa:6f:33:f5:fe:00:f9:7f:5b:43:b6:d1:8d:2b:54: 18:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F8:16:BF:F3:03:23:1B:00:59:14:0A:95:08:CE:CF:88:39:24:CF X509v3 Authority Key Identifier: keyid:E9:3F:3A:41:E6:BE:52:41:15:C6:C2:B5:58:BC:28:00:43:A0:22:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T86Qea-UkEVxsK1WLwoAEOgIk4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/X_gWv_MDIxsAWRQKlQjOz4g5JM8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.237.200.0/21 91.214.200.0/22 91.222.4.0/22 92.249.52.0/22 185.29.100.0/22 188.93.120.0/22 IPv6: 2a04:2e40::/29 Signature Algorithm: sha256WithRSAEncryption b4:fb:51:e0:f5:41:73:79:60:82:37:a0:e7:4f:f7:0e:4c:50: a2:47:b7:1d:d4:f3:c9:ff:8d:15:ad:e2:2f:21:27:f8:85:7e: f8:53:8a:8f:c7:23:13:52:f2:63:af:df:78:08:b1:a9:29:d5: 09:05:fa:88:3f:ee:aa:5e:54:08:4e:b2:13:5d:fb:0d:31:b5: 1e:91:52:27:52:c5:b0:b4:87:34:4e:ce:04:0b:5a:73:51:27: 6b:2d:ed:c1:55:ab:4b:2e:90:38:dd:3a:72:a5:46:5b:57:aa: ef:d1:a7:5c:a9:7d:0f:4a:cb:17:93:18:aa:c9:1f:01:be:8e: f1:0c:50:c0:06:06:64:d4:c5:01:77:5d:75:4c:6c:fa:70:d0: cd:c1:83:cc:01:c2:03:77:bb:b0:8e:8e:f3:bc:3f:66:4f:4b: 64:9d:f9:fe:cd:68:5e:f6:45:12:3b:c2:dc:2b:e1:0d:a6:2b: 5f:2a:e3:b7:fd:c5:95:6e:b1:63:ef:f0:cc:15:9e:31:7a:54: 94:aa:9d:4c:af:0a:ae:2a:f4:f4:3d:36:4a:15:00:44:e7:aa: 48:d6:f8:f6:e4:e6:06:cf:4c:09:4e:30:e4:e6:65:51:81:30: 30:0c:d9:e5:16:0e:d6:20:6b:6e:24:9e:7f:37:be:a3:ca:23: 12:50:0e:ca -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt5fzE0LunRThkaU0nKxkSoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5M2YzYTQxZTZiZTUyNDExNWM2YzJiNTU4YmMyODAwNDNh MDIyNGUwHhcNMjYwMTAxMTIxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmY4MTZiZmYzMDMyMzFiMDA1OTE0MGE5NTA4Y2VjZjg4MzkyNGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TqCriSnWpJRhmz/FrK9XSw6vAt5 KYHtgpC+jMsI1X+12X7J3X4SJYqWbTLUpYWA1VLQ2RGk7JsTgyAAbJgQVhjwAPnW vDQ/CWcabg/xJyeWfCCgp+COzNo74qn4zbWYdhjMjrTOWn7XO3krG/wWN7G6A0jO zN6RN4Qv8hhTHDJjQdpNaPbD0/jcWwIjRFZRzNWqo+InvunCBHA1FBSG/eEX2YKS r23NI9MlsQ/4dA8i5d/TMSoOtYEn2MqZVe1FPUTFT6OfwwOg+TF2ozkeGLwQ0pDO IlFlNgbvFbS8aPoUlWxETLowIU9nuFzjXCqqbzP1/gD5f1tDttGNK1QYiwIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFF/4Fr/zAyMbAFkUCpUIzs+IOSTPMB8GA1UdIwQY MBaAFOk/OkHmvlJBFcbCtVi8KABDoCJOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlQ4NlFlYS1Va0VWeHNLMVdMd29BRU9nSWs0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hMTc0MGUtODQwNC00MmQyLWFmNWMt MTBlMjQ2MjVhNGQ0LzEvWF9nV3ZfTURJeHNBV1JRS2xRak96NGc1Sk04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9hMTc0MGUtODQwNC00MmQyLWFmNWMtMTBlMjQ2MjVhNGQ0 LzEvNlQ4NlFlYS1Va0VWeHNLMVdMd29BRU9nSWs0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQDV+3IAwQC W9bIAwQCW94EAwQCXPk0AwQCuR1kAwQCvF14MA0EAgACMAcDBQMqBC5AMA0GCSqG SIb3DQEBCwUAA4IBAQC0+1Hg9UFzeWCCN6DnT/cOTFCiR7cd1PPJ/40VreIvISf4 hX74U4qPxyMTUvJjr994CLGpKdUJBfqIP+6qXlQITrITXfsNMbUekVInUsWwtIc0 Ts4EC1pzUSdrLe3BVatLLpA43TpypUZbV6rv0adcqX0PSssXkxiqyR8Bvo7xDFDA BgZk1MUBd111TGz6cNDNwYPMAcIDd7uwjo7zvD9mT0tknfn+zWhe9kUSO8LcK+EN pitfKuO3/cWVbrFj7/DMFZ4xelSUqp1MrwquKvT0PTZKFQBE56pI1vj25OYGz0wJ TjDk5mVRgTAwDNnlFg7WIGtuJJ5/N76jyiMSUA7K -----END CERTIFICATE-----Generated at Mon Jan 26 13:11:02 2026 by rpki-client