This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/Xw0KeUzsHNwKqkzBSvg_nbmytNk.roa File: Xw0KeUzsHNwKqkzBSvg_nbmytNk.roa (raw, json) Hash identifier: 2vgG0V4UANGE5cbI7yDbsancIKWv9i8SZWxpR7WgEVs= Subject key identifier: 5F:0D:0A:79:4C:EC:1C:DC:0A:AA:4C:C1:4A:F8:3F:9D:B9:B2:B4:D9 Certificate issuer: /CN=57b80e60b5adf45aeba5c0c8abccc63997a0f1db Certificate serial: 019B77C75A8DDD9E8AD87EE2D56CD7CC2565 Authority key identifier: 57:B8:0E:60:B5:AD:F4:5A:EB:A5:C0:C8:AB:CC:C6:39:97:A0:F1:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7gOYLWt9FrrpcDIq8zGOZeg8ds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/Xw0KeUzsHNwKqkzBSvg_nbmytNk.roa Signing time: Thu 01 Jan 2026 04:18:32 +0000 ROA not before: Thu 01 Jan 2026 04:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34306 IP address blocks: 78.108.224.0/20 maxlen: 20 80.69.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/V7gOYLWt9FrrpcDIq8zGOZeg8ds.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/V7gOYLWt9FrrpcDIq8zGOZeg8ds.mft rsync://rpki.ripe.net/repository/DEFAULT/V7gOYLWt9FrrpcDIq8zGOZeg8ds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:5a:8d:dd:9e:8a:d8:7e:e2:d5:6c:d7:cc:25:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57b80e60b5adf45aeba5c0c8abccc63997a0f1db Validity Not Before: Jan 1 04:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f0d0a794cec1cdc0aaa4cc14af83f9db9b2b4d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:40:9f:6e:2e:00:d6:a0:c2:eb:77:0c:20:9b: 98:66:a4:01:eb:f4:81:95:17:30:0f:ff:50:f5:eb: 68:fc:31:da:b3:7c:20:ce:b6:d7:af:3e:30:1b:3f: d2:ca:29:c5:5f:f6:2b:93:e5:c8:b7:89:cc:b1:21: fd:a6:70:b7:c9:e9:87:1d:12:2f:0c:f2:ad:f1:2d: 24:d4:a3:01:26:c2:05:fb:97:c4:e7:49:d7:0a:9e: 6c:04:32:38:14:a3:21:71:df:29:e7:7c:e0:28:91: f8:f9:66:9b:54:43:ed:10:38:c0:5c:9e:89:f7:e1: 44:e8:4d:54:ed:06:89:6d:2b:34:7f:fb:e7:ec:02: 06:4c:a0:13:1e:e7:04:0c:0c:fd:07:e1:6a:c5:61: d5:bd:0e:f8:bb:e0:da:69:f8:ea:c2:32:95:5a:9f: 81:4d:c5:68:4f:9b:7b:61:73:a3:9c:42:15:14:ec: 6c:6a:bf:87:af:a5:fe:96:d6:6b:dd:bf:a2:05:f7: 46:ce:5c:dc:1b:7f:c4:5c:e2:2a:3e:d6:6a:05:9d: 08:fc:0d:8b:b0:d9:5d:50:d0:d7:84:8d:90:11:d6: 60:d5:f6:63:a7:eb:f0:58:ec:c7:ba:80:34:45:70: b9:56:3b:84:73:1d:8c:7d:6e:b1:74:7e:f8:3f:a0: 9d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:0D:0A:79:4C:EC:1C:DC:0A:AA:4C:C1:4A:F8:3F:9D:B9:B2:B4:D9 X509v3 Authority Key Identifier: keyid:57:B8:0E:60:B5:AD:F4:5A:EB:A5:C0:C8:AB:CC:C6:39:97:A0:F1:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7gOYLWt9FrrpcDIq8zGOZeg8ds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/Xw0KeUzsHNwKqkzBSvg_nbmytNk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/V7gOYLWt9FrrpcDIq8zGOZeg8ds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.108.224.0/20 80.69.208.0/20 Signature Algorithm: sha256WithRSAEncryption 89:8c:68:7a:6e:0d:a5:62:6d:c5:43:aa:4d:46:06:ea:bc:2a: 45:9d:7e:0b:04:fd:46:7e:b5:9d:10:a3:37:fd:1b:41:42:64: 09:0f:d9:2e:7a:a8:d5:e7:89:0c:46:14:06:65:a3:27:23:a4: eb:c4:e8:11:38:81:3e:3d:29:24:36:28:96:76:34:fa:64:3b: b2:81:16:be:0c:18:2f:8f:ca:06:86:df:73:e3:49:41:3f:77: a1:f1:da:c6:4a:a4:e6:83:cf:5c:40:52:92:aa:65:f4:15:56: dc:e0:a7:7b:ce:ae:6a:25:5a:7f:8c:81:6e:00:68:e8:3d:29: 41:e4:0e:a7:7a:1f:88:08:14:15:3a:ee:6d:1b:f4:9c:e2:2a: 0a:d1:51:f8:79:14:51:86:98:fd:51:55:17:7f:43:0a:a5:8d: da:ce:4a:e6:b0:8f:70:39:6b:38:83:d8:8e:c6:04:d7:3b:43: 39:22:95:7c:05:6e:ef:ac:90:b5:58:5c:64:ec:cd:a7:35:16: 65:87:a6:54:a9:07:fb:5a:2f:dd:ad:3c:7a:55:3b:cc:31:ff: 4a:ba:1f:57:06:93:5e:d8:d7:46:99:89:d8:01:27:df:ae:c8: ff:67:14:47:9b:e3:23:09:46:4b:cf:47:a5:bd:90:93:1e:1d: 32:e7:62:3b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3x1qN3Z6K2H7i1WzXzCVlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YjgwZTYwYjVhZGY0NWFlYmE1YzBjOGFiY2NjNjM5OTdh MGYxZGIwHhcNMjYwMTAxMDQxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjBkMGE3OTRjZWMxY2RjMGFhYTRjYzE0YWY4M2Y5ZGI5YjJiNGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkCfbi4A1qDC63cMIJuYZqQB6/SB lRcwD/9Q9eto/DHas3wgzrbXrz4wGz/SyinFX/Yrk+XIt4nMsSH9pnC3yemHHRIv DPKt8S0k1KMBJsIF+5fE50nXCp5sBDI4FKMhcd8p53zgKJH4+WabVEPtEDjAXJ6J 9+FE6E1U7QaJbSs0f/vn7AIGTKATHucEDAz9B+FqxWHVvQ74u+DaafjqwjKVWp+B TcVoT5t7YXOjnEIVFOxsar+Hr6X+ltZr3b+iBfdGzlzcG3/EXOIqPtZqBZ0I/A2L sNldUNDXhI2QEdZg1fZjp+vwWOzHuoA0RXC5VjuEcx2MfW6xdH74P6Cd7wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFF8NCnlM7BzcCqpMwUr4P525srTZMB8GA1UdIwQY MBaAFFe4DmC1rfRa66XAyKvMxjmXoPHbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjdnT1lMV3Q5RnJycGNESXE4ekdPWmVnOGRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi83OWRkOWMtY2U2NC00YjI1LThmMjMt ZTZlOGFhZTM0ODI2LzEvWHcwS2VVenNITndLcWt6QlN2Z19uYm15dE5rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi83OWRkOWMtY2U2NC00YjI1LThmMjMtZTZlOGFhZTM0ODI2 LzEvVjdnT1lMV3Q5RnJycGNESXE4ekdPWmVnOGRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQETmzgAwQE UEXQMA0GCSqGSIb3DQEBCwUAA4IBAQCJjGh6bg2lYm3FQ6pNRgbqvCpFnX4LBP1G frWdEKM3/RtBQmQJD9kueqjV54kMRhQGZaMnI6TrxOgROIE+PSkkNiiWdjT6ZDuy gRa+DBgvj8oGht9z40lBP3eh8drGSqTmg89cQFKSqmX0FVbc4Kd7zq5qJVp/jIFu AGjoPSlB5A6neh+ICBQVOu5tG/Sc4ioK0VH4eRRRhpj9UVUXf0MKpY3azkrmsI9w OWs4g9iOxgTXO0M5IpV8BW7vrJC1WFxk7M2nNRZlh6ZUqQf7Wi/drTx6VTvMMf9K uh9XBpNe2NdGmYnYASffrsj/ZxRHm+MjCUZLz0elvZCTHh0y52I7 -----END CERTIFICATE-----Generated at Mon Jan 26 03:07:31 2026 by rpki-client