This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/xgHR7y7J0aGtYD0R9jhr6WJbZm8.roa File: xgHR7y7J0aGtYD0R9jhr6WJbZm8.roa (raw, json) Hash identifier: CHXV05nQbB5KxwYkctbAeeyJMsjXN6ysG0w+cPnzH+Y= Subject key identifier: C6:01:D1:EF:2E:C9:D1:A1:AD:60:3D:11:F6:38:6B:E9:62:5B:66:6F Certificate issuer: /CN=23259da3b1b38ca0939f490fb9043fcd89cfd062 Certificate serial: 019B7A5B32580497C63E8A6A40263792CAD5 Authority key identifier: 23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/xgHR7y7J0aGtYD0R9jhr6WJbZm8.roa Signing time: Thu 01 Jan 2026 16:19:15 +0000 ROA not before: Thu 01 Jan 2026 16:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25424 IP address blocks: 37.9.192.0/21 maxlen: 21 77.92.192.0/19 maxlen: 19 85.92.32.0/19 maxlen: 19 91.109.32.0/21 maxlen: 21 185.157.196.0/22 maxlen: 22 188.244.48.0/20 maxlen: 20 212.111.0.0/19 maxlen: 19 2a00:e580::/29 maxlen: 29 2a0a:3340::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:32:58:04:97:c6:3e:8a:6a:40:26:37:92:ca:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23259da3b1b38ca0939f490fb9043fcd89cfd062 Validity Not Before: Jan 1 16:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c601d1ef2ec9d1a1ad603d11f6386be9625b666f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1d:1d:36:56:d7:a1:be:74:e4:e1:ce:57:b9: ca:05:99:b8:14:10:a2:47:e8:1f:1d:5f:1f:72:de: d6:dc:af:dd:02:f9:da:2f:02:bb:a3:ce:0a:72:a3: f8:5e:3a:31:56:38:76:dc:d2:42:d8:98:9b:7b:f2: a7:98:df:99:06:67:07:ff:30:be:88:26:1a:20:68: 48:5f:c4:38:df:66:a7:1e:26:48:79:d3:a6:42:1e: 2b:29:2a:67:ae:91:6f:68:bf:e5:6d:62:49:d8:04: 18:36:05:5a:ff:e8:79:69:20:c4:16:83:11:11:e9: 25:66:78:72:1b:4f:d2:ea:00:01:a8:bb:bd:6c:36: 7a:98:a2:d7:4f:16:98:61:13:2e:5f:6d:a2:89:ca: 30:31:44:8c:1b:c3:f0:e4:8a:56:e6:cd:29:e7:38: ab:8d:6c:f3:d9:e8:1e:b4:74:52:e7:6e:33:5a:25: 92:c1:92:13:4f:25:bc:25:f5:7f:b8:99:a9:83:7c: 89:86:27:02:63:16:90:e3:14:78:1a:e6:9f:44:ec: 85:0b:8e:e9:62:ce:70:5c:89:ab:61:0f:d3:65:b5: 4c:16:eb:09:03:45:91:d6:e3:06:88:fb:1e:df:b8: 6d:d0:d4:74:d3:86:68:07:92:e6:78:a6:4b:2d:8a: 59:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:01:D1:EF:2E:C9:D1:A1:AD:60:3D:11:F6:38:6B:E9:62:5B:66:6F X509v3 Authority Key Identifier: keyid:23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/xgHR7y7J0aGtYD0R9jhr6WJbZm8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.9.192.0/21 77.92.192.0/19 85.92.32.0/19 91.109.32.0/21 185.157.196.0/22 188.244.48.0/20 212.111.0.0/19 IPv6: 2a00:e580::/29 2a0a:3340::/29 Signature Algorithm: sha256WithRSAEncryption 09:bc:4b:fa:ba:63:15:25:2c:3c:6e:58:9e:5c:68:cb:a5:00: 5d:d7:2b:fb:e3:a1:10:4b:71:f8:0c:ee:0e:c1:41:2b:15:d7: fe:08:94:9d:6a:20:fd:e3:80:75:61:0e:2d:ba:fa:b9:89:68: 35:c3:64:fb:94:92:ee:ea:22:e5:99:bf:8d:24:a2:bb:73:59: 36:92:be:1b:2d:c9:82:b4:14:26:ff:c0:d4:04:b7:39:f0:cb: 05:b8:a2:d9:d5:6a:34:fe:9d:6e:44:50:10:1c:40:54:7b:01: 7e:0f:f2:17:29:52:8f:f8:25:6c:72:d9:55:87:a0:cf:11:61: 52:4a:c3:39:36:60:53:78:53:99:98:4b:2d:8a:41:cb:fb:79: 11:75:ec:9a:ee:f5:01:6e:e1:4a:af:92:4f:20:1e:90:96:47: dc:70:e3:66:0b:9e:ca:5e:bf:23:d4:62:7e:b8:b7:04:f5:6a: db:6f:3e:56:4e:30:14:6d:f2:9b:80:64:b0:fa:d2:a6:26:18: 67:97:4f:5a:76:38:bc:83:ab:3e:d9:48:16:c4:c9:01:50:42: c9:8f:d3:b0:7d:1b:d7:35:37:f3:53:1b:d3:5c:9c:c6:fa:eb: c8:e9:0f:a8:33:ac:d6:eb:17:93:08:62:ee:0d:ce:da:27:2e: 53:79:ec:bb -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgISAZt6WzJYBJfGPopqQCY3ksrVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMjU5ZGEzYjFiMzhjYTA5MzlmNDkwZmI5MDQzZmNkODlj ZmQwNjIwHhcNMjYwMTAxMTYxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjAxZDFlZjJlYzlkMWExYWQ2MDNkMTFmNjM4NmJlOTYyNWI2NjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApB0dNlbXob505OHOV7nKBZm4FBCi R+gfHV8fct7W3K/dAvnaLwK7o84KcqP4XjoxVjh23NJC2Jibe/KnmN+ZBmcH/zC+ iCYaIGhIX8Q432anHiZIedOmQh4rKSpnrpFvaL/lbWJJ2AQYNgVa/+h5aSDEFoMR EeklZnhyG0/S6gABqLu9bDZ6mKLXTxaYYRMuX22iicowMUSMG8Pw5IpW5s0p5zir jWzz2egetHRS524zWiWSwZITTyW8JfV/uJmpg3yJhicCYxaQ4xR4GuafROyFC47p Ys5wXImrYQ/TZbVMFusJA0WR1uMGiPse37ht0NR004ZoB5LmeKZLLYpZLwIDAQAB o4ICQzCCAj8wHQYDVR0OBBYEFMYB0e8uydGhrWA9EfY4a+liW2ZvMB8GA1UdIwQY MBaAFCMlnaOxs4ygk59JD7kEP82Jz9BiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy85MWE1ZmQtZTU2Yy00ZDg3LWJkNzUt NjU0ZGQ2NDQyY2U0LzEveGdIUjd5N0owYUd0WUQwUjlqaHI2V0piWm04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy85MWE1ZmQtZTU2Yy00ZDg3LWJkNzUtNjU0ZGQ2NDQyY2U0 LzEvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDAwBAIAATAqAwQDJQnAAwQF TVzAAwQFVVwgAwQDW20gAwQCuZ3EAwQEvPQwAwQF1G8AMBQEAgACMA4DBQMqAOWA AwUDKgozQDANBgkqhkiG9w0BAQsFAAOCAQEACbxL+rpjFSUsPG5Ynlxoy6UAXdcr ++OhEEtx+AzuDsFBKxXX/giUnWog/eOAdWEOLbr6uYloNcNk+5SS7uoi5Zm/jSSi u3NZNpK+Gy3JgrQUJv/A1AS3OfDLBbii2dVqNP6dbkRQEBxAVHsBfg/yFylSj/gl bHLZVYegzxFhUkrDOTZgU3hTmZhLLYpBy/t5EXXsmu71AW7hSq+STyAekJZH3HDj Zgueyl6/I9Rifri3BPVq228+Vk4wFG3ym4BksPrSpiYYZ5dPWnY4vIOrPtlIFsTJ AVBCyY/TsH0b1zU381Mb01ycxvrryOkPqDOs1usXkwhi7g3O2icuU3nsuw== -----END CERTIFICATE-----Generated at Mon Jan 26 10:14:57 2026 by rpki-client