This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/xLrDeMIdOHc_uW7MQY4GNPFpZuo.roa File: xLrDeMIdOHc_uW7MQY4GNPFpZuo.roa (raw, json) Hash identifier: s/x17aNCOaU2UsnCEqFwmKabzlSylan6beu6oAqMMFc= Subject key identifier: C4:BA:C3:78:C2:1D:38:77:3F:B9:6E:CC:41:8E:06:34:F1:69:66:EA Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Certificate serial: 019B7AC8DAE7E45C19A0C2B28604DBA5B52C Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/xLrDeMIdOHc_uW7MQY4GNPFpZuo.roa Signing time: Thu 01 Jan 2026 18:19:02 +0000 ROA not before: Thu 01 Jan 2026 18:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12566 IP address blocks: 62.62.169.0/24 maxlen: 24 87.255.128.0/19 maxlen: 24 95.181.220.0/22 maxlen: 24 185.39.216.0/22 maxlen: 24 194.153.88.0/23 maxlen: 24 194.153.90.0/24 maxlen: 24 194.153.92.0/24 maxlen: 24 194.153.97.0/24 maxlen: 24 212.23.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:da:e7:e4:5c:19:a0:c2:b2:86:04:db:a5:b5:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Validity Not Before: Jan 1 18:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4bac378c21d38773fb96ecc418e0634f16966ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a5:a1:49:7f:0d:bf:6e:a1:12:8f:eb:dd:7c: ec:88:80:65:aa:90:43:4a:24:c4:34:bb:d0:1a:18: a2:a1:96:98:d2:43:c4:fe:48:37:ea:b9:9c:a9:0a: bc:49:2f:02:93:08:66:74:32:ef:df:4b:58:dc:49: 84:75:60:db:03:0f:16:04:51:11:30:c4:e7:8f:bd: 87:4e:83:78:16:af:25:82:e4:67:e5:6c:b7:35:32: dc:58:aa:a8:3d:8f:a0:49:bb:af:f4:d9:4c:55:fe: b0:33:87:2b:e5:e6:42:0b:84:65:c0:e5:39:26:04: 6a:17:ce:1c:4c:47:17:d4:e8:85:0c:fd:35:ff:3d: d9:d2:cb:a7:5a:b9:c1:f5:03:62:73:f4:96:a3:68: 46:a1:c8:63:5a:41:62:91:ce:17:d6:e7:f8:11:05: e3:c3:2f:d2:30:96:d1:5a:73:c9:2c:62:42:a1:2d: 61:92:52:45:2d:11:56:4b:8b:cd:17:5c:42:f2:1b: ea:d3:0a:f9:1e:4a:7f:83:51:1b:3a:3d:a5:3c:0e: 3e:6c:cd:2c:fe:58:f1:d8:91:99:2f:1c:23:a3:cc: a3:a4:a8:b8:20:fa:0b:97:f2:44:a7:2a:34:d2:b8: fb:00:b8:57:0b:0e:c5:77:b9:35:65:88:22:2f:93: d5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:BA:C3:78:C2:1D:38:77:3F:B9:6E:CC:41:8E:06:34:F1:69:66:EA X509v3 Authority Key Identifier: keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/xLrDeMIdOHc_uW7MQY4GNPFpZuo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.62.169.0/24 87.255.128.0/19 95.181.220.0/22 185.39.216.0/22 194.153.88.0-194.153.90.255 194.153.92.0/24 194.153.97.0/24 212.23.160.0/19 Signature Algorithm: sha256WithRSAEncryption 7c:d5:0b:6b:b6:6a:d2:47:9f:3e:37:48:93:91:f7:8d:8a:75: c6:5c:f7:e5:79:39:b6:15:77:60:30:3f:2d:00:b5:97:23:d6: fe:f4:e9:ba:03:49:1e:c0:f0:d7:7d:ff:6e:0c:a0:b8:b5:ae: bb:72:be:f3:20:78:04:2d:e5:35:69:e9:b8:c0:10:9b:4c:64: ec:dc:78:c7:92:e5:49:a5:44:20:17:4f:45:c7:46:48:24:30: af:1e:42:c6:7b:ab:c3:f8:21:78:a2:66:64:b1:84:62:f2:b2: 18:e5:ec:e4:09:8d:15:6f:5c:0d:20:d1:82:90:2a:14:54:52: d8:8b:a8:b7:2d:51:6d:2b:5b:15:79:92:c3:72:68:b7:58:ff: 50:68:85:21:83:9f:d0:5c:11:4d:07:14:74:ae:5c:50:8e:0f: 4f:0f:4c:2f:82:21:d2:bb:70:7e:63:c6:17:4c:d3:87:d9:f4: a1:ec:41:33:12:b0:51:24:cf:12:b4:6c:5e:7a:ef:a5:87:9b: 2b:68:14:ee:d6:10:b0:54:d6:ea:6b:0a:c3:76:d1:34:6a:97: 3b:73:79:88:e5:2c:90:15:72:e4:b2:19:0b:08:2a:de:e0:5b: 38:51:fa:6e:a1:cc:96:f9:69:61:3f:2e:58:c0:35:8f:f4:25: 17:6b:48:79 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgISAZt6yNrn5FwZoMKyhgTbpbUsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZWY1ZmJiZmNhN2E5M2NmZWU5NjVlZWI2YmRlZTZmYjQz YzQwM2UwHhcNMjYwMTAxMTgxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNGJhYzM3OGMyMWQzODc3M2ZiOTZlY2M0MThlMDYzNGYxNjk2NmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqWhSX8Nv26hEo/r3XzsiIBlqpBD SiTENLvQGhiioZaY0kPE/kg36rmcqQq8SS8CkwhmdDLv30tY3EmEdWDbAw8WBFER MMTnj72HToN4Fq8lguRn5Wy3NTLcWKqoPY+gSbuv9NlMVf6wM4cr5eZCC4RlwOU5 JgRqF84cTEcX1OiFDP01/z3Z0sunWrnB9QNic/SWo2hGochjWkFikc4X1uf4EQXj wy/SMJbRWnPJLGJCoS1hklJFLRFWS4vNF1xC8hvq0wr5Hkp/g1EbOj2lPA4+bM0s /ljx2JGZLxwjo8yjpKi4IPoLl/JEpyo00rj7ALhXCw7Fd7k1ZYgiL5PViQIDAQAB o4ICOzCCAjcwHQYDVR0OBBYEFMS6w3jCHTh3P7luzEGOBjTxaWbqMB8GA1UdIwQY MBaAFKDvX7v8p6k8/ull7ra97m+0PEA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt MDI5MmIwMjAxNTBhLzEveExyRGVNSWRPSGNfdVc3TVFZNEdOUEZwWnVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh LzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQAPj6pAwQF V/+AAwQCX7XcAwQCuSfYMAwDBAPCmVgDBADCmVoDBADCmVwDBADCmWEDBAXUF6Aw DQYJKoZIhvcNAQELBQADggEBAHzVC2u2atJHnz43SJOR942KdcZc9+V5ObYVd2Aw Py0AtZcj1v706boDSR7A8Nd9/24MoLi1rrtyvvMgeAQt5TVp6bjAEJtMZOzceMeS 5UmlRCAXT0XHRkgkMK8eQsZ7q8P4IXiiZmSxhGLyshjl7OQJjRVvXA0g0YKQKhRU UtiLqLctUW0rWxV5ksNyaLdY/1BohSGDn9BcEU0HFHSuXFCOD08PTC+CIdK7cH5j xhdM04fZ9KHsQTMSsFEkzxK0bF5676WHmytoFO7WELBU1uprCsN20TRqlztzeYjl LJAVcuSyGQsIKt7gWzhR+m6hzJb5aWE/LljANY/0JRdrSHk= -----END CERTIFICATE-----Generated at Mon Jan 26 00:38:50 2026 by rpki-client