This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/gXCR-cLYMaojwmIaH2ky7eyIf5g.roa File: gXCR-cLYMaojwmIaH2ky7eyIf5g.roa (raw, json) Hash identifier: I8h0Z2ywnH4bteSn3QmarASyoNf+QDRHyu/nb8W4GNc= Subject key identifier: 81:70:91:F9:C2:D8:31:AA:23:C2:62:1A:1F:69:32:ED:EC:88:7F:98 Certificate issuer: /CN=5f1a427072b31d44784c375dfae42278e71fa836 Certificate serial: 019B7A5AFD1CAE415F1E0D295B9D0F1D8B2C Authority key identifier: 5F:1A:42:70:72:B3:1D:44:78:4C:37:5D:FA:E4:22:78:E7:1F:A8:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/gXCR-cLYMaojwmIaH2ky7eyIf5g.roa Signing time: Thu 01 Jan 2026 16:19:01 +0000 ROA not before: Thu 01 Jan 2026 16:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 270164 IP address blocks: 185.236.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:fd:1c:ae:41:5f:1e:0d:29:5b:9d:0f:1d:8b:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f1a427072b31d44784c375dfae42278e71fa836 Validity Not Before: Jan 1 16:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=817091f9c2d831aa23c2621a1f6932edec887f98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ea:c5:74:a2:f6:07:47:75:4f:7b:be:3e:5e: ba:c5:68:f0:c2:70:ec:05:33:d1:76:13:79:55:61: 51:08:e9:00:5b:fc:92:3b:2c:bc:f2:93:be:a0:ea: 64:be:cb:84:21:a5:2e:23:f4:68:2c:b3:48:1c:0f: 5a:28:2f:63:1e:7e:28:fa:3a:5b:87:f3:87:01:e2: 86:14:7c:06:f6:0c:3e:16:07:ac:1f:da:0e:30:5d: a3:01:51:8c:2c:8b:fb:d1:d7:f2:e3:f1:94:3c:83: 3a:17:c9:0f:75:45:ab:a8:ce:4f:8e:da:87:ed:d9: 19:b0:a8:33:e9:51:18:b3:cd:20:51:d7:48:e7:b2: f3:48:cc:71:72:4e:64:9a:54:18:ac:21:af:11:dc: e4:2d:14:99:23:bd:6d:af:93:43:bd:1d:d6:4f:40: cc:e7:ff:12:98:ca:ca:59:bb:c9:92:a7:fe:07:4c: 04:38:ba:4e:d3:f7:30:69:9e:74:d6:d8:59:ce:ff: 0f:41:ac:f1:6a:1a:f5:02:5e:e3:d6:72:91:ec:d9: d0:af:1f:32:df:b6:01:44:82:c0:47:bb:a6:65:b8: b5:a4:15:19:81:1f:07:a9:e9:1c:13:18:b9:31:e2: f0:ee:f1:a0:75:53:bc:c2:70:20:98:6c:6a:cd:78: 7c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:70:91:F9:C2:D8:31:AA:23:C2:62:1A:1F:69:32:ED:EC:88:7F:98 X509v3 Authority Key Identifier: keyid:5F:1A:42:70:72:B3:1D:44:78:4C:37:5D:FA:E4:22:78:E7:1F:A8:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/gXCR-cLYMaojwmIaH2ky7eyIf5g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.236.181.0/24 Signature Algorithm: sha256WithRSAEncryption 41:b3:21:19:50:be:95:f0:b3:5f:2e:3b:0b:55:50:00:a8:fa: f5:0b:1c:6d:f0:55:11:d8:a9:1f:b2:15:4b:be:9d:3d:82:6c: d8:77:86:a8:f8:45:98:f0:af:07:14:bc:db:5d:c8:ed:bf:d1: e8:d1:89:29:5d:2d:d9:e0:f8:9c:cb:78:1d:a3:d1:88:e0:31: a5:78:c3:82:f0:59:c3:02:80:28:ca:30:d1:4a:a5:f7:bc:56: 7e:94:9a:d1:49:30:7c:5e:d1:6c:f8:1c:92:7c:d6:32:95:b2: 55:b6:31:54:f0:cb:75:71:25:ef:13:c9:2c:5a:06:ad:47:d4: fe:c9:30:b1:bd:37:89:b0:23:3a:2b:b7:3e:40:3d:7c:c5:a7: f5:c1:21:93:ab:ea:a4:41:34:b0:9a:55:e1:73:eb:ea:db:66: 1d:82:b8:58:f2:e0:f3:aa:3c:c9:3f:87:00:86:84:53:8b:7c: ac:8a:da:d2:0e:cf:55:a0:ae:a5:3f:d8:d5:37:7b:26:08:ed: 9f:f3:4b:dd:dc:3f:29:14:e8:61:35:08:6a:22:d7:8f:9a:21: 01:2e:72:d2:9a:b3:04:56:62:c4:78:d5:f4:28:d1:10:33:eb: d0:97:9f:5b:92:db:43:ed:08:9e:d7:93:8b:88:18:51:93:97: 61:fa:b5:50 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wv0crkFfHg0pW50PHYssMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMWE0MjcwNzJiMzFkNDQ3ODRjMzc1ZGZhZTQyMjc4ZTcx ZmE4MzYwHhcNMjYwMTAxMTYxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTcwOTFmOWMyZDgzMWFhMjNjMjYyMWExZjY5MzJlZGVjODg3Zjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+rFdKL2B0d1T3u+Pl66xWjwwnDs BTPRdhN5VWFRCOkAW/ySOyy88pO+oOpkvsuEIaUuI/RoLLNIHA9aKC9jHn4o+jpb h/OHAeKGFHwG9gw+FgesH9oOMF2jAVGMLIv70dfy4/GUPIM6F8kPdUWrqM5PjtqH 7dkZsKgz6VEYs80gUddI57LzSMxxck5kmlQYrCGvEdzkLRSZI71tr5NDvR3WT0DM 5/8SmMrKWbvJkqf+B0wEOLpO0/cwaZ501thZzv8PQazxahr1Al7j1nKR7NnQrx8y 37YBRILAR7umZbi1pBUZgR8HqekcExi5MeLw7vGgdVO8wnAgmGxqzXh8yQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIFwkfnC2DGqI8JiGh9pMu3siH+YMB8GA1UdIwQY MBaAFF8aQnBysx1EeEw3XfrkInjnH6g2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHhwQ2NIS3pIVVI0VERkZC11UWllT2NmcURZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8wNzdmNjQtYjg0My00NjlmLTg1NDct ZGQyMGJiMjA4YmJhLzEvZ1hDUi1jTFlNYW9qd21JYUgya3k3ZXlJZjVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8wNzdmNjQtYjg0My00NjlmLTg1NDctZGQyMGJiMjA4YmJh LzEvWHhwQ2NIS3pIVVI0VERkZC11UWllT2NmcURZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuey1MA0G CSqGSIb3DQEBCwUAA4IBAQBBsyEZUL6V8LNfLjsLVVAAqPr1Cxxt8FUR2KkfshVL vp09gmzYd4ao+EWY8K8HFLzbXcjtv9Ho0YkpXS3Z4Picy3gdo9GI4DGleMOC8FnD AoAoyjDRSqX3vFZ+lJrRSTB8XtFs+BySfNYylbJVtjFU8Mt1cSXvE8ksWgatR9T+ yTCxvTeJsCM6K7c+QD18xaf1wSGTq+qkQTSwmlXhc+vq22YdgrhY8uDzqjzJP4cA hoRTi3ysitrSDs9VoK6lP9jVN3smCO2f80vd3D8pFOhhNQhqItePmiEBLnLSmrME VmLEeNX0KNEQM+vQl59bkttD7Qie15OLiBhRk5dh+rVQ -----END CERTIFICATE-----Generated at Mon Jan 26 02:43:53 2026 by rpki-client