This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/dXBxqg2WRY0bNZSrjzenz8d7Y10.roa File: dXBxqg2WRY0bNZSrjzenz8d7Y10.roa (raw, json) Hash identifier: bonkDkqWKImRRfgE/vT3fEawIKDM/g7JC3uJ3coEEKE= Subject key identifier: 75:70:71:AA:0D:96:45:8D:1B:35:94:AB:8F:37:A7:CF:C7:7B:63:5D Certificate issuer: /CN=95d9fc815e90ca87927907c5eab3fe79ca215eaa Certificate serial: 019B77C6D7E5707AA9BE82D3F751DC203F3F Authority key identifier: 95:D9:FC:81:5E:90:CA:87:92:79:07:C5:EA:B3:FE:79:CA:21:5E:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/dXBxqg2WRY0bNZSrjzenz8d7Y10.roa Signing time: Thu 01 Jan 2026 04:17:58 +0000 ROA not before: Thu 01 Jan 2026 04:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31382 IP address blocks: 185.85.65.0/24 maxlen: 24 185.85.66.0/24 maxlen: 24 185.85.67.0/24 maxlen: 24 185.140.84.0/22 maxlen: 22 193.41.41.0/24 maxlen: 24 2a04:c7c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:d7:e5:70:7a:a9:be:82:d3:f7:51:dc:20:3f:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95d9fc815e90ca87927907c5eab3fe79ca215eaa Validity Not Before: Jan 1 04:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=757071aa0d96458d1b3594ab8f37a7cfc77b635d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fa:aa:6c:10:e2:f4:cb:1e:2f:e7:e3:78:9d: 06:3b:d7:7b:c7:ca:e2:eb:d9:5a:95:ef:ee:24:59: a8:7b:b4:55:39:2b:dd:73:5a:0e:a0:21:be:19:9b: 7d:73:a5:ac:74:fe:8d:e7:56:88:50:20:5c:ea:1c: dd:77:85:4b:8d:92:3e:5d:49:fc:da:7c:6c:ef:01: 8b:59:73:0b:ec:24:85:5c:44:22:d0:12:02:2f:c6: 35:ee:c8:d7:c5:ac:54:1a:3b:92:11:14:7a:a3:56: 4f:df:56:f3:d0:bd:e0:12:57:e7:7c:fc:26:71:04: 51:48:a3:13:ba:bb:3c:d0:1a:9b:99:67:8b:20:3e: 69:5b:0f:57:6b:c4:c1:04:89:0a:8b:f3:d2:56:7c: 73:9b:73:c5:68:55:c2:c9:02:37:fc:e3:38:31:37: c8:24:26:40:32:53:3a:ca:f5:64:23:65:75:53:26: bf:45:9f:2d:db:d5:4e:19:82:0a:8f:5f:40:15:1b: 32:6e:45:78:96:e0:9c:6c:2c:15:9e:b6:59:eb:0f: 4e:97:54:78:7a:12:db:aa:0c:77:ac:c1:bc:69:2b: 42:3a:ed:4e:c2:0c:d2:83:8c:69:5b:04:98:0e:31: ed:f3:ab:77:04:08:6d:86:f9:6f:46:14:24:35:76: 95:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:70:71:AA:0D:96:45:8D:1B:35:94:AB:8F:37:A7:CF:C7:7B:63:5D X509v3 Authority Key Identifier: keyid:95:D9:FC:81:5E:90:CA:87:92:79:07:C5:EA:B3:FE:79:CA:21:5E:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/dXBxqg2WRY0bNZSrjzenz8d7Y10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.85.65.0-185.85.67.255 185.140.84.0/22 193.41.41.0/24 IPv6: 2a04:c7c0::/29 Signature Algorithm: sha256WithRSAEncryption 41:c7:a8:bb:a7:21:ae:3a:2e:67:af:21:73:4c:2a:23:a0:6d: 82:18:5d:f8:64:11:09:04:d8:ea:02:b0:ec:97:0a:aa:2f:16: c4:4b:56:d0:b9:f0:98:1d:d8:89:82:d7:60:c5:69:7a:5f:26: 7d:2a:b4:86:00:87:ee:1b:66:72:99:42:4c:79:e3:9b:c0:e3: 77:8f:c3:db:21:38:bf:89:ed:af:f3:97:98:dd:1a:6a:0d:dc: fa:ab:08:84:42:69:c2:bb:ae:a2:15:24:f9:6c:86:8a:f0:c6: 1e:fa:bd:17:20:54:17:bb:27:e8:7d:05:f2:e4:cb:da:91:04: 92:b9:75:06:78:e8:64:be:93:27:89:e6:78:6a:05:a4:4c:8b: fa:b5:3a:77:ea:0f:fd:d7:22:58:4e:96:d6:60:b9:34:1b:dc: 33:38:6e:c5:6e:90:5a:66:e0:d8:bc:cd:e3:41:ba:6b:5f:bc: 87:69:e1:09:ab:77:c7:66:a5:d7:d4:6e:b3:ba:d4:60:63:42: 14:b7:3d:c6:4e:4b:65:38:e3:52:eb:c8:46:cd:68:7d:bc:9c: 5b:6f:2b:e7:09:3c:e1:8d:cd:0c:4a:6d:f8:20:f6:4e:98:ff: 8b:50:8b:eb:b2:89:e3:af:d9:c3:71:46:95:12:4e:f1:b9:ac: a6:57:fb:3a -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt3xtflcHqpvoLT91HcID8/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1ZDlmYzgxNWU5MGNhODc5Mjc5MDdjNWVhYjNmZTc5Y2Ey MTVlYWEwHhcNMjYwMTAxMDQxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTcwNzFhYTBkOTY0NThkMWIzNTk0YWI4ZjM3YTdjZmM3N2I2MzVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvqqbBDi9MseL+fjeJ0GO9d7x8ri 69lale/uJFmoe7RVOSvdc1oOoCG+GZt9c6WsdP6N51aIUCBc6hzdd4VLjZI+XUn8 2nxs7wGLWXML7CSFXEQi0BICL8Y17sjXxaxUGjuSERR6o1ZP31bz0L3gElfnfPwm cQRRSKMTurs80BqbmWeLID5pWw9Xa8TBBIkKi/PSVnxzm3PFaFXCyQI3/OM4MTfI JCZAMlM6yvVkI2V1Uya/RZ8t29VOGYIKj19AFRsybkV4luCcbCwVnrZZ6w9Ol1R4 ehLbqgx3rMG8aStCOu1OwgzSg4xpWwSYDjHt86t3BAhthvlvRhQkNXaVLQIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFHVwcaoNlkWNGzWUq483p8/He2NdMB8GA1UdIwQY MBaAFJXZ/IFekMqHknkHxeqz/nnKIV6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGRuOGdWNlF5b2VTZVFmRjZyUC1lY29oWHFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85Y2FhNTAtYTUxMC00MTdhLWI1ODkt OGNlNDE3OTIzMmM4LzEvZFhCeHFnMldSWTBiTlpTcmp6ZW56OGQ3WTEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS85Y2FhNTAtYTUxMC00MTdhLWI1ODktOGNlNDE3OTIzMmM4 LzEvbGRuOGdWNlF5b2VTZVFmRjZyUC1lY29oWHFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaMAwDBAC5VUED BAK5VUADBAK5jFQDBADBKSkwDQQCAAIwBwMFAyoEx8AwDQYJKoZIhvcNAQELBQAD ggEBAEHHqLunIa46LmevIXNMKiOgbYIYXfhkEQkE2OoCsOyXCqovFsRLVtC58Jgd 2ImC12DFaXpfJn0qtIYAh+4bZnKZQkx545vA43ePw9shOL+J7a/zl5jdGmoN3Pqr CIRCacK7rqIVJPlshorwxh76vRcgVBe7J+h9BfLky9qRBJK5dQZ46GS+kyeJ5nhq BaRMi/q1OnfqD/3XIlhOltZguTQb3DM4bsVukFpm4Ni8zeNBumtfvIdp4Qmrd8dm pdfUbrO61GBjQhS3PcZOS2U441LryEbNaH28nFtvK+cJPOGNzQxKbfgg9k6Y/4tQ i+uyieOv2cNxRpUSTvG5rKZX+zo= -----END CERTIFICATE-----Generated at Mon Jan 26 16:24:01 2026 by rpki-client