This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/xZnQUNKtjz0xBu4GBzb-zu_Y-aY.roa File: xZnQUNKtjz0xBu4GBzb-zu_Y-aY.roa (raw, json) Hash identifier: +vp8PoavLw4YQsjZPIBnjlGldFa1m0sRHbYb6KV//EE= Subject key identifier: C5:99:D0:50:D2:AD:8F:3D:31:06:EE:06:07:36:FE:CE:EF:D8:F9:A6 Certificate issuer: /CN=485e3ee1c3258175f4ff6d9b559da54c83ec0b4f Certificate serial: 019B7C1250F8EADBB961B8A50EF1599A1F61 Authority key identifier: 48:5E:3E:E1:C3:25:81:75:F4:FF:6D:9B:55:9D:A5:4C:83:EC:0B:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/xZnQUNKtjz0xBu4GBzb-zu_Y-aY.roa Signing time: Fri 02 Jan 2026 00:18:53 +0000 ROA not before: Fri 02 Jan 2026 00:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201111 IP address blocks: 91.223.186.0/24 maxlen: 24 185.253.204.0/22 maxlen: 24 193.16.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.crl rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:50:f8:ea:db:b9:61:b8:a5:0e:f1:59:9a:1f:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=485e3ee1c3258175f4ff6d9b559da54c83ec0b4f Validity Not Before: Jan 2 00:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c599d050d2ad8f3d3106ee060736feceefd8f9a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d1:cd:c1:f1:1f:51:1c:57:e7:95:df:5f:a5: e5:51:19:3f:d3:fd:18:05:05:5b:e9:9f:67:2a:cc: 93:74:2d:ac:11:ad:71:3f:85:21:32:aa:7a:7d:17: a3:da:61:8f:8a:41:92:d0:1c:73:85:f8:50:8c:f1: f4:f7:db:24:c2:9b:0f:04:0a:e7:7c:8c:e5:91:77: 3f:9b:f3:14:c7:cb:3f:d0:c2:94:27:26:f1:64:e6: 25:bb:1c:f6:a7:3c:8b:9a:6c:b1:0e:ce:18:ee:3f: 0e:d9:6e:c3:18:7b:a4:ef:3a:fb:47:1e:36:7e:7f: 0d:8c:3b:80:e4:32:6a:7f:26:a4:3f:60:bb:7a:a6: 84:88:08:7c:d9:9c:1b:7d:c7:46:b6:08:7b:56:b9: de:1a:c6:56:79:02:5d:39:17:17:7b:5b:03:42:31: a7:e5:3e:a5:fb:6a:09:5c:85:91:1c:b7:bf:af:ce: 3f:cd:80:d6:36:4d:0d:a4:01:c9:e8:34:91:d2:7c: fe:77:70:5f:a0:83:ac:f8:ec:2a:7d:e5:ab:fb:67: 1d:c0:eb:f9:8f:8c:ac:12:a8:17:87:8d:8c:19:46: cf:33:46:78:47:24:b2:0d:2e:52:e9:2b:ba:98:59: 79:9b:41:b4:e0:5e:0e:28:4e:24:bb:92:0e:2e:a3: d4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:99:D0:50:D2:AD:8F:3D:31:06:EE:06:07:36:FE:CE:EF:D8:F9:A6 X509v3 Authority Key Identifier: keyid:48:5E:3E:E1:C3:25:81:75:F4:FF:6D:9B:55:9D:A5:4C:83:EC:0B:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/xZnQUNKtjz0xBu4GBzb-zu_Y-aY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.186.0/24 185.253.204.0/22 193.16.220.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:c7:37:d1:72:23:89:bd:a7:99:72:f0:8b:44:20:c9:25:93: ab:d9:16:ac:5e:ea:de:96:31:d3:8b:4e:19:6d:93:62:94:25: f6:af:73:42:63:a6:98:ed:33:2e:68:90:74:f5:25:bc:02:9f: 75:49:1e:86:4e:5e:d3:ad:c5:68:89:04:b3:47:8c:d8:1f:f9: 53:04:1c:73:f2:b6:6f:2a:6a:15:d0:9f:05:3d:e7:cf:d9:59: 2a:19:1d:2d:f9:88:79:17:f1:42:94:38:8c:0b:e0:05:9c:91: 50:d6:d4:7b:c7:09:22:10:bc:23:3b:da:b8:00:65:9d:46:e8: 84:a8:b5:56:88:ed:10:ea:04:6c:96:60:53:ca:a7:73:fc:d2: f5:44:01:93:f3:32:8f:2b:a2:c0:9e:db:8c:0f:8b:85:9c:bc: 1a:67:51:05:b1:ed:e7:9a:ce:a8:f7:68:bf:e1:ba:d3:97:e9: 8b:2b:f7:e8:04:8f:88:ac:cf:75:0d:ba:c5:13:e2:99:f4:f6: 22:e7:8b:fd:ff:ab:96:29:d8:4f:05:b0:25:6c:e6:1d:99:9c: 09:5a:e2:75:92:3e:88:ea:42:b2:ac:bf:fd:f8:d7:a7:9d:ce: 0e:0d:47:95:b8:03:e0:12:37:8b:8e:62:e0:3b:49:8f:30:25: b3:26:4b:17 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8ElD46tu5YbilDvFZmh9hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NWUzZWUxYzMyNTgxNzVmNGZmNmQ5YjU1OWRhNTRjODNl YzBiNGYwHhcNMjYwMTAyMDAxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTk5ZDA1MGQyYWQ4ZjNkMzEwNmVlMDYwNzM2ZmVjZWVmZDhmOWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9HNwfEfURxX55XfX6XlURk/0/0Y BQVb6Z9nKsyTdC2sEa1xP4UhMqp6fRej2mGPikGS0BxzhfhQjPH099skwpsPBArn fIzlkXc/m/MUx8s/0MKUJybxZOYluxz2pzyLmmyxDs4Y7j8O2W7DGHuk7zr7Rx42 fn8NjDuA5DJqfyakP2C7eqaEiAh82ZwbfcdGtgh7VrneGsZWeQJdORcXe1sDQjGn 5T6l+2oJXIWRHLe/r84/zYDWNk0NpAHJ6DSR0nz+d3BfoIOs+OwqfeWr+2cdwOv5 j4ysEqgXh42MGUbPM0Z4RySyDS5S6Su6mFl5m0G04F4OKE4ku5IOLqPU6wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMWZ0FDSrY89MQbuBgc2/s7v2PmmMB8GA1UdIwQY MBaAFEhePuHDJYF19P9tm1WdpUyD7AtPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0Y0LTRjTWxnWFgwXzIyYlZaMmxUSVBzQzA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC85NmQwMjItZWUwMi00NDdjLWEzNDkt OWM5MzNjY2QxNmM3LzEveFpuUVVOS3RqejB4QnU0R0J6Yi16dV9ZLWFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC85NmQwMjItZWUwMi00NDdjLWEzNDktOWM5MzNjY2QxNmM3 LzEvU0Y0LTRjTWxnWFgwXzIyYlZaMmxUSVBzQzA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW9+6AwQC uf3MAwQAwRDcMA0GCSqGSIb3DQEBCwUAA4IBAQAbxzfRciOJvaeZcvCLRCDJJZOr 2RasXureljHTi04ZbZNilCX2r3NCY6aY7TMuaJB09SW8Ap91SR6GTl7TrcVoiQSz R4zYH/lTBBxz8rZvKmoV0J8FPefP2VkqGR0t+Yh5F/FClDiMC+AFnJFQ1tR7xwki ELwjO9q4AGWdRuiEqLVWiO0Q6gRslmBTyqdz/NL1RAGT8zKPK6LAntuMD4uFnLwa Z1EFse3nms6o92i/4brTl+mLK/foBI+IrM91DbrFE+KZ9PYi54v9/6uWKdhPBbAl bOYdmZwJWuJ1kj6I6kKyrL/9+Nennc4ODUeVuAPgEjeLjmLgO0mPMCWzJksX -----END CERTIFICATE-----Generated at Sun Jan 25 16:41:35 2026 by rpki-client