This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/xsnYrUyFRN46bKrVNp6wY5JgQ08.roa File: xsnYrUyFRN46bKrVNp6wY5JgQ08.roa (raw, json) Hash identifier: nMydYuoQNCGriUx37F6TGN8D5lCGMNx6KKl+H7NShn4= Subject key identifier: C6:C9:D8:AD:4C:85:44:DE:3A:6C:AA:D5:36:9E:B0:63:92:60:43:4F Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B7CEE6553C1AB9F095A59AF00FC0AAC36 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/xsnYrUyFRN46bKrVNp6wY5JgQ08.roa Signing time: Fri 02 Jan 2026 04:19:16 +0000 ROA not before: Fri 02 Jan 2026 04:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201949 IP address blocks: 87.229.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:65:53:c1:ab:9f:09:5a:59:af:00:fc:0a:ac:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Jan 2 04:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6c9d8ad4c8544de3a6caad5369eb0639260434f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:95:85:73:c3:ac:f9:0e:1a:fb:41:56:75:42: fe:fc:c3:59:6b:78:83:81:2f:85:28:ea:dc:7c:d5: 41:1a:22:1b:7f:6e:76:0c:af:7a:45:e4:f7:36:4b: 55:ee:00:76:24:37:f2:47:64:3f:df:c2:fd:e9:fb: fe:8e:aa:d5:f3:ce:4e:77:ce:aa:4c:c1:66:82:b4: b9:b2:23:54:14:f6:2f:4b:2e:2d:b9:94:7d:0f:34: 6d:fd:a6:83:7c:02:d1:1a:95:ec:48:c2:03:f9:a3: 36:ef:1b:95:5f:56:88:fe:1c:f1:fa:ad:a1:c6:40: cd:81:48:c8:04:81:d4:db:12:99:50:02:78:f6:3f: 34:e6:96:f0:ff:7b:b9:c7:4e:e9:cb:84:c3:a1:99: 10:cf:86:b8:55:e4:16:ef:cd:f6:bf:55:9a:d8:cb: 82:fb:1d:4b:b4:4b:5f:9f:49:47:42:30:44:ff:05: 24:46:2a:a9:97:d8:10:0c:37:e9:b0:3e:40:ff:f0: 31:76:71:42:4d:c4:0d:af:98:92:26:4f:24:97:2d: 0c:77:62:0a:9d:5e:f1:a3:5d:74:74:30:d4:21:6b: 94:ab:ee:09:d1:4c:b5:bc:6b:bb:76:56:e1:ee:28: 09:53:ce:e6:77:52:ed:d2:11:19:a1:bb:74:a1:50: f8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C9:D8:AD:4C:85:44:DE:3A:6C:AA:D5:36:9E:B0:63:92:60:43:4F X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/xsnYrUyFRN46bKrVNp6wY5JgQ08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.229.100.0/24 Signature Algorithm: sha256WithRSAEncryption 72:f0:b2:17:df:4e:b1:2a:13:5a:7a:15:1e:b8:5b:01:c5:bf: 5e:0a:b3:e7:7c:ef:72:27:61:8b:88:7a:6b:6a:3e:38:9d:d5: 27:37:f3:21:ca:9e:41:b8:01:da:97:16:c6:4e:d7:f6:82:a2: ab:4b:da:b0:c4:59:1e:a6:68:bd:60:b6:6e:ec:9a:78:48:e1: 4a:f2:38:dd:8e:e7:cc:5d:6a:f3:d1:a6:d4:f9:96:f4:55:93: d1:a5:f8:3d:af:4e:27:cb:cb:57:e8:ac:25:8a:9e:fd:d5:5c: cb:60:f8:ab:4a:07:d7:3a:6c:a6:b2:4e:91:9f:c7:a1:e4:de: ae:64:18:47:56:c0:d2:1d:17:4c:74:ca:10:dc:72:15:47:2e: c7:68:9b:fb:1d:d9:bf:a8:2a:c4:f9:ea:a9:4d:8a:88:cf:3a: 98:1a:5c:10:f2:8a:12:b5:21:1f:b6:50:c3:99:fc:22:eb:cb: a5:b9:6b:31:61:44:b1:24:ae:9a:16:34:4d:e1:c9:e1:f1:df: 8d:96:5b:57:de:39:68:a1:13:bb:2d:6f:47:1f:35:cd:58:8d: cd:7c:d4:f1:1b:e9:a8:1f:91:8c:12:bf:fa:b0:03:47:5a:40: ca:08:47:28:eb:9c:39:78:3c:3c:f6:ad:7c:89:38:92:7a:21: 94:9e:e9:2c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87mVTwaufCVpZrwD8Cqw2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjYwMTAyMDQxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmM5ZDhhZDRjODU0NGRlM2E2Y2FhZDUzNjllYjA2MzkyNjA0MzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZWFc8Os+Q4a+0FWdUL+/MNZa3iD gS+FKOrcfNVBGiIbf252DK96ReT3NktV7gB2JDfyR2Q/38L96fv+jqrV885Od86q TMFmgrS5siNUFPYvSy4tuZR9DzRt/aaDfALRGpXsSMID+aM27xuVX1aI/hzx+q2h xkDNgUjIBIHU2xKZUAJ49j805pbw/3u5x07py4TDoZkQz4a4VeQW7832v1Wa2MuC +x1LtEtfn0lHQjBE/wUkRiqpl9gQDDfpsD5A//AxdnFCTcQNr5iSJk8kly0Md2IK nV7xo110dDDUIWuUq+4J0Uy1vGu7dlbh7igJU87md1Lt0hEZobt0oVD4vQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMbJ2K1MhUTeOmyq1TaesGOSYENPMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEveHNuWXJVeUZSTjQ2YktyVk5wNndZNUpnUTA4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+VkMA0G CSqGSIb3DQEBCwUAA4IBAQBy8LIX306xKhNaehUeuFsBxb9eCrPnfO9yJ2GLiHpr aj44ndUnN/Mhyp5BuAHalxbGTtf2gqKrS9qwxFkepmi9YLZu7Jp4SOFK8jjdjufM XWrz0abU+Zb0VZPRpfg9r04ny8tX6Kwlip791VzLYPirSgfXOmymsk6Rn8eh5N6u ZBhHVsDSHRdMdMoQ3HIVRy7HaJv7Hdm/qCrE+eqpTYqIzzqYGlwQ8ooStSEftlDD mfwi68uluWsxYUSxJK6aFjRN4cnh8d+NlltX3jlooRO7LW9HHzXNWI3NfNTxG+mo H5GMEr/6sANHWkDKCEco65w5eDw89q18iTiSeiGUnuks -----END CERTIFICATE-----Generated at Sun Jan 25 13:06:30 2026 by rpki-client