This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/xrmNcJYM7IC02cwip42NZ9MYOJI.roa File: xrmNcJYM7IC02cwip42NZ9MYOJI.roa (raw, json) Hash identifier: b6C56Rw+1/MSwcd/+Js8l5OXj80gDxqiFimnPx3BaLg= Subject key identifier: C6:B9:8D:70:96:0C:EC:80:B4:D9:CC:22:A7:8D:8D:67:D3:18:38:92 Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c Certificate serial: 019B78345356829399DB5293D830A23FEFA8 Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/xrmNcJYM7IC02cwip42NZ9MYOJI.roa Signing time: Thu 01 Jan 2026 06:17:33 +0000 ROA not before: Thu 01 Jan 2026 06:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205473 IP address blocks: 212.126.113.0/24 maxlen: 24 212.126.114.0/24 maxlen: 24 212.126.116.0/24 maxlen: 24 212.126.126.0/24 maxlen: 24 2a04:2dc0:1d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:53:56:82:93:99:db:52:93:d8:30:a2:3f:ef:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c Validity Not Before: Jan 1 06:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6b98d70960cec80b4d9cc22a78d8d67d3183892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:01:a9:fe:e1:89:f4:db:9f:b5:cd:cc:d3:32: 46:29:1f:fc:68:66:f2:e3:b3:41:2f:4a:50:72:e3: a9:c2:c1:c5:99:94:ce:ab:ec:ee:06:a1:43:c0:c3: 7f:a4:86:fe:30:56:eb:f9:f0:76:03:5c:63:55:b2: c9:1f:f1:0b:0c:56:e9:d8:ab:b6:cc:f5:56:a8:f7: f1:9c:c6:4f:2d:86:7b:20:d3:3e:9a:8b:bb:27:bd: 1d:88:21:b5:0b:ed:90:4b:ae:29:0f:8c:19:1a:61: cf:4e:72:03:ea:3c:0b:19:9a:81:42:c4:a5:ca:70: 55:c6:6b:bb:80:18:a5:4e:bc:ba:d6:ba:27:0c:1f: a9:18:5c:eb:a9:07:e8:06:82:eb:d8:65:6b:31:aa: a6:d3:1a:93:7f:e1:ef:0f:88:77:20:d8:20:ad:47: bc:4e:e3:62:a4:0b:ec:ac:18:8a:7e:3e:9b:70:b3: 7d:03:88:e1:e6:30:5a:89:58:de:f4:95:de:fe:d2: aa:43:99:8f:61:1b:f0:89:43:d6:9e:c3:23:31:a6: 67:29:30:e8:61:3f:cc:e2:47:a5:6f:97:16:55:c5: 24:00:39:d5:bf:ec:e9:ef:fb:86:61:39:33:b7:c6: ce:01:69:b5:d0:f5:e6:a1:0a:80:30:d6:26:a5:61: e5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:B9:8D:70:96:0C:EC:80:B4:D9:CC:22:A7:8D:8D:67:D3:18:38:92 X509v3 Authority Key Identifier: keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/xrmNcJYM7IC02cwip42NZ9MYOJI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.126.113.0-212.126.114.255 212.126.116.0/24 212.126.126.0/24 IPv6: 2a04:2dc0:1d::/48 Signature Algorithm: sha256WithRSAEncryption 9a:54:b8:f6:56:f2:45:48:a4:aa:e8:20:3e:63:de:dc:6c:ba: 45:07:ee:ce:54:21:57:0d:56:94:4f:11:51:d8:05:d0:57:d2: 1e:a3:52:9d:5d:3b:2b:9e:1c:96:9d:70:48:ba:d9:0e:75:0b: 0f:35:9b:f6:8e:24:12:e9:36:cf:a8:8b:22:f3:a2:72:81:a5: 7d:a5:46:e1:b7:bc:23:53:fd:76:a8:ff:9b:9a:12:b3:d0:4c: b5:39:a4:7e:cc:99:86:81:b3:79:ab:4a:c9:4c:1c:7f:34:f7: 5e:7f:ed:c7:57:ec:9d:d1:29:7f:20:fc:40:79:65:d6:e8:88: c4:10:67:06:e0:52:4e:62:fe:c7:15:25:6f:90:2a:54:76:87: 95:ca:49:51:ac:dc:bf:18:a8:8f:23:d2:9f:c3:92:0b:e9:a0: 54:3c:f1:ae:bb:c5:c1:d7:b4:40:77:5a:69:43:8f:65:bb:97: 93:20:5a:49:f4:dc:75:2c:31:14:63:5a:ae:76:41:43:52:59: e2:e2:4b:9f:c6:73:29:da:b7:f1:c3:08:d7:8f:05:14:a2:f8: 21:9b:f5:a2:e3:9d:7b:c1:d8:70:a1:db:73:1f:fe:95:bb:49: 7a:80:8e:8b:e2:5f:9e:24:38:2c:b2:cb:20:ba:af:49:46:5c: bc:71:a8:a3 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt4NFNWgpOZ21KT2DCiP++oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhY2NiYjcyYWE5ODg0YTViZjhkMGU3NTc0MDRhMTdlNWUy MzMyMmMwHhcNMjYwMTAxMDYxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmI5OGQ3MDk2MGNlYzgwYjRkOWNjMjJhNzhkOGQ2N2QzMTgzODkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgGp/uGJ9Nuftc3M0zJGKR/8aGby 47NBL0pQcuOpwsHFmZTOq+zuBqFDwMN/pIb+MFbr+fB2A1xjVbLJH/ELDFbp2Ku2 zPVWqPfxnMZPLYZ7INM+mou7J70diCG1C+2QS64pD4wZGmHPTnID6jwLGZqBQsSl ynBVxmu7gBilTry61ronDB+pGFzrqQfoBoLr2GVrMaqm0xqTf+HvD4h3INggrUe8 TuNipAvsrBiKfj6bcLN9A4jh5jBaiVje9JXe/tKqQ5mPYRvwiUPWnsMjMaZnKTDo YT/M4kelb5cWVcUkADnVv+zp7/uGYTkzt8bOAWm10PXmoQqAMNYmpWHl5wIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFMa5jXCWDOyAtNnMIqeNjWfTGDiSMB8GA1UdIwQY MBaAFPrMu3KqmISlv40OdXQEoX5eIzIsMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1zeTdjcXFZaEtXX2pRNTFkQVNoZmw0ak1pdy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTMvZThjYjQ0LWE5NTQtNDY3Mi1iOWE0 LWE0OWU1YzY2MzNiZC8xL3hybU5jSllNN0lDMDJjd2lwNDJOWjlNWU9KSS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNTMvZThjYjQ0LWE5NTQtNDY3Mi1iOWE0LWE0OWU1YzY2MzNi ZC8xLzEtc3k3Y3FxWWhLV19qUTUxZEFTaGZsNGpNaXcuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwRAYIKwYBBQUHAQcBAf8ENTAzMCAEAgABMBowDAMEANR+ cQMEANR+cgMEANR+dAMEANR+fjAPBAIAAjAJAwcAKgQtwAAdMA0GCSqGSIb3DQEB CwUAA4IBAQCaVLj2VvJFSKSq6CA+Y97cbLpFB+7OVCFXDVaUTxFR2AXQV9Ieo1Kd XTsrnhyWnXBIutkOdQsPNZv2jiQS6TbPqIsi86JygaV9pUbht7wjU/12qP+bmhKz 0Ey1OaR+zJmGgbN5q0rJTBx/NPdef+3HV+yd0Sl/IPxAeWXW6IjEEGcG4FJOYv7H FSVvkCpUdoeVyklRrNy/GKiPI9Kfw5IL6aBUPPGuu8XB17RAd1ppQ49lu5eTIFpJ 9Nx1LDEUY1qudkFDUlni4kufxnMp2rfxwwjXjwUUovghm/Wi4517wdhwodtzH/6V u0l6gI6L4l+eJDgssssguq9JRly8caij -----END CERTIFICATE-----Generated at Sun Jan 25 07:15:29 2026 by rpki-client