This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/XtKptUPAZtnkVLsMtR3H72MIqSI.roa File: XtKptUPAZtnkVLsMtR3H72MIqSI.roa (raw, json) Hash identifier: rOe55oF6czj16PMq9GI8XZ68fesrdqAJ54sASqiUvuQ= Subject key identifier: 5E:D2:A9:B5:43:C0:66:D9:E4:54:BB:0C:B5:1D:C7:EF:63:08:A9:22 Certificate issuer: /CN=ed800950a31dcdacaac56adb936a42beb845e24b Certificate serial: 019B7C114739DEAEB19677D44C54DEF438F3 Authority key identifier: ED:80:09:50:A3:1D:CD:AC:AA:C5:6A:DB:93:6A:42:BE:B8:45:E2:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7YAJUKMdzayqxWrbk2pCvrhF4ks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/XtKptUPAZtnkVLsMtR3H72MIqSI.roa Signing time: Fri 02 Jan 2026 00:17:45 +0000 ROA not before: Fri 02 Jan 2026 00:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1239 IP address blocks: 185.221.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.crl rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.mft rsync://rpki.ripe.net/repository/DEFAULT/7YAJUKMdzayqxWrbk2pCvrhF4ks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:47:39:de:ae:b1:96:77:d4:4c:54:de:f4:38:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed800950a31dcdacaac56adb936a42beb845e24b Validity Not Before: Jan 2 00:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ed2a9b543c066d9e454bb0cb51dc7ef6308a922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:26:36:7a:cf:69:36:1f:e4:7b:c2:d0:c5:a3: c0:42:18:64:e2:70:4a:1a:2f:c6:34:19:2c:3a:1f: e4:c2:dd:ab:7c:20:4c:51:c4:e9:5f:6f:2c:cc:56: ca:d2:c9:55:47:8c:83:07:0b:9e:6e:50:05:8b:a2: 55:6f:75:df:14:bd:2f:00:0c:67:f6:72:de:6f:4c: 17:12:5d:82:56:69:53:da:17:72:55:be:e0:46:2e: d9:44:3c:e8:6f:20:76:c1:42:55:c3:37:92:59:23: 20:f0:06:95:80:a3:b8:dd:0e:45:a6:e4:18:49:56: 2a:98:3a:29:aa:71:c7:f3:12:da:a4:6d:95:72:5d: 33:d4:ec:c7:96:d4:5d:78:c4:b1:33:78:7e:f4:ba: 17:50:50:28:a9:7f:b5:f4:47:01:26:15:1a:2f:8c: 04:ec:27:8a:4f:1e:ee:e3:21:b1:d4:bc:90:76:b7: c6:55:02:ee:9c:95:e9:1e:30:97:d6:15:56:30:56: 47:ff:4c:2a:f2:93:57:8c:d6:1f:92:2d:16:66:3c: 5a:10:cf:ca:4d:ea:d0:4d:df:be:4d:e2:2b:5e:5f: 78:6b:a6:74:23:c8:8a:86:1b:14:a1:f8:af:fd:1f: c1:e8:bd:5b:b4:14:05:d2:f1:bc:a3:df:a6:b5:67: 39:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:D2:A9:B5:43:C0:66:D9:E4:54:BB:0C:B5:1D:C7:EF:63:08:A9:22 X509v3 Authority Key Identifier: keyid:ED:80:09:50:A3:1D:CD:AC:AA:C5:6A:DB:93:6A:42:BE:B8:45:E2:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YAJUKMdzayqxWrbk2pCvrhF4ks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/XtKptUPAZtnkVLsMtR3H72MIqSI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.221.217.0/24 Signature Algorithm: sha256WithRSAEncryption 46:1d:10:7b:44:f8:97:b8:f8:f2:cd:66:13:2d:7a:32:2f:42: 7a:f1:7f:af:3f:f7:6d:f1:d0:bb:2b:16:91:6b:b8:4e:78:ea: 13:0d:bd:77:4f:36:06:18:25:76:ac:3b:cf:b1:45:53:d2:e2: 57:1e:12:bf:bf:75:a7:d4:5b:41:86:e8:0b:0c:c0:b4:2b:7c: 06:18:1d:0f:9c:96:a6:a3:6c:8d:af:42:46:88:1e:aa:93:80: 38:0e:37:72:b8:1c:c5:80:3e:a0:04:4b:1c:94:d5:be:7d:16: 3e:76:24:5f:ac:d4:5c:2b:36:c8:d9:d1:14:65:c6:09:fa:17: 00:9e:a3:19:30:92:62:c5:6c:5c:7f:36:d9:91:58:06:2a:15: 7c:59:09:2f:7b:98:8b:ce:99:62:27:07:5c:f4:bb:62:ac:e5: f7:50:ff:e9:6f:22:b4:37:b6:5c:9d:f8:c7:63:a7:62:5b:29: e7:b7:21:9b:95:25:c0:7e:e8:9b:cf:00:9c:98:e7:3a:38:ca: 69:f6:6b:53:c6:81:e7:a0:49:e7:b2:98:90:be:e6:d1:4c:fa: 09:28:ee:b6:de:6c:51:3f:c2:04:1c:52:67:6d:b1:2b:41:20: 83:fd:cd:76:d8:a7:f8:24:8d:6a:fb:66:83:24:fa:de:5a:49: f9:e9:08:93 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EUc53q6xlnfUTFTe9DjzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkODAwOTUwYTMxZGNkYWNhYWM1NmFkYjkzNmE0MmJlYjg0 NWUyNGIwHhcNMjYwMTAyMDAxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZWQyYTliNTQzYzA2NmQ5ZTQ1NGJiMGNiNTFkYzdlZjYzMDhhOTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiY2es9pNh/ke8LQxaPAQhhk4nBK Gi/GNBksOh/kwt2rfCBMUcTpX28szFbK0slVR4yDBwueblAFi6JVb3XfFL0vAAxn 9nLeb0wXEl2CVmlT2hdyVb7gRi7ZRDzobyB2wUJVwzeSWSMg8AaVgKO43Q5FpuQY SVYqmDopqnHH8xLapG2Vcl0z1OzHltRdeMSxM3h+9LoXUFAoqX+19EcBJhUaL4wE 7CeKTx7u4yGx1LyQdrfGVQLunJXpHjCX1hVWMFZH/0wq8pNXjNYfki0WZjxaEM/K TerQTd++TeIrXl94a6Z0I8iKhhsUofiv/R/B6L1btBQF0vG8o9+mtWc5lQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF7SqbVDwGbZ5FS7DLUdx+9jCKkiMB8GA1UdIwQY MBaAFO2ACVCjHc2sqsVq25NqQr64ReJLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1lBSlVLTWR6YXlxeFdyYmsycEN2cmhGNGtzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC84YTZmNzItYzgyMi00NTFmLWE1YzUt YTdmZDZjOGU3MGZkLzEvWHRLcHRVUEFadG5rVkxzTXRSM0g3Mk1JcVNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC84YTZmNzItYzgyMi00NTFmLWE1YzUtYTdmZDZjOGU3MGZk LzEvN1lBSlVLTWR6YXlxeFdyYmsycEN2cmhGNGtzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAud3ZMA0G CSqGSIb3DQEBCwUAA4IBAQBGHRB7RPiXuPjyzWYTLXoyL0J68X+vP/dt8dC7KxaR a7hOeOoTDb13TzYGGCV2rDvPsUVT0uJXHhK/v3Wn1FtBhugLDMC0K3wGGB0PnJam o2yNr0JGiB6qk4A4DjdyuBzFgD6gBEsclNW+fRY+diRfrNRcKzbI2dEUZcYJ+hcA nqMZMJJixWxcfzbZkVgGKhV8WQkve5iLzpliJwdc9LtirOX3UP/pbyK0N7ZcnfjH Y6diWynntyGblSXAfuibzwCcmOc6OMpp9mtTxoHnoEnnspiQvubRTPoJKO623mxR P8IEHFJnbbErQSCD/c122Kf4JI1q+2aDJPreWkn56QiT -----END CERTIFICATE-----Generated at Sun Jan 25 13:02:07 2026 by rpki-client