This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/xU0QFbF8ebbEKP8H7P9eC03fQMQ.roa File: xU0QFbF8ebbEKP8H7P9eC03fQMQ.roa (raw, json) Hash identifier: KH1JqVr3kTbgL0PPszybvYJtN44mCFq5r1mmiGKHDpM= Subject key identifier: C5:4D:10:15:B1:7C:79:B6:C4:28:FF:07:EC:FF:5E:0B:4D:DF:40:C4 Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2 Certificate serial: 019B7F139E21636B707FFB1AB240529F9F88 Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/xU0QFbF8ebbEKP8H7P9eC03fQMQ.roa Signing time: Fri 02 Jan 2026 14:19:10 +0000 ROA not before: Fri 02 Jan 2026 14:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56887 IP address blocks: 31.131.44.0/23 maxlen: 24 176.113.104.0/22 maxlen: 22 176.113.108.0/22 maxlen: 22 176.124.72.0/22 maxlen: 22 176.124.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:9e:21:63:6b:70:7f:fb:1a:b2:40:52:9f:9f:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2 Validity Not Before: Jan 2 14:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c54d1015b17c79b6c428ff07ecff5e0b4ddf40c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:17:86:f1:67:06:e7:2f:98:f7:3a:ce:3a:eb: f2:43:1b:c4:74:a4:e7:1c:c0:81:08:01:a6:4c:b0: 3f:97:b3:26:2a:b8:61:e3:e6:ba:7c:6a:10:fd:ea: 01:e8:d8:31:ce:cb:86:3c:a2:f7:9b:8b:81:c8:af: c6:6a:ed:9c:0a:aa:c9:fd:91:f5:13:54:e2:2b:12: 81:b4:f6:60:f3:ca:fa:04:8f:b0:7b:41:76:c6:f9: 88:bc:5f:54:a5:2c:b9:bf:88:1c:69:15:a6:0a:4b: 4c:3c:03:23:fd:43:18:d6:8f:69:6f:04:a0:8d:4d: b5:55:3d:b1:d6:e2:cf:75:8e:f5:f4:d7:6e:d5:4d: 41:52:c2:2c:80:1e:76:d8:12:2f:0a:7e:96:c2:0d: 4d:b9:ec:7b:17:31:59:18:9d:8e:f9:9d:21:29:8f: 4b:e9:a1:71:7f:69:63:1d:d5:31:c1:68:4d:ac:e5: 74:a5:16:5b:d8:4d:c8:cc:b5:0c:ce:ac:7d:bb:a7: db:a4:6b:7d:ac:62:d2:b6:af:04:ae:83:7d:9d:bf: 59:d0:8d:c5:17:d1:9e:a9:34:eb:fb:f5:b1:a9:4a: 96:0a:03:2d:a3:16:04:97:ee:7a:3c:d7:ec:cf:2a: a7:61:a0:65:37:ad:7f:72:bd:72:fa:e2:00:5f:5f: cc:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:4D:10:15:B1:7C:79:B6:C4:28:FF:07:EC:FF:5E:0B:4D:DF:40:C4 X509v3 Authority Key Identifier: keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/xU0QFbF8ebbEKP8H7P9eC03fQMQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.131.44.0/23 176.113.104.0/21 176.124.72.0/21 Signature Algorithm: sha256WithRSAEncryption 86:af:89:fd:4a:af:ce:6c:50:f5:f1:a6:6f:4a:70:17:46:91: 7b:b6:c3:b0:6c:c5:06:12:6c:90:bb:cf:95:06:14:36:70:05: b2:98:70:85:ea:6e:e1:a9:ba:94:30:2c:bb:eb:57:fe:e5:1a: 10:57:5b:0e:0d:27:3c:09:ab:66:4c:cb:f8:b8:57:43:f5:95: 08:6d:3b:72:50:71:70:fa:c7:4a:63:60:d5:86:30:81:0f:c3: 5a:69:ee:a0:15:f2:7c:44:84:27:b9:ae:9e:3e:70:b6:7f:ea: 67:78:5b:93:31:23:86:26:d8:8c:b3:de:f2:53:b8:b0:15:db: 3f:99:e1:5b:7a:f3:79:5e:4b:71:ac:5c:3a:f3:27:f1:e5:b2: ac:ff:eb:e7:48:0e:10:45:58:d0:8f:2a:8e:4e:28:d0:6c:0b: 8a:9e:b7:de:d4:c8:25:f6:33:ca:03:5a:5e:66:95:44:98:73: 9c:03:5b:bb:55:0b:da:15:67:12:7e:4b:5c:7d:2e:32:57:f9: 27:53:cc:c0:3c:22:00:c9:ce:95:b4:a3:aa:ac:e4:a8:35:04: 79:9d:54:5c:bf:e9:fe:a6:34:9a:66:68:bc:de:62:13:a2:58: f5:0f:24:48:ed:8d:da:2c:08:2b:a2:04:2e:c4:42:2c:1d:e7: f6:b8:5f:b9 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/E54hY2twf/saskBSn5+IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjJjMmU3YmMxZGE1NGQ5MTljYTViNTk0MWQzNzg4OTJi MmNjYjIwHhcNMjYwMTAyMTQxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTRkMTAxNWIxN2M3OWI2YzQyOGZmMDdlY2ZmNWUwYjRkZGY0MGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxeG8WcG5y+Y9zrOOuvyQxvEdKTn HMCBCAGmTLA/l7MmKrhh4+a6fGoQ/eoB6NgxzsuGPKL3m4uByK/Gau2cCqrJ/ZH1 E1TiKxKBtPZg88r6BI+we0F2xvmIvF9UpSy5v4gcaRWmCktMPAMj/UMY1o9pbwSg jU21VT2x1uLPdY719Ndu1U1BUsIsgB522BIvCn6Wwg1Nuex7FzFZGJ2O+Z0hKY9L 6aFxf2ljHdUxwWhNrOV0pRZb2E3IzLUMzqx9u6fbpGt9rGLStq8EroN9nb9Z0I3F F9GeqTTr+/WxqUqWCgMtoxYEl+56PNfszyqnYaBlN61/cr1y+uIAX1/MqwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMVNEBWxfHm2xCj/B+z/XgtN30DEMB8GA1UdIwQY MBaAFCLywue8HaVNkZyltZQdN4iSssyyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUt MDJkZWY2ZTg0YzkxLzEveFUwUUZiRjhlYmJFS1A4SDdQOWVDMDNmUU1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUtMDJkZWY2ZTg0Yzkx LzEvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBH4MsAwQD sHFoAwQDsHxIMA0GCSqGSIb3DQEBCwUAA4IBAQCGr4n9Sq/ObFD18aZvSnAXRpF7 tsOwbMUGEmyQu8+VBhQ2cAWymHCF6m7hqbqUMCy761f+5RoQV1sODSc8CatmTMv4 uFdD9ZUIbTtyUHFw+sdKY2DVhjCBD8Naae6gFfJ8RIQnua6ePnC2f+pneFuTMSOG JtiMs97yU7iwFds/meFbevN5XktxrFw68yfx5bKs/+vnSA4QRVjQjyqOTijQbAuK nrfe1Mgl9jPKA1peZpVEmHOcA1u7VQvaFWcSfktcfS4yV/knU8zAPCIAyc6VtKOq rOSoNQR5nVRcv+n+pjSaZmi83mITolj1DyRI7Y3aLAgrogQuxEIsHef2uF+5 -----END CERTIFICATE-----Generated at Sun Jan 25 17:39:28 2026 by rpki-client