This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/XsF3kqYrpgaSa5NalYy0M03i-cY.roa File: XsF3kqYrpgaSa5NalYy0M03i-cY.roa (raw, json) Hash identifier: kTWWKS//k4z/sGjJu+0LeZP0dfIbCea1JbNwryY8JAo= Subject key identifier: 5E:C1:77:92:A6:2B:A6:06:92:6B:93:5A:95:8C:B4:33:4D:E2:F9:C6 Certificate issuer: /CN=bd73747f78bd328d0ae1c89171b381aa19011ace Certificate serial: 019B7BA33BD9B8B2CA62E2F1D632F4D1188B Authority key identifier: BD:73:74:7F:78:BD:32:8D:0A:E1:C8:91:71:B3:81:AA:19:01:1A:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/XsF3kqYrpgaSa5NalYy0M03i-cY.roa Signing time: Thu 01 Jan 2026 22:17:33 +0000 ROA not before: Thu 01 Jan 2026 22:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198386 IP address blocks: 147.78.62.0/24 maxlen: 24 147.78.63.0/24 maxlen: 24 185.204.76.0/22 maxlen: 22 192.40.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:3b:d9:b8:b2:ca:62:e2:f1:d6:32:f4:d1:18:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd73747f78bd328d0ae1c89171b381aa19011ace Validity Not Before: Jan 1 22:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ec17792a62ba606926b935a958cb4334de2f9c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:98:c4:20:92:a7:05:56:98:2a:03:96:07:55: 0f:f4:5f:cf:c5:9a:cb:26:d5:d3:4b:e5:57:90:1c: c1:b1:fd:06:3c:de:f7:86:8c:52:d7:4d:7a:b0:28: f6:43:52:21:95:29:b0:84:f1:62:18:9d:1d:ad:3d: 71:c0:19:49:c7:8a:83:7e:f3:a4:e7:a3:ba:8e:32: 16:61:06:38:88:e9:ab:0d:f9:d8:4e:42:ca:2d:4e: c1:b1:24:38:28:a4:64:80:5f:d7:3c:a3:2c:36:bc: d3:ac:77:39:af:11:c6:78:17:b6:11:06:2a:82:37: 51:6f:8b:02:11:48:eb:84:c4:a7:69:19:21:34:2e: 56:7e:68:88:93:1c:ef:8c:cd:16:f8:1a:b5:e1:75: 54:d7:0b:be:85:55:66:0d:18:45:00:43:a1:f4:7a: 50:fd:67:1c:08:78:c4:2f:66:6f:51:97:53:20:73: 94:d7:04:25:f8:56:e8:97:e1:2c:cc:cf:5c:6b:25: 87:b3:61:bd:d0:00:ca:75:7d:b5:44:3f:52:81:92: 26:95:e6:55:eb:4c:a8:2b:c7:ca:bf:6f:2b:4c:0d: e2:e6:d4:40:97:3c:61:e9:fd:6d:55:31:72:f5:9d: f9:8a:84:d1:8c:c4:e0:21:5c:bb:b5:7d:3b:b5:d3: c3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C1:77:92:A6:2B:A6:06:92:6B:93:5A:95:8C:B4:33:4D:E2:F9:C6 X509v3 Authority Key Identifier: keyid:BD:73:74:7F:78:BD:32:8D:0A:E1:C8:91:71:B3:81:AA:19:01:1A:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/XsF3kqYrpgaSa5NalYy0M03i-cY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.78.62.0/23 185.204.76.0/22 192.40.80.0/24 Signature Algorithm: sha256WithRSAEncryption 22:da:90:87:61:ac:7c:e5:6c:e4:68:d1:12:32:43:54:fe:c6: 75:17:46:76:50:41:2f:8f:0b:0a:01:74:2c:e6:e1:57:b4:22: 72:c2:a6:a6:90:18:b7:e2:b8:b0:37:af:51:50:2a:b6:7b:00: 2a:93:d4:e0:58:72:e6:6d:25:c8:51:bf:44:9c:94:31:1e:0b: 8d:ed:04:88:0f:34:a2:31:98:f9:57:3c:e1:3f:ad:c4:97:97: 31:52:55:32:c9:d5:9b:2f:9f:a6:8a:c6:7f:43:5c:d6:c7:ed: 8e:a2:b7:fd:94:70:bb:73:8f:0d:17:ee:26:38:d4:29:58:fb: 1d:f2:06:b4:e2:9b:a1:e9:cb:9a:f8:c0:6b:64:5d:c0:f4:31: 1e:b5:01:05:ea:a2:c4:c2:8a:6d:5d:a8:0d:21:f1:33:25:e4: 7c:9b:7e:2d:3c:0f:1b:8f:e5:7f:36:51:09:5c:4c:46:cb:72: 09:60:13:94:08:9d:0c:c2:56:f5:82:14:2e:ca:2f:e3:76:c2: 30:d3:1c:3f:6f:9c:19:9b:75:6c:77:64:92:38:67:dc:d9:3f: 0e:36:28:4b:2f:0b:15:f7:25:67:32:b1:c3:ec:0d:5d:e0:af: 2d:dc:f6:61:74:a2:f4:1b:ab:5d:ff:8f:c8:dc:97:dd:ae:4e: 1a:1c:43:06 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7ozvZuLLKYuLx1jL00RiLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkNzM3NDdmNzhiZDMyOGQwYWUxYzg5MTcxYjM4MWFhMTkw MTFhY2UwHhcNMjYwMTAxMjIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZWMxNzc5MmE2MmJhNjA2OTI2YjkzNWE5NThjYjQzMzRkZTJmOWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJjEIJKnBVaYKgOWB1UP9F/PxZrL JtXTS+VXkBzBsf0GPN73hoxS1016sCj2Q1IhlSmwhPFiGJ0drT1xwBlJx4qDfvOk 56O6jjIWYQY4iOmrDfnYTkLKLU7BsSQ4KKRkgF/XPKMsNrzTrHc5rxHGeBe2EQYq gjdRb4sCEUjrhMSnaRkhNC5WfmiIkxzvjM0W+Bq14XVU1wu+hVVmDRhFAEOh9HpQ /WccCHjEL2ZvUZdTIHOU1wQl+Fbol+EszM9cayWHs2G90ADKdX21RD9SgZImleZV 60yoK8fKv28rTA3i5tRAlzxh6f1tVTFy9Z35ioTRjMTgIVy7tX07tdPD+wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFF7Bd5KmK6YGkmuTWpWMtDNN4vnGMB8GA1UdIwQY MBaAFL1zdH94vTKNCuHIkXGzgaoZARrOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlhOMGYzaTlNbzBLNGNpUmNiT0JxaGtCR3M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9hNTU1NTMtMjk3NS00MjQ0LWIyNjAt NWJkYmY2Zjg0N2Y5LzEvWHNGM2txWXJwZ2FTYTVOYWxZeTBNMDNpLWNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9hNTU1NTMtMjk3NS00MjQ0LWIyNjAtNWJkYmY2Zjg0N2Y5 LzEvdlhOMGYzaTlNbzBLNGNpUmNiT0JxaGtCR3M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBk04+AwQC ucxMAwQAwChQMA0GCSqGSIb3DQEBCwUAA4IBAQAi2pCHYax85WzkaNESMkNU/sZ1 F0Z2UEEvjwsKAXQs5uFXtCJywqamkBi34riwN69RUCq2ewAqk9TgWHLmbSXIUb9E nJQxHguN7QSIDzSiMZj5VzzhP63El5cxUlUyydWbL5+misZ/Q1zWx+2Oorf9lHC7 c48NF+4mONQpWPsd8ga04puh6cua+MBrZF3A9DEetQEF6qLEwoptXagNIfEzJeR8 m34tPA8bj+V/NlEJXExGy3IJYBOUCJ0Mwlb1ghQuyi/jdsIw0xw/b5wZm3Vsd2SS OGfc2T8ONihLLwsV9yVnMrHD7A1d4K8t3PZhdKL0G6td/4/I3Jfdrk4aHEMG -----END CERTIFICATE-----Generated at Mon Jan 26 06:33:08 2026 by rpki-client