This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/X_WvLqJE85_JLPG8u8QOORQ8vrY.roa File: X_WvLqJE85_JLPG8u8QOORQ8vrY.roa (raw, json) Hash identifier: 3lJYcwNuNWaK/TxwzxDQE8C+SHvEtkNNzsxVBp4XmNA= Subject key identifier: 5F:F5:AF:2E:A2:44:F3:9F:C9:2C:F1:BC:BB:C4:0E:39:14:3C:BE:B6 Certificate issuer: /CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Certificate serial: 019B7DC9D26EFAE2E16C3B7D0189A284CFB8 Authority key identifier: 28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/X_WvLqJE85_JLPG8u8QOORQ8vrY.roa Signing time: Fri 02 Jan 2026 08:18:56 +0000 ROA not before: Fri 02 Jan 2026 08:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205516 IP address blocks: 185.121.80.0/24 maxlen: 24 185.121.81.0/24 maxlen: 24 185.121.82.0/24 maxlen: 24 185.121.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:d2:6e:fa:e2:e1:6c:3b:7d:01:89:a2:84:cf:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Validity Not Before: Jan 2 08:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ff5af2ea244f39fc92cf1bcbbc40e39143cbeb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a4:00:c9:bb:0f:a5:3e:34:08:98:9f:4e:8e: e1:c1:c3:b5:6e:bc:0d:50:74:2a:04:f4:e6:6e:0e: 6f:78:f3:95:ca:95:cf:b4:05:f2:6d:db:42:4e:55: c9:4f:89:72:19:84:18:61:d2:80:83:11:32:03:a6: 9f:e9:63:cd:8f:ae:c5:4c:5a:cc:ca:be:2a:31:2c: ae:53:63:e0:68:e2:38:bb:d5:8d:dd:3b:89:33:93: 0d:4f:12:80:6a:9f:e7:dd:b4:a0:37:a2:11:ce:c4: 90:55:5b:3b:fb:b8:29:54:c0:28:f2:0d:6a:60:2a: 3f:24:2b:2c:1a:ea:68:a7:a8:fc:77:3a:9e:df:30: 74:1b:4f:09:59:2b:00:1a:2e:0c:72:25:a5:b4:d0: 46:5f:aa:83:e5:10:46:c8:74:35:e1:e7:9c:9d:78: ea:93:e4:95:03:1a:1e:81:90:48:2a:cd:23:33:bd: 34:c3:54:49:83:79:dc:15:4b:1f:c7:a8:94:c6:ee: f1:32:f2:74:e9:9c:b8:1e:42:ee:03:c5:16:ce:eb: c5:6c:17:d0:56:6c:41:46:6a:f9:c9:be:5b:2a:d1: 68:63:76:42:8b:54:7c:ae:d7:e6:60:74:11:91:4b: 1e:d0:99:0f:63:24:62:c5:0d:29:b7:61:f3:c4:99: ca:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F5:AF:2E:A2:44:F3:9F:C9:2C:F1:BC:BB:C4:0E:39:14:3C:BE:B6 X509v3 Authority Key Identifier: keyid:28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/X_WvLqJE85_JLPG8u8QOORQ8vrY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.121.80.0/22 Signature Algorithm: sha256WithRSAEncryption ce:62:cd:df:01:eb:b3:8c:78:49:4b:49:64:5e:32:98:0e:c3: 35:96:c5:d4:8d:cf:f4:20:04:8f:79:d0:36:96:be:99:1f:b4: 49:c3:18:b3:bb:63:1f:65:9f:bb:64:12:46:ce:be:ec:3e:18: 90:86:58:fa:08:0f:95:66:bf:9a:9e:ac:34:68:b9:3b:0d:5b: 54:a2:17:75:8b:dd:d8:b8:e4:15:6c:0a:70:ee:5e:60:c5:be: 3b:56:19:7a:f8:74:36:87:bc:c9:bb:8d:3c:14:73:be:f3:5e: 10:4a:ec:4d:9c:d5:f0:bc:4a:9a:a4:76:bd:91:7e:dc:88:a3: 0a:72:2a:d3:ff:a0:21:38:ef:6d:5a:b3:4b:03:12:3f:3b:a0: 59:fb:0e:a6:20:16:0c:b1:e9:66:ed:8e:4c:93:77:49:8f:9e: bc:ff:3d:03:4f:8a:17:57:24:0f:18:bf:ca:bf:b7:cf:76:be: 1c:61:b2:5e:83:02:ce:76:b3:f8:17:dc:7b:1c:a2:5e:dd:8b: 24:16:1f:2a:2f:f8:5d:75:14:ef:a0:66:41:f6:cf:2c:2f:c6: 61:4d:56:dc:fa:7a:30:d4:e9:9f:4d:67:8e:55:6f:2a:c7:c4: 24:bc:6b:f5:53:a2:69:ed:be:dd:98:a8:b3:47:24:4e:d9:34: 07:9c:d7:ef -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ydJu+uLhbDt9AYmihM+4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ODU1ODUyYTRiY2QxYmYxZWM4MTNmM2MxM2IwZjFmMzcy ZjM5NzEwHhcNMjYwMTAyMDgxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmY1YWYyZWEyNDRmMzlmYzkyY2YxYmNiYmM0MGUzOTE0M2NiZWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKQAybsPpT40CJifTo7hwcO1brwN UHQqBPTmbg5vePOVypXPtAXybdtCTlXJT4lyGYQYYdKAgxEyA6af6WPNj67FTFrM yr4qMSyuU2PgaOI4u9WN3TuJM5MNTxKAap/n3bSgN6IRzsSQVVs7+7gpVMAo8g1q YCo/JCssGupop6j8dzqe3zB0G08JWSsAGi4MciWltNBGX6qD5RBGyHQ14eecnXjq k+SVAxoegZBIKs0jM700w1RJg3ncFUsfx6iUxu7xMvJ06Zy4HkLuA8UWzuvFbBfQ VmxBRmr5yb5bKtFoY3ZCi1R8rtfmYHQRkUse0JkPYyRixQ0pt2HzxJnKtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF/1ry6iRPOfySzxvLvEDjkUPL62MB8GA1UdIwQY MBaAFCiFWFKkvNG/HsgT88E7Dx83LzlxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEt NzA0NDYzZWJhZDM2LzEvWF9XdkxxSkU4NV9KTFBHOHU4UU9PUlE4dnJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEtNzA0NDYzZWJhZDM2 LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXlQMA0G CSqGSIb3DQEBCwUAA4IBAQDOYs3fAeuzjHhJS0lkXjKYDsM1lsXUjc/0IASPedA2 lr6ZH7RJwxizu2MfZZ+7ZBJGzr7sPhiQhlj6CA+VZr+anqw0aLk7DVtUohd1i93Y uOQVbApw7l5gxb47Vhl6+HQ2h7zJu408FHO+814QSuxNnNXwvEqapHa9kX7ciKMK cirT/6AhOO9tWrNLAxI/O6BZ+w6mIBYMselm7Y5Mk3dJj568/z0DT4oXVyQPGL/K v7fPdr4cYbJegwLOdrP4F9x7HKJe3YskFh8qL/hddRTvoGZB9s8sL8ZhTVbc+now 1OmfTWeOVW8qx8QkvGv1U6Jp7b7dmKizRyRO2TQHnNfv -----END CERTIFICATE-----Generated at Mon Jan 26 02:23:44 2026 by rpki-client