This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/XREnjw7F4Wy3XlmjVUoBIpL_a3A.roa File: XREnjw7F4Wy3XlmjVUoBIpL_a3A.roa (raw, json) Hash identifier: wuOiczzJqVh1W7P+ln61FSsyWFsn4n4esHJ/HU/I0Aw= Subject key identifier: 5D:11:27:8F:0E:C5:E1:6C:B7:5E:59:A3:55:4A:01:22:92:FF:6B:70 Certificate issuer: /CN=b84785791e07646f5cc58b15e86434cb9c24149d Certificate serial: 019B79EC6F4ECB492DFD3E00E99FB671E633 Authority key identifier: B8:47:85:79:1E:07:64:6F:5C:C5:8B:15:E8:64:34:CB:9C:24:14:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/XREnjw7F4Wy3XlmjVUoBIpL_a3A.roa Signing time: Thu 01 Jan 2026 14:18:16 +0000 ROA not before: Thu 01 Jan 2026 14:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49972 IP address blocks: 185.44.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:6f:4e:cb:49:2d:fd:3e:00:e9:9f:b6:71:e6:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b84785791e07646f5cc58b15e86434cb9c24149d Validity Not Before: Jan 1 14:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d11278f0ec5e16cb75e59a3554a012292ff6b70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c7:d9:a9:66:70:a4:25:7f:c6:32:1b:3a:09: 80:5a:c4:c7:fc:2a:a9:3d:28:03:56:30:11:eb:f1: 2e:61:54:5b:d4:57:46:41:46:d1:34:fd:8a:b2:23: d8:8e:fb:11:29:22:33:1f:8c:20:0b:dc:cb:70:10: 1d:44:bc:b7:88:40:42:c9:94:15:0a:fe:61:e6:06: 53:a2:c2:dd:78:eb:f3:75:b7:77:6e:89:a0:c7:1d: d9:bb:7e:7a:5d:2a:b0:ac:34:b2:de:d2:2b:9e:2e: ad:12:80:c8:9c:98:62:10:30:f9:30:3e:34:ba:84: 98:38:e5:4e:6f:e0:97:57:db:84:00:ed:2e:98:e5: 7c:6d:3f:e5:f8:6d:09:89:b6:fc:6f:2b:e9:43:a0: 7e:d3:a0:0b:bc:b5:f9:47:7e:47:80:c0:22:6c:93: e4:05:de:a0:06:65:77:22:6f:7e:4e:28:98:41:4b: d0:75:d8:cd:cf:2d:e7:b8:41:0c:18:39:7e:1c:db: 3f:f0:83:88:ee:57:50:83:81:e3:35:c5:3a:ac:ab: 8d:00:5c:13:31:9f:17:53:79:0d:a5:a4:8f:16:33: 44:d1:a1:ba:df:7d:89:dc:bd:17:24:9d:d1:b6:d7: 90:67:10:44:27:ea:54:f0:e4:25:48:52:5a:66:83: 46:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:11:27:8F:0E:C5:E1:6C:B7:5E:59:A3:55:4A:01:22:92:FF:6B:70 X509v3 Authority Key Identifier: keyid:B8:47:85:79:1E:07:64:6F:5C:C5:8B:15:E8:64:34:CB:9C:24:14:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/XREnjw7F4Wy3XlmjVUoBIpL_a3A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.44.36.0/22 Signature Algorithm: sha256WithRSAEncryption 40:6b:b9:04:f3:70:e7:ac:7e:9c:9f:41:7f:ca:18:7f:20:59: b8:85:25:f1:ae:c4:c7:6b:ad:92:4c:38:37:aa:63:3d:43:b7: eb:5d:9e:9c:63:64:e3:e1:47:98:cc:dc:55:91:92:51:85:b7: 5a:76:e8:5f:43:1f:83:40:9c:e4:84:d6:c0:34:c4:64:c1:31: 13:0d:a8:c1:77:13:0b:e2:f3:95:b1:e4:0c:08:41:c0:1b:3e: ea:60:44:06:dd:b5:d3:35:d6:70:36:90:76:83:48:94:b0:70: e2:f9:bd:f4:a1:de:84:7a:b5:7f:1e:18:6f:7c:39:44:f0:80: 2b:da:03:50:9b:e9:bd:84:00:11:97:37:36:45:c6:71:e3:c5: 7c:8b:6b:1c:b4:6c:76:9e:77:38:0e:cc:e5:f8:7c:2c:25:1e: c6:ca:d3:cb:63:94:00:24:7d:f9:03:73:cb:80:f4:8e:0d:8b: e4:94:80:4b:63:72:80:ab:00:b4:1e:49:22:ea:a8:f5:6c:f2: c0:d8:62:76:a2:72:80:74:08:4d:80:6c:9b:ea:9a:47:b8:3d: 2f:3c:ab:b0:7d:fe:b0:34:d0:fa:8e:84:1a:a4:5b:ed:82:b3: ac:26:c6:6b:e3:0d:4e:f7:03:6e:48:60:35:75:84:fd:db:f1: bf:ba:cc:22 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57G9Oy0kt/T4A6Z+2ceYzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NDc4NTc5MWUwNzY0NmY1Y2M1OGIxNWU4NjQzNGNiOWMy NDE0OWQwHhcNMjYwMTAxMTQxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDExMjc4ZjBlYzVlMTZjYjc1ZTU5YTM1NTRhMDEyMjkyZmY2YjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MfZqWZwpCV/xjIbOgmAWsTH/Cqp PSgDVjAR6/EuYVRb1FdGQUbRNP2KsiPYjvsRKSIzH4wgC9zLcBAdRLy3iEBCyZQV Cv5h5gZTosLdeOvzdbd3bomgxx3Zu356XSqwrDSy3tIrni6tEoDInJhiEDD5MD40 uoSYOOVOb+CXV9uEAO0umOV8bT/l+G0Jibb8byvpQ6B+06ALvLX5R35HgMAibJPk Bd6gBmV3Im9+TiiYQUvQddjNzy3nuEEMGDl+HNs/8IOI7ldQg4HjNcU6rKuNAFwT MZ8XU3kNpaSPFjNE0aG6332J3L0XJJ3RtteQZxBEJ+pU8OQlSFJaZoNGXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF0RJ48OxeFst15Zo1VKASKS/2twMB8GA1UdIwQY MBaAFLhHhXkeB2RvXMWLFehkNMucJBSdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUVlRmVSNEhaRzljeFlzVjZHUTB5NXdrRkowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kZjgxMDUtMThlZS00MTcyLWI2YmIt MGRjMzNhY2MxZGJhLzEvWFJFbmp3N0Y0V3kzWGxtalZVb0JJcExfYTNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9kZjgxMDUtMThlZS00MTcyLWI2YmItMGRjMzNhY2MxZGJh LzEvdUVlRmVSNEhaRzljeFlzVjZHUTB5NXdrRkowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuSwkMA0G CSqGSIb3DQEBCwUAA4IBAQBAa7kE83DnrH6cn0F/yhh/IFm4hSXxrsTHa62STDg3 qmM9Q7frXZ6cY2Tj4UeYzNxVkZJRhbdaduhfQx+DQJzkhNbANMRkwTETDajBdxML 4vOVseQMCEHAGz7qYEQG3bXTNdZwNpB2g0iUsHDi+b30od6EerV/HhhvfDlE8IAr 2gNQm+m9hAARlzc2RcZx48V8i2sctGx2nnc4Dszl+HwsJR7GytPLY5QAJH35A3PL gPSODYvklIBLY3KAqwC0Hkki6qj1bPLA2GJ2onKAdAhNgGyb6ppHuD0vPKuwff6w NND6joQapFvtgrOsJsZr4w1O9wNuSGA1dYT92/G/uswi -----END CERTIFICATE-----Generated at Mon Jan 26 02:44:01 2026 by rpki-client