This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/xa8hNYnY5YtZ3lvhBoGXHaoWdZs.roa File: xa8hNYnY5YtZ3lvhBoGXHaoWdZs.roa (raw, json) Hash identifier: cfTBRZqteMXbej9rAKnDcge1IuDIIPwXFt2wZ9TtEP8= Subject key identifier: C5:AF:21:35:89:D8:E5:8B:59:DE:5B:E1:06:81:97:1D:AA:16:75:9B Certificate issuer: /CN=2b0e6a7bdb11c4ffd77718081510c91431178cdb Certificate serial: 019B797F1F90DE5452618EFFAF56B9C5B3F6 Authority key identifier: 2B:0E:6A:7B:DB:11:C4:FF:D7:77:18:08:15:10:C9:14:31:17:8C:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/xa8hNYnY5YtZ3lvhBoGXHaoWdZs.roa Signing time: Thu 01 Jan 2026 12:18:52 +0000 ROA not before: Thu 01 Jan 2026 12:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8943 IP address blocks: 85.119.80.0/21 maxlen: 21 2a0a:1100::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:1f:90:de:54:52:61:8e:ff:af:56:b9:c5:b3:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b0e6a7bdb11c4ffd77718081510c91431178cdb Validity Not Before: Jan 1 12:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5af213589d8e58b59de5be10681971daa16759b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:61:43:60:e7:a3:e1:65:ec:ae:e8:a2:4c:51: 37:e6:aa:cb:97:96:85:e2:ec:d1:3f:96:3e:1e:41: 18:63:7e:1e:fd:9a:51:c2:d7:26:e3:b3:a6:c8:73: 91:2d:46:e9:79:7e:eb:9a:e8:1c:49:70:74:ec:74: e2:77:18:47:8a:cf:8b:e0:b8:cb:a6:13:d9:4c:2b: fd:3f:b1:d7:7f:0f:ed:3f:9c:c9:80:7b:36:61:32: c9:c8:ea:53:75:bd:c8:b7:c7:26:ac:3e:da:72:cd: 72:2a:e5:17:b7:d7:79:c0:85:2e:ce:13:12:80:fd: cc:61:a3:7d:eb:72:fe:05:e5:13:1d:2d:ac:95:89: 86:9d:46:ab:87:d6:63:9d:df:5d:8c:8a:30:51:97: ee:ed:56:10:3f:8a:94:41:dc:50:a5:89:53:90:b5: 7f:89:4c:5a:c7:0a:55:fc:d3:4c:f2:a0:bd:81:14: 49:58:cd:da:1f:4e:11:1e:6f:1f:39:bc:8b:44:65: 96:04:f5:26:b6:57:24:8f:33:79:55:42:35:a9:d1: e7:49:48:59:c7:69:dd:23:1f:25:dc:2c:3a:18:36: 31:6d:11:f8:5e:86:b2:26:29:f4:c1:7f:12:31:85: 00:84:97:eb:2c:ff:4c:e5:47:d2:36:59:41:5a:8e: 14:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:AF:21:35:89:D8:E5:8B:59:DE:5B:E1:06:81:97:1D:AA:16:75:9B X509v3 Authority Key Identifier: keyid:2B:0E:6A:7B:DB:11:C4:FF:D7:77:18:08:15:10:C9:14:31:17:8C:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/xa8hNYnY5YtZ3lvhBoGXHaoWdZs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.119.80.0/21 IPv6: 2a0a:1100::/32 Signature Algorithm: sha256WithRSAEncryption cf:d2:2c:86:a5:f2:7a:24:83:ae:37:c9:a9:f9:94:93:d4:b4: 4f:32:77:4e:bd:b3:0b:cf:f3:f4:95:22:0a:85:83:0b:63:a5: 99:4e:dc:3e:ba:0e:ad:61:ce:f8:10:88:5f:0b:9e:4b:f3:6a: b2:7e:d8:03:1c:7a:47:7d:33:32:e1:93:4c:ae:a5:33:c2:7e: f1:76:53:5b:0d:d1:5d:9c:3c:de:78:e0:d9:5e:cd:3f:fb:f0: 18:7b:5b:b0:e5:54:01:fa:fb:44:28:4d:74:ae:8e:00:0e:31: 24:fb:b7:31:61:3c:e5:e8:29:e9:6b:fc:d1:28:ab:ed:bc:3c: c0:f6:12:8a:a7:fb:06:b8:f2:79:48:87:a0:ef:bc:c7:9f:eb: bc:2c:86:d0:97:a0:b5:42:d0:99:c2:8a:99:f6:39:88:4b:33: 7d:95:91:71:0c:f2:ee:24:e5:70:e0:ca:66:7c:21:ed:88:46: 11:d7:d6:66:b8:66:5e:ec:0f:cd:ce:29:5a:6b:dc:12:0c:d7: 1b:de:70:a6:11:9a:e3:82:6e:39:c1:14:3b:d0:a8:9c:89:ca: e0:cb:dc:5d:01:01:12:5f:7d:72:71:78:51:4a:23:f7:45:f6: 98:db:25:e6:b2:0d:e9:6e:22:c7:5f:1a:da:32:77:46:bc:94: 97:d3:7f:c7 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5fx+Q3lRSYY7/r1a5xbP2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiMGU2YTdiZGIxMWM0ZmZkNzc3MTgwODE1MTBjOTE0MzEx NzhjZGIwHhcNMjYwMTAxMTIxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNWFmMjEzNTg5ZDhlNThiNTlkZTViZTEwNjgxOTcxZGFhMTY3NTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2FDYOej4WXsruiiTFE35qrLl5aF 4uzRP5Y+HkEYY34e/ZpRwtcm47OmyHORLUbpeX7rmugcSXB07HTidxhHis+L4LjL phPZTCv9P7HXfw/tP5zJgHs2YTLJyOpTdb3It8cmrD7acs1yKuUXt9d5wIUuzhMS gP3MYaN963L+BeUTHS2slYmGnUarh9Zjnd9djIowUZfu7VYQP4qUQdxQpYlTkLV/ iUxaxwpV/NNM8qC9gRRJWM3aH04RHm8fObyLRGWWBPUmtlckjzN5VUI1qdHnSUhZ x2ndIx8l3Cw6GDYxbRH4XoayJin0wX8SMYUAhJfrLP9M5UfSNllBWo4UgwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMWvITWJ2OWLWd5b4QaBlx2qFnWbMB8GA1UdIwQY MBaAFCsOanvbEcT/13cYCBUQyRQxF4zbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3c1cWU5c1J4UF9YZHhnSUZSREpGREVYak5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yZDIzOGUtYjMxYy00ZWEwLTk4Y2Mt YzRmZWJjM2Q2ZTUyLzEveGE4aE5Zblk1WXRaM2x2aEJvR1hIYW9XZFpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yZDIzOGUtYjMxYy00ZWEwLTk4Y2MtYzRmZWJjM2Q2ZTUy LzEvS3c1cWU5c1J4UF9YZHhnSUZSREpGREVYak5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDVXdQMA0E AgACMAcDBQAqChEAMA0GCSqGSIb3DQEBCwUAA4IBAQDP0iyGpfJ6JIOuN8mp+ZST 1LRPMndOvbMLz/P0lSIKhYMLY6WZTtw+ug6tYc74EIhfC55L82qyftgDHHpHfTMy 4ZNMrqUzwn7xdlNbDdFdnDzeeODZXs0/+/AYe1uw5VQB+vtEKE10ro4ADjEk+7cx YTzl6Cnpa/zRKKvtvDzA9hKKp/sGuPJ5SIeg77zHn+u8LIbQl6C1QtCZwoqZ9jmI SzN9lZFxDPLuJOVw4MpmfCHtiEYR19ZmuGZe7A/Nzilaa9wSDNcb3nCmEZrjgm45 wRQ70Kicicrgy9xdAQESX31ycXhRSiP3RfaY2yXmsg3pbiLHXxraMndGvJSX03/H -----END CERTIFICATE-----Generated at Mon Jan 26 01:49:38 2026 by rpki-client