This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/rXmLdpESy3JXHba6GMZpxFBce7Y.roa File: rXmLdpESy3JXHba6GMZpxFBce7Y.roa (raw, json) Hash identifier: eJTs9WPxSlrRs5HsS9oqFD3SzVRLHXq/UsVoUjviM0A= Subject key identifier: AD:79:8B:76:91:12:CB:72:57:1D:B6:BA:18:C6:69:C4:50:5C:7B:B6 Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Certificate serial: 019B7BA51ED9B77ACAFEC921BB73BDFECF96 Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/rXmLdpESy3JXHba6GMZpxFBce7Y.roa Signing time: Thu 01 Jan 2026 22:19:37 +0000 ROA not before: Thu 01 Jan 2026 22:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212480 IP address blocks: 92.255.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:1e:d9:b7:7a:ca:fe:c9:21:bb:73:bd:fe:cf:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Validity Not Before: Jan 1 22:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad798b769112cb72571db6ba18c669c4505c7bb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:29:50:1b:d1:78:61:fc:f7:a7:74:9b:82:ad: 60:22:bc:5a:ec:4c:07:c1:98:f9:5e:95:1c:20:45: 00:5d:84:8f:c0:a9:7c:8f:f0:28:f0:02:7b:99:76: 69:ed:58:da:cb:2b:09:b7:0f:c5:d3:4b:f7:13:48: af:50:38:72:57:8a:e3:d8:02:46:26:82:a0:4f:93: 3d:03:36:5c:3d:2c:e6:38:89:88:67:ca:1a:04:cf: 30:0b:f7:85:b0:b5:01:03:8a:18:db:04:23:55:fb: 92:33:87:70:61:ee:04:e4:d5:83:8d:4f:84:92:53: a6:dc:4c:ca:d6:35:e8:cd:f1:7a:1e:69:d0:67:2d: 3d:be:60:64:e7:fc:c6:e0:f6:e6:45:f6:b2:0c:59: c5:d2:87:95:df:1e:27:17:66:b7:eb:3d:d8:6d:fa: 7f:8a:a9:d9:c7:44:61:61:72:88:4b:79:00:60:d0: 62:69:6d:3d:2a:0b:c8:70:4f:fc:fc:3b:48:8e:cc: 6e:dc:ce:cb:3a:e0:62:97:e2:17:76:84:58:e0:33: 4e:4b:ed:35:ee:19:3b:ab:6a:e6:10:68:a2:28:b2: 33:a1:16:39:d3:ec:52:cb:c4:f1:62:e2:c9:10:78: be:29:86:7b:fa:cb:5c:fd:18:d8:b5:ff:b2:fc:7b: 8c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:79:8B:76:91:12:CB:72:57:1D:B6:BA:18:C6:69:C4:50:5C:7B:B6 X509v3 Authority Key Identifier: keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/rXmLdpESy3JXHba6GMZpxFBce7Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.255.49.0/24 Signature Algorithm: sha256WithRSAEncryption 70:63:30:0a:45:c3:dc:12:ba:45:29:3d:13:d6:40:aa:71:fd: 94:02:a8:fd:27:b9:b3:39:f0:e1:fd:3a:67:74:56:ff:fa:5d: 1c:9d:10:f8:82:32:bf:86:6f:fd:db:02:38:19:82:47:89:41: a3:7a:7a:21:fe:1d:46:d3:43:01:42:b9:45:fe:46:ea:37:fe: 87:54:75:e9:e1:67:64:da:e7:85:d5:8e:ee:89:46:dd:c6:7b: 3d:65:21:47:53:10:76:1d:d9:49:d3:de:b8:81:a2:b5:42:37: ed:01:97:a2:12:a2:96:3a:fa:ba:2d:1c:09:30:6a:79:46:02: e7:d6:83:12:4c:40:f0:27:d1:90:59:dd:4a:60:cb:ed:2c:bb: e8:77:7d:69:2d:e1:46:93:bb:32:f8:e3:4b:f2:5d:16:8e:69: 1d:97:3d:34:49:db:28:8f:b6:b5:c6:db:60:a3:06:99:68:71: d2:19:8a:9a:50:2f:66:a1:ae:9f:6a:0d:61:05:24:e3:c6:46: 0c:05:d4:45:1b:22:dd:eb:be:ed:a4:64:aa:4d:23:89:4a:01: 80:b9:3e:20:2f:b1:4e:44:15:95:f6:f7:cd:81:5f:32:e5:45: 3b:fe:22:36:fe:2b:b8:d2:c4:c5:93:bb:a3:52:f5:3d:73:c1: b3:38:e3:c6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pR7Zt3rK/skhu3O9/s+WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkODMxM2U0MWU2NDZhMDljZDAxZTJlNmY0NzM5ZDNiZDIz NmM0ZmYwHhcNMjYwMTAxMjIxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDc5OGI3NjkxMTJjYjcyNTcxZGI2YmExOGM2NjljNDUwNWM3YmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ClQG9F4Yfz3p3Sbgq1gIrxa7EwH wZj5XpUcIEUAXYSPwKl8j/Ao8AJ7mXZp7VjayysJtw/F00v3E0ivUDhyV4rj2AJG JoKgT5M9AzZcPSzmOImIZ8oaBM8wC/eFsLUBA4oY2wQjVfuSM4dwYe4E5NWDjU+E klOm3EzK1jXozfF6HmnQZy09vmBk5/zG4PbmRfayDFnF0oeV3x4nF2a36z3Ybfp/ iqnZx0RhYXKIS3kAYNBiaW09KgvIcE/8/DtIjsxu3M7LOuBil+IXdoRY4DNOS+01 7hk7q2rmEGiiKLIzoRY50+xSy8TxYuLJEHi+KYZ7+stc/RjYtf+y/HuMTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK15i3aREstyVx22uhjGacRQXHu2MB8GA1UdIwQY MBaAFM2DE+QeZGoJzQHi5vRznTvSNsT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQt ODg2MmI1MTczMTdjLzEvclhtTGRwRVN5M0pYSGJhNkdNWnB4RkJjZTdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQtODg2MmI1MTczMTdj LzEvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXP8xMA0G CSqGSIb3DQEBCwUAA4IBAQBwYzAKRcPcErpFKT0T1kCqcf2UAqj9J7mzOfDh/Tpn dFb/+l0cnRD4gjK/hm/92wI4GYJHiUGjenoh/h1G00MBQrlF/kbqN/6HVHXp4Wdk 2ueF1Y7uiUbdxns9ZSFHUxB2HdlJ0964gaK1QjftAZeiEqKWOvq6LRwJMGp5RgLn 1oMSTEDwJ9GQWd1KYMvtLLvod31pLeFGk7sy+ONL8l0Wjmkdlz00Sdsoj7a1xttg owaZaHHSGYqaUC9moa6fag1hBSTjxkYMBdRFGyLd677tpGSqTSOJSgGAuT4gL7FO RBWV9vfNgV8y5UU7/iI2/iu40sTFk7ujUvU9c8GzOOPG -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:17 2026 by rpki-client