This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/XNHFS8ZMGooSizNDD-_Z2_M2bLs.roa File: XNHFS8ZMGooSizNDD-_Z2_M2bLs.roa (raw, json) Hash identifier: NrqwSk7qLUhd2Ca65sK/JaxXop9TloKYfUN2lC/2ang= Subject key identifier: 5C:D1:C5:4B:C6:4C:1A:8A:12:8B:33:43:0F:EF:D9:DB:F3:36:6C:BB Certificate issuer: /CN=73ff4b1cbeaf9dd75d3b5ef3ee9a75d5799f7280 Certificate serial: 019B7910441B2241C963268CF5C462D1DA2C Authority key identifier: 73:FF:4B:1C:BE:AF:9D:D7:5D:3B:5E:F3:EE:9A:75:D5:79:9F:72:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/XNHFS8ZMGooSizNDD-_Z2_M2bLs.roa Signing time: Thu 01 Jan 2026 10:17:47 +0000 ROA not before: Thu 01 Jan 2026 10:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12350 IP address blocks: 185.242.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.crl rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:44:1b:22:41:c9:63:26:8c:f5:c4:62:d1:da:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73ff4b1cbeaf9dd75d3b5ef3ee9a75d5799f7280 Validity Not Before: Jan 1 10:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5cd1c54bc64c1a8a128b33430fefd9dbf3366cbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:90:50:e9:48:7a:88:75:0e:fb:73:d4:9f:c0: 73:75:22:65:c5:73:5c:79:f6:39:68:72:60:3b:00: 67:35:84:5d:7b:c1:51:e9:20:cf:2b:35:fc:37:18: ac:e3:a9:42:54:2f:b0:33:72:c7:c2:58:fb:b1:83: b3:3b:93:c1:ed:df:4b:56:b4:12:ab:bd:0c:94:24: 63:17:1d:3e:1d:e7:d0:23:35:9a:5c:36:2e:bf:eb: cb:dc:8c:de:b9:1b:8f:af:3b:41:84:b2:59:08:d3: d5:21:0a:d1:f4:75:70:64:3e:30:91:86:ac:16:5d: 9c:ce:3a:28:47:0b:42:50:2e:8c:00:74:bc:57:6b: d1:3e:ac:af:c0:e0:9f:48:28:77:0d:91:97:f4:db: ee:09:99:a6:0a:a5:23:4f:c9:6f:1c:c6:ba:95:67: ae:c5:24:a0:b6:4c:d2:93:9f:92:57:5f:f2:72:08: 5e:c8:a7:4b:bc:3a:77:08:6c:54:b9:64:b4:c9:99: 89:d3:7f:dd:9e:b5:2c:11:6b:85:04:2d:b2:dc:0a: a2:ad:27:42:91:d3:a1:6a:b6:bf:c0:ae:ec:8c:2a: d9:42:67:28:db:6d:bc:3b:d6:73:10:2c:a3:5d:58: b4:88:72:a0:4b:8b:c8:86:da:3d:c7:b6:b5:5f:e9: b0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:D1:C5:4B:C6:4C:1A:8A:12:8B:33:43:0F:EF:D9:DB:F3:36:6C:BB X509v3 Authority Key Identifier: keyid:73:FF:4B:1C:BE:AF:9D:D7:5D:3B:5E:F3:EE:9A:75:D5:79:9F:72:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/XNHFS8ZMGooSizNDD-_Z2_M2bLs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.242.60.0/23 Signature Algorithm: sha256WithRSAEncryption 25:90:1c:5f:9c:27:24:f9:66:9d:c9:09:fa:27:ca:79:c2:72: c8:40:60:75:7a:7c:27:e5:6f:af:87:41:40:25:f4:6f:de:66: 1b:96:36:b7:9e:3b:d8:3c:65:5d:64:6d:42:3e:73:d6:b0:68: 3e:00:fe:a1:3d:2d:09:2a:01:47:b3:17:99:a5:9d:4d:57:46: cb:e5:50:30:84:fe:32:c3:cf:78:bd:30:10:8b:0a:b3:0b:e3: f7:5e:38:fd:48:fc:db:6f:2b:e1:6a:85:2e:16:37:75:5b:48: 25:79:c1:2b:19:66:0a:45:0d:fc:4d:49:bd:b5:42:98:00:5c: ea:0f:17:cc:97:f5:7c:50:2c:02:e7:6d:84:f6:d5:78:5c:1c: 41:8e:cd:d3:a6:7c:6b:4d:2d:a4:77:76:76:ad:01:6d:1d:55: 2e:ef:87:c6:28:b5:f3:46:8b:ed:3a:fa:ed:2e:29:5f:67:c6: 52:69:f4:a3:00:1e:77:7b:c2:7d:89:36:fb:a2:8d:c8:58:0a: cf:20:e4:78:df:bd:b1:b7:52:53:3e:b4:d4:0b:cb:85:87:a8: 93:f7:6a:83:71:b8:46:16:8a:a2:44:04:47:bb:1d:cc:e1:e0: 4b:71:46:87:30:ea:59:57:e3:7f:ab:61:54:26:3a:c0:29:e4: 35:25:12:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EEQbIkHJYyaM9cRi0dosMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZmY0YjFjYmVhZjlkZDc1ZDNiNWVmM2VlOWE3NWQ1Nzk5 ZjcyODAwHhcNMjYwMTAxMTAxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2QxYzU0YmM2NGMxYThhMTI4YjMzNDMwZmVmZDlkYmYzMzY2Y2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZBQ6Uh6iHUO+3PUn8BzdSJlxXNc efY5aHJgOwBnNYRde8FR6SDPKzX8Nxis46lCVC+wM3LHwlj7sYOzO5PB7d9LVrQS q70MlCRjFx0+HefQIzWaXDYuv+vL3IzeuRuPrztBhLJZCNPVIQrR9HVwZD4wkYas Fl2czjooRwtCUC6MAHS8V2vRPqyvwOCfSCh3DZGX9NvuCZmmCqUjT8lvHMa6lWeu xSSgtkzSk5+SV1/ycgheyKdLvDp3CGxUuWS0yZmJ03/dnrUsEWuFBC2y3AqirSdC kdOhara/wK7sjCrZQmco2228O9ZzECyjXVi0iHKgS4vIhto9x7a1X+mwWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFzRxUvGTBqKEoszQw/v2dvzNmy7MB8GA1UdIwQY MBaAFHP/Sxy+r53XXTte8+6addV5n3KAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY185TEhMNnZuZGRkTzE3ejdwcDExWG1mY29BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yNmY0NGEtYWU1My00NzI3LTkwNzUt NDM3YTM0NmIyMmY3LzEvWE5IRlM4Wk1Hb29TaXpOREQtX1oyX00yYkxzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yNmY0NGEtYWU1My00NzI3LTkwNzUtNDM3YTM0NmIyMmY3 LzEvY185TEhMNnZuZGRkTzE3ejdwcDExWG1mY29BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBufI8MA0G CSqGSIb3DQEBCwUAA4IBAQAlkBxfnCck+WadyQn6J8p5wnLIQGB1enwn5W+vh0FA JfRv3mYblja3njvYPGVdZG1CPnPWsGg+AP6hPS0JKgFHsxeZpZ1NV0bL5VAwhP4y w894vTAQiwqzC+P3Xjj9SPzbbyvhaoUuFjd1W0glecErGWYKRQ38TUm9tUKYAFzq DxfMl/V8UCwC522E9tV4XBxBjs3TpnxrTS2kd3Z2rQFtHVUu74fGKLXzRovtOvrt LilfZ8ZSafSjAB53e8J9iTb7oo3IWArPIOR4372xt1JTPrTUC8uFh6iT92qDcbhG FoqiRARHux3M4eBLcUaHMOpZV+N/q2FUJjrAKeQ1JRLX -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:41 2026 by rpki-client