This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/XKuFvO6I9hwWJCdOCmVqFMo8x6Q.roa File: XKuFvO6I9hwWJCdOCmVqFMo8x6Q.roa (raw, json) Hash identifier: sGdGc7fanOX6cJkpXsKcdCSclwJ+VvvqV9k7K7vMBgk= Subject key identifier: 5C:AB:85:BC:EE:88:F6:1C:16:24:27:4E:0A:65:6A:14:CA:3C:C7:A4 Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21 Certificate serial: 019B8DC8A1427A7DAB62D639BA717E66CC01 Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/XKuFvO6I9hwWJCdOCmVqFMo8x6Q.roa Signing time: Mon 05 Jan 2026 10:51:34 +0000 ROA not before: Mon 05 Jan 2026 10:51:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207350 IP address blocks: 81.12.46.0/24 maxlen: 24 87.107.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8d:c8:a1:42:7a:7d:ab:62:d6:39:ba:71:7e:66:cc:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21 Validity Not Before: Jan 5 10:51:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5cab85bcee88f61c1624274e0a656a14ca3cc7a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4e:8e:fe:7c:00:93:45:7f:b0:a5:a0:fa:13: 4c:68:da:52:44:cc:fd:ab:f4:c4:4f:a0:be:01:2f: dd:24:85:54:c9:1a:61:3d:82:f7:83:6a:ee:4a:73: 8e:b3:2b:d3:f0:91:d6:43:fe:a1:55:b0:9a:84:3a: bb:48:af:3b:0d:a1:72:87:2c:2a:ae:d1:3b:fd:dc: 74:24:37:c1:41:21:00:72:dd:57:e6:57:47:fb:ac: 38:11:45:70:2d:ff:06:a9:8e:43:72:79:cb:17:ec: 09:aa:9b:13:c1:7a:34:2a:c0:27:3c:f1:00:d7:b6: 9a:4c:5f:3e:23:2d:4d:ff:c9:ce:6d:60:ac:90:96: fd:94:97:4e:0c:c3:18:da:99:a5:bc:9f:ef:5e:49: 00:0c:e5:d4:3d:fb:91:8b:ed:08:51:f9:d6:25:3d: 98:46:66:97:8b:eb:62:5f:3e:3a:24:e0:0c:cd:56: 8d:6e:8c:9a:ef:e6:d0:d5:38:7f:19:de:23:1f:c1: 78:a4:dc:f0:b6:83:92:40:84:d6:29:4e:bf:6c:8b: 42:21:20:8a:68:d8:42:62:9c:b4:24:42:65:c2:36: 0d:94:02:75:50:0e:de:b6:94:0b:a3:9f:b0:99:17: 4e:ad:0f:f2:86:1e:28:0f:a5:c0:59:93:b8:a9:8e: ae:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:AB:85:BC:EE:88:F6:1C:16:24:27:4E:0A:65:6A:14:CA:3C:C7:A4 X509v3 Authority Key Identifier: keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/XKuFvO6I9hwWJCdOCmVqFMo8x6Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.12.46.0/24 87.107.92.0/24 Signature Algorithm: sha256WithRSAEncryption 49:c6:b0:3b:a5:39:b7:53:c4:d3:ee:c7:b0:4d:9f:43:96:ba: 3f:de:08:88:65:7e:8d:73:42:b2:1e:29:11:38:76:fd:92:58: 8a:f2:cd:5f:b4:d0:80:32:d0:ab:16:ab:86:83:e1:fa:cf:54: 92:5e:a2:49:91:1e:62:4f:6d:28:74:f4:21:40:2b:97:c2:a7: 39:3a:b9:90:22:b6:20:5f:6a:58:8d:08:8b:8b:8a:5b:1a:b0: 8e:5f:05:ce:2b:4c:58:45:9a:c8:33:fb:71:c8:81:dd:6d:dc: 95:b3:1a:e2:db:78:44:29:9b:de:35:1f:d2:84:71:de:67:7f: 80:2e:8d:f7:0c:1c:69:53:06:ce:15:15:03:ac:54:26:f9:b0: 2a:cb:09:93:ee:b1:6e:98:85:ce:b9:36:36:6a:63:ab:cc:2a: 0e:fc:18:8f:6c:a1:0d:1c:76:63:d5:99:65:92:8c:40:7f:8e: 2f:58:f3:21:cc:1e:94:82:a4:87:a6:29:f9:8d:8c:43:b1:b0: 22:06:8a:bf:b6:4e:9f:5a:f3:49:d5:fb:db:4d:0c:93:b2:e3: 12:9c:2c:30:eb:6d:ae:bf:79:e4:b7:93:28:b0:9c:2b:33:d2: d0:f6:dc:4d:0f:f7:75:f5:f2:c0:a2:21:fd:3b:dd:c5:35:4e: f3:7f:61:ad -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZuNyKFCen2rYtY5unF+ZswBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk ZDVjMjEwHhcNMjYwMTA1MTA1MTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2FiODViY2VlODhmNjFjMTYyNDI3NGUwYTY1NmExNGNhM2NjN2E0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzE6O/nwAk0V/sKWg+hNMaNpSRMz9 q/TET6C+AS/dJIVUyRphPYL3g2ruSnOOsyvT8JHWQ/6hVbCahDq7SK87DaFyhywq rtE7/dx0JDfBQSEAct1X5ldH+6w4EUVwLf8GqY5DcnnLF+wJqpsTwXo0KsAnPPEA 17aaTF8+Iy1N/8nObWCskJb9lJdODMMY2pmlvJ/vXkkADOXUPfuRi+0IUfnWJT2Y RmaXi+tiXz46JOAMzVaNboya7+bQ1Th/Gd4jH8F4pNzwtoOSQITWKU6/bItCISCK aNhCYpy0JEJlwjYNlAJ1UA7etpQLo5+wmRdOrQ/yhh4oD6XAWZO4qY6ufwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFyrhbzuiPYcFiQnTgplahTKPMekMB8GA1UdIwQY MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt NzZiMzNlNGNlODIxLzEvWEt1RnZPNkk5aHdXSkNkT0NtVnFGTW84eDZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUQwuAwQA V2tcMA0GCSqGSIb3DQEBCwUAA4IBAQBJxrA7pTm3U8TT7sewTZ9Dlro/3giIZX6N c0KyHikROHb9kliK8s1ftNCAMtCrFquGg+H6z1SSXqJJkR5iT20odPQhQCuXwqc5 OrmQIrYgX2pYjQiLi4pbGrCOXwXOK0xYRZrIM/txyIHdbdyVsxri23hEKZveNR/S hHHeZ3+ALo33DBxpUwbOFRUDrFQm+bAqywmT7rFumIXOuTY2amOrzCoO/BiPbKEN HHZj1ZllkoxAf44vWPMhzB6UgqSHpin5jYxDsbAiBoq/tk6fWvNJ1fvbTQyTsuMS nCww622uv3nkt5MosJwrM9LQ9txND/d19fLAoiH9O93FNU7zf2Gt -----END CERTIFICATE-----Generated at Sun Jan 25 16:09:53 2026 by rpki-client