This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/XuI2rVe1P2sEWYrXzc1DJlctjmE.roa File: XuI2rVe1P2sEWYrXzc1DJlctjmE.roa (raw, json) Hash identifier: KTa2oQNhxbcOZZt4ZUQgCZKZidF/bLAVNykMZdr/E3c= Subject key identifier: 5E:E2:36:AD:57:B5:3F:6B:04:59:8A:D7:CD:CD:43:26:57:2D:8E:61 Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B77595D01E96E7C524F89A80E0FAE2644 Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/XuI2rVe1P2sEWYrXzc1DJlctjmE.roa Signing time: Thu 01 Jan 2026 02:18:23 +0000 ROA not before: Thu 01 Jan 2026 02:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59784 IP address blocks: 86.106.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:5d:01:e9:6e:7c:52:4f:89:a8:0e:0f:ae:26:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ee236ad57b53f6b04598ad7cdcd4326572d8e61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:fe:b2:2f:a4:68:09:4c:a1:1d:13:96:82:fd: 1e:df:23:df:b0:f8:c4:91:89:e7:ec:02:41:11:9f: 51:0f:ce:4d:91:3b:a4:43:18:3c:ae:1c:8c:27:a7: 4b:3d:35:3d:12:58:b2:e5:36:73:f1:06:46:1e:6a: d8:ca:4f:9a:70:ab:41:42:50:70:31:13:9c:57:e6: 60:9b:f7:73:c7:3f:69:64:c3:7d:b4:04:33:ae:b0: 97:74:a6:2c:56:03:12:c4:e3:cf:7f:3f:79:dd:ea: 49:49:ec:78:d0:34:07:44:63:d6:eb:d1:4c:70:4b: 3e:19:75:38:5d:f5:68:f1:fb:22:5b:85:a3:98:34: c8:23:9e:3c:81:ae:47:e5:fb:92:8b:1b:d5:32:a3: 87:c3:ba:f3:79:d2:9e:36:ca:bb:00:0f:30:53:a5: 0f:41:ba:3f:fd:14:3a:d7:2e:88:d1:1e:66:09:f8: 95:52:75:bb:c7:7e:a8:94:31:71:da:09:28:bf:5e: e2:4b:b0:af:73:1c:6f:89:ad:35:c7:e8:9b:83:3b: 92:d3:0e:ff:12:41:3a:59:71:fd:65:33:fd:a4:b6: 85:e8:49:02:09:23:f0:84:cb:3f:61:dc:21:33:1c: 82:ab:dc:cb:d8:9c:50:8d:17:05:20:d7:66:03:1b: dc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:E2:36:AD:57:B5:3F:6B:04:59:8A:D7:CD:CD:43:26:57:2D:8E:61 X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/XuI2rVe1P2sEWYrXzc1DJlctjmE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.106.78.0/24 Signature Algorithm: sha256WithRSAEncryption d6:a4:73:3a:e7:7b:5e:fb:c0:9f:60:e2:d3:3e:bb:1d:3e:27: e3:d5:00:07:8b:57:21:dc:b3:bc:1a:25:0b:79:48:8f:d3:f0: 15:9a:1f:29:b1:b1:c6:f0:03:33:02:1d:96:98:18:ee:6f:72: 3d:9c:95:44:3a:77:4d:cb:67:41:f2:38:d5:03:a1:6b:9b:41: 67:e3:32:ea:1f:bb:b8:e6:97:26:a7:d0:3a:16:f1:2a:f4:e9: 18:b4:bc:97:ff:47:65:4a:5d:59:03:8a:89:a3:d6:43:c4:2b: 7d:80:98:fa:91:0d:a2:11:c4:cb:2d:0c:98:04:86:f3:a4:25: 2f:cf:08:9a:9b:84:99:4d:00:93:d6:b4:cd:6e:be:17:4b:a1: 0b:a5:6b:64:17:a5:96:16:a3:83:9d:dd:fb:36:e7:e6:de:8e: da:1d:d0:c4:c4:ca:07:01:58:0e:96:94:c9:70:e2:85:ea:28: 3a:b8:8b:01:b9:59:2e:30:fd:6c:7c:73:5f:3b:dd:53:5d:65: f9:eb:49:d2:59:d1:38:04:24:39:5c:86:d8:3f:08:d4:66:39: b6:87:46:54:a2:ba:98:2e:77:c7:a2:36:dd:62:7c:b5:68:34: 38:9d:09:f0:54:13:ba:7c:0a:11:cd:e7:f1:42:42:14:78:37: 0f:c3:4e:89 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WV0B6W58Uk+JqA4PriZEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZWUyMzZhZDU3YjUzZjZiMDQ1OThhZDdjZGNkNDMyNjU3MmQ4ZTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6f6yL6RoCUyhHROWgv0e3yPfsPjE kYnn7AJBEZ9RD85NkTukQxg8rhyMJ6dLPTU9Eliy5TZz8QZGHmrYyk+acKtBQlBw MROcV+Zgm/dzxz9pZMN9tAQzrrCXdKYsVgMSxOPPfz953epJSex40DQHRGPW69FM cEs+GXU4XfVo8fsiW4WjmDTII548ga5H5fuSixvVMqOHw7rzedKeNsq7AA8wU6UP Qbo//RQ61y6I0R5mCfiVUnW7x36olDFx2gkov17iS7Cvcxxvia01x+ibgzuS0w7/ EkE6WXH9ZTP9pLaF6EkCCSPwhMs/YdwhMxyCq9zL2JxQjRcFINdmAxvccQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFF7iNq1XtT9rBFmK183NQyZXLY5hMB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xL1h1STJyVmUxUDJzRVdZclh6YzFESmxjdGptRS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABWak4w DQYJKoZIhvcNAQELBQADggEBANakczrne177wJ9g4tM+ux0+J+PVAAeLVyHcs7wa JQt5SI/T8BWaHymxscbwAzMCHZaYGO5vcj2clUQ6d03LZ0HyONUDoWubQWfjMuof u7jmlyan0DoW8Sr06Ri0vJf/R2VKXVkDiomj1kPEK32AmPqRDaIRxMstDJgEhvOk JS/PCJqbhJlNAJPWtM1uvhdLoQula2QXpZYWo4Od3fs25+bejtod0MTEygcBWA6W lMlw4oXqKDq4iwG5WS4w/Wx8c1873VNdZfnrSdJZ0TgEJDlchtg/CNRmObaHRlSi upgud8eiNt1ifLVoNDidCfBUE7p8ChHN5/FCQhR4Nw/DTok= -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:59 2026 by rpki-client