This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/xi1lzXnyUQddIBg_g1qFVgVU2YQ.roa File: xi1lzXnyUQddIBg_g1qFVgVU2YQ.roa (raw, json) Hash identifier: DDQgV9tAfdW2zCM78ncjHvng/XT4BDa4M2SGgGiDpqM= Subject key identifier: C6:2D:65:CD:79:F2:51:07:5D:20:18:3F:83:5A:85:56:05:54:D9:84 Certificate issuer: /CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b Certificate serial: 019B7CED4BBCDBDA43B067F2329A93368646 Authority key identifier: 57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/xi1lzXnyUQddIBg_g1qFVgVU2YQ.roa Signing time: Fri 02 Jan 2026 04:18:04 +0000 ROA not before: Fri 02 Jan 2026 04:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205836 IP address blocks: 45.92.184.0/24 maxlen: 24 45.92.185.0/24 maxlen: 24 45.92.186.0/24 maxlen: 24 45.92.187.0/24 maxlen: 24 46.149.106.0/24 maxlen: 24 185.157.128.0/24 maxlen: 24 185.157.129.0/24 maxlen: 24 185.157.130.0/24 maxlen: 24 185.157.131.0/24 maxlen: 24 185.204.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:4b:bc:db:da:43:b0:67:f2:32:9a:93:36:86:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b Validity Not Before: Jan 2 04:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c62d65cd79f251075d20183f835a85560554d984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:82:3c:c8:9c:e5:e8:67:ac:93:ca:b1:64:d3: 62:92:18:ea:45:5f:35:28:16:9b:e8:0a:5c:35:4f: 37:f0:52:17:fa:96:93:44:5f:e1:3f:f3:92:bf:e8: e3:c2:6c:64:14:16:ad:ec:ef:88:e4:6e:c4:57:b0: ce:68:9e:79:ec:b6:59:45:ad:92:3b:aa:05:80:5e: 3f:b9:89:d0:0a:17:ce:4b:37:7e:b4:72:89:7f:78: 4d:2d:22:52:61:31:94:fa:81:35:6d:ce:a8:5c:d8: 48:cc:4e:82:36:5d:a8:0f:eb:10:ac:42:0b:93:bc: 2d:c4:77:28:1c:3a:f3:29:61:ff:d6:cd:bf:69:75: ba:21:9b:e5:67:00:f4:fc:db:68:df:87:fe:98:1a: d1:ee:9e:ec:06:85:fd:6d:02:89:2b:fb:8b:75:f5: eb:13:05:4d:69:ae:e6:51:f3:85:8b:af:83:79:f3: ba:89:35:2b:74:1d:83:30:b9:4a:60:f5:7a:d8:e9: 98:1e:e6:98:15:2b:f3:ca:ad:69:7f:57:e6:49:50: 2e:9d:f9:bb:a3:13:c1:a8:9d:bb:5a:27:3d:41:ab: 55:02:d2:43:48:4f:0b:22:84:2d:fe:0a:04:d1:fe: 34:1c:6d:d3:03:dd:f8:35:92:dd:ac:6f:36:e1:e9: 3f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:2D:65:CD:79:F2:51:07:5D:20:18:3F:83:5A:85:56:05:54:D9:84 X509v3 Authority Key Identifier: keyid:57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/xi1lzXnyUQddIBg_g1qFVgVU2YQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.92.184.0/22 46.149.106.0/24 185.157.128.0/22 185.204.202.0/24 Signature Algorithm: sha256WithRSAEncryption 75:07:8e:b0:d7:c6:c0:7b:2f:4f:33:65:da:a8:54:17:5b:ad: 8a:98:bd:42:a4:3f:55:38:f8:e5:0b:e0:ac:94:9c:1e:bd:64: dc:d2:19:95:ef:3d:37:02:7e:12:b8:20:11:ed:2e:28:ca:c1: 3f:21:f6:4f:68:3b:10:49:c7:1e:cf:e0:e4:25:5f:eb:ba:2c: 66:af:36:f4:7f:c9:f1:9d:f8:b5:a8:ab:09:04:47:60:55:c8: 0e:60:d0:30:fa:c8:6a:65:66:b9:6e:47:2d:73:7a:a3:63:89: 6f:be:97:4b:c9:c1:e1:76:a8:54:c9:38:cc:dd:8c:bb:44:f1: ef:e2:88:fa:f0:2b:bb:db:60:e1:88:66:f9:c8:b0:d3:1c:87: 5d:68:ed:7a:6b:1a:9f:fd:e9:74:ad:26:bc:6a:ca:a5:db:dc: 24:4e:9d:df:02:0f:70:6c:80:6d:f5:f9:e7:2b:af:20:01:9a: 7e:d9:26:1f:22:f4:40:68:52:35:a2:31:38:69:3b:7a:21:4a: 77:83:ba:96:7e:dd:a0:21:88:68:8e:09:0d:94:25:52:1b:49: 3b:1c:b5:e7:96:d3:59:48:33:f5:ce:c3:79:7a:c6:dd:f1:30: cc:73:14:ba:a4:e3:fb:a2:ba:ef:a1:35:00:21:ed:22:a4:b7: 28:4d:a0:80 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt87Uu829pDsGfyMpqTNoZGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NzAyMWRjZGY0NGI2YWZkZDM4MTA1NDdjNTVhNzliZDFh OWZhM2IwHhcNMjYwMTAyMDQxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjJkNjVjZDc5ZjI1MTA3NWQyMDE4M2Y4MzVhODU1NjA1NTRkOTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44I8yJzl6Gesk8qxZNNikhjqRV81 KBab6ApcNU838FIX+paTRF/hP/OSv+jjwmxkFBat7O+I5G7EV7DOaJ557LZZRa2S O6oFgF4/uYnQChfOSzd+tHKJf3hNLSJSYTGU+oE1bc6oXNhIzE6CNl2oD+sQrEIL k7wtxHcoHDrzKWH/1s2/aXW6IZvlZwD0/Nto34f+mBrR7p7sBoX9bQKJK/uLdfXr EwVNaa7mUfOFi6+DefO6iTUrdB2DMLlKYPV62OmYHuaYFSvzyq1pf1fmSVAunfm7 oxPBqJ27Wic9QatVAtJDSE8LIoQt/goE0f40HG3TA934NZLdrG824ek/UwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFMYtZc158lEHXSAYP4NahVYFVNmEMB8GA1UdIwQY MBaAFFdwIdzfRLav3TgQVHxVp5vRqfo7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjNBaDNOOUV0cV9kT0JCVWZGV25tOUdwLWpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8wYWMyN2EtMjE1OS00OGQ3LThiZmQt YzkwN2FlMWMyMTFlLzEveGkxbHpYbnlVUWRkSUJnX2cxcUZWZ1ZVMllRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8wYWMyN2EtMjE1OS00OGQ3LThiZmQtYzkwN2FlMWMyMTFl LzEvVjNBaDNOOUV0cV9kT0JCVWZGV25tOUdwLWpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCLVy4AwQA LpVqAwQCuZ2AAwQAuczKMA0GCSqGSIb3DQEBCwUAA4IBAQB1B46w18bAey9PM2Xa qFQXW62KmL1CpD9VOPjlC+CslJwevWTc0hmV7z03An4SuCAR7S4oysE/IfZPaDsQ Sccez+DkJV/ruixmrzb0f8nxnfi1qKsJBEdgVcgOYNAw+shqZWa5bkctc3qjY4lv vpdLycHhdqhUyTjM3Yy7RPHv4oj68Cu722DhiGb5yLDTHIddaO16axqf/el0rSa8 asql29wkTp3fAg9wbIBt9fnnK68gAZp+2SYfIvRAaFI1ojE4aTt6IUp3g7qWft2g IYhojgkNlCVSG0k7HLXnltNZSDP1zsN5esbd8TDMcxS6pOP7orrvoTUAIe0ipLco TaCA -----END CERTIFICATE-----Generated at Mon Jan 26 10:15:12 2026 by rpki-client