This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/XmKu-2I9EccKqV84ztqSDMR-J2I.roa File: XmKu-2I9EccKqV84ztqSDMR-J2I.roa (raw, json) Hash identifier: gKnGF5B+LDZV4EfMW7dOEXrS0a1zySfndm8GnHMA+Qc= Subject key identifier: 5E:62:AE:FB:62:3D:11:C7:0A:A9:5F:38:CE:DA:92:0C:C4:7E:27:62 Certificate issuer: /CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd Certificate serial: 019B7FF18C29506D78049F8B3CC9ED2558D9 Authority key identifier: 45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/XmKu-2I9EccKqV84ztqSDMR-J2I.roa Signing time: Fri 02 Jan 2026 18:21:35 +0000 ROA not before: Fri 02 Jan 2026 18:21:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6260 IP address blocks: 185.225.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:8c:29:50:6d:78:04:9f:8b:3c:c9:ed:25:58:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd Validity Not Before: Jan 2 18:21:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e62aefb623d11c70aa95f38ceda920cc47e2762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5c:21:bd:f2:2e:bd:59:a4:77:64:3d:e5:3e: 3e:8b:97:05:27:d3:a5:fd:39:6d:eb:a2:9c:f9:b0: 09:a0:e5:e5:33:1d:0b:ea:c0:d9:3f:9f:da:17:cd: 57:34:f1:d7:88:e3:48:b4:8c:92:ed:a5:fb:c8:51: 87:7f:38:f1:c7:9b:84:9a:51:1b:3e:d6:41:f3:18: 35:5e:4e:50:b1:18:53:13:fb:2e:60:13:4c:80:3d: a7:ed:68:e6:2f:14:81:a3:9e:ae:2b:ef:1b:f3:b0: 41:0c:c0:f6:fa:6d:66:7d:a6:81:42:1b:2b:93:22: ad:fc:5e:7b:90:11:94:cc:91:82:19:47:b6:7b:13: 7c:0d:1f:35:b3:8f:08:8f:e2:5f:63:93:5a:47:40: 6c:62:9e:05:05:8e:7f:e8:ef:d1:20:11:da:fb:3b: f7:11:db:67:e1:d0:62:84:3f:4b:3e:ca:84:d1:aa: 9e:3a:a6:f0:aa:b8:02:e0:c3:e0:7c:25:7b:87:f9: f3:78:6d:18:71:fd:c8:d7:3f:d8:31:e6:3a:03:ff: cc:ee:76:c3:73:00:76:12:27:a4:e6:6f:dd:0a:e3: cd:3e:63:91:48:e0:1c:66:8a:f3:b0:c2:18:1c:83: 9c:82:e5:1d:6c:62:02:3e:e8:41:ac:56:61:ca:05: a8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:62:AE:FB:62:3D:11:C7:0A:A9:5F:38:CE:DA:92:0C:C4:7E:27:62 X509v3 Authority Key Identifier: keyid:45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/XmKu-2I9EccKqV84ztqSDMR-J2I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.225.188.0/24 Signature Algorithm: sha256WithRSAEncryption 35:4d:4c:e4:f9:1e:07:54:1d:70:69:ad:b5:18:db:d4:03:27: fd:e0:ad:2d:9a:6b:5a:7c:36:74:b3:e9:05:e9:2d:46:85:7c: aa:1a:bd:62:9e:6b:37:4b:a8:47:9a:53:e9:2f:0a:63:be:5b: 32:bd:39:be:69:13:61:bf:40:8b:94:09:54:db:e8:93:2e:89: 11:c3:81:7e:06:cf:dd:50:3b:e2:4c:dd:0a:25:f4:ea:7e:ce: fa:f6:c8:c1:25:ae:2e:60:71:17:33:39:bb:b7:c2:7c:f0:ec: 8e:73:29:f7:7a:f3:f1:68:ee:52:23:d9:c2:6b:52:b0:7e:a6: 22:95:bc:c8:30:5b:8d:2c:c1:60:35:fd:32:57:12:aa:77:91: d0:1d:8d:71:ba:5d:a1:8a:ac:86:40:41:37:df:24:5f:74:8c: c0:29:2f:d5:15:f2:5a:4d:0d:dd:ce:cd:17:f4:b2:bb:7f:10: 63:36:34:de:4e:fd:2d:47:b8:ef:4e:f3:36:90:98:8a:86:66: 32:a3:df:57:60:3e:3d:4d:c9:2e:6d:bf:c2:f8:21:2b:b0:67: 44:e8:f4:96:12:9b:fd:7f:11:21:62:92:74:57:38:8b:b0:2a: 3c:ff:a4:fe:37:42:df:f8:69:83:7d:92:2e:cd:d3:5f:91:37: 3d:be:f8:ea -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8YwpUG14BJ+LPMntJVjZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1YmJkMjE5MzY0MjUzMGEwMTdmNGYxY2JlNTYyZTIxNzBi M2RmYmQwHhcNMjYwMTAyMTgyMTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTYyYWVmYjYyM2QxMWM3MGFhOTVmMzhjZWRhOTIwY2M0N2UyNzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1whvfIuvVmkd2Q95T4+i5cFJ9Ol /Tlt66Kc+bAJoOXlMx0L6sDZP5/aF81XNPHXiONItIyS7aX7yFGHfzjxx5uEmlEb PtZB8xg1Xk5QsRhTE/suYBNMgD2n7WjmLxSBo56uK+8b87BBDMD2+m1mfaaBQhsr kyKt/F57kBGUzJGCGUe2exN8DR81s48Ij+JfY5NaR0BsYp4FBY5/6O/RIBHa+zv3 Edtn4dBihD9LPsqE0aqeOqbwqrgC4MPgfCV7h/nzeG0Ycf3I1z/YMeY6A//M7nbD cwB2Eiek5m/dCuPNPmORSOAcZorzsMIYHIOcguUdbGICPuhBrFZhygWoCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF5irvtiPRHHCqlfOM7akgzEfidiMB8GA1UdIwQY MBaAFEW70hk2QlMKAX9PHL5WLiFws9+9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmJ2U0dUWkNVd29CZjA4Y3ZsWXVJWEN6MzcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9jZmZmZjgtMzUzMC00ZTViLWE1ZTIt Yzc3OTA1ZmJiYTdiLzEvWG1LdS0ySTlFY2NLcVY4NHp0cVNETVItSjJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9jZmZmZjgtMzUzMC00ZTViLWE1ZTItYzc3OTA1ZmJiYTdi LzEvUmJ2U0dUWkNVd29CZjA4Y3ZsWXVJWEN6MzcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueG8MA0G CSqGSIb3DQEBCwUAA4IBAQA1TUzk+R4HVB1waa21GNvUAyf94K0tmmtafDZ0s+kF 6S1GhXyqGr1inms3S6hHmlPpLwpjvlsyvTm+aRNhv0CLlAlU2+iTLokRw4F+Bs/d UDviTN0KJfTqfs769sjBJa4uYHEXMzm7t8J88OyOcyn3evPxaO5SI9nCa1KwfqYi lbzIMFuNLMFgNf0yVxKqd5HQHY1xul2hiqyGQEE33yRfdIzAKS/VFfJaTQ3dzs0X 9LK7fxBjNjTeTv0tR7jvTvM2kJiKhmYyo99XYD49Tckubb/C+CErsGdE6PSWEpv9 fxEhYpJ0VziLsCo8/6T+N0Lf+GmDfZIuzdNfkTc9vvjq -----END CERTIFICATE-----Generated at Sun Jan 25 17:34:08 2026 by rpki-client