This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/xkSfXUS5_IXxCWIv_KZRXInDfVE.roa File: xkSfXUS5_IXxCWIv_KZRXInDfVE.roa (raw, json) Hash identifier: 4czKDen2jZvQIkigei8J1hEAX7SZ6qL0Ml4QQ5tV1W8= Subject key identifier: C6:44:9F:5D:44:B9:FC:85:F1:09:62:2F:FC:A6:51:5C:89:C3:7D:51 Certificate issuer: /CN=0b8d1bb72791c878550d1b9d8fef564ac3919368 Certificate serial: 019B7E386A8EB5809F4B16A4FA40B4B43BDF Authority key identifier: 0B:8D:1B:B7:27:91:C8:78:55:0D:1B:9D:8F:EF:56:4A:C3:91:93:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/xkSfXUS5_IXxCWIv_KZRXInDfVE.roa Signing time: Fri 02 Jan 2026 10:19:45 +0000 ROA not before: Fri 02 Jan 2026 10:19:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48147 IP address blocks: 185.142.156.0/22 maxlen: 22 185.142.156.0/24 maxlen: 24 185.142.157.0/24 maxlen: 24 185.142.158.0/24 maxlen: 24 185.142.159.0/24 maxlen: 24 185.208.180.0/22 maxlen: 22 185.208.180.0/24 maxlen: 24 185.208.181.0/24 maxlen: 24 185.208.182.0/24 maxlen: 24 185.208.183.0/24 maxlen: 24 185.213.10.0/24 maxlen: 24 2a07:4280::/29 maxlen: 29 2a07:4280::/32 maxlen: 32 2a07:4281::/32 maxlen: 32 2a07:4282::/32 maxlen: 32 2a07:4283::/32 maxlen: 32 2a07:4284::/32 maxlen: 32 2a07:4285::/32 maxlen: 32 2a07:4286::/32 maxlen: 32 2a07:4287::/32 maxlen: 32 2a0b:3cc0::/29 maxlen: 29 2a0b:3cc0::/32 maxlen: 32 2a0b:3cc1::/32 maxlen: 32 2a0b:3cc2::/32 maxlen: 32 2a0b:3cc3::/32 maxlen: 32 2a0b:3cc4::/32 maxlen: 32 2a0b:3cc5::/32 maxlen: 32 2a0b:3cc6::/32 maxlen: 32 2a0b:3cc7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.crl rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:6a:8e:b5:80:9f:4b:16:a4:fa:40:b4:b4:3b:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b8d1bb72791c878550d1b9d8fef564ac3919368 Validity Not Before: Jan 2 10:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6449f5d44b9fc85f109622ffca6515c89c37d51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3e:d8:a3:6b:c6:de:97:51:5e:38:6d:68:60: ee:03:9d:2a:08:be:6a:b9:00:27:f4:73:87:c5:ac: 8f:f0:56:cb:43:7d:79:0e:c1:37:0b:ce:45:37:be: 7d:d6:db:75:e1:57:85:2f:d5:8e:61:1c:12:6b:70: da:8c:1b:6c:65:04:e5:42:80:3d:11:bc:51:8e:12: 93:87:6f:67:13:7d:74:7d:ff:d6:74:28:69:c6:10: c0:a4:d2:75:9e:e8:55:37:72:d5:cf:61:c4:0d:9f: 5e:05:7b:4c:98:b2:ee:e8:9f:11:38:c9:3e:bd:b2: fc:db:b8:49:4c:f8:61:a5:ae:40:cd:78:ac:9d:66: 9a:07:b9:fb:53:ba:0c:79:64:42:35:ed:df:ed:21: 27:42:5b:15:e4:26:43:24:8b:86:71:05:11:6a:e0: 97:7f:f3:fc:19:ef:74:8b:6d:ef:ad:43:7c:57:5d: 01:be:42:73:9b:b5:ce:10:aa:b8:10:a4:e2:ed:eb: 4d:d6:95:0d:a0:c7:6b:e4:70:30:22:19:bb:00:38: 8a:04:e6:48:67:36:e4:67:49:2d:ba:c4:5b:ac:3e: 47:08:d8:6f:cd:31:5b:e4:a3:30:55:f1:98:93:c5: eb:e4:98:53:49:ab:86:15:a5:c8:62:30:ba:e3:11: 8c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:44:9F:5D:44:B9:FC:85:F1:09:62:2F:FC:A6:51:5C:89:C3:7D:51 X509v3 Authority Key Identifier: keyid:0B:8D:1B:B7:27:91:C8:78:55:0D:1B:9D:8F:EF:56:4A:C3:91:93:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/xkSfXUS5_IXxCWIv_KZRXInDfVE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.142.156.0/22 185.208.180.0/22 185.213.10.0/24 IPv6: 2a07:4280::/29 2a0b:3cc0::/29 Signature Algorithm: sha256WithRSAEncryption 01:61:3c:29:3c:35:9d:33:9f:2f:29:01:2a:1a:f4:ca:66:b4: b1:ea:fc:ff:d7:24:57:f3:a1:9e:eb:ca:29:c4:9d:be:d5:35: b2:46:76:36:3f:e3:28:ff:c9:a6:83:f5:a6:de:10:df:56:ff: dc:c4:18:04:ca:b9:26:86:2c:ce:7c:fe:76:64:7e:d0:a8:f7: 70:bc:57:7a:34:6c:a0:a8:20:0f:3d:ee:3d:0b:07:ac:f1:9b: 87:e0:e8:68:70:ad:5c:b3:9a:a9:d2:59:a6:4a:f1:dd:0f:9a: fc:1b:04:0c:c6:3e:c6:d2:d2:fc:4f:44:b2:21:70:b4:59:3a: 49:67:fc:bc:f5:11:0c:1b:df:cd:b9:20:9d:f0:dc:8a:d6:c4: ab:cd:4a:6c:40:74:0a:c2:50:4a:3f:45:62:02:1c:ca:11:f2: 18:cb:40:8c:a3:42:29:63:0a:7e:46:65:8f:9f:82:1f:8b:d6: 85:4b:80:9f:ce:65:a3:7f:68:6d:d1:ac:72:d9:23:ba:d7:6f: b3:14:e9:2d:d6:3f:18:cd:4c:71:68:4c:54:f0:59:aa:76:01: aa:fd:55:6f:83:ee:cc:14:27:16:0d:9e:c9:cc:90:f7:ef:7e: c4:85:e6:8f:8a:ba:22:d0:49:07:44:54:92:fe:bd:a3:c1:38: b5:79:a8:6e -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt+OGqOtYCfSxak+kC0tDvfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiOGQxYmI3Mjc5MWM4Nzg1NTBkMWI5ZDhmZWY1NjRhYzM5 MTkzNjgwHhcNMjYwMTAyMTAxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjQ0OWY1ZDQ0YjlmYzg1ZjEwOTYyMmZmY2E2NTE1Yzg5YzM3ZDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArD7Yo2vG3pdRXjhtaGDuA50qCL5q uQAn9HOHxayP8FbLQ315DsE3C85FN7591tt14VeFL9WOYRwSa3DajBtsZQTlQoA9 EbxRjhKTh29nE310ff/WdChpxhDApNJ1nuhVN3LVz2HEDZ9eBXtMmLLu6J8ROMk+ vbL827hJTPhhpa5AzXisnWaaB7n7U7oMeWRCNe3f7SEnQlsV5CZDJIuGcQURauCX f/P8Ge90i23vrUN8V10BvkJzm7XOEKq4EKTi7etN1pUNoMdr5HAwIhm7ADiKBOZI ZzbkZ0ktusRbrD5HCNhvzTFb5KMwVfGYk8Xr5JhTSauGFaXIYjC64xGM2QIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFMZEn11EufyF8QliL/ymUVyJw31RMB8GA1UdIwQY MBaAFAuNG7cnkch4VQ0bnY/vVkrDkZNoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzQwYnR5ZVJ5SGhWRFJ1ZGotOVdTc09SazJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8wMzY3ZDAtZmE4NS00NTQ2LWI4NGMt MDI3OGM1ZGMxNDkxLzEveGtTZlhVUzVfSVh4Q1dJdl9LWlJYSW5EZlZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8wMzY3ZDAtZmE4NS00NTQ2LWI4NGMtMDI3OGM1ZGMxNDkx LzEvQzQwYnR5ZVJ5SGhWRFJ1ZGotOVdTc09SazJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAYBAIAATASAwQCuY6cAwQC udC0AwQAudUKMBQEAgACMA4DBQMqB0KAAwUDKgs8wDANBgkqhkiG9w0BAQsFAAOC AQEAAWE8KTw1nTOfLykBKhr0yma0ser8/9ckV/OhnuvKKcSdvtU1skZ2Nj/jKP/J poP1pt4Q31b/3MQYBMq5JoYsznz+dmR+0Kj3cLxXejRsoKggDz3uPQsHrPGbh+Do aHCtXLOaqdJZpkrx3Q+a/BsEDMY+xtLS/E9EsiFwtFk6SWf8vPURDBvfzbkgnfDc itbEq81KbEB0CsJQSj9FYgIcyhHyGMtAjKNCKWMKfkZlj5+CH4vWhUuAn85lo39o bdGsctkjutdvsxTpLdY/GM1McWhMVPBZqnYBqv1Vb4PuzBQnFg2eycyQ9+9+xIXm j4q6ItBJB0RUkv69o8E4tXmobg== -----END CERTIFICATE-----Generated at Mon Jan 26 05:30:59 2026 by rpki-client