This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/xpqqOtgsAXsWWjj58DWw9Ikqzic.roa File: xpqqOtgsAXsWWjj58DWw9Ikqzic.roa (raw, json) Hash identifier: XQV7y3FYzj3+Xq+UX0OMewU57UNtc6BiHPtsxX2i26s= Subject key identifier: C6:9A:AA:3A:D8:2C:01:7B:16:5A:38:F9:F0:35:B0:F4:89:2A:CE:27 Certificate issuer: /CN=cbffc771f2ed58fc2821ee74cda853fd2e36c428 Certificate serial: 019B7C7FD994853EE954E6F2CC32BCAF193A Authority key identifier: CB:FF:C7:71:F2:ED:58:FC:28:21:EE:74:CD:A8:53:FD:2E:36:C4:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/xpqqOtgsAXsWWjj58DWw9Ikqzic.roa Signing time: Fri 02 Jan 2026 02:18:32 +0000 ROA not before: Fri 02 Jan 2026 02:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25516 IP address blocks: 185.49.16.0/22 maxlen: 24 185.49.16.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.crl rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:d9:94:85:3e:e9:54:e6:f2:cc:32:bc:af:19:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbffc771f2ed58fc2821ee74cda853fd2e36c428 Validity Not Before: Jan 2 02:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c69aaa3ad82c017b165a38f9f035b0f4892ace27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:b7:3e:5c:fb:a4:4e:1c:64:44:31:57:a5:7b: 1b:3b:bd:5e:61:a8:6f:c7:59:04:c0:b9:f0:ea:90: 91:cd:d9:36:1a:ce:81:67:d4:c0:8b:d1:ba:c0:99: 5d:c9:a6:88:2a:d7:26:30:5c:ac:74:17:cd:5f:1b: 90:da:dd:76:fb:3d:de:b2:0b:45:82:3a:ab:09:06: ea:83:09:cc:b5:e3:04:95:76:78:a0:c7:64:b7:72: 5a:d7:08:3b:d5:cc:f4:85:7b:5f:8f:37:1f:f7:2a: 8f:a1:da:49:7f:8e:cc:78:21:38:cc:7c:cc:ca:10: b0:4e:ec:13:31:a5:c5:74:62:3b:d1:28:2c:3e:ba: 13:5f:c9:71:ea:c3:be:bf:1a:8d:b3:96:6d:67:e7: a8:1e:da:3e:74:82:77:76:82:54:06:d8:2d:d4:74: f0:3b:99:d8:50:b5:07:c6:49:44:bc:82:53:39:2c: fe:cb:5e:34:4a:e8:36:90:19:2c:a7:45:70:24:bb: 9a:78:34:99:f4:be:0f:cb:5e:2c:21:67:47:a2:ae: e9:b8:b6:98:ae:2b:c4:1e:d6:b1:d7:ef:a1:75:d1: d0:42:19:33:61:77:7f:b7:b6:e5:01:72:4e:ab:a2: 4d:ef:d4:bc:2f:1c:6d:8e:93:cd:20:d4:66:5a:b8: 61:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:9A:AA:3A:D8:2C:01:7B:16:5A:38:F9:F0:35:B0:F4:89:2A:CE:27 X509v3 Authority Key Identifier: keyid:CB:FF:C7:71:F2:ED:58:FC:28:21:EE:74:CD:A8:53:FD:2E:36:C4:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/xpqqOtgsAXsWWjj58DWw9Ikqzic.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.49.16.0/22 Signature Algorithm: sha256WithRSAEncryption 32:ec:3e:fa:b7:42:db:e0:d7:89:eb:bb:2d:e3:2f:14:27:36: f2:21:eb:2a:f2:0a:9e:40:16:e7:a1:16:ec:34:8b:37:e7:49: 96:57:d3:ee:e0:5d:6e:3d:62:de:a6:11:4d:f5:a5:6b:ac:6c: ff:68:a0:97:da:42:87:9f:42:01:8a:bf:c4:d7:2e:79:26:da: 99:fa:12:de:2d:2b:3d:93:c0:94:c1:90:54:35:99:3e:52:41: 3d:d8:4a:47:01:04:2e:a1:8e:52:36:17:d6:eb:52:c2:7a:51: 30:a5:e9:90:09:51:ac:8a:cf:24:b3:30:c7:6d:6f:60:86:57: db:b4:2d:09:e6:6c:13:61:91:b6:f2:08:f1:8f:9d:71:88:d5: 63:8b:67:69:b6:79:4a:00:72:4d:07:aa:ba:6a:37:73:ee:07: 4f:c3:80:ef:96:8d:b0:23:b9:3a:e0:f2:46:cf:0a:87:94:36: 05:cb:0a:a4:8b:f6:63:7a:5f:df:a6:b8:eb:3f:4e:32:1b:3c: 8a:f4:37:20:9e:68:b1:aa:a7:61:31:0c:1a:ea:5f:09:c0:93: f3:0b:43:8a:61:b3:b0:b0:d3:1d:b0:70:69:24:63:b8:37:18: a0:8b:9c:00:84:97:1c:75:0b:8c:77:94:75:9e:9a:c9:3a:e4: 23:9a:29:c8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f9mUhT7pVObyzDK8rxk6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZmZjNzcxZjJlZDU4ZmMyODIxZWU3NGNkYTg1M2ZkMmUz NmM0MjgwHhcNMjYwMTAyMDIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjlhYWEzYWQ4MmMwMTdiMTY1YTM4ZjlmMDM1YjBmNDg5MmFjZTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA77c+XPukThxkRDFXpXsbO71eYahv x1kEwLnw6pCRzdk2Gs6BZ9TAi9G6wJldyaaIKtcmMFysdBfNXxuQ2t12+z3esgtF gjqrCQbqgwnMteMElXZ4oMdkt3Ja1wg71cz0hXtfjzcf9yqPodpJf47MeCE4zHzM yhCwTuwTMaXFdGI70SgsProTX8lx6sO+vxqNs5ZtZ+eoHto+dIJ3doJUBtgt1HTw O5nYULUHxklEvIJTOSz+y140Sug2kBksp0VwJLuaeDSZ9L4Py14sIWdHoq7puLaY rivEHtax1++hddHQQhkzYXd/t7blAXJOq6JN79S8LxxtjpPNINRmWrhhqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMaaqjrYLAF7Flo4+fA1sPSJKs4nMB8GA1UdIwQY MBaAFMv/x3Hy7Vj8KCHudM2oU/0uNsQoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveV9fSGNmTHRXUHdvSWU1MHphaFRfUzQyeENnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9lNTJlMTQtN2FhZC00M2U0LTg4YzQt N2E0MDU0NTUxZmQ0LzEveHBxcU90Z3NBWHNXV2pqNThEV3c5SWtxemljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9lNTJlMTQtN2FhZC00M2U0LTg4YzQtN2E0MDU0NTUxZmQ0 LzEveV9fSGNmTHRXUHdvSWU1MHphaFRfUzQyeENnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTEQMA0G CSqGSIb3DQEBCwUAA4IBAQAy7D76t0Lb4NeJ67st4y8UJzbyIesq8gqeQBbnoRbs NIs350mWV9Pu4F1uPWLephFN9aVrrGz/aKCX2kKHn0IBir/E1y55JtqZ+hLeLSs9 k8CUwZBUNZk+UkE92EpHAQQuoY5SNhfW61LCelEwpemQCVGsis8kszDHbW9ghlfb tC0J5mwTYZG28gjxj51xiNVji2dptnlKAHJNB6q6ajdz7gdPw4Dvlo2wI7k64PJG zwqHlDYFywqki/Zjel/fprjrP04yGzyK9DcgnmixqqdhMQwa6l8JwJPzC0OKYbOw sNMdsHBpJGO4Nxigi5wAhJccdQuMd5R1nprJOuQjminI -----END CERTIFICATE-----Generated at Sun Jan 25 22:31:42 2026 by rpki-client