This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/xxGXfRcmkhBAjROUfzE7wrifgME.roa File: xxGXfRcmkhBAjROUfzE7wrifgME.roa (raw, json) Hash identifier: TUwE+CjLZWVNW/bdlU4DKJBAW1GHbsJsmhsw/0YlJn0= Subject key identifier: C7:11:97:7D:17:26:92:10:40:8D:13:94:7F:31:3B:C2:B8:9F:80:C1 Certificate issuer: /CN=4c7844abef711c232c84f83c807a420af3804728 Certificate serial: 019B76EB827A9645D28F3A22BEABBB0F32F9 Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/xxGXfRcmkhBAjROUfzE7wrifgME.roa Signing time: Thu 01 Jan 2026 00:18:24 +0000 ROA not before: Thu 01 Jan 2026 00:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203800 IP address blocks: 185.123.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:82:7a:96:45:d2:8f:3a:22:be:ab:bb:0f:32:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c7844abef711c232c84f83c807a420af3804728 Validity Not Before: Jan 1 00:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c711977d17269210408d13947f313bc2b89f80c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:72:e4:be:6b:74:cb:39:33:20:0b:6c:d9:3c: 4b:37:ed:77:da:20:63:ae:74:54:45:0c:13:f8:72: 75:4b:06:da:fc:ef:d9:1b:1d:3b:90:49:da:fd:2f: 20:a5:de:59:53:a8:f3:63:11:48:8e:a0:99:0b:44: ed:2f:80:3f:9e:fe:15:09:2c:9c:21:dd:b1:3f:2d: 0c:1f:6d:c3:ac:16:43:48:44:9c:12:12:e8:fd:76: a1:29:5d:ae:f0:5a:90:55:f0:31:8b:cc:ef:49:cc: 2f:c8:e7:d0:97:6b:9a:b2:cc:20:f8:9c:fe:3d:92: 49:d6:12:3a:a5:ad:b1:2f:79:f9:25:74:59:7a:4f: 04:64:dd:ed:17:b4:08:17:b8:d7:81:f5:2a:0d:80: f2:06:2b:70:c9:62:ea:1f:31:f2:12:1a:a0:c1:96: 72:ff:44:44:0d:ff:28:12:17:d9:36:4e:d2:58:f7: 15:61:88:de:ec:07:83:98:a0:5b:e4:7d:ed:6b:17: 0d:d7:56:94:4d:20:46:23:9d:80:b8:77:cc:ee:62: 18:29:b2:b2:b5:66:7b:33:54:01:18:82:d2:de:4f: b2:71:4f:bc:fd:70:b5:36:04:f5:03:07:fb:7b:f6: d2:0a:df:ae:13:7c:b8:93:ea:50:d4:e3:ab:1b:bf: 92:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:11:97:7D:17:26:92:10:40:8D:13:94:7F:31:3B:C2:B8:9F:80:C1 X509v3 Authority Key Identifier: keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/xxGXfRcmkhBAjROUfzE7wrifgME.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.123.92.0/22 Signature Algorithm: sha256WithRSAEncryption d7:c5:24:6a:30:59:bf:94:fc:7e:9e:2c:d2:84:4e:f0:cf:b1: f2:e6:3a:34:24:ac:89:7b:35:2e:9b:48:58:59:0a:3b:80:38: b7:9c:d0:88:53:bd:7e:74:7a:03:cf:40:6b:d3:09:87:19:2e: f9:d9:3c:68:43:f1:f4:d5:58:a2:40:d7:1d:bb:02:77:88:98: 11:32:0b:6e:25:c4:c2:b0:1c:f7:97:9f:bb:cc:92:5e:df:60: 71:d5:a3:ce:a6:d9:a9:be:50:87:ed:6f:74:32:1e:51:09:cc: 18:32:fd:b1:38:97:0f:36:0e:1b:31:52:92:84:fa:b3:84:7e: 53:28:71:5f:64:b1:54:f6:84:0c:22:d4:bd:b0:cd:7b:42:18: a1:3f:f9:fa:bc:25:10:8b:31:d5:89:11:46:3f:60:b4:2e:10: 40:e7:b4:5c:b1:e6:56:ea:3e:2e:0b:bc:5e:f7:01:a7:88:b0: 6d:bc:65:48:42:94:46:48:05:8e:6c:59:bb:9c:52:0a:6a:03: 7b:c6:44:65:ae:6b:86:6c:f5:51:41:4a:61:cb:90:37:28:33: 3f:2d:4f:01:d4:cb:29:c2:9d:fa:bb:77:40:5c:b6:95:ba:5f: 88:79:7b:5a:15:e0:c6:5e:75:6a:c4:06:33:47:84:4e:ed:07: db:26:ca:76 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt264J6lkXSjzoivqu7DzL5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNzg0NGFiZWY3MTFjMjMyYzg0ZjgzYzgwN2E0MjBhZjM4 MDQ3MjgwHhcNMjYwMTAxMDAxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzExOTc3ZDE3MjY5MjEwNDA4ZDEzOTQ3ZjMxM2JjMmI4OWY4MGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23Lkvmt0yzkzIAts2TxLN+132iBj rnRURQwT+HJ1Swba/O/ZGx07kEna/S8gpd5ZU6jzYxFIjqCZC0TtL4A/nv4VCSyc Id2xPy0MH23DrBZDSEScEhLo/XahKV2u8FqQVfAxi8zvScwvyOfQl2uasswg+Jz+ PZJJ1hI6pa2xL3n5JXRZek8EZN3tF7QIF7jXgfUqDYDyBitwyWLqHzHyEhqgwZZy /0REDf8oEhfZNk7SWPcVYYje7AeDmKBb5H3taxcN11aUTSBGI52AuHfM7mIYKbKy tWZ7M1QBGILS3k+ycU+8/XC1NgT1Awf7e/bSCt+uE3y4k+pQ1OOrG7+SwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMcRl30XJpIQQI0TlH8xO8K4n4DBMB8GA1UdIwQY MBaAFEx4RKvvcRwjLIT4PIB6QgrzgEcoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgt ZGFiNmI4M2NmN2VjLzEveHhHWGZSY21raEJBalJPVWZ6RTd3cmlmZ01FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgtZGFiNmI4M2NmN2Vj LzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXtcMA0G CSqGSIb3DQEBCwUAA4IBAQDXxSRqMFm/lPx+nizShE7wz7Hy5jo0JKyJezUum0hY WQo7gDi3nNCIU71+dHoDz0Br0wmHGS752TxoQ/H01ViiQNcduwJ3iJgRMgtuJcTC sBz3l5+7zJJe32Bx1aPOptmpvlCH7W90Mh5RCcwYMv2xOJcPNg4bMVKShPqzhH5T KHFfZLFU9oQMItS9sM17QhihP/n6vCUQizHViRFGP2C0LhBA57RcseZW6j4uC7xe 9wGniLBtvGVIQpRGSAWObFm7nFIKagN7xkRlrmuGbPVRQUphy5A3KDM/LU8B1Msp wp36u3dAXLaVul+IeXtaFeDGXnVqxAYzR4RO7QfbJsp2 -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:04 2026 by rpki-client