This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/XLK6rvPCrTiHJxhhke2BXfXKHZ4.roa File: XLK6rvPCrTiHJxhhke2BXfXKHZ4.roa (raw, json) Hash identifier: wVBhMIUqJK/ATDLTX876CNHfRKj1peU1SKo+/YZpCjE= Subject key identifier: 5C:B2:BA:AE:F3:C2:AD:38:87:27:18:61:91:ED:81:5D:F5:CA:1D:9E Certificate issuer: /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205 Certificate serial: 019B7835515FCB4BBB2C3806D686F1CB79AA Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/XLK6rvPCrTiHJxhhke2BXfXKHZ4.roa Signing time: Thu 01 Jan 2026 06:18:38 +0000 ROA not before: Thu 01 Jan 2026 06:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1136 IP address blocks: 37.251.0.0/17 maxlen: 17 62.131.0.0/16 maxlen: 16 62.251.0.0/17 maxlen: 17 77.160.0.0/13 maxlen: 13 77.168.0.0/14 maxlen: 14 77.172.0.0/16 maxlen: 16 77.173.0.0/16 maxlen: 16 77.174.0.0/16 maxlen: 16 77.175.0.0/16 maxlen: 16 77.175.0.0/17 maxlen: 17 77.175.128.0/17 maxlen: 17 80.60.0.0/15 maxlen: 15 81.204.0.0/14 maxlen: 14 82.136.192.0/18 maxlen: 18 82.168.0.0/15 maxlen: 15 82.170.0.0/16 maxlen: 16 84.39.0.0/19 maxlen: 19 84.80.0.0/16 maxlen: 16 84.82.0.0/15 maxlen: 15 84.84.0.0/14 maxlen: 14 85.113.224.0/19 maxlen: 19 86.80.0.0/13 maxlen: 13 86.88.0.0/15 maxlen: 15 86.90.0.0/16 maxlen: 16 86.92.0.0/14 maxlen: 14 88.159.0.0/16 maxlen: 16 188.142.0.0/17 maxlen: 17 195.240.0.0/16 maxlen: 16 195.240.0.0/17 maxlen: 17 195.240.128.0/18 maxlen: 18 195.240.192.0/18 maxlen: 18 195.241.0.0/16 maxlen: 16 212.123.128.0/18 maxlen: 18 212.182.128.0/18 maxlen: 18 212.238.0.0/16 maxlen: 16 213.10.0.0/16 maxlen: 16 213.84.0.0/16 maxlen: 16 213.148.224.0/19 maxlen: 19 213.197.0.0/18 maxlen: 18 2a02:a400::/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:51:5f:cb:4b:bb:2c:38:06:d6:86:f1:cb:79:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205 Validity Not Before: Jan 1 06:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5cb2baaef3c2ad388727186191ed815df5ca1d9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ae:5b:f4:0e:c0:80:dc:30:20:a7:c7:c7:ce: 91:46:a1:1e:6d:a3:4b:35:5a:46:6e:95:5b:c0:c9: 24:15:e1:db:db:bc:25:73:67:a1:01:6e:4b:9f:8e: af:d8:e1:05:f2:d8:25:22:ad:09:1c:bb:90:fc:aa: 68:4b:b5:3b:89:f7:ae:f5:33:a2:41:c7:44:80:64: 13:34:94:8e:bd:d3:f0:6d:71:2b:4b:22:3c:da:a1: c1:d9:2e:9d:1f:de:25:c7:76:b6:7b:7f:36:2d:55: 0b:4f:31:ab:86:1b:ed:c5:21:a7:4a:f5:6b:bc:b5: 11:77:10:3d:02:bd:ff:c5:67:60:8d:20:bf:76:d1: 46:f4:a7:d7:a0:b3:7e:da:bd:db:e5:94:11:c6:08: de:11:b9:c3:c5:68:2d:5f:08:2d:1d:05:c1:eb:73: fc:8e:56:86:db:58:e4:74:ac:76:5c:fa:07:bf:77: bc:35:d9:9e:84:83:60:fe:80:ec:ac:ce:06:b6:b7: 04:38:ba:6e:c8:d3:fd:ca:63:40:97:ad:59:64:8f: c8:14:b6:d3:a9:a2:7a:0e:ed:b2:87:05:15:06:9a: 27:61:65:0c:4a:4b:55:f0:a9:05:6b:f0:80:03:95: d1:1b:64:70:a0:da:03:01:df:e1:28:f4:c9:a8:d1: 3b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B2:BA:AE:F3:C2:AD:38:87:27:18:61:91:ED:81:5D:F5:CA:1D:9E X509v3 Authority Key Identifier: keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/XLK6rvPCrTiHJxhhke2BXfXKHZ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.251.0.0/17 62.131.0.0/16 62.251.0.0/17 77.160.0.0/12 80.60.0.0/15 81.204.0.0/14 82.136.192.0/18 82.168.0.0-82.170.255.255 84.39.0.0/19 84.80.0.0/16 84.82.0.0-84.87.255.255 85.113.224.0/19 86.80.0.0-86.90.255.255 86.92.0.0/14 88.159.0.0/16 188.142.0.0/17 195.240.0.0/15 212.123.128.0/18 212.182.128.0/18 212.238.0.0/16 213.10.0.0/16 213.84.0.0/16 213.148.224.0/19 213.197.0.0/18 IPv6: 2a02:a400::/25 Signature Algorithm: sha256WithRSAEncryption a8:fa:78:5b:14:e7:74:c5:1a:d3:d5:af:48:fe:2f:e9:67:6e: 32:f7:ae:6e:d6:c2:58:9d:cd:4f:df:91:ab:d6:1f:83:46:ed: 18:d9:d9:30:39:a8:44:44:3e:33:f2:16:29:f4:29:db:21:81: f2:b5:2d:fd:ba:17:59:d0:d2:2b:09:95:be:f2:69:d9:85:14: 28:3a:14:56:31:a7:71:32:18:56:08:c2:4a:07:33:ab:de:d3: ac:0c:0a:4e:52:94:8e:72:d2:e7:69:2a:5d:c0:b3:e8:7a:4e: f1:2d:72:41:79:1b:a1:af:6a:fb:87:a8:e3:86:8b:fd:99:f5: 08:7e:c8:67:e8:71:cf:e2:4e:58:74:73:4c:37:58:89:89:08: 41:cf:df:bf:98:58:ab:de:66:26:3d:0b:3d:db:33:7e:47:dc: f7:59:ac:6a:27:87:75:c0:7e:14:88:7e:a5:f7:bc:da:e0:41: c6:38:d6:86:2b:ad:fa:e4:0e:54:83:e5:4c:17:65:69:bd:e5: 68:02:92:f3:70:ad:08:64:51:8e:32:ab:db:d2:08:ab:18:70: 4c:48:00:53:c9:76:fe:05:4d:92:dc:7c:61:f2:20:e0:f3:59: 54:6b:a8:35:02:b5:9a:c0:0c:7b:a5:a0:2f:cc:1e:05:21:79: e2:73:20:3f -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgISAZt4NVFfy0u7LDgG1obxy3mqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxZWVkNDA5MTM4M2Q5ZWQ0MDU2ZDlmNGVmZjdkMjYyMmRk Y2UyMDUwHhcNMjYwMTAxMDYxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2IyYmFhZWYzYzJhZDM4ODcyNzE4NjE5MWVkODE1ZGY1Y2ExZDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2a5b9A7AgNwwIKfHx86RRqEebaNL NVpGbpVbwMkkFeHb27wlc2ehAW5Ln46v2OEF8tglIq0JHLuQ/KpoS7U7ifeu9TOi QcdEgGQTNJSOvdPwbXErSyI82qHB2S6dH94lx3a2e382LVULTzGrhhvtxSGnSvVr vLURdxA9Ar3/xWdgjSC/dtFG9KfXoLN+2r3b5ZQRxgjeEbnDxWgtXwgtHQXB63P8 jlaG21jkdKx2XPoHv3e8NdmehINg/oDsrM4GtrcEOLpuyNP9ymNAl61ZZI/IFLbT qaJ6Du2yhwUVBponYWUMSktV8KkFa/CAA5XRG2RwoNoDAd/hKPTJqNE73wIDAQAB o4ICrjCCAqowHQYDVR0OBBYEFFyyuq7zwq04hycYYZHtgV31yh2eMB8GA1UdIwQY MBaAFIHu1AkTg9ntQFbZ9O/30mIt3OIFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS80YTljYzQtMmI5YS00ZWYyLWEzM2Et ODcyYjM3MTBjMmExLzEvWExLNnJ2UENyVGlISnhoaGtlMkJYZlhLSFo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS80YTljYzQtMmI5YS00ZWYyLWEzM2EtODcyYjM3MTBjMmEx LzEvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHDBggrBgEFBQcBBwEB/wSBszCBsDCBngQCAAEwgZcDBAcl +wADAwA+gwMEBz77AAMDBE2gAwMBUDwDAwJRzAMEBlKIwDAKAwMDUqgDAwBSqgME BVQnAAMDAFRQMAoDAwFUUgMDA1RQAwQFVXHgMAoDAwRWUAMDAFZaAwMCVlwDAwBY nwMEB7yOAAMDAcPwAwQG1HuAAwQG1LaAAwMA1O4DAwDVCgMDANVUAwQF1ZTgAwQG 1cUAMA0EAgACMAcDBQcqAqQAMA0GCSqGSIb3DQEBCwUAA4IBAQCo+nhbFOd0xRrT 1a9I/i/pZ24y965u1sJYnc1P35Gr1h+DRu0Y2dkwOahERD4z8hYp9CnbIYHytS39 uhdZ0NIrCZW+8mnZhRQoOhRWMadxMhhWCMJKBzOr3tOsDApOUpSOctLnaSpdwLPo ek7xLXJBeRuhr2r7h6jjhov9mfUIfshn6HHP4k5YdHNMN1iJiQhBz9+/mFir3mYm PQs92zN+R9z3WaxqJ4d1wH4UiH6l97za4EHGONaGK6365A5Ug+VMF2VpveVoApLz cK0IZFGOMqvb0girGHBMSABTyXb+BU2S3Hxh8iDg81lUa6g1ArWawAx7paAvzB4F IXnicyA/ -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:21 2026 by rpki-client