This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/Xw8MVRQJpk47EKjQkBC2UTNVzic.roa File: Xw8MVRQJpk47EKjQkBC2UTNVzic.roa (raw, json) Hash identifier: 8j4isUf9xLJyeuJnVvuAvOsNA+t8iB00CcKI1JNi3Vg= Subject key identifier: 5F:0F:0C:55:14:09:A6:4E:3B:10:A8:D0:90:10:B6:51:33:55:CE:27 Certificate issuer: /CN=0b84ea549f88211058b34bfcab0640c3030393c3 Certificate serial: 019B7DCAC6EE0F21F1454F5D58B8C1CB469B Authority key identifier: 0B:84:EA:54:9F:88:21:10:58:B3:4B:FC:AB:06:40:C3:03:03:93:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/Xw8MVRQJpk47EKjQkBC2UTNVzic.roa Signing time: Fri 02 Jan 2026 08:19:59 +0000 ROA not before: Fri 02 Jan 2026 08:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203408 IP address blocks: 185.237.160.0/24 maxlen: 24 185.237.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.crl rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:c6:ee:0f:21:f1:45:4f:5d:58:b8:c1:cb:46:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b84ea549f88211058b34bfcab0640c3030393c3 Validity Not Before: Jan 2 08:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f0f0c551409a64e3b10a8d09010b6513355ce27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:61:29:b6:2d:49:3e:73:2c:59:12:d4:54:0b: 91:96:bc:4b:0a:b6:df:22:14:31:0f:cc:98:db:02: 0c:ad:63:03:a7:0a:3c:92:0e:05:1e:91:66:bb:2f: 6b:ad:66:98:fb:31:d0:77:07:fb:e7:ce:fe:02:a4: ce:31:7a:c2:08:77:a5:58:89:85:b2:a7:f3:7e:c5: 60:cf:ac:82:79:ab:3d:22:62:08:0f:07:ca:31:a4: 05:34:76:a3:51:b2:ad:fc:7d:64:f2:b0:96:3d:3a: d5:61:f0:9a:e0:71:1b:8e:c9:4b:32:a7:5c:6e:f0: 93:6e:65:b3:34:3a:88:b0:d9:d6:be:e6:ff:0d:2c: de:4d:56:ca:14:4a:fd:18:a8:1e:ef:f8:85:df:7e: ac:2e:df:60:b0:3b:1a:0c:61:d0:35:2c:24:00:30: fc:db:bc:c9:b4:9c:91:dd:eb:eb:ac:65:48:ad:78: 48:cb:13:62:ae:13:f0:21:34:c4:e5:f6:99:bf:3b: 53:ab:50:72:ec:a1:d5:92:db:01:89:b0:da:bb:cc: 2c:0f:16:9c:c6:e7:80:32:9b:55:8a:35:b5:52:fa: ba:11:d4:d9:84:dd:d9:49:8d:0b:08:cd:58:c0:2e: 54:cb:a2:c0:9f:0e:c3:73:3e:d8:81:8c:a5:90:70: c4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:0F:0C:55:14:09:A6:4E:3B:10:A8:D0:90:10:B6:51:33:55:CE:27 X509v3 Authority Key Identifier: keyid:0B:84:EA:54:9F:88:21:10:58:B3:4B:FC:AB:06:40:C3:03:03:93:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/Xw8MVRQJpk47EKjQkBC2UTNVzic.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.237.160.0/23 Signature Algorithm: sha256WithRSAEncryption 93:15:ce:45:37:62:91:b6:00:1c:fb:db:ac:b6:64:8a:33:13: d8:18:07:80:ae:1f:8a:40:c6:d3:b8:9e:ec:3e:16:03:b1:4c: 80:42:d3:5a:0a:30:bb:12:0d:77:fd:5a:dc:79:a0:fb:24:61: d1:4c:ec:11:a0:45:bc:73:b3:2d:60:ba:ac:f1:de:8c:a9:12: 03:87:b7:27:f5:45:11:34:97:22:89:e3:6e:47:74:51:48:55: 17:67:cb:84:22:2b:e7:88:bc:ee:c3:b8:62:7b:61:ac:3a:33: 08:2b:09:b9:c0:4b:c9:fd:01:d0:4f:02:d6:6a:98:b1:60:70: e2:5b:b3:74:af:de:73:36:f5:4f:2a:04:37:0b:0d:03:ea:18: 58:c0:3c:84:70:71:e8:0d:9c:00:8e:a1:88:a1:52:32:0b:a9: 70:dd:7a:1d:65:87:38:4b:59:5c:50:9a:a8:2e:c4:00:10:5d: 3c:45:4e:2b:21:b6:55:d9:d7:f8:1d:98:a4:88:07:6c:56:cd: 18:a7:52:2e:c3:6d:5e:e7:91:54:a0:fd:ea:21:25:b6:6a:1c: a3:d4:98:d5:22:62:da:42:0c:88:07:78:82:fe:93:16:73:e2: 25:09:17:d4:32:db:82:96:09:fd:b4:c3:9c:73:c7:71:c5:42: a0:cb:43:9e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ysbuDyHxRU9dWLjBy0abMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiODRlYTU0OWY4ODIxMTA1OGIzNGJmY2FiMDY0MGMzMDMw MzkzYzMwHhcNMjYwMTAyMDgxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjBmMGM1NTE0MDlhNjRlM2IxMGE4ZDA5MDEwYjY1MTMzNTVjZTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWEpti1JPnMsWRLUVAuRlrxLCrbf IhQxD8yY2wIMrWMDpwo8kg4FHpFmuy9rrWaY+zHQdwf7587+AqTOMXrCCHelWImF sqfzfsVgz6yCeas9ImIIDwfKMaQFNHajUbKt/H1k8rCWPTrVYfCa4HEbjslLMqdc bvCTbmWzNDqIsNnWvub/DSzeTVbKFEr9GKge7/iF336sLt9gsDsaDGHQNSwkADD8 27zJtJyR3evrrGVIrXhIyxNirhPwITTE5faZvztTq1By7KHVktsBibDau8wsDxac xueAMptVijW1Uvq6EdTZhN3ZSY0LCM1YwC5Uy6LAnw7Dcz7YgYylkHDEJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF8PDFUUCaZOOxCo0JAQtlEzVc4nMB8GA1UdIwQY MBaAFAuE6lSfiCEQWLNL/KsGQMMDA5PDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzRUcVZKLUlJUkJZczB2OHF3WkF3d01EazhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8yZmMxNjctYjM1Ny00Mzk0LWI0ZTgt YzgyNWJlMjgxM2JjLzEvWHc4TVZSUUpwazQ3RUtqUWtCQzJVVE5WemljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8yZmMxNjctYjM1Ny00Mzk0LWI0ZTgtYzgyNWJlMjgxM2Jj LzEvQzRUcVZKLUlJUkJZczB2OHF3WkF3d01EazhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBue2gMA0G CSqGSIb3DQEBCwUAA4IBAQCTFc5FN2KRtgAc+9ustmSKMxPYGAeArh+KQMbTuJ7s PhYDsUyAQtNaCjC7Eg13/VrceaD7JGHRTOwRoEW8c7MtYLqs8d6MqRIDh7cn9UUR NJciieNuR3RRSFUXZ8uEIivniLzuw7hie2GsOjMIKwm5wEvJ/QHQTwLWapixYHDi W7N0r95zNvVPKgQ3Cw0D6hhYwDyEcHHoDZwAjqGIoVIyC6lw3XodZYc4S1lcUJqo LsQAEF08RU4rIbZV2df4HZikiAdsVs0Yp1Iuw21e55FUoP3qISW2ahyj1JjVImLa QgyIB3iC/pMWc+IlCRfUMtuClgn9tMOcc8dxxUKgy0Oe -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:57 2026 by rpki-client