This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/x0JWlbPq7LDeu4Dm0_N7oeK38ow.roa File: x0JWlbPq7LDeu4Dm0_N7oeK38ow.roa (raw, json) Hash identifier: tbOy3beQewSvz0vDOcHNb1UEiU3Vzot4Nk2R+I8UvvU= Subject key identifier: C7:42:56:95:B3:EA:EC:B0:DE:BB:80:E6:D3:F3:7B:A1:E2:B7:F2:8C Certificate issuer: /CN=5380cd8ad2f84e14e9b5b64238937b6d4207e221 Certificate serial: 019B78A22C2CBB852A9E59EDAB3B5A1AC4FA Authority key identifier: 53:80:CD:8A:D2:F8:4E:14:E9:B5:B6:42:38:93:7B:6D:42:07:E2:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/x0JWlbPq7LDeu4Dm0_N7oeK38ow.roa Signing time: Thu 01 Jan 2026 08:17:32 +0000 ROA not before: Thu 01 Jan 2026 08:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198394 IP address blocks: 185.12.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.crl rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:2c:2c:bb:85:2a:9e:59:ed:ab:3b:5a:1a:c4:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5380cd8ad2f84e14e9b5b64238937b6d4207e221 Validity Not Before: Jan 1 08:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7425695b3eaecb0debb80e6d3f37ba1e2b7f28c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d1:34:b1:93:ca:55:cd:06:56:e2:82:18:70: 7f:56:8e:3d:68:5b:08:c2:a4:75:6d:f1:a4:85:fd: 5a:d8:f6:85:f2:8a:56:08:6f:1b:fd:0c:89:f0:f0: 2c:da:3a:34:78:ec:c2:ff:76:cc:12:e3:f3:11:d9: 85:ea:5e:9b:33:37:52:fb:ef:02:a7:77:b4:c3:ef: d7:f5:98:ae:e6:38:7c:6a:20:9b:25:3c:ce:c1:76: a7:03:41:fd:de:94:23:b6:8b:61:47:57:b8:eb:de: 7e:57:b2:8d:bc:cb:ca:aa:c8:d2:a4:df:f3:ee:d6: 3f:95:13:c9:ad:1c:27:75:38:67:64:8e:e8:0f:c6: f2:34:63:f2:2b:eb:39:ec:5b:69:d1:8b:7d:d6:37: 31:ae:f1:a1:d4:88:5b:94:25:e0:50:01:73:ac:04: 5f:4d:49:fa:ea:46:9d:d0:cb:d0:16:9e:b1:54:6c: d3:8a:8b:79:76:47:2f:73:b4:10:7b:c1:8e:63:cb: 3f:05:cb:f8:b1:44:4d:7f:31:80:90:ec:62:ad:33: 77:2b:e9:6e:f3:74:ed:a9:09:df:d1:b7:9b:7f:98: 29:91:79:07:cb:f3:82:90:3c:cb:87:7d:39:46:46: e4:71:a4:9b:6d:fe:f8:03:fa:0b:4d:87:6d:4a:d3: 14:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:42:56:95:B3:EA:EC:B0:DE:BB:80:E6:D3:F3:7B:A1:E2:B7:F2:8C X509v3 Authority Key Identifier: keyid:53:80:CD:8A:D2:F8:4E:14:E9:B5:B6:42:38:93:7B:6D:42:07:E2:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/x0JWlbPq7LDeu4Dm0_N7oeK38ow.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.12.24.0/24 Signature Algorithm: sha256WithRSAEncryption 04:74:d0:97:6a:d4:a1:4d:4b:cb:13:44:14:6f:9b:05:8c:26: 7f:46:88:11:70:8f:ae:5b:cb:c6:27:89:68:10:46:20:68:73: 09:d6:4f:21:6a:9d:f5:11:d8:a7:42:1b:05:f9:a6:51:38:c6: 21:22:01:68:ac:32:ed:e6:e3:cf:43:a1:26:c6:43:7c:90:39: 94:fb:70:cb:e7:51:6c:45:8b:9f:8c:1f:66:59:62:df:01:da: c9:d4:bd:63:b6:30:b4:7b:82:27:79:31:2a:08:d8:89:25:10: 4a:a6:56:1a:81:3a:aa:7d:72:65:a4:1f:80:d1:a2:6d:8c:3c: 43:36:47:04:d2:a9:eb:75:99:c2:33:cd:c3:50:17:30:3e:5b: 48:d6:1b:ad:22:f8:d4:49:ad:2c:ec:a3:e3:17:ca:7d:7c:ba: 59:d2:e3:95:e7:5c:68:dc:fa:05:0a:c3:24:57:39:dc:00:88: 61:28:8d:59:38:a9:1f:02:e5:b0:6b:a0:be:0a:87:99:88:8e: 0c:b6:d5:18:d2:96:b0:db:f2:6d:a7:f9:53:20:29:9d:9f:22: 6a:f6:b4:e1:24:c2:99:6e:97:18:de:ec:63:40:2f:02:1d:4a: 3e:75:de:b4:71:8d:09:93:e7:d5:88:f7:53:6d:ff:bd:19:09: ea:5c:b2:54 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oiwsu4UqnlntqztaGsT6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzODBjZDhhZDJmODRlMTRlOWI1YjY0MjM4OTM3YjZkNDIw N2UyMjEwHhcNMjYwMTAxMDgxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzQyNTY5NWIzZWFlY2IwZGViYjgwZTZkM2YzN2JhMWUyYjdmMjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtE0sZPKVc0GVuKCGHB/Vo49aFsI wqR1bfGkhf1a2PaF8opWCG8b/QyJ8PAs2jo0eOzC/3bMEuPzEdmF6l6bMzdS++8C p3e0w+/X9Ziu5jh8aiCbJTzOwXanA0H93pQjtothR1e4695+V7KNvMvKqsjSpN/z 7tY/lRPJrRwndThnZI7oD8byNGPyK+s57Ftp0Yt91jcxrvGh1IhblCXgUAFzrARf TUn66kad0MvQFp6xVGzTiot5dkcvc7QQe8GOY8s/Bcv4sURNfzGAkOxirTN3K+lu 83TtqQnf0bebf5gpkXkHy/OCkDzLh305RkbkcaSbbf74A/oLTYdtStMUMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMdCVpWz6uyw3ruA5tPze6Hit/KMMB8GA1UdIwQY MBaAFFOAzYrS+E4U6bW2QjiTe21CB+IhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTRETml0TDRUaFRwdGJaQ09KTjdiVUlINGlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8yZmNjOTItYzk2Ny00YTY1LWE0MzQt NWUzNmQxYjA4MjVlLzEveDBKV2xiUHE3TERldTREbTBfTjdvZUszOG93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8yZmNjOTItYzk2Ny00YTY1LWE0MzQtNWUzNmQxYjA4MjVl LzEvVTRETml0TDRUaFRwdGJaQ09KTjdiVUlINGlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQwYMA0G CSqGSIb3DQEBCwUAA4IBAQAEdNCXatShTUvLE0QUb5sFjCZ/RogRcI+uW8vGJ4lo EEYgaHMJ1k8hap31EdinQhsF+aZROMYhIgForDLt5uPPQ6EmxkN8kDmU+3DL51Fs RYufjB9mWWLfAdrJ1L1jtjC0e4IneTEqCNiJJRBKplYagTqqfXJlpB+A0aJtjDxD NkcE0qnrdZnCM83DUBcwPltI1hutIvjUSa0s7KPjF8p9fLpZ0uOV51xo3PoFCsMk VzncAIhhKI1ZOKkfAuWwa6C+CoeZiI4MttUY0paw2/Jtp/lTICmdnyJq9rThJMKZ bpcY3uxjQC8CHUo+dd60cY0Jk+fViPdTbf+9GQnqXLJU -----END CERTIFICATE-----Generated at Sun Jan 25 19:38:18 2026 by rpki-client