This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/X4JSAl7mEoJyzznkY14VbNv09k8.roa File: X4JSAl7mEoJyzznkY14VbNv09k8.roa (raw, json) Hash identifier: j50w3dwHk0KiPncH2Bx9DQIkaE9cvvACV1hP4QRJhbI= Subject key identifier: 5F:82:52:02:5E:E6:12:82:72:CF:39:E4:63:5E:15:6C:DB:F4:F6:4F Certificate issuer: /CN=f00a224de6dad1a1ed131b5f95b83231a2abcaf1 Certificate serial: 019B7F15E2BED349B212069B4B8139C54055 Authority key identifier: F0:0A:22:4D:E6:DA:D1:A1:ED:13:1B:5F:95:B8:32:31:A2:AB:CA:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/X4JSAl7mEoJyzznkY14VbNv09k8.roa Signing time: Fri 02 Jan 2026 14:21:39 +0000 ROA not before: Fri 02 Jan 2026 14:21:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213961 IP address blocks: 83.220.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.crl rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:e2:be:d3:49:b2:12:06:9b:4b:81:39:c5:40:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f00a224de6dad1a1ed131b5f95b83231a2abcaf1 Validity Not Before: Jan 2 14:21:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f8252025ee6128272cf39e4635e156cdbf4f64f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:86:0a:ee:8a:37:5e:0e:6a:ff:ad:43:f4:fc: d2:a5:5a:18:74:06:5e:2f:dc:17:15:26:af:6c:c3: dc:57:c2:f4:dc:45:bb:0e:b7:69:0f:db:07:73:04: 0c:4a:15:47:c9:45:28:41:5f:ef:f3:3c:f7:b9:3c: 93:19:1e:1c:eb:a1:3d:60:ae:a4:63:00:23:62:e5: 68:46:08:ab:fa:e0:2e:13:b4:c0:8c:6f:3d:1f:30: 58:a8:72:09:a8:c6:99:a0:41:9c:b8:8d:a9:79:67: f7:95:12:f1:28:9e:d5:d3:5e:6c:9a:e1:62:40:41: 4e:4c:cd:ed:4c:5a:42:b7:ca:bd:48:51:1a:77:68: 34:d9:77:d5:55:c8:5b:44:1d:97:63:e3:fd:0c:81: 0c:d9:28:af:b8:a5:a4:d8:50:38:b6:5b:0e:7c:35: 9e:49:98:eb:d0:20:f4:00:0f:6c:a1:6c:2d:80:54: 54:2d:da:17:48:a6:8b:2e:f3:d8:05:51:c0:f4:b1: 8b:0b:cf:8b:a7:96:11:ad:7a:b4:c2:e5:1a:45:76: 6a:10:7a:b7:16:8b:e9:0e:76:df:40:9f:15:c6:3f: fc:7c:de:e2:47:b0:6e:b9:7a:59:e9:3a:b1:75:6f: 8f:b8:b1:10:8b:6c:ee:3c:83:a0:4c:07:a1:11:65: b4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:82:52:02:5E:E6:12:82:72:CF:39:E4:63:5E:15:6C:DB:F4:F6:4F X509v3 Authority Key Identifier: keyid:F0:0A:22:4D:E6:DA:D1:A1:ED:13:1B:5F:95:B8:32:31:A2:AB:CA:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/X4JSAl7mEoJyzznkY14VbNv09k8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.220.164.0/24 Signature Algorithm: sha256WithRSAEncryption 95:2f:b8:5d:44:fc:ba:c3:58:1b:d1:42:ae:5d:64:07:5a:ed: 8e:91:27:4d:0e:07:02:9f:a1:fc:d8:b3:b8:c6:fd:d1:c6:df: c6:09:e4:60:d4:a0:49:66:d2:d1:86:b9:88:b3:d3:9a:c1:54: 9e:47:fc:d1:a4:b9:e7:58:9b:31:08:4d:9e:8f:fc:f9:fa:a7: 17:40:04:5c:4b:c9:51:1e:c4:9e:9d:1a:b4:14:db:2e:be:9c: 24:eb:2a:38:aa:82:fe:2a:fb:1b:90:6e:d6:db:11:b2:94:41: f7:f3:8f:2e:a6:ea:be:be:57:95:d3:50:b1:93:f0:16:6f:6a: 33:da:5d:7c:18:12:fb:99:6e:d5:26:ba:45:30:0c:a7:21:17: f7:88:c4:a0:0c:b0:1b:45:89:c5:f8:3d:b3:fe:fc:b4:2d:9d: ff:53:36:cf:5c:5e:5f:9d:10:e6:c7:35:2b:4d:5c:81:1a:33: 60:d3:d7:c8:9a:71:92:05:3c:48:c4:4d:6e:98:57:cf:f3:84: 68:1c:74:18:98:9f:9a:aa:15:31:53:f9:bd:39:c5:dc:27:c0: 0b:0a:42:e1:d7:f9:35:23:2a:bf:12:fc:87:2d:bb:91:9a:ba: 7f:c8:8b:02:5b:f7:2a:fa:58:3f:95:40:49:a0:69:5a:ac:3e: c0:22:2d:aa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FeK+00myEgabS4E5xUBVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMGEyMjRkZTZkYWQxYTFlZDEzMWI1Zjk1YjgzMjMxYTJh YmNhZjEwHhcNMjYwMTAyMTQyMTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjgyNTIwMjVlZTYxMjgyNzJjZjM5ZTQ2MzVlMTU2Y2RiZjRmNjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4YK7oo3Xg5q/61D9PzSpVoYdAZe L9wXFSavbMPcV8L03EW7DrdpD9sHcwQMShVHyUUoQV/v8zz3uTyTGR4c66E9YK6k YwAjYuVoRgir+uAuE7TAjG89HzBYqHIJqMaZoEGcuI2peWf3lRLxKJ7V015smuFi QEFOTM3tTFpCt8q9SFEad2g02XfVVchbRB2XY+P9DIEM2SivuKWk2FA4tlsOfDWe SZjr0CD0AA9soWwtgFRULdoXSKaLLvPYBVHA9LGLC8+Lp5YRrXq0wuUaRXZqEHq3 FovpDnbfQJ8Vxj/8fN7iR7BuuXpZ6TqxdW+PuLEQi2zuPIOgTAehEWW0aQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF+CUgJe5hKCcs855GNeFWzb9PZPMB8GA1UdIwQY MBaAFPAKIk3m2tGh7RMbX5W4MjGiq8rxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEFvaVRlYmEwYUh0RXh0ZmxiZ3lNYUtyeXZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83NWU2NTktMDkyZi00ZWU0LTg3MTgt NzUxOWUxMDVhZWRhLzEvWDRKU0FsN21Fb0p5enpua1kxNFZiTnYwOWs4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS83NWU2NTktMDkyZi00ZWU0LTg3MTgtNzUxOWUxMDVhZWRh LzEvOEFvaVRlYmEwYUh0RXh0ZmxiZ3lNYUtyeXZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU9ykMA0G CSqGSIb3DQEBCwUAA4IBAQCVL7hdRPy6w1gb0UKuXWQHWu2OkSdNDgcCn6H82LO4 xv3Rxt/GCeRg1KBJZtLRhrmIs9OawVSeR/zRpLnnWJsxCE2ej/z5+qcXQARcS8lR HsSenRq0FNsuvpwk6yo4qoL+KvsbkG7W2xGylEH3848upuq+vleV01Cxk/AWb2oz 2l18GBL7mW7VJrpFMAynIRf3iMSgDLAbRYnF+D2z/vy0LZ3/UzbPXF5fnRDmxzUr TVyBGjNg09fImnGSBTxIxE1umFfP84RoHHQYmJ+aqhUxU/m9OcXcJ8ALCkLh1/k1 Iyq/EvyHLbuRmrp/yIsCW/cq+lg/lUBJoGlarD7AIi2q -----END CERTIFICATE-----Generated at Mon Jan 26 07:23:29 2026 by rpki-client