This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/xYSs50B2xtsvWdJxMD0UuyzwnRE.roa File: xYSs50B2xtsvWdJxMD0UuyzwnRE.roa (raw, json) Hash identifier: wUK1v8a3MmWnPSffQ5f8oxAVVqstmvh7KosqvxbaO78= Subject key identifier: C5:84:AC:E7:40:76:C6:DB:2F:59:D2:71:30:3D:14:BB:2C:F0:9D:11 Certificate issuer: /CN=b64074aa8449830da9b20b3afb0682d3c032f9fe Certificate serial: 019B7DCAB2F06C175DB6F26084E10800A6C8 Authority key identifier: B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/xYSs50B2xtsvWdJxMD0UuyzwnRE.roa Signing time: Fri 02 Jan 2026 08:19:54 +0000 ROA not before: Fri 02 Jan 2026 08:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202687 IP address blocks: 185.84.240.0/24 maxlen: 24 2a03:4bc0:1015::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.crl rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 23:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:b2:f0:6c:17:5d:b6:f2:60:84:e1:08:00:a6:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b64074aa8449830da9b20b3afb0682d3c032f9fe Validity Not Before: Jan 2 08:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c584ace74076c6db2f59d271303d14bb2cf09d11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:63:d6:02:d2:9b:b8:ff:2b:b2:59:3b:78:cb: a4:93:18:a5:02:1f:c3:a9:ea:f3:cc:da:30:15:f6: 67:98:0c:44:bb:1d:ef:0d:1e:01:1b:5e:ac:cc:aa: 62:5f:b6:4e:75:3f:52:80:d4:de:43:fd:ed:4b:9d: 96:0c:36:17:e0:9f:7d:89:34:88:46:6f:c5:42:ef: 97:4e:a4:5f:12:db:bb:72:69:96:f2:80:5f:af:53: ea:35:d9:7d:6a:1c:ea:0c:af:80:f2:db:5e:26:47: 61:53:63:bf:7c:eb:5a:8e:da:93:b0:d4:ee:cb:84: 0a:fd:17:ab:fa:e9:70:bd:25:fc:6b:4c:a3:04:63: 77:8d:1d:e2:b3:37:32:81:4f:a7:b7:9b:83:50:71: 1e:0d:be:a9:0c:dc:21:c0:a4:0d:c8:61:d9:24:66: 58:27:4e:04:04:27:e3:48:3c:95:75:67:60:63:0d: f2:03:d7:43:2b:72:66:17:6d:18:9b:ad:e0:3d:2f: 8c:a9:13:6b:26:09:02:8e:3f:61:8b:a1:57:0b:91: e8:83:ee:1d:d3:78:d7:93:ce:b3:cb:9b:25:70:37: 7a:54:09:c7:4d:8c:70:0d:5c:1e:ac:bf:e2:69:ab: 95:f4:1c:5f:c0:54:9e:59:b5:af:66:30:03:47:f4: f1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:84:AC:E7:40:76:C6:DB:2F:59:D2:71:30:3D:14:BB:2C:F0:9D:11 X509v3 Authority Key Identifier: keyid:B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/xYSs50B2xtsvWdJxMD0UuyzwnRE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.84.240.0/24 IPv6: 2a03:4bc0:1015::/48 Signature Algorithm: sha256WithRSAEncryption 66:03:49:71:1a:fa:8f:91:8c:0b:be:5b:70:b4:ee:63:6e:ee: 18:a7:b1:6d:07:35:13:59:d8:fb:f4:50:49:78:b5:c2:7f:f4: 7e:55:3c:09:a8:85:b1:25:9b:69:98:c7:67:80:1b:f6:a5:56: b8:18:32:89:43:73:9f:5b:5e:6f:e0:9b:83:01:62:34:8a:01: f0:d0:6c:40:a0:ad:24:97:92:5b:3e:4e:1e:32:d2:d3:db:17: a8:7b:e9:4d:03:e3:69:3d:cf:24:27:bd:ac:f3:4f:27:78:ae: 67:7c:b5:e6:0f:7e:7c:34:65:20:3b:b4:7a:68:91:c9:42:c0: b5:77:0f:33:19:02:38:c0:9b:b8:77:0f:0c:fa:c8:0f:2d:29: ef:d6:62:b1:bf:2f:b6:4f:c6:7d:31:7d:bb:f7:27:32:95:e9: aa:8e:47:b5:1b:19:52:18:cf:59:e4:11:ba:74:e8:f6:c4:8f: 9f:47:c8:4e:80:fa:01:a9:66:9b:f4:46:9d:97:82:78:e4:ad: 41:13:6b:ae:78:94:66:86:ce:7f:67:f2:20:6c:d9:dd:b4:0a: e9:52:16:47:43:95:5e:e6:a2:21:13:aa:26:fb:16:8e:6e:89: b7:e4:59:23:54:9e:6c:86:0f:c2:19:3f:ec:ba:a6:e9:69:36: 01:85:8b:8b -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9yrLwbBddtvJghOEIAKbIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2NDA3NGFhODQ0OTgzMGRhOWIyMGIzYWZiMDY4MmQzYzAz MmY5ZmUwHhcNMjYwMTAyMDgxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTg0YWNlNzQwNzZjNmRiMmY1OWQyNzEzMDNkMTRiYjJjZjA5ZDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmPWAtKbuP8rslk7eMukkxilAh/D qerzzNowFfZnmAxEux3vDR4BG16szKpiX7ZOdT9SgNTeQ/3tS52WDDYX4J99iTSI Rm/FQu+XTqRfEtu7cmmW8oBfr1PqNdl9ahzqDK+A8tteJkdhU2O/fOtajtqTsNTu y4QK/Rer+ulwvSX8a0yjBGN3jR3iszcygU+nt5uDUHEeDb6pDNwhwKQNyGHZJGZY J04EBCfjSDyVdWdgYw3yA9dDK3JmF20Ym63gPS+MqRNrJgkCjj9hi6FXC5Hog+4d 03jXk86zy5slcDd6VAnHTYxwDVwerL/iaauV9BxfwFSeWbWvZjADR/Tx6QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFMWErOdAdsbbL1nScTA9FLss8J0RMB8GA1UdIwQY MBaAFLZAdKqESYMNqbILOvsGgtPAMvn+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGtCMHFvUkpndzJwc2dzNi13YUMwOEF5LWY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9mYzdjODItMzE1OS00ZDU0LWEwYTEt MzUxNzFhZWRkMzEzLzEveFlTczUwQjJ4dHN2V2RKeE1EMFV1eXp3blJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9mYzdjODItMzE1OS00ZDU0LWEwYTEtMzUxNzFhZWRkMzEz LzEvdGtCMHFvUkpndzJwc2dzNi13YUMwOEF5LWY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuVTwMA8E AgACMAkDBwAqA0vAEBUwDQYJKoZIhvcNAQELBQADggEBAGYDSXEa+o+RjAu+W3C0 7mNu7hinsW0HNRNZ2Pv0UEl4tcJ/9H5VPAmohbElm2mYx2eAG/alVrgYMolDc59b Xm/gm4MBYjSKAfDQbECgrSSXkls+Th4y0tPbF6h76U0D42k9zyQnvazzTyd4rmd8 teYPfnw0ZSA7tHpokclCwLV3DzMZAjjAm7h3Dwz6yA8tKe/WYrG/L7ZPxn0xfbv3 JzKV6aqOR7UbGVIYz1nkEbp06PbEj59HyE6A+gGpZpv0Rp2XgnjkrUETa654lGaG zn9n8iBs2d20CulSFkdDlV7moiETqib7Fo5uibfkWSNUnmyGD8IZP+y6pulpNgGF i4s= -----END CERTIFICATE-----Generated at Mon Jan 26 09:25:19 2026 by rpki-client