This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/XEgWuGNZKP2xHlnn0Bhq-uFy3zQ.roa File: XEgWuGNZKP2xHlnn0Bhq-uFy3zQ.roa (raw, json) Hash identifier: Dg+JUKAIOOV2eZlMRBIqgsVw/ezQsbFdaqZ4m0NhuOU= Subject key identifier: 5C:48:16:B8:63:59:28:FD:B1:1E:59:E7:D0:18:6A:FA:E1:72:DF:34 Certificate issuer: /CN=bd6fa37a2483cf579fa86250119ac0133475aad8 Certificate serial: 019B7B367C329B49F78D4B5B542F102A1FE2 Authority key identifier: BD:6F:A3:7A:24:83:CF:57:9F:A8:62:50:11:9A:C0:13:34:75:AA:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vW-jeiSDz1efqGJQEZrAEzR1qtg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/XEgWuGNZKP2xHlnn0Bhq-uFy3zQ.roa Signing time: Thu 01 Jan 2026 20:18:46 +0000 ROA not before: Thu 01 Jan 2026 20:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 134835 IP address blocks: 185.239.224.0/22 maxlen: 24 185.239.225.0/24 maxlen: 24 185.239.226.0/24 maxlen: 24 185.239.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.crl rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.mft rsync://rpki.ripe.net/repository/DEFAULT/vW-jeiSDz1efqGJQEZrAEzR1qtg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:7c:32:9b:49:f7:8d:4b:5b:54:2f:10:2a:1f:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd6fa37a2483cf579fa86250119ac0133475aad8 Validity Not Before: Jan 1 20:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c4816b8635928fdb11e59e7d0186afae172df34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:4f:fc:de:5c:fb:aa:79:9f:54:27:aa:27:ca: b5:d6:46:a2:79:1d:74:ba:9c:47:b7:3b:23:57:28: 4f:5d:b1:7f:d6:fb:26:59:97:17:fc:06:23:20:e1: 59:18:84:e7:53:4a:14:30:4d:c7:4c:eb:9a:ef:5a: 0b:05:71:a4:0d:ef:b6:8d:94:63:00:48:c4:79:81: f2:0a:fa:8c:1b:8f:7b:0a:18:70:15:22:20:81:a4: ee:26:1d:5e:55:e8:a7:46:72:1a:34:24:91:3f:39: d6:92:f0:af:30:35:ed:44:fc:80:62:ed:26:9d:de: 8b:15:ee:75:90:20:2a:dc:8e:7c:00:fb:d7:30:69: 16:b8:fa:91:fa:d2:33:79:2a:62:e7:6e:36:b5:4d: f8:02:64:a6:5b:53:6f:f6:4c:d0:46:37:23:22:48: 9e:a0:64:86:08:fa:b0:fa:8e:a9:e0:82:6c:98:17: 43:90:74:76:6b:76:39:67:6f:c3:6e:72:26:56:9e: 24:7b:00:17:97:03:3f:54:2e:58:b9:84:9a:e2:b0: 16:63:fa:0a:ec:8e:6b:b8:77:97:10:b2:24:68:f0: 28:a5:35:f2:01:e9:f3:62:24:c1:19:ee:59:ed:0b: 90:43:9d:cf:3f:36:61:df:2e:4e:65:3b:a0:89:80: 0d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:48:16:B8:63:59:28:FD:B1:1E:59:E7:D0:18:6A:FA:E1:72:DF:34 X509v3 Authority Key Identifier: keyid:BD:6F:A3:7A:24:83:CF:57:9F:A8:62:50:11:9A:C0:13:34:75:AA:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vW-jeiSDz1efqGJQEZrAEzR1qtg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/XEgWuGNZKP2xHlnn0Bhq-uFy3zQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.239.224.0/22 Signature Algorithm: sha256WithRSAEncryption b6:78:91:da:68:f0:9b:20:59:3f:14:15:1a:31:d5:56:bf:15: 33:51:40:ad:70:7a:b5:8e:6e:29:19:c8:34:b0:20:d9:ff:ff: 7f:3f:fc:ea:09:01:01:f3:40:e1:60:23:ba:2a:35:b3:b7:22: c6:9b:fd:2b:42:93:c1:f0:36:9d:05:91:89:63:4c:74:07:a9: b3:99:ff:49:23:49:41:50:bf:71:e2:92:c1:91:e7:d2:cc:65: 35:a2:2b:44:b1:df:b1:3b:88:5d:79:23:70:cb:40:4e:89:c9: 22:cd:41:91:bf:29:80:43:e7:e0:14:85:c6:19:fe:98:f3:a0: d5:8f:d6:54:8c:7d:49:ac:97:d8:b2:7d:72:62:f4:e4:03:1e: 66:88:ec:8b:21:24:32:e2:bc:0c:d9:0d:ac:0d:f0:71:4f:e0: 41:ab:a5:e9:8a:58:a2:9f:c0:01:5c:05:b0:a5:24:4e:2c:e5: 0f:cb:b8:82:19:b1:cc:75:92:c0:a8:26:7c:2b:ec:e1:6e:50: a2:d0:4a:6d:cb:7c:d6:92:24:6b:b7:8d:0a:59:9b:78:22:aa: 95:78:9d:36:f4:14:da:8a:88:24:e2:a6:48:6f:3e:e8:52:d2: 12:c9:7c:e7:61:03:b5:24:91:79:42:a3:50:0a:d7:5e:d8:91: f6:cf:3f:aa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nnwym0n3jUtbVC8QKh/iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkNmZhMzdhMjQ4M2NmNTc5ZmE4NjI1MDExOWFjMDEzMzQ3 NWFhZDgwHhcNMjYwMTAxMjAxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzQ4MTZiODYzNTkyOGZkYjExZTU5ZTdkMDE4NmFmYWUxNzJkZjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30/83lz7qnmfVCeqJ8q11kaieR10 upxHtzsjVyhPXbF/1vsmWZcX/AYjIOFZGITnU0oUME3HTOua71oLBXGkDe+2jZRj AEjEeYHyCvqMG497ChhwFSIggaTuJh1eVeinRnIaNCSRPznWkvCvMDXtRPyAYu0m nd6LFe51kCAq3I58APvXMGkWuPqR+tIzeSpi5242tU34AmSmW1Nv9kzQRjcjIkie oGSGCPqw+o6p4IJsmBdDkHR2a3Y5Z2/DbnImVp4kewAXlwM/VC5YuYSa4rAWY/oK 7I5ruHeXELIkaPAopTXyAenzYiTBGe5Z7QuQQ53PPzZh3y5OZTugiYAN5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFxIFrhjWSj9sR5Z59AYavrhct80MB8GA1UdIwQY MBaAFL1vo3okg89Xn6hiUBGawBM0darYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlctamVpU0R6MWVmcUdKUUVackFFelIxcXRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9lM2FkYTItYzlkZi00NGUyLThiMGYt OGZmMTYxMWU4YmI0LzEvWEVnV3VHTlpLUDJ4SGxubjBCaHEtdUZ5M3pRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9lM2FkYTItYzlkZi00NGUyLThiMGYtOGZmMTYxMWU4YmI0 LzEvdlctamVpU0R6MWVmcUdKUUVackFFelIxcXRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCue/gMA0G CSqGSIb3DQEBCwUAA4IBAQC2eJHaaPCbIFk/FBUaMdVWvxUzUUCtcHq1jm4pGcg0 sCDZ//9/P/zqCQEB80DhYCO6KjWztyLGm/0rQpPB8DadBZGJY0x0B6mzmf9JI0lB UL9x4pLBkefSzGU1oitEsd+xO4hdeSNwy0BOickizUGRvymAQ+fgFIXGGf6Y86DV j9ZUjH1JrJfYsn1yYvTkAx5miOyLISQy4rwM2Q2sDfBxT+BBq6Xpiliin8ABXAWw pSROLOUPy7iCGbHMdZLAqCZ8K+zhblCi0Epty3zWkiRrt40KWZt4IqqVeJ029BTa iogk4qZIbz7oUtISyXznYQO1JJF5QqNQCtde2JH2zz+q -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:39 2026 by rpki-client