This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/xLQnpa48oKWxD9K2HQGCUx5nny4.roa File: xLQnpa48oKWxD9K2HQGCUx5nny4.roa (raw, json) Hash identifier: kd5ch0DHjDYuKsI2CZ8kmx/a6Kg1r4mH4pB1J7u5AVM= Subject key identifier: C4:B4:27:A5:AE:3C:A0:A5:B1:0F:D2:B6:1D:01:82:53:1E:67:9F:2E Certificate issuer: /CN=892d21566ccfc3bb079ec5854b044ab809804157 Certificate serial: 019B76EB9139EAFBBA47379818FF2C8196F9 Authority key identifier: 89:2D:21:56:6C:CF:C3:BB:07:9E:C5:85:4B:04:4A:B8:09:80:41:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/xLQnpa48oKWxD9K2HQGCUx5nny4.roa Signing time: Thu 01 Jan 2026 00:18:28 +0000 ROA not before: Thu 01 Jan 2026 00:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205836 IP address blocks: 85.255.92.0/22 maxlen: 22 85.255.92.0/23 maxlen: 23 85.255.92.0/24 maxlen: 24 85.255.93.0/24 maxlen: 24 85.255.94.0/23 maxlen: 23 85.255.94.0/24 maxlen: 24 85.255.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.crl rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft rsync://rpki.ripe.net/repository/DEFAULT/iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:91:39:ea:fb:ba:47:37:98:18:ff:2c:81:96:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=892d21566ccfc3bb079ec5854b044ab809804157 Validity Not Before: Jan 1 00:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4b427a5ae3ca0a5b10fd2b61d0182531e679f2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:5f:fd:31:71:99:ce:a3:47:fb:74:4b:be:4a: c6:89:5d:38:dc:57:6b:9e:9a:9b:e7:ee:0a:0c:eb: c8:48:2d:ec:4f:91:d2:75:64:d2:fb:3d:8c:ca:8a: 00:95:30:52:74:50:8d:c2:fc:69:52:88:bf:5c:42: ec:80:ba:ec:50:7b:9a:30:e1:4c:ad:e7:2c:43:3a: bd:df:7c:09:21:03:3b:ad:a7:8c:dd:a8:bd:cc:54: f6:16:8a:bc:78:2f:02:8a:6b:50:34:0c:08:66:b0: 7c:c7:29:d7:b3:d5:67:bd:91:81:67:22:83:27:f8: d3:b4:4d:65:d6:a7:a1:69:0f:9d:db:64:5b:c1:e7: 15:66:d7:a5:6c:77:c6:83:3a:ee:08:7a:f9:b7:e5: f0:6c:62:62:53:05:46:87:54:76:43:af:41:a8:a4: 34:ca:4b:49:b5:8f:f3:96:10:01:19:fe:90:c3:65: 63:c3:4c:50:00:a4:09:fc:e2:ef:60:5d:af:f5:19: e7:33:af:49:ca:ec:2d:7c:d6:c7:0c:97:f3:01:aa: 8e:64:ad:e9:7e:b2:1e:e8:87:e7:cc:3f:26:c0:43: ab:20:2c:40:68:3f:30:27:d7:19:7e:80:72:07:d6: 2e:1b:b7:75:cd:57:36:93:a6:c9:d1:a4:6c:9f:95: 8e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B4:27:A5:AE:3C:A0:A5:B1:0F:D2:B6:1D:01:82:53:1E:67:9F:2E X509v3 Authority Key Identifier: keyid:89:2D:21:56:6C:CF:C3:BB:07:9E:C5:85:4B:04:4A:B8:09:80:41:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/xLQnpa48oKWxD9K2HQGCUx5nny4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.255.92.0/22 Signature Algorithm: sha256WithRSAEncryption 78:ec:c8:81:94:4d:2b:1d:d0:30:1c:35:51:bc:48:52:fd:7a: a7:f2:0f:20:83:1a:f6:2f:4d:b9:cc:13:38:4f:74:0d:32:67: 14:04:4d:26:ee:52:07:c4:1e:21:54:d3:ce:ac:5b:f7:8a:1b: fe:21:03:da:8b:d7:d7:6a:52:18:05:3f:2f:57:12:2a:5a:7e: 9c:eb:a1:2f:06:2f:38:59:f4:83:73:1b:66:08:9f:a3:21:85: 18:48:11:c8:fd:d6:4c:ab:0e:a1:83:ed:e4:3f:03:7d:1e:9e: 3f:44:14:f5:10:51:80:90:8f:68:53:28:97:d6:58:8b:10:59: 6e:e3:ac:42:c0:95:bd:59:d5:71:63:06:d0:ee:87:3f:b9:76: 64:71:79:b1:40:db:49:ed:0d:8c:da:8f:c4:78:a7:75:c7:4e: b2:1f:e2:e5:6e:36:ad:bb:4d:29:5c:6b:e9:b7:25:6b:ce:5d: 91:65:d7:5e:fc:7f:eb:1c:0d:62:5c:77:41:31:b2:88:bb:90: 72:a8:ed:e6:34:7f:17:ea:d3:56:ee:a1:50:56:77:ab:c5:ac: c2:2b:e9:66:31:e0:be:f6:66:69:a1:ae:f2:52:d3:45:91:12: 69:0e:fb:73:14:f7:d4:ff:62:fa:4b:e0:92:5b:5e:3e:d4:e2: 1c:08:d9:7a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt265E56vu6RzeYGP8sgZb5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MmQyMTU2NmNjZmMzYmIwNzllYzU4NTRiMDQ0YWI4MDk4 MDQxNTcwHhcNMjYwMTAxMDAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNGI0MjdhNWFlM2NhMGE1YjEwZmQyYjYxZDAxODI1MzFlNjc5ZjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkl/9MXGZzqNH+3RLvkrGiV043Fdr npqb5+4KDOvISC3sT5HSdWTS+z2MyooAlTBSdFCNwvxpUoi/XELsgLrsUHuaMOFM recsQzq933wJIQM7raeM3ai9zFT2Foq8eC8CimtQNAwIZrB8xynXs9VnvZGBZyKD J/jTtE1l1qehaQ+d22RbwecVZtelbHfGgzruCHr5t+XwbGJiUwVGh1R2Q69BqKQ0 yktJtY/zlhABGf6Qw2Vjw0xQAKQJ/OLvYF2v9RnnM69JyuwtfNbHDJfzAaqOZK3p frIe6IfnzD8mwEOrICxAaD8wJ9cZfoByB9YuG7d1zVc2k6bJ0aRsn5WODQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMS0J6WuPKClsQ/Sth0BglMeZ58uMB8GA1UdIwQY MBaAFIktIVZsz8O7B57FhUsESrgJgEFXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVMwaFZtelB3N3NIbnNXRlN3Ukt1QW1BUVZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9kNTk3YjAtNjQyNS00MjVmLWI3MjMt NGViOGIwYjQ5YzRhLzEveExRbnBhNDhvS1d4RDlLMkhRR0NVeDVubnk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9kNTk3YjAtNjQyNS00MjVmLWI3MjMtNGViOGIwYjQ5YzRh LzEvaVMwaFZtelB3N3NIbnNXRlN3Ukt1QW1BUVZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVf9cMA0G CSqGSIb3DQEBCwUAA4IBAQB47MiBlE0rHdAwHDVRvEhS/Xqn8g8ggxr2L025zBM4 T3QNMmcUBE0m7lIHxB4hVNPOrFv3ihv+IQPai9fXalIYBT8vVxIqWn6c66EvBi84 WfSDcxtmCJ+jIYUYSBHI/dZMqw6hg+3kPwN9Hp4/RBT1EFGAkI9oUyiX1liLEFlu 46xCwJW9WdVxYwbQ7oc/uXZkcXmxQNtJ7Q2M2o/EeKd1x06yH+Llbjatu00pXGvp tyVrzl2RZdde/H/rHA1iXHdBMbKIu5ByqO3mNH8X6tNW7qFQVnerxazCK+lmMeC+ 9mZpoa7yUtNFkRJpDvtzFPfU/2L6S+CSW14+1OIcCNl6 -----END CERTIFICATE-----Generated at Mon Jan 26 13:11:03 2026 by rpki-client