This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/xwd7sohdrx5YU3LTJIWIxQ7gJnc.roa File: xwd7sohdrx5YU3LTJIWIxQ7gJnc.roa (raw, json) Hash identifier: 0vwAzftKk4tcR77oFqQ7h1CZN6cHODVRJzedfJTmcvw= Subject key identifier: C7:07:7B:B2:88:5D:AF:1E:58:53:72:D3:24:85:88:C5:0E:E0:26:77 Certificate issuer: /CN=af734108705a95796e8577125dd300c751dfd9a8 Certificate serial: 019B7EA73D713D7F3644F20C30646CE92C22 Authority key identifier: AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/xwd7sohdrx5YU3LTJIWIxQ7gJnc.roa Signing time: Fri 02 Jan 2026 12:20:48 +0000 ROA not before: Fri 02 Jan 2026 12:20:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210064 IP address blocks: 185.221.239.0/24 maxlen: 24 195.234.191.0/24 maxlen: 24 195.238.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:3d:71:3d:7f:36:44:f2:0c:30:64:6c:e9:2c:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af734108705a95796e8577125dd300c751dfd9a8 Validity Not Before: Jan 2 12:20:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7077bb2885daf1e585372d3248588c50ee02677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:54:05:3b:69:1d:cc:40:59:bd:df:be:f5:43: 10:1d:d7:fe:1a:78:20:32:55:b7:30:86:15:8a:35: 65:8f:19:4d:bb:eb:6b:23:a7:6c:e1:a5:f2:b4:2b: 42:9b:3b:f1:91:57:58:9a:da:bc:fc:6d:c5:f0:6b: 11:71:74:7c:2a:49:fb:4c:5f:e6:9b:d4:62:d7:13: eb:ea:37:40:6f:3a:ea:9b:84:81:eb:d0:c8:2d:36: b4:4a:2a:65:c8:7e:f6:c6:f6:51:55:3c:e0:28:d9: 8d:8b:05:e4:e1:0b:53:ba:30:fa:6e:55:16:b7:91: 9c:86:3e:33:d1:b5:75:d7:ad:d3:92:97:9d:87:0a: 68:75:4e:53:d1:e9:35:cf:79:9a:b1:c2:52:41:fd: 4e:75:2d:ce:47:eb:fa:fc:b8:7d:fa:ad:79:16:97: 95:bb:83:1f:c1:59:31:b9:13:c4:44:a5:78:01:d5: 9f:fd:bb:23:2b:9b:39:ae:fd:5b:eb:a2:23:0d:7e: fd:d4:46:bd:1c:ed:40:54:35:7d:28:f0:6a:e0:c9: 9a:97:57:89:36:f9:c8:a9:6e:db:2e:24:06:ce:6c: fb:99:0f:5a:c9:92:c0:c4:dd:25:98:0b:5d:af:9b: 5d:b6:27:ce:15:b3:4c:89:dc:16:b1:d8:2d:d2:a0: 37:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:07:7B:B2:88:5D:AF:1E:58:53:72:D3:24:85:88:C5:0E:E0:26:77 X509v3 Authority Key Identifier: keyid:AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/xwd7sohdrx5YU3LTJIWIxQ7gJnc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.221.239.0/24 195.234.191.0/24 195.238.240.0/24 Signature Algorithm: sha256WithRSAEncryption 04:eb:34:7c:04:25:17:91:6b:fd:da:9f:70:c1:f4:b2:b1:26: 1a:27:12:b0:76:9e:06:2b:31:73:6d:43:80:01:4d:5d:05:ea: 0c:47:7c:a2:43:50:0a:0b:7e:cb:1d:b4:a7:22:52:d0:34:91: 9e:2e:c7:bf:7d:ed:17:37:19:11:75:a9:c2:95:ea:50:95:f3: 49:61:af:df:bb:91:39:73:53:71:5d:1f:7b:81:72:c4:c8:81: e9:ab:c5:96:6d:9f:66:23:8c:a1:2a:c6:d5:f8:e4:e0:9d:c3: d8:b3:0f:1e:34:bb:bb:04:f3:3f:1f:dc:3b:b7:f9:e4:56:0d: 38:62:99:3a:0f:bd:66:93:c9:3e:94:8e:36:ce:eb:e3:59:46: 2f:a1:54:75:86:12:a8:9d:fa:f1:8f:88:b9:a7:85:1a:76:c2: a5:54:20:13:bf:3d:2b:28:29:d1:2e:2a:ba:47:b2:c1:cb:a6: 66:04:e0:0e:96:b0:85:fb:fb:2c:2e:94:cf:54:a5:2b:81:ac: aa:96:97:53:65:96:04:7d:c5:0a:a2:06:4d:eb:d3:2b:44:9e: 09:f3:cd:e8:9c:f8:4e:d3:43:59:ec:73:69:f0:f5:c9:9c:30: 6f:38:ca:a0:66:51:f6:09:18:03:1f:3b:f1:e8:96:47:5c:b4: ab:32:41:d9 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+pz1xPX82RPIMMGRs6SwiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNzM0MTA4NzA1YTk1Nzk2ZTg1NzcxMjVkZDMwMGM3NTFk ZmQ5YTgwHhcNMjYwMTAyMTIyMDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzA3N2JiMjg4NWRhZjFlNTg1MzcyZDMyNDg1ODhjNTBlZTAyNjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVQFO2kdzEBZvd++9UMQHdf+Gngg MlW3MIYVijVljxlNu+trI6ds4aXytCtCmzvxkVdYmtq8/G3F8GsRcXR8Kkn7TF/m m9Ri1xPr6jdAbzrqm4SB69DILTa0SiplyH72xvZRVTzgKNmNiwXk4QtTujD6blUW t5Gchj4z0bV1163TkpedhwpodU5T0ek1z3mascJSQf1OdS3OR+v6/Lh9+q15FpeV u4MfwVkxuRPERKV4AdWf/bsjK5s5rv1b66IjDX791Ea9HO1AVDV9KPBq4Mmal1eJ NvnIqW7bLiQGzmz7mQ9ayZLAxN0lmAtdr5tdtifOFbNMidwWsdgt0qA3GwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMcHe7KIXa8eWFNy0ySFiMUO4CZ3MB8GA1UdIwQY MBaAFK9zQQhwWpV5boV3El3TAMdR39moMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjNOQkNIQmFsWGx1aFhjU1hkTUF4MUhmMmFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9jOTNhNjYtYzdjNy00YzMzLWE3MjUt MThkMWE0MDZhYWVkLzEveHdkN3NvaGRyeDVZVTNMVEpJV0l4UTdnSm5jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9jOTNhNjYtYzdjNy00YzMzLWE3MjUtMThkMWE0MDZhYWVk LzEvcjNOQkNIQmFsWGx1aFhjU1hkTUF4MUhmMmFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAud3vAwQA w+q/AwQAw+7wMA0GCSqGSIb3DQEBCwUAA4IBAQAE6zR8BCUXkWv92p9wwfSysSYa JxKwdp4GKzFzbUOAAU1dBeoMR3yiQ1AKC37LHbSnIlLQNJGeLse/fe0XNxkRdanC lepQlfNJYa/fu5E5c1NxXR97gXLEyIHpq8WWbZ9mI4yhKsbV+OTgncPYsw8eNLu7 BPM/H9w7t/nkVg04Ypk6D71mk8k+lI42zuvjWUYvoVR1hhKonfrxj4i5p4UadsKl VCATvz0rKCnRLiq6R7LBy6ZmBOAOlrCF+/ssLpTPVKUrgayqlpdTZZYEfcUKogZN 69MrRJ4J883onPhO00NZ7HNp8PXJnDBvOMqgZlH2CRgDHzvx6JZHXLSrMkHZ -----END CERTIFICATE-----Generated at Mon Jan 26 02:43:39 2026 by rpki-client