This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/xFnp4xhF4j51ZyapByot5v2VVNM.roa File: xFnp4xhF4j51ZyapByot5v2VVNM.roa (raw, json) Hash identifier: nHijCQmyGonC7rxNnLaWT4q1K25yNVP8EcOiDNsgLp4= Subject key identifier: C4:59:E9:E3:18:45:E2:3E:75:67:26:A9:07:2A:2D:E6:FD:95:54:D3 Certificate issuer: /CN=63d92b8256159894d2b9b25f4d85986c172723c3 Certificate serial: 019B797E1333F5DF17AA7761619AFBFA0707 Authority key identifier: 63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/xFnp4xhF4j51ZyapByot5v2VVNM.roa Signing time: Thu 01 Jan 2026 12:17:44 +0000 ROA not before: Thu 01 Jan 2026 12:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29033 IP address blocks: 81.20.32.0/20 maxlen: 20 81.20.40.0/24 maxlen: 24 81.20.41.0/24 maxlen: 24 185.129.176.0/22 maxlen: 22 2a00:1fd0:ae00::/40 maxlen: 48 2a00:1fd0:ec00::/48 maxlen: 48 2a00:1fd0:ecc0::/48 maxlen: 48 2a00:1fd0:ecc1::/48 maxlen: 48 2a00:1fd0:ecc2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:13:33:f5:df:17:aa:77:61:61:9a:fb:fa:07:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63d92b8256159894d2b9b25f4d85986c172723c3 Validity Not Before: Jan 1 12:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c459e9e31845e23e756726a9072a2de6fd9554d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ed:88:04:02:36:bb:37:9f:09:4d:58:8e:af: 3c:ef:5f:34:fe:a5:5a:7d:00:19:48:cd:ea:12:d4: 64:8d:49:1b:a7:21:33:f3:07:1e:76:f5:bf:e7:56: b3:61:2b:29:b4:05:0a:07:53:5f:13:25:06:3f:a4: b0:a3:70:59:3e:be:f6:ee:bd:25:32:e7:10:8a:66: e2:f3:be:f1:37:4d:69:30:fd:a5:5b:b8:d3:02:ab: 84:7d:14:6e:25:19:ca:8a:53:34:f9:41:d8:10:2f: 24:d5:10:25:27:45:25:48:8c:b0:27:0e:cc:89:1d: 7f:85:28:bc:cc:ae:ca:29:a3:bb:e2:6b:de:91:9a: 93:f9:d9:39:b3:44:14:82:3b:bf:7a:79:7f:4a:95: e0:6a:39:f6:76:11:4b:0b:c7:11:a9:27:22:e4:6e: d5:3f:3a:12:c5:b2:8d:c7:bf:3a:04:54:48:3a:35: c5:38:a5:ee:4d:3d:82:10:c0:ec:fb:a7:6f:47:35: 9b:85:44:de:3e:13:42:b1:a4:2d:c2:19:4b:48:79: 7c:ca:79:2c:30:ac:61:dc:84:3c:78:bd:08:57:d8: b8:a4:4f:6e:e0:07:6d:e9:bf:78:32:24:aa:0f:df: 3f:b2:b2:4b:19:b1:d5:41:e9:6a:e6:f2:a5:f1:ad: cc:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:59:E9:E3:18:45:E2:3E:75:67:26:A9:07:2A:2D:E6:FD:95:54:D3 X509v3 Authority Key Identifier: keyid:63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/xFnp4xhF4j51ZyapByot5v2VVNM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.20.32.0/20 185.129.176.0/22 IPv6: 2a00:1fd0:ae00::/40 2a00:1fd0:ec00::/48 2a00:1fd0:ecc0::-2a00:1fd0:ecc2:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 47:31:3b:f8:0f:fa:b3:5b:b3:4c:20:5d:42:db:cf:f0:ac:ff: b0:54:c4:21:76:68:a8:d3:23:f2:f3:9f:0b:38:a0:ec:59:f0: 49:2f:5b:5f:90:8c:04:ba:04:d4:d5:d8:59:1f:7d:da:0b:cd: 3e:26:07:63:a7:8a:94:5d:36:9c:5d:4d:51:20:dd:94:ee:04: 84:3e:2a:8f:62:69:cc:27:3e:39:e6:65:4c:1d:95:52:f0:1a: ec:d1:6c:d2:2c:59:f4:4b:d3:51:8f:b0:a4:7b:08:00:de:98: 03:7c:19:e4:8e:e9:d4:e5:13:41:a5:9b:a9:47:08:2d:8a:0e: 50:d8:30:7a:5c:d1:f6:ff:db:4c:af:21:9a:51:ea:70:71:57: 9d:e3:0e:c7:ac:4c:60:c0:0f:69:fb:2b:80:d6:73:c4:91:87: dd:53:4a:77:90:0a:5b:32:01:f3:0f:b6:d9:2e:70:8f:92:dd: 77:57:43:68:06:5c:ec:55:33:04:b3:be:2a:1c:60:02:c5:14: fa:ba:2f:b3:67:20:60:40:75:14:41:9f:f9:a0:a3:4b:35:3a: 56:be:4c:bb:c9:66:c7:0e:d4:f5:05:b9:0c:73:f0:a5:3a:4f: f3:f9:81:f7:fa:c4:9c:85:8d:90:0c:29:fd:64:f0:0f:99:4e: e3:09:1a:b1 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZt5fhMz9d8XqndhYZr7+gcHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZDkyYjgyNTYxNTk4OTRkMmI5YjI1ZjRkODU5ODZjMTcy NzIzYzMwHhcNMjYwMTAxMTIxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDU5ZTllMzE4NDVlMjNlNzU2NzI2YTkwNzJhMmRlNmZkOTU1NGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6e2IBAI2uzefCU1Yjq887180/qVa fQAZSM3qEtRkjUkbpyEz8wcedvW/51azYSsptAUKB1NfEyUGP6Swo3BZPr727r0l MucQimbi877xN01pMP2lW7jTAquEfRRuJRnKilM0+UHYEC8k1RAlJ0UlSIywJw7M iR1/hSi8zK7KKaO74mvekZqT+dk5s0QUgju/enl/SpXgajn2dhFLC8cRqSci5G7V PzoSxbKNx786BFRIOjXFOKXuTT2CEMDs+6dvRzWbhUTePhNCsaQtwhlLSHl8ynks MKxh3IQ8eL0IV9i4pE9u4Adt6b94MiSqD98/srJLGbHVQelq5vKl8a3MKwIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFMRZ6eMYReI+dWcmqQcqLeb9lVTTMB8GA1UdIwQY MBaAFGPZK4JWFZiU0rmyX02FmGwXJyPDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTlrcmdsWVZtSlRTdWJKZlRZV1liQmNuSThNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8yNmQ5MTctOGM5MS00NWFiLTg0NDIt ZTRlNTJhYzBmZWZlLzEveEZucDR4aEY0ajUxWnlhcEJ5b3Q1djJWVk5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8yNmQ5MTctOGM5MS00NWFiLTg0NDItZTRlNTJhYzBmZWZl LzEvWTlrcmdsWVZtSlRTdWJKZlRZV1liQmNuSThNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTASBAIAATAMAwQEURQgAwQC uYGwMCsEAgACMCUDBgAqAB/QrgMHACoAH9DsADASAwcGKgAf0OzAAwcAKgAf0OzC MA0GCSqGSIb3DQEBCwUAA4IBAQBHMTv4D/qzW7NMIF1C28/wrP+wVMQhdmio0yPy 858LOKDsWfBJL1tfkIwEugTU1dhZH33aC80+Jgdjp4qUXTacXU1RIN2U7gSEPiqP YmnMJz455mVMHZVS8Brs0WzSLFn0S9NRj7CkewgA3pgDfBnkjunU5RNBpZupRwgt ig5Q2DB6XNH2/9tMryGaUepwcVed4w7HrExgwA9p+yuA1nPEkYfdU0p3kApbMgHz D7bZLnCPkt13V0NoBlzsVTMEs74qHGACxRT6ui+zZyBgQHUUQZ/5oKNLNTpWvky7 yWbHDtT1BbkMc/ClOk/z+YH3+sSchY2QDCn9ZPAPmU7jCRqx -----END CERTIFICATE-----Generated at Mon Jan 26 00:13:54 2026 by rpki-client