This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/xXF2v9fPp2jWK0sIXCegEtjh0Ok.roa File: xXF2v9fPp2jWK0sIXCegEtjh0Ok.roa (raw, json) Hash identifier: QgdgJFAzpFwfBwR16G0/QRrJQCJ25Qnygvg/Dv2ODjQ= Subject key identifier: C5:71:76:BF:D7:CF:A7:68:D6:2B:4B:08:5C:27:A0:12:D8:E1:D0:E9 Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464 Certificate serial: 019B7E37F192EBD400C5EEFADE16B20A01C6 Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/xXF2v9fPp2jWK0sIXCegEtjh0Ok.roa Signing time: Fri 02 Jan 2026 10:19:14 +0000 ROA not before: Fri 02 Jan 2026 10:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214515 IP address blocks: 37.32.41.0/24 maxlen: 24 185.243.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:f1:92:eb:d4:00:c5:ee:fa:de:16:b2:0a:01:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464 Validity Not Before: Jan 2 10:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c57176bfd7cfa768d62b4b085c27a012d8e1d0e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d5:53:fa:c1:87:74:e3:64:3e:5e:9e:d5:63: ca:f5:ba:5c:10:05:d7:06:f7:e6:91:df:41:15:1b: d8:70:50:91:30:50:25:63:a2:8d:c2:92:40:87:67: cf:92:91:be:dc:87:0d:ec:88:41:fc:12:6a:68:df: f3:3f:1c:e0:d1:8c:93:38:e3:e6:77:d4:1b:65:e5: fd:3b:45:0e:22:9f:93:00:8d:3b:f4:a7:75:14:57: 97:b6:87:40:74:01:04:dd:11:cf:af:9a:5b:1b:3c: 56:b9:4c:90:40:24:3d:7b:e2:e5:bf:9e:72:53:75: d7:ab:6e:d0:f2:db:62:82:4b:6e:6f:f9:9f:7c:c0: 45:03:a9:7b:41:dc:ac:9d:19:0b:10:f3:4a:f5:a6: 78:e4:a6:93:73:b1:de:d9:23:22:48:ec:13:fb:96: 75:70:37:4e:77:15:b3:8e:1f:d4:ea:f5:e2:13:cf: 8f:b4:37:06:29:a3:94:d3:96:30:0d:0c:cd:59:12: df:1f:c4:37:b7:0e:ee:85:63:db:63:1a:bb:59:a4: 5c:4f:8f:5f:aa:62:a1:86:10:c1:8a:d0:37:4d:61: 5e:63:1b:69:00:96:e9:78:b8:e7:18:c5:fe:0f:9a: 48:cf:56:09:13:19:a4:55:ae:e3:ab:e5:f4:0f:50: 9c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:71:76:BF:D7:CF:A7:68:D6:2B:4B:08:5C:27:A0:12:D8:E1:D0:E9 X509v3 Authority Key Identifier: keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/xXF2v9fPp2jWK0sIXCegEtjh0Ok.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.32.41.0/24 185.243.51.0/24 Signature Algorithm: sha256WithRSAEncryption c7:53:11:97:c6:ad:91:cc:e0:d4:57:7a:25:46:ca:8b:8d:38: 11:0d:9d:9f:bc:f4:58:57:94:7c:35:f4:37:db:1f:4b:ff:83: 80:12:18:fd:28:b1:62:9b:46:cb:34:cf:4d:de:b6:23:83:e4: 22:dc:29:5a:dc:66:93:b9:ef:cf:72:45:15:5b:ed:e3:bf:15: c6:68:30:c7:ba:29:ef:f6:4c:c0:9e:4b:ad:a2:73:a6:45:44: 98:41:0d:b6:c8:7b:66:8e:ae:92:33:fd:c9:40:85:8e:2e:58: cd:fd:67:40:2a:1d:28:60:a6:bc:39:68:c5:a4:40:40:78:67: c9:c2:ba:59:43:36:ea:23:c5:5e:c0:8c:cb:c9:59:0f:61:d2: 36:42:69:5b:a1:60:b7:f1:28:d6:dc:f9:d2:13:a2:0c:53:57: 8f:9f:bb:c0:65:ec:43:08:f9:e7:a5:19:e6:47:91:9c:b2:88: 4d:2d:56:e3:51:e5:66:1e:01:5f:33:26:52:59:58:cd:92:e1: a2:67:0f:03:e4:90:58:98:58:b2:73:b0:6f:88:52:20:02:fa: d7:6f:3d:90:e1:f3:a8:c3:e0:21:27:ca:ef:60:ba:34:1f:ff: bf:4a:e1:2f:e3:fa:e0:72:9d:3c:d3:a1:94:67:a0:5f:91:a7: 63:e5:26:51 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+N/GS69QAxe763hayCgHGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0 ZDY0NjQwHhcNMjYwMTAyMTAxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTcxNzZiZmQ3Y2ZhNzY4ZDYyYjRiMDg1YzI3YTAxMmQ4ZTFkMGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudVT+sGHdONkPl6e1WPK9bpcEAXX Bvfmkd9BFRvYcFCRMFAlY6KNwpJAh2fPkpG+3IcN7IhB/BJqaN/zPxzg0YyTOOPm d9QbZeX9O0UOIp+TAI079Kd1FFeXtodAdAEE3RHPr5pbGzxWuUyQQCQ9e+Llv55y U3XXq27Q8ttigktub/mffMBFA6l7QdysnRkLEPNK9aZ45KaTc7He2SMiSOwT+5Z1 cDdOdxWzjh/U6vXiE8+PtDcGKaOU05YwDQzNWRLfH8Q3tw7uhWPbYxq7WaRcT49f qmKhhhDBitA3TWFeYxtpAJbpeLjnGMX+D5pIz1YJExmkVa7jq+X0D1CcgwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMVxdr/Xz6do1itLCFwnoBLY4dDpMB8GA1UdIwQY MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt OTg5MTY2ODgxOTY5LzEveFhGMnY5ZlBwMmpXSzBzSVhDZWdFdGpoME9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5 LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJSApAwQA ufMzMA0GCSqGSIb3DQEBCwUAA4IBAQDHUxGXxq2RzODUV3olRsqLjTgRDZ2fvPRY V5R8NfQ32x9L/4OAEhj9KLFim0bLNM9N3rYjg+Qi3Cla3GaTue/PckUVW+3jvxXG aDDHuinv9kzAnkutonOmRUSYQQ22yHtmjq6SM/3JQIWOLljN/WdAKh0oYKa8OWjF pEBAeGfJwrpZQzbqI8VewIzLyVkPYdI2QmlboWC38SjW3PnSE6IMU1ePn7vAZexD CPnnpRnmR5GcsohNLVbjUeVmHgFfMyZSWVjNkuGiZw8D5JBYmFiyc7BviFIgAvrX bz2Q4fOow+AhJ8rvYLo0H/+/SuEv4/rgcp0806GUZ6Bfkadj5SZR -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:23 2026 by rpki-client