This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/xYUdIY0z9xKFX5ufCiqZob2LPK0.roa File: xYUdIY0z9xKFX5ufCiqZob2LPK0.roa (raw, json) Hash identifier: nFxhIHiYHhqKXMN0ILHetz/JCzJHXnOEztqoKdJ2imI= Subject key identifier: C5:85:1D:21:8D:33:F7:12:85:5F:9B:9F:0A:2A:99:A1:BD:8B:3C:AD Certificate issuer: /CN=8e8b1071131763aadab1f294e37cd50adac0939c Certificate serial: 019B7DCB33CE69264E346948DC9D84318809 Authority key identifier: 8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/xYUdIY0z9xKFX5ufCiqZob2LPK0.roa Signing time: Fri 02 Jan 2026 08:20:27 +0000 ROA not before: Fri 02 Jan 2026 08:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20249 IP address blocks: 185.55.132.0/22 maxlen: 22 185.55.132.0/23 maxlen: 23 185.55.134.0/23 maxlen: 23 185.55.134.0/24 maxlen: 24 185.55.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:33:ce:69:26:4e:34:69:48:dc:9d:84:31:88:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e8b1071131763aadab1f294e37cd50adac0939c Validity Not Before: Jan 2 08:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5851d218d33f712855f9b9f0a2a99a1bd8b3cad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:90:40:fc:35:36:67:a1:a8:dc:08:fd:f5:b6: 59:a7:32:b8:1c:2f:4a:8f:21:c5:f1:e7:7c:69:ae: 70:79:da:c0:50:a8:10:5f:02:3a:a3:c1:23:c4:a5: ea:0b:ff:89:f6:c9:86:bd:ff:f2:c0:68:77:41:7d: e8:29:ba:35:dc:ee:61:82:57:bf:74:b1:2a:ca:17: 84:bb:f7:75:6f:60:27:a9:3e:fc:5c:44:82:77:9b: 38:63:a9:11:cb:9f:c6:36:bf:8a:4d:ed:c6:94:01: ce:91:f2:98:7d:a8:33:8f:7a:18:66:5a:e1:ad:bc: 03:86:47:cb:f4:03:3e:ed:a0:61:d4:2d:ef:e7:2c: 1e:ef:af:4c:b4:8f:e0:9e:98:32:15:c9:c0:88:d2: 34:e6:ce:f9:39:25:2e:5c:1f:d7:09:ce:2d:87:e2: ff:60:d7:1c:72:73:6c:46:0a:f2:a1:51:fa:4f:76: 38:fa:0f:1f:91:37:ea:16:e5:3a:68:e6:a5:39:f8: 83:90:19:dd:8d:ab:41:57:10:79:b7:dd:85:88:3d: 4b:11:7e:e2:93:1f:d4:3f:e1:c4:16:59:c2:58:7e: fc:53:0a:53:e2:8e:90:fb:47:e3:5d:7f:b6:e2:b8: a6:87:fb:55:35:15:b2:f1:83:88:da:42:51:b2:83: 06:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:85:1D:21:8D:33:F7:12:85:5F:9B:9F:0A:2A:99:A1:BD:8B:3C:AD X509v3 Authority Key Identifier: keyid:8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/xYUdIY0z9xKFX5ufCiqZob2LPK0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.55.132.0/22 Signature Algorithm: sha256WithRSAEncryption 4f:5e:7e:ec:71:10:f0:02:1d:8d:61:54:70:67:84:a5:df:2d: 34:27:65:54:de:29:18:85:6b:d7:78:e2:bb:9f:1e:6f:48:15: fc:f4:9e:a5:be:f2:9f:f2:64:17:e1:0b:38:ff:b6:b3:bf:c1: 54:ed:0b:03:50:05:8f:11:1f:e8:d0:bc:56:6e:b9:97:38:ea: 09:9f:f0:e2:a5:11:c3:44:02:09:51:9f:23:31:dc:b2:d6:09: 38:e1:0d:99:be:18:e7:bc:ff:4f:a9:2f:1b:9e:38:30:0a:df: 3f:30:6e:f2:c1:52:49:e2:1e:a0:6a:d2:dc:44:78:03:58:b0: 5e:9e:ac:81:fa:78:ee:3d:36:45:7b:18:68:9c:b0:34:22:8e: 0b:d6:8e:1a:78:8e:af:a0:f2:32:e7:e6:fb:64:2f:43:42:a3: 37:79:b8:4e:74:9c:86:b5:5b:a2:e8:da:c7:6c:83:a0:78:0c: 32:69:ca:1f:9f:35:ab:71:7e:8e:aa:6a:b5:9d:a2:24:d7:fe: 48:b3:b5:fd:75:ad:ef:c6:e8:0a:01:62:75:1b:83:cd:1d:90: 38:bf:ed:e6:13:c3:47:af:09:89:4a:78:51:11:28:fa:61:d6: 97:e8:c2:d4:4a:93:ff:e5:a7:b7:2a:fb:e2:f4:03:5c:3d:62: 5f:cb:49:eb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yzPOaSZONGlI3J2EMYgJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlOGIxMDcxMTMxNzYzYWFkYWIxZjI5NGUzN2NkNTBhZGFj MDkzOWMwHhcNMjYwMTAyMDgyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTg1MWQyMThkMzNmNzEyODU1ZjliOWYwYTJhOTlhMWJkOGIzY2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpBA/DU2Z6Go3Aj99bZZpzK4HC9K jyHF8ed8aa5wedrAUKgQXwI6o8EjxKXqC/+J9smGvf/ywGh3QX3oKbo13O5hgle/ dLEqyheEu/d1b2AnqT78XESCd5s4Y6kRy5/GNr+KTe3GlAHOkfKYfagzj3oYZlrh rbwDhkfL9AM+7aBh1C3v5ywe769MtI/gnpgyFcnAiNI05s75OSUuXB/XCc4th+L/ YNcccnNsRgryoVH6T3Y4+g8fkTfqFuU6aOalOfiDkBndjatBVxB5t92FiD1LEX7i kx/UP+HEFlnCWH78UwpT4o6Q+0fjXX+24rimh/tVNRWy8YOI2kJRsoMGUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMWFHSGNM/cShV+bnwoqmaG9izytMB8GA1UdIwQY MBaAFI6LEHETF2Oq2rHylON81QrawJOcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam9zUWNSTVhZNnJhc2ZLVTQzelZDdHJBazV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8zMzMzOWYtNmQ5OC00YjVmLWFiNjAt MWM5NGNiN2RmZWIzLzEveFlVZElZMHo5eEtGWDV1ZkNpcVpvYjJMUEswLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8zMzMzOWYtNmQ5OC00YjVmLWFiNjAtMWM5NGNiN2RmZWIz LzEvam9zUWNSTVhZNnJhc2ZLVTQzelZDdHJBazV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTeEMA0G CSqGSIb3DQEBCwUAA4IBAQBPXn7scRDwAh2NYVRwZ4Sl3y00J2VU3ikYhWvXeOK7 nx5vSBX89J6lvvKf8mQX4Qs4/7azv8FU7QsDUAWPER/o0LxWbrmXOOoJn/DipRHD RAIJUZ8jMdyy1gk44Q2ZvhjnvP9PqS8bnjgwCt8/MG7ywVJJ4h6gatLcRHgDWLBe nqyB+njuPTZFexhonLA0Io4L1o4aeI6voPIy5+b7ZC9DQqM3ebhOdJyGtVui6NrH bIOgeAwyacofnzWrcX6Oqmq1naIk1/5Is7X9da3vxugKAWJ1G4PNHZA4v+3mE8NH rwmJSnhRESj6YdaX6MLUSpP/5ae3Kvvi9ANcPWJfy0nr -----END CERTIFICATE-----Generated at Sun Jan 25 16:37:22 2026 by rpki-client