This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/df6f5f-e1ec-4343-9a21-a5cee11bbae8/1/x1gMchUa-6UlPXSHMzyHYvAOPb8.roa File: x1gMchUa-6UlPXSHMzyHYvAOPb8.roa (raw, json) Hash identifier: 49HndHDLbiRP+5LGNBOe4FFAql7uZl/IJ8fBpQJfK90= Subject key identifier: C7:58:0C:72:15:1A:FB:A5:25:3D:74:87:33:3C:87:62:F0:0E:3D:BF Certificate issuer: /CN=0e9a5c3283a6a16b4d205a7c564a382641cd8691 Certificate serial: 019B92D740A58155A0E84A5F89DF0EDB72AB Authority key identifier: 0E:9A:5C:32:83:A6:A1:6B:4D:20:5A:7C:56:4A:38:26:41:CD:86:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DppcMoOmoWtNIFp8Vko4JkHNhpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/df6f5f-e1ec-4343-9a21-a5cee11bbae8/1/x1gMchUa-6UlPXSHMzyHYvAOPb8.roa Signing time: Tue 06 Jan 2026 10:25:38 +0000 ROA not before: Tue 06 Jan 2026 10:25:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200590 IP address blocks: 89.20.48.0/24 maxlen: 24 185.239.145.0/24 maxlen: 24 185.239.146.0/24 maxlen: 24 193.162.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/df6f5f-e1ec-4343-9a21-a5cee11bbae8/1/DppcMoOmoWtNIFp8Vko4JkHNhpE.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/df6f5f-e1ec-4343-9a21-a5cee11bbae8/1/DppcMoOmoWtNIFp8Vko4JkHNhpE.mft rsync://rpki.ripe.net/repository/DEFAULT/DppcMoOmoWtNIFp8Vko4JkHNhpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:92:d7:40:a5:81:55:a0:e8:4a:5f:89:df:0e:db:72:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e9a5c3283a6a16b4d205a7c564a382641cd8691 Validity Not Before: Jan 6 10:25:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7580c72151afba5253d7487333c8762f00e3dbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:45:f1:eb:31:0b:eb:9e:d5:8b:2f:8c:fa:24: ac:25:05:f2:e5:d7:02:08:1c:e7:13:c6:6f:87:72: 77:73:b0:6b:8d:17:15:0c:df:6c:9e:e6:26:5c:f9: 07:91:83:c3:29:06:e5:45:99:6a:fd:a2:92:61:d8: a6:9b:76:38:0a:6f:c6:71:94:60:e4:ea:99:78:bb: 11:0c:87:d7:2e:32:96:fb:42:dc:7c:58:2e:05:05: de:81:c3:88:fb:a9:4a:53:a8:fa:1e:c5:48:13:3f: 93:f8:cb:ab:bf:aa:81:d7:2c:b3:9e:f3:25:60:dd: 97:b8:a7:3b:95:8d:43:33:ef:cf:90:b7:58:e0:06: 65:c5:05:0c:f2:bd:32:5d:40:cf:8d:8c:2a:e3:d2: 3e:a2:7d:29:4d:da:61:e2:42:31:2c:e0:5d:af:0d: 11:02:12:4d:d1:8e:b4:f0:06:e0:66:d7:38:ee:10: dd:f6:8e:5d:fc:35:d9:59:6d:dd:15:a0:9f:05:89: 5c:a0:86:00:a6:23:05:a1:c2:5e:43:ed:95:ba:d5: 4d:18:52:04:eb:a2:99:9d:09:6c:c0:9a:09:37:db: 13:0a:30:66:df:88:c2:97:0c:e5:7f:f6:31:ef:2d: 83:54:88:30:3b:72:26:d2:77:77:da:ef:8d:9d:2f: 66:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:58:0C:72:15:1A:FB:A5:25:3D:74:87:33:3C:87:62:F0:0E:3D:BF X509v3 Authority Key Identifier: keyid:0E:9A:5C:32:83:A6:A1:6B:4D:20:5A:7C:56:4A:38:26:41:CD:86:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DppcMoOmoWtNIFp8Vko4JkHNhpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/df6f5f-e1ec-4343-9a21-a5cee11bbae8/1/x1gMchUa-6UlPXSHMzyHYvAOPb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/df6f5f-e1ec-4343-9a21-a5cee11bbae8/1/DppcMoOmoWtNIFp8Vko4JkHNhpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.20.48.0/24 185.239.145.0-185.239.146.255 193.162.28.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:cb:3c:54:c2:f9:fb:eb:72:9b:c4:98:c1:d6:3c:26:f7:e8: 6f:8b:ec:18:ad:ad:be:3f:85:0b:24:99:5d:8a:07:4e:a7:27: aa:71:39:be:6e:19:ff:e9:1e:a4:26:54:1b:bf:fb:33:1e:bf: 42:33:0f:2f:35:e4:b0:8f:4c:3d:7b:0b:77:a1:6e:dc:7a:a6: 86:36:85:d7:4e:f4:47:cc:db:32:ef:ac:3d:9c:e0:03:24:73: 3f:5e:db:65:b9:9f:2e:4a:e1:26:fc:a1:99:37:2e:33:24:ff: 4d:99:75:79:9c:79:71:3d:b9:5c:26:57:e2:19:41:be:7d:81: 1f:86:61:8f:d5:7a:e8:1e:cc:e8:e2:41:b0:81:78:67:e7:61: d6:3e:3f:cc:83:67:e3:52:f6:cd:2f:05:c0:65:23:6f:3e:5e: d9:ef:f3:40:f3:fd:ec:ee:90:38:6b:4c:15:62:e2:b9:a6:f5: aa:c9:f0:df:fa:42:09:17:77:c3:82:f5:39:51:7a:e3:22:59: d4:ff:96:e1:e8:34:f3:f4:60:f4:ca:f6:6c:11:43:b8:3b:7b: 2d:89:ce:51:e1:54:61:e3:7d:75:84:a7:d6:c2:af:d5:55:21: d9:ea:94:0a:f8:db:cc:fc:4e:cc:29:95:74:21:64:fc:bd:31: b7:f7:fc:b5 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZuS10ClgVWg6Epfid8O23KrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlOWE1YzMyODNhNmExNmI0ZDIwNWE3YzU2NGEzODI2NDFj ZDg2OTEwHhcNMjYwMTA2MTAyNTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzU4MGM3MjE1MWFmYmE1MjUzZDc0ODczMzNjODc2MmYwMGUzZGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUXx6zEL657Viy+M+iSsJQXy5dcC CBznE8Zvh3J3c7BrjRcVDN9snuYmXPkHkYPDKQblRZlq/aKSYdimm3Y4Cm/GcZRg 5OqZeLsRDIfXLjKW+0LcfFguBQXegcOI+6lKU6j6HsVIEz+T+Murv6qB1yyznvMl YN2XuKc7lY1DM+/PkLdY4AZlxQUM8r0yXUDPjYwq49I+on0pTdph4kIxLOBdrw0R AhJN0Y608AbgZtc47hDd9o5d/DXZWW3dFaCfBYlcoIYApiMFocJeQ+2VutVNGFIE 66KZnQlswJoJN9sTCjBm34jClwzlf/Yx7y2DVIgwO3Im0nd32u+NnS9m5QIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFMdYDHIVGvulJT10hzM8h2LwDj2/MB8GA1UdIwQY MBaAFA6aXDKDpqFrTSBafFZKOCZBzYaRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHBwY01vT21vV3ROSUZwOFZrbzRKa0hOaHBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9kZjZmNWYtZTFlYy00MzQzLTlhMjEt YTVjZWUxMWJiYWU4LzEveDFnTWNoVWEtNlVsUFhTSE16eUhZdkFPUGI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC9kZjZmNWYtZTFlYy00MzQzLTlhMjEtYTVjZWUxMWJiYWU4 LzEvRHBwY01vT21vV3ROSUZwOFZrbzRKa0hOaHBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAWRQwMAwD BAC575EDBAC575IDBADBohwwDQYJKoZIhvcNAQELBQADggEBABzLPFTC+fvrcpvE mMHWPCb36G+L7Bitrb4/hQskmV2KB06nJ6pxOb5uGf/pHqQmVBu/+zMev0IzDy81 5LCPTD17C3ehbtx6poY2hddO9EfM2zLvrD2c4AMkcz9e22W5ny5K4Sb8oZk3LjMk /02ZdXmceXE9uVwmV+IZQb59gR+GYY/VeugezOjiQbCBeGfnYdY+P8yDZ+NS9s0v BcBlI28+Xtnv80Dz/ezukDhrTBVi4rmm9arJ8N/6QgkXd8OC9TlReuMiWdT/luHo NPP0YPTK9mwRQ7g7ey2JzlHhVGHjfXWEp9bCr9VVIdnqlAr428z8TswplXQhZPy9 Mbf3/LU= -----END CERTIFICATE-----Generated at Mon Jan 26 12:55:09 2026 by rpki-client