This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/xdlrcd40vuLK7OMfURso9sZQm8c.roa File: xdlrcd40vuLK7OMfURso9sZQm8c.roa (raw, json) Hash identifier: h6xIfupoY+MmAwghp9n9k86EShzT4qnYbI+ap6aNTzY= Subject key identifier: C5:D9:6B:71:DE:34:BE:E2:CA:EC:E3:1F:51:1B:28:F6:C6:50:9B:C7 Certificate issuer: /CN=7bf39e6eb3131ecf3cddcd0c9e378c352da41fc2 Certificate serial: 019B77C6F6E6858CD71631EBF3DA2FDE0538 Authority key identifier: 7B:F3:9E:6E:B3:13:1E:CF:3C:DD:CD:0C:9E:37:8C:35:2D:A4:1F:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e_OebrMTHs883c0MnjeMNS2kH8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/xdlrcd40vuLK7OMfURso9sZQm8c.roa Signing time: Thu 01 Jan 2026 04:18:06 +0000 ROA not before: Thu 01 Jan 2026 04:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206713 IP address blocks: 185.194.166.0/24 maxlen: 24 185.194.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/e_OebrMTHs883c0MnjeMNS2kH8I.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/e_OebrMTHs883c0MnjeMNS2kH8I.mft rsync://rpki.ripe.net/repository/DEFAULT/e_OebrMTHs883c0MnjeMNS2kH8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:f6:e6:85:8c:d7:16:31:eb:f3:da:2f:de:05:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bf39e6eb3131ecf3cddcd0c9e378c352da41fc2 Validity Not Before: Jan 1 04:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5d96b71de34bee2caece31f511b28f6c6509bc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:b3:86:9a:e7:f0:43:60:b9:98:fb:15:c4:06: 07:f8:7e:ff:64:70:e0:5c:b7:30:7a:64:98:8d:00: c9:6d:b8:2f:61:28:86:82:05:33:77:c5:fe:5b:ec: b2:69:70:4d:30:d1:2a:b2:ef:c5:27:39:5a:56:a3: af:20:36:1c:b5:b4:d6:3e:f0:e4:9d:4a:ca:82:b8: 95:3b:08:a1:23:9b:99:92:8d:9d:5f:42:d2:1c:b4: bb:5a:fc:94:53:3e:24:1d:06:8a:38:f7:40:b3:58: 1e:e0:6b:b3:6c:b3:97:46:c5:8e:25:14:c6:9b:67: 15:7e:9d:95:9b:df:e4:0c:a0:08:bc:1a:b7:11:ec: 28:4c:84:26:be:4a:4d:ae:ea:51:f6:5b:dc:f9:80: 79:23:30:f4:9f:4b:f8:fb:3b:f7:4e:72:a7:57:9c: 45:24:8f:c4:23:86:c0:42:62:fb:5a:ff:85:5f:c7: c4:7b:9a:99:c8:19:de:1c:5a:4d:d5:a3:cb:35:65: 21:50:e2:08:9c:2a:16:0b:ac:c6:7f:1b:2c:05:7b: 19:e6:5d:fe:78:17:e7:c2:ff:bf:1f:18:22:7c:87: 4f:ea:fe:3c:8f:d7:79:79:a6:8f:7b:d1:f2:62:3b: f4:f8:48:ba:18:c6:5b:15:cf:d2:6d:45:51:e2:8d: 42:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D9:6B:71:DE:34:BE:E2:CA:EC:E3:1F:51:1B:28:F6:C6:50:9B:C7 X509v3 Authority Key Identifier: keyid:7B:F3:9E:6E:B3:13:1E:CF:3C:DD:CD:0C:9E:37:8C:35:2D:A4:1F:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e_OebrMTHs883c0MnjeMNS2kH8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/xdlrcd40vuLK7OMfURso9sZQm8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/e_OebrMTHs883c0MnjeMNS2kH8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.194.166.0/23 Signature Algorithm: sha256WithRSAEncryption 5a:3e:33:bb:b2:dd:1a:41:1f:77:82:3f:b2:43:a7:5f:cf:11: da:59:2d:05:fa:38:fa:19:42:22:f5:5a:57:90:16:b2:32:9b: 09:1b:69:38:12:69:53:78:47:ab:60:fd:8e:db:f8:52:07:b3: db:d8:3a:85:c0:c8:a3:bc:dd:58:8d:c8:64:50:82:be:d1:16: 46:ae:11:98:96:b0:81:5a:69:c4:89:86:ef:00:98:35:27:0c: b5:8e:74:60:00:3a:58:69:85:26:0b:5b:49:93:e3:9a:43:0e: 31:d3:89:dc:ac:0a:68:f2:5d:0e:f1:a3:f5:f9:28:d4:21:ef: b7:09:4d:38:df:10:70:0c:e9:d2:4a:73:1e:f7:34:3b:1e:83: 24:ae:d5:83:9c:6a:39:ae:34:3e:2e:33:6c:15:ff:53:95:56: 19:c0:0a:70:69:c8:b5:f1:c4:57:fc:37:74:ed:e5:34:b9:02: 95:a3:b3:85:66:00:a1:75:2c:bc:1f:8f:be:cb:8f:04:43:e5: f8:3c:e4:5c:14:54:e7:9f:39:5c:b2:f1:b2:b3:88:75:fe:71: 50:61:7f:56:90:b9:b6:61:97:48:22:c2:5b:d2:c6:4f:6f:0b: cb:d2:8a:53:a9:a4:16:67:51:1c:f6:aa:5c:f5:55:f2:bf:e9: 52:db:7b:f8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xvbmhYzXFjHr89ov3gU4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiZjM5ZTZlYjMxMzFlY2YzY2RkY2QwYzllMzc4YzM1MmRh NDFmYzIwHhcNMjYwMTAxMDQxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNWQ5NmI3MWRlMzRiZWUyY2FlY2UzMWY1MTFiMjhmNmM2NTA5YmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA87OGmufwQ2C5mPsVxAYH+H7/ZHDg XLcwemSYjQDJbbgvYSiGggUzd8X+W+yyaXBNMNEqsu/FJzlaVqOvIDYctbTWPvDk nUrKgriVOwihI5uZko2dX0LSHLS7WvyUUz4kHQaKOPdAs1ge4GuzbLOXRsWOJRTG m2cVfp2Vm9/kDKAIvBq3EewoTIQmvkpNrupR9lvc+YB5IzD0n0v4+zv3TnKnV5xF JI/EI4bAQmL7Wv+FX8fEe5qZyBneHFpN1aPLNWUhUOIInCoWC6zGfxssBXsZ5l3+ eBfnwv+/HxgifIdP6v48j9d5eaaPe9HyYjv0+Ei6GMZbFc/SbUVR4o1CbwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMXZa3HeNL7iyuzjH1EbKPbGUJvHMB8GA1UdIwQY MBaAFHvznm6zEx7PPN3NDJ43jDUtpB/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZV9PZWJyTVRIczg4M2MwTW5qZU1OUzJrSDhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9hMjE0YTUtNDQ0OS00NGFmLTg3ZmYt Yzk2N2M5ZGI1NzUyLzEveGRscmNkNDB2dUxLN09NZlVSc285c1pRbThjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9hMjE0YTUtNDQ0OS00NGFmLTg3ZmYtYzk2N2M5ZGI1NzUy LzEvZV9PZWJyTVRIczg4M2MwTW5qZU1OUzJrSDhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBucKmMA0G CSqGSIb3DQEBCwUAA4IBAQBaPjO7st0aQR93gj+yQ6dfzxHaWS0F+jj6GUIi9VpX kBayMpsJG2k4EmlTeEerYP2O2/hSB7Pb2DqFwMijvN1YjchkUIK+0RZGrhGYlrCB WmnEiYbvAJg1Jwy1jnRgADpYaYUmC1tJk+OaQw4x04ncrApo8l0O8aP1+SjUIe+3 CU043xBwDOnSSnMe9zQ7HoMkrtWDnGo5rjQ+LjNsFf9TlVYZwApwaci18cRX/Dd0 7eU0uQKVo7OFZgChdSy8H4++y48EQ+X4PORcFFTnnzlcsvGys4h1/nFQYX9WkLm2 YZdIIsJb0sZPbwvL0opTqaQWZ1Ec9qpc9VXyv+lS23v4 -----END CERTIFICATE-----Generated at Mon Jan 26 02:23:52 2026 by rpki-client