This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/xqE2x6TB4ktJqDhDRIstav0I34M.roa File: xqE2x6TB4ktJqDhDRIstav0I34M.roa (raw, json) Hash identifier: a5jdOMPc2+BN/CePheTtmvryp7+c0nQR8BLYlcgEO6Y= Subject key identifier: C6:A1:36:C7:A4:C1:E2:4B:49:A8:38:43:44:8B:2D:6A:FD:08:DF:83 Certificate issuer: /CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8 Certificate serial: 019B7F84FD4EA3690D67FC9D3ADF258B25CF Authority key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/xqE2x6TB4ktJqDhDRIstav0I34M.roa Signing time: Fri 02 Jan 2026 16:23:00 +0000 ROA not before: Fri 02 Jan 2026 16:23:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59847 IP address blocks: 94.250.20.0/24 maxlen: 24 94.250.21.0/24 maxlen: 24 94.250.22.0/24 maxlen: 24 94.250.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:fd:4e:a3:69:0d:67:fc:9d:3a:df:25:8b:25:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8 Validity Not Before: Jan 2 16:23:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6a136c7a4c1e24b49a83843448b2d6afd08df83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7e:d9:67:2c:0d:37:c8:81:d4:73:2b:83:99: e5:24:5f:a0:4b:fd:f8:ca:a7:e3:8e:d3:3b:0e:4c: 32:86:3a:c9:57:cf:de:fd:a1:3b:e7:bb:7e:2c:8b: 87:69:6c:3c:53:61:93:6e:83:15:12:d6:83:b7:b6: 36:df:e7:94:50:f2:fe:8d:c6:bf:f2:cb:ac:51:2d: b7:2e:b3:c8:33:c6:c2:2a:39:6c:2f:98:68:c9:2c: fa:12:f3:f4:f2:57:98:9a:82:f7:fa:65:36:47:a0: 72:af:71:be:d0:22:59:bc:a2:38:7e:71:48:36:af: 09:04:96:63:9a:d7:ec:2f:cd:82:32:96:ed:e8:f8: 88:13:6e:18:0f:53:0c:4e:3b:1b:8b:a4:e0:3e:9a: a2:6d:36:0b:02:69:1e:fd:5a:82:21:64:1b:c3:93: 9a:d2:a9:88:4c:32:c6:3f:9b:40:f5:a3:28:72:d6: cf:bb:66:c4:c1:8d:5c:0d:ab:52:a7:71:eb:cc:3d: e8:f0:43:7d:49:97:f8:c1:c1:af:09:86:67:29:8c: 36:e3:30:f0:b1:34:29:82:f4:56:d8:fa:ec:e0:26: 43:b1:8f:83:05:f4:f9:bd:61:c3:9d:51:b3:f8:c1: 28:ab:8a:09:99:1f:d3:4f:1d:f6:d0:68:d3:a7:39: 56:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:A1:36:C7:A4:C1:E2:4B:49:A8:38:43:44:8B:2D:6A:FD:08:DF:83 X509v3 Authority Key Identifier: keyid:29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/xqE2x6TB4ktJqDhDRIstav0I34M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.250.20.0/22 Signature Algorithm: sha256WithRSAEncryption 80:06:ca:d8:e4:20:62:57:32:70:7c:a4:e3:f3:96:f3:6a:ee: f1:fb:57:64:e5:18:98:68:a2:46:53:72:17:90:12:74:89:0a: 1f:0e:5e:9f:90:31:3e:48:7a:0f:06:b1:25:12:20:61:f2:8e: bf:88:8d:b5:25:9b:0a:be:76:5c:30:32:e1:37:6c:b0:3e:ee: 75:73:44:9f:f9:20:c8:80:42:91:16:64:66:35:10:79:29:b5: 3d:5d:64:1e:b0:91:a9:b0:d9:74:b0:78:40:d0:28:a7:29:96: f0:32:02:c9:47:b7:be:02:89:3b:b7:04:e0:5b:36:72:d9:0b: 6c:fa:71:c4:51:53:fe:46:65:80:a9:f0:af:3b:be:e6:6b:4d: d5:f5:18:a4:ab:66:35:29:11:17:bc:1b:30:52:2d:d7:4e:65: 35:e5:9e:c4:af:d5:e0:db:4f:84:19:c4:06:47:ed:f3:fc:06: 67:31:68:2f:bd:97:8d:ff:36:bf:a8:43:d4:cc:40:20:4b:57: 83:30:58:9d:65:ae:06:9a:7a:c1:6c:b5:34:dd:c8:c8:fe:cd: b0:3b:49:4d:94:fc:a7:b7:d7:09:e8:3d:06:17:62:cc:3f:48: 1a:24:b3:91:97:d8:d3:c3:5a:c4:65:0a:3b:31:a9:91:8c:f6: 92:cc:66:92 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hP1Oo2kNZ/ydOt8liyXPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YTk5NjRlMGNkMzVmYjM2NzU3ZTU2NTNmZmE3NjI2YWM1 ZGVlZTgwHhcNMjYwMTAyMTYyMzAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmExMzZjN2E0YzFlMjRiNDlhODM4NDM0NDhiMmQ2YWZkMDhkZjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl37ZZywNN8iB1HMrg5nlJF+gS/34 yqfjjtM7DkwyhjrJV8/e/aE757t+LIuHaWw8U2GTboMVEtaDt7Y23+eUUPL+jca/ 8susUS23LrPIM8bCKjlsL5hoySz6EvP08leYmoL3+mU2R6Byr3G+0CJZvKI4fnFI Nq8JBJZjmtfsL82CMpbt6PiIE24YD1MMTjsbi6TgPpqibTYLAmke/VqCIWQbw5Oa 0qmITDLGP5tA9aMoctbPu2bEwY1cDatSp3HrzD3o8EN9SZf4wcGvCYZnKYw24zDw sTQpgvRW2Prs4CZDsY+DBfT5vWHDnVGz+MEoq4oJmR/TTx320GjTpzlWxwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMahNsekweJLSag4Q0SLLWr9CN+DMB8GA1UdIwQY MBaAFCmplk4M01+zZ1flZT/6diasXe7oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2FtV1RnelRYN05uVi1WbFBfcDJKcXhkN3VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8yMTQwNjMtZjg4Zi00OTU4LWFlNTIt ZDliNTMzZjdmYmMzLzEveHFFMng2VEI0a3RKcURoRFJJc3RhdjBJMzRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy8yMTQwNjMtZjg4Zi00OTU4LWFlNTItZDliNTMzZjdmYmMz LzEvS2FtV1RnelRYN05uVi1WbFBfcDJKcXhkN3VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXvoUMA0G CSqGSIb3DQEBCwUAA4IBAQCABsrY5CBiVzJwfKTj85bzau7x+1dk5RiYaKJGU3IX kBJ0iQofDl6fkDE+SHoPBrElEiBh8o6/iI21JZsKvnZcMDLhN2ywPu51c0Sf+SDI gEKRFmRmNRB5KbU9XWQesJGpsNl0sHhA0CinKZbwMgLJR7e+Aok7twTgWzZy2Qts +nHEUVP+RmWAqfCvO77ma03V9Rikq2Y1KREXvBswUi3XTmU15Z7Er9Xg20+EGcQG R+3z/AZnMWgvvZeN/za/qEPUzEAgS1eDMFidZa4GmnrBbLU03cjI/s2wO0lNlPyn t9cJ6D0GF2LMP0gaJLORl9jTw1rEZQo7MamRjPaSzGaS -----END CERTIFICATE-----Generated at Mon Jan 26 01:43:59 2026 by rpki-client