This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/XRp3KtTtDAfEDM3rwrv4Nkp2Rew.roa File: XRp3KtTtDAfEDM3rwrv4Nkp2Rew.roa (raw, json) Hash identifier: o7R+7Elj+Gl0UPTAPP1wQMI8V6KJzZF8gTCwiml6fUk= Subject key identifier: 5D:1A:77:2A:D4:ED:0C:07:C4:0C:CD:EB:C2:BB:F8:36:4A:76:45:EC Certificate issuer: /CN=04bec7578450f945d4f334df600c61a6f47232f2 Certificate serial: 019B797ED9C38E9D8D55781384C3BB150397 Authority key identifier: 04:BE:C7:57:84:50:F9:45:D4:F3:34:DF:60:0C:61:A6:F4:72:32:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/XRp3KtTtDAfEDM3rwrv4Nkp2Rew.roa Signing time: Thu 01 Jan 2026 12:18:34 +0000 ROA not before: Thu 01 Jan 2026 12:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204692 IP address blocks: 185.243.29.0/24 maxlen: 24 185.243.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft rsync://rpki.ripe.net/repository/DEFAULT/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d9:c3:8e:9d:8d:55:78:13:84:c3:bb:15:03:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04bec7578450f945d4f334df600c61a6f47232f2 Validity Not Before: Jan 1 12:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d1a772ad4ed0c07c40ccdebc2bbf8364a7645ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b9:9e:61:c5:48:e6:45:b7:ee:3b:8a:fe:34: 68:ae:5e:29:ad:cb:64:7c:7a:a3:56:aa:87:50:64: 16:94:26:66:ce:f9:67:06:98:f5:61:92:cb:e1:27: 68:c3:a9:c1:a9:93:05:97:4e:fa:e6:c1:d1:75:eb: 51:87:6b:5b:75:ea:c6:11:68:c0:2e:72:08:1c:9e: 87:28:c9:11:9d:e7:75:41:83:0f:76:b5:97:72:3e: 09:a4:64:5b:ca:43:36:db:33:3a:4c:7c:6d:13:7b: f3:14:0b:f9:a6:1b:78:3a:32:53:0a:a0:5a:f5:92: 72:0b:ac:ab:2a:ac:d5:39:3d:4d:d5:84:9d:1e:55: 0c:0c:f6:3d:46:e2:fa:18:2e:42:6e:ef:d8:0b:13: 18:32:74:40:a9:f9:8f:e4:cc:f8:71:63:76:94:44: 9e:0b:b2:aa:1e:93:70:5f:f5:82:71:04:97:86:46: 14:a3:f8:6f:9e:63:78:f4:ec:11:51:85:2c:de:27: 95:ee:39:b6:1e:02:b2:12:09:29:b4:27:31:d2:b0: 9c:f6:7b:89:cf:5e:92:0c:59:8a:0b:60:12:da:b3: 7e:be:4b:84:fa:9d:5c:52:7c:c1:b5:f9:f1:fd:82: e8:74:0c:bc:06:28:3b:f7:1a:1e:5c:f6:b9:5d:a6: 9a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:1A:77:2A:D4:ED:0C:07:C4:0C:CD:EB:C2:BB:F8:36:4A:76:45:EC X509v3 Authority Key Identifier: keyid:04:BE:C7:57:84:50:F9:45:D4:F3:34:DF:60:0C:61:A6:F4:72:32:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/XRp3KtTtDAfEDM3rwrv4Nkp2Rew.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.243.29.0-185.243.30.255 Signature Algorithm: sha256WithRSAEncryption 97:0d:f7:8b:a4:48:73:62:dc:ac:ae:96:7e:a8:b1:1a:ba:7f: 9c:75:f1:52:47:ab:2b:2d:e7:3f:35:f2:14:f6:5b:97:b4:a5: a5:01:92:78:fa:ec:f1:2c:6c:02:d5:a4:99:13:85:ad:0c:26: d4:9c:8a:cb:79:e4:ad:d1:15:d2:20:72:a7:9c:c7:20:40:d3: 54:c3:ea:ac:8d:c5:f8:a8:f1:20:80:e4:e9:d9:d1:5e:da:53: 71:e0:30:c1:4e:aa:61:e9:98:23:18:47:89:31:ae:91:79:4f: b0:56:9b:da:21:fd:cc:61:d4:f7:1f:46:e9:d1:1f:49:19:19: 8c:a6:af:0b:3f:d8:4a:f5:6a:d1:bc:fb:51:7a:10:c4:e1:37: 98:ec:0a:9f:c1:34:de:47:c4:81:96:ce:b0:11:7a:93:14:02: 80:0a:00:83:59:84:fd:38:97:23:65:1c:14:c7:7a:2d:f9:83: 1b:76:df:45:78:2f:25:df:e1:06:b6:8e:82:cf:35:14:61:f5: a5:63:2d:95:96:ba:3f:1e:c1:e7:04:4e:d6:21:74:26:75:6e: de:24:a2:9f:ae:cb:a9:92:76:43:a6:34:61:ce:3f:d1:8e:ba: 12:74:7e:4d:06:82:50:37:32:dc:77:5a:dc:e6:cb:1c:ca:ff: 2f:98:a6:6e -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt5ftnDjp2NVXgThMO7FQOXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YmVjNzU3ODQ1MGY5NDVkNGYzMzRkZjYwMGM2MWE2ZjQ3 MjMyZjIwHhcNMjYwMTAxMTIxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDFhNzcyYWQ0ZWQwYzA3YzQwY2NkZWJjMmJiZjgzNjRhNzY0NWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6rmeYcVI5kW37juK/jRorl4prctk fHqjVqqHUGQWlCZmzvlnBpj1YZLL4Sdow6nBqZMFl0765sHRdetRh2tbderGEWjA LnIIHJ6HKMkRned1QYMPdrWXcj4JpGRbykM22zM6THxtE3vzFAv5pht4OjJTCqBa 9ZJyC6yrKqzVOT1N1YSdHlUMDPY9RuL6GC5Cbu/YCxMYMnRAqfmP5Mz4cWN2lESe C7KqHpNwX/WCcQSXhkYUo/hvnmN49OwRUYUs3ieV7jm2HgKyEgkptCcx0rCc9nuJ z16SDFmKC2AS2rN+vkuE+p1cUnzBtfnx/YLodAy8Big79xoeXPa5Xaaa8wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFF0adyrU7QwHxAzN68K7+DZKdkXsMB8GA1UdIwQY MBaAFAS+x1eEUPlF1PM032AMYab0cjLyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkw3SFY0UlEtVVhVOHpUZllBeGhwdlJ5TXZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9iNDI4ZTctNjUzYy00NmM3LTk3M2Yt OWRiNjE0Y2IxMjdhLzEvWFJwM0t0VHREQWZFRE0zcndydjROa3AyUmV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9iNDI4ZTctNjUzYy00NmM3LTk3M2YtOWRiNjE0Y2IxMjdh LzEvQkw3SFY0UlEtVVhVOHpUZllBeGhwdlJ5TXZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC58x0D BAC58x4wDQYJKoZIhvcNAQELBQADggEBAJcN94ukSHNi3Kyuln6osRq6f5x18VJH qyst5z818hT2W5e0paUBknj67PEsbALVpJkTha0MJtScist55K3RFdIgcqecxyBA 01TD6qyNxfio8SCA5OnZ0V7aU3HgMMFOqmHpmCMYR4kxrpF5T7BWm9oh/cxh1Pcf RunRH0kZGYymrws/2Er1atG8+1F6EMThN5jsCp/BNN5HxIGWzrARepMUAoAKAINZ hP04lyNlHBTHei35gxt230V4LyXf4Qa2joLPNRRh9aVjLZWWuj8ewecETtYhdCZ1 bt4kop+uy6mSdkOmNGHOP9GOuhJ0fk0GglA3Mtx3WtzmyxzK/y+Ypm4= -----END CERTIFICATE-----Generated at Mon Jan 26 04:55:04 2026 by rpki-client