This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/X2Acde_AXJbiIzf4WSQxKTMikWM.roa File: X2Acde_AXJbiIzf4WSQxKTMikWM.roa (raw, json) Hash identifier: BQtrWQacm7ByC/7TCno2qFJsSN/6VxyfhO1qrX07bW4= Subject key identifier: 5F:60:1C:75:EF:C0:5C:96:E2:23:37:F8:59:24:31:29:33:22:91:63 Certificate issuer: /CN=a748fbe1d7d3a6aa474de43fa885ce2d091c529b Certificate serial: 019B78346499953C2F4239589FF5C114D0F0 Authority key identifier: A7:48:FB:E1:D7:D3:A6:AA:47:4D:E4:3F:A8:85:CE:2D:09:1C:52:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0j74dfTpqpHTeQ_qIXOLQkcUps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/X2Acde_AXJbiIzf4WSQxKTMikWM.roa Signing time: Thu 01 Jan 2026 06:17:38 +0000 ROA not before: Thu 01 Jan 2026 06:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203206 IP address blocks: 185.204.101.0/24 maxlen: 24 2a10:8400::/29 maxlen: 32 2a10:8400::/32 maxlen: 32 2a10:8401::/32 maxlen: 32 2a10:8402::/32 maxlen: 32 2a10:8403::/32 maxlen: 32 2a10:8404::/32 maxlen: 32 2a10:8405::/32 maxlen: 32 2a10:8406::/32 maxlen: 32 2a10:8407::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft rsync://rpki.ripe.net/repository/DEFAULT/p0j74dfTpqpHTeQ_qIXOLQkcUps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:64:99:95:3c:2f:42:39:58:9f:f5:c1:14:d0:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a748fbe1d7d3a6aa474de43fa885ce2d091c529b Validity Not Before: Jan 1 06:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f601c75efc05c96e22337f85924312933229163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5c:f3:7a:cd:cc:a8:31:a4:47:80:1b:a0:09: d5:f8:7e:b3:a8:1e:14:87:53:7c:e7:47:2a:d8:e2: 56:4e:f7:36:34:5b:11:a8:a6:d7:2f:33:fa:55:be: 06:07:cf:4a:6c:65:02:83:e5:33:6b:b1:11:3b:16: f8:3b:9b:2a:cb:7a:95:43:00:c2:e3:e5:e1:91:b8: 6c:fb:46:5d:49:29:5d:3f:f5:70:9a:b7:1d:a1:48: 9f:2a:4c:24:5a:ee:1a:c0:8c:1f:18:ca:05:38:ef: 28:4e:62:4c:31:eb:ef:18:a3:ce:39:cf:fd:98:ce: 85:c1:9d:ad:9e:20:ef:9c:77:fc:4c:fa:e7:d1:59: 10:c9:2a:ab:b1:a9:99:91:49:11:16:bc:ba:b1:f1: 02:54:12:49:64:f0:fb:de:96:e7:cd:71:ea:0c:e5: 6f:68:31:fe:4e:80:d6:9d:12:a0:26:c9:ea:cc:d7: 03:17:5b:3d:d6:ea:b5:28:c1:84:f4:c8:fa:05:fd: 3e:6f:96:be:97:aa:d9:a5:8c:be:ad:2b:b1:01:18: 0a:30:04:36:ec:9f:1a:a6:68:4a:5b:66:7c:9f:5a: b1:47:d4:c4:01:b5:af:d4:fb:e0:b7:21:75:aa:2f: 3f:53:30:34:3f:ab:f8:46:11:90:22:d2:34:dc:93: 42:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:60:1C:75:EF:C0:5C:96:E2:23:37:F8:59:24:31:29:33:22:91:63 X509v3 Authority Key Identifier: keyid:A7:48:FB:E1:D7:D3:A6:AA:47:4D:E4:3F:A8:85:CE:2D:09:1C:52:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0j74dfTpqpHTeQ_qIXOLQkcUps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/X2Acde_AXJbiIzf4WSQxKTMikWM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.204.101.0/24 IPv6: 2a10:8400::/29 Signature Algorithm: sha256WithRSAEncryption 98:48:23:04:e7:6f:50:0c:37:28:95:3a:25:71:ed:cc:99:2f: 62:3f:b2:1d:1f:4d:c2:f8:cb:e1:51:3c:93:26:83:18:83:f9: 89:ff:91:8f:30:3e:d5:86:df:1e:42:f5:ce:2e:39:68:80:1b: 11:b6:9e:80:14:6e:5c:c8:39:b3:61:98:d3:f9:ac:48:f8:4a: 7e:74:a3:c3:63:19:6b:50:11:99:5b:af:29:b2:ab:83:a6:80: b6:d4:5e:6c:ef:9d:1f:dd:69:50:fe:c9:26:32:85:38:8d:d2: 1b:ac:72:e2:8f:aa:07:e6:d6:f7:f9:9f:95:de:3b:22:06:c3: 00:cb:fa:ed:48:2e:17:02:63:df:bc:3b:d0:b3:51:8a:c6:8d: 9a:6e:64:ce:73:fc:84:f0:65:f3:64:0c:a0:e5:00:5c:f1:33: 9c:9f:ed:bc:89:d0:ef:a9:4a:34:53:11:63:8c:76:43:5a:5a: c7:78:0d:76:03:3b:80:24:87:12:49:cf:91:73:e4:f5:a3:c5: 50:da:1d:24:78:54:55:2d:d3:58:d5:b9:90:fb:9a:1c:e8:a2: bd:02:fd:c8:fa:2a:6c:a5:26:cd:26:bd:5f:44:f3:6e:27:0b: 87:6c:62:82:a2:8b:ca:5b:67:4d:f3:22:78:0e:4e:da:14:77: 10:38:bf:a6 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NGSZlTwvQjlYn/XBFNDwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NDhmYmUxZDdkM2E2YWE0NzRkZTQzZmE4ODVjZTJkMDkx YzUyOWIwHhcNMjYwMTAxMDYxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjYwMWM3NWVmYzA1Yzk2ZTIyMzM3Zjg1OTI0MzEyOTMzMjI5MTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlzzes3MqDGkR4AboAnV+H6zqB4U h1N850cq2OJWTvc2NFsRqKbXLzP6Vb4GB89KbGUCg+Uza7EROxb4O5sqy3qVQwDC 4+Xhkbhs+0ZdSSldP/VwmrcdoUifKkwkWu4awIwfGMoFOO8oTmJMMevvGKPOOc/9 mM6FwZ2tniDvnHf8TPrn0VkQySqrsamZkUkRFry6sfECVBJJZPD73pbnzXHqDOVv aDH+ToDWnRKgJsnqzNcDF1s91uq1KMGE9Mj6Bf0+b5a+l6rZpYy+rSuxARgKMAQ2 7J8apmhKW2Z8n1qxR9TEAbWv1PvgtyF1qi8/UzA0P6v4RhGQItI03JNCDQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFF9gHHXvwFyW4iM3+FkkMSkzIpFjMB8GA1UdIwQY MBaAFKdI++HX06aqR03kP6iFzi0JHFKbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDBqNzRkZlRwcXBIVGVRX3FJWE9MUWtjVXBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9hNzIzZDgtZDhjYy00ZTYwLTg1YWIt NmM5YjVjOWJmYTc1LzEvWDJBY2RlX0FYSmJpSXpmNFdTUXhLVE1pa1dNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9hNzIzZDgtZDhjYy00ZTYwLTg1YWItNmM5YjVjOWJmYTc1 LzEvcDBqNzRkZlRwcXBIVGVRX3FJWE9MUWtjVXBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAucxlMA0E AgACMAcDBQMqEIQAMA0GCSqGSIb3DQEBCwUAA4IBAQCYSCME529QDDcolTolce3M mS9iP7IdH03C+MvhUTyTJoMYg/mJ/5GPMD7Vht8eQvXOLjlogBsRtp6AFG5cyDmz YZjT+axI+Ep+dKPDYxlrUBGZW68psquDpoC21F5s750f3WlQ/skmMoU4jdIbrHLi j6oH5tb3+Z+V3jsiBsMAy/rtSC4XAmPfvDvQs1GKxo2abmTOc/yE8GXzZAyg5QBc 8TOcn+28idDvqUo0UxFjjHZDWlrHeA12AzuAJIcSSc+Rc+T1o8VQ2h0keFRVLdNY 1bmQ+5oc6KK9Av3I+ipspSbNJr1fRPNuJwuHbGKCoovKW2dN8yJ4Dk7aFHcQOL+m -----END CERTIFICATE-----Generated at Sun Jan 25 19:35:58 2026 by rpki-client