This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/XJrQypw2eXZ7ezpEOpOj8qOwJlc.roa File: XJrQypw2eXZ7ezpEOpOj8qOwJlc.roa (raw, json) Hash identifier: U5AFVavv4y8bxwhEhQQ2exL+ZJwtyEE2Q3oN6TBpcsU= Subject key identifier: 5C:9A:D0:CA:9C:36:79:76:7B:7B:3A:44:3A:93:A3:F2:A3:B0:26:57 Certificate issuer: /CN=dafef97ca010bad4ff59ef7d2b6bc9077860aab2 Certificate serial: 019B76EAEFBE39C07070F75509816A2F88CA Authority key identifier: DA:FE:F9:7C:A0:10:BA:D4:FF:59:EF:7D:2B:6B:C9:07:78:60:AA:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2v75fKAQutT_We99K2vJB3hgqrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/XJrQypw2eXZ7ezpEOpOj8qOwJlc.roa Signing time: Thu 01 Jan 2026 00:17:46 +0000 ROA not before: Thu 01 Jan 2026 00:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201078 IP address blocks: 82.163.160.0/22 maxlen: 22 85.194.233.0/24 maxlen: 24 185.85.4.0/22 maxlen: 22 185.158.60.0/22 maxlen: 22 185.201.104.0/22 maxlen: 22 2a05:a900::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft rsync://rpki.ripe.net/repository/DEFAULT/2v75fKAQutT_We99K2vJB3hgqrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:ef:be:39:c0:70:70:f7:55:09:81:6a:2f:88:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dafef97ca010bad4ff59ef7d2b6bc9077860aab2 Validity Not Before: Jan 1 00:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c9ad0ca9c3679767b7b3a443a93a3f2a3b02657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:92:11:04:ca:a5:81:3a:c5:ad:1b:8f:02:b0: d2:cd:2c:ef:76:14:2f:4d:48:63:29:59:86:c1:df: 8d:ce:47:ae:72:5c:3d:13:5f:2c:10:86:58:23:5c: 98:b8:67:e8:5a:87:77:75:2c:40:a3:e4:8e:98:c2: 76:d8:0f:5f:ba:67:88:b5:3a:85:cb:e5:1f:a8:0f: 88:72:0a:de:c5:54:67:71:0b:91:95:a7:2b:cf:06: 9d:2c:93:ae:cc:df:bc:5f:62:c9:b1:ae:84:e5:2e: 79:19:21:1a:8b:8c:d1:39:48:26:ea:14:8c:e2:60: 02:b2:63:e3:f2:5c:45:a5:00:51:de:f8:ea:af:36: 2e:81:5d:97:bf:eb:17:bd:83:63:35:c3:1a:a5:07: cf:f5:72:af:e5:09:4f:0a:d6:d7:18:04:36:de:5b: aa:2a:80:ae:9e:c6:34:47:4d:0a:57:79:81:b6:39: b1:02:33:ca:0f:6b:bb:ef:71:9e:51:80:0a:a5:71: 81:05:48:4c:b2:a9:5b:6a:fd:89:70:c9:c7:d9:8d: 86:a8:9b:cb:a8:53:99:67:7b:a6:76:dd:87:f9:ff: b6:61:69:e1:9b:1a:39:8e:65:49:0a:ba:a1:43:e1: 1f:c4:96:32:27:da:51:06:f3:68:cc:2f:17:29:ce: 46:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:9A:D0:CA:9C:36:79:76:7B:7B:3A:44:3A:93:A3:F2:A3:B0:26:57 X509v3 Authority Key Identifier: keyid:DA:FE:F9:7C:A0:10:BA:D4:FF:59:EF:7D:2B:6B:C9:07:78:60:AA:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2v75fKAQutT_We99K2vJB3hgqrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/XJrQypw2eXZ7ezpEOpOj8qOwJlc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.163.160.0/22 85.194.233.0/24 185.85.4.0/22 185.158.60.0/22 185.201.104.0/22 IPv6: 2a05:a900::/29 Signature Algorithm: sha256WithRSAEncryption 21:ee:48:da:00:13:1e:12:25:60:ae:50:35:9c:18:85:68:67: eb:5f:bf:24:ac:90:c5:de:d2:93:71:d3:6f:ae:78:9f:39:73: 9c:bc:f2:02:5b:7d:e5:c4:91:5e:da:a1:dc:e2:0c:b9:94:94: c8:4f:b7:00:17:40:f1:72:79:f4:dc:2f:56:11:a9:6a:a8:6e: 25:23:a4:d3:1c:4c:4a:c2:5a:8b:9e:80:2c:7e:b6:ac:bc:36: a2:bf:7c:2c:27:03:8e:9d:47:12:f1:a4:3f:86:cf:e0:0c:82: 28:f9:f8:0d:d6:d6:21:a3:93:2f:e9:e4:7e:f8:42:4e:81:cf: 3e:22:3a:f4:b3:90:c4:60:ed:68:aa:23:50:0c:9f:44:23:c5: 06:73:0e:bd:6c:af:7b:2e:fd:26:22:ad:00:6a:35:ea:ad:c2: bc:32:e7:f8:9d:ee:09:85:25:5c:cc:7d:5c:91:96:db:10:2f: 44:a3:15:95:22:71:a7:50:ac:89:2f:45:6a:47:be:a1:63:a3: 23:c6:5b:b0:88:1e:ad:9e:b2:0c:b6:03:71:d8:38:22:a0:66: 3a:dd:cd:81:f1:6e:6d:d2:62:27:43:ea:81:82:8f:8f:b8:90: ca:b9:32:8c:cd:6d:62:4f:f2:4f:e4:10:64:64:23:9c:c0:d7: cb:7f:d5:85 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt26u++OcBwcPdVCYFqL4jKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhZmVmOTdjYTAxMGJhZDRmZjU5ZWY3ZDJiNmJjOTA3Nzg2 MGFhYjIwHhcNMjYwMTAxMDAxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzlhZDBjYTljMzY3OTc2N2I3YjNhNDQzYTkzYTNmMmEzYjAyNjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJIRBMqlgTrFrRuPArDSzSzvdhQv TUhjKVmGwd+Nzkeuclw9E18sEIZYI1yYuGfoWod3dSxAo+SOmMJ22A9fumeItTqF y+UfqA+IcgrexVRncQuRlacrzwadLJOuzN+8X2LJsa6E5S55GSEai4zROUgm6hSM 4mACsmPj8lxFpQBR3vjqrzYugV2Xv+sXvYNjNcMapQfP9XKv5QlPCtbXGAQ23luq KoCunsY0R00KV3mBtjmxAjPKD2u773GeUYAKpXGBBUhMsqlbav2JcMnH2Y2GqJvL qFOZZ3umdt2H+f+2YWnhmxo5jmVJCrqhQ+EfxJYyJ9pRBvNozC8XKc5GsQIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFFya0MqcNnl2e3s6RDqTo/KjsCZXMB8GA1UdIwQY MBaAFNr++XygELrU/1nvfStryQd4YKqyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnY3NWZLQVF1dFRfV2U5OUsydkpCM2hncXJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yOTIxZTYtODFjNi00NDQ3LTlkNzgt YmZhOTRlYjFhYTAyLzEvWEpyUXlwdzJlWFo3ZXpwRU9wT2o4cU93SmxjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yOTIxZTYtODFjNi00NDQ3LTlkNzgtYmZhOTRlYjFhYTAy LzEvMnY3NWZLQVF1dFRfV2U5OUsydkpCM2hncXJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCUqOgAwQA VcLpAwQCuVUEAwQCuZ48AwQCucloMA0EAgACMAcDBQMqBakAMA0GCSqGSIb3DQEB CwUAA4IBAQAh7kjaABMeEiVgrlA1nBiFaGfrX78krJDF3tKTcdNvrnifOXOcvPIC W33lxJFe2qHc4gy5lJTIT7cAF0Dxcnn03C9WEalqqG4lI6TTHExKwlqLnoAsfras vDaiv3wsJwOOnUcS8aQ/hs/gDIIo+fgN1tYho5Mv6eR++EJOgc8+Ijr0s5DEYO1o qiNQDJ9EI8UGcw69bK97Lv0mIq0AajXqrcK8Muf4ne4JhSVczH1ckZbbEC9EoxWV InGnUKyJL0VqR76hY6MjxluwiB6tnrIMtgNx2DgioGY63c2B8W5t0mInQ+qBgo+P uJDKuTKMzW1iT/JP5BBkZCOcwNfLf9WF -----END CERTIFICATE-----Generated at Sun Jan 25 21:28:22 2026 by rpki-client