This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/xJlpiyff9JZ6gS3ySDUE7yUsTME.roa File: xJlpiyff9JZ6gS3ySDUE7yUsTME.roa (raw, json) Hash identifier: gSGRAeospXJ01runlvaUz1GWf0dKKl7ovgIv3++u1eA= Subject key identifier: C4:99:69:8B:27:DF:F4:96:7A:81:2D:F2:48:35:04:EF:25:2C:4C:C1 Certificate issuer: /CN=7af57dd52c75fce39ffe2915469d9e656dbcb873 Certificate serial: 019B78A2AE2674D7ECD82A362BFDACC6183E Authority key identifier: 7A:F5:7D:D5:2C:75:FC:E3:9F:FE:29:15:46:9D:9E:65:6D:BC:B8:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/xJlpiyff9JZ6gS3ySDUE7yUsTME.roa Signing time: Thu 01 Jan 2026 08:18:05 +0000 ROA not before: Thu 01 Jan 2026 08:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29119 IP address blocks: 92.246.80.0/24 maxlen: 24 92.246.81.0/24 maxlen: 24 92.246.82.0/24 maxlen: 24 92.246.83.0/24 maxlen: 24 103.226.192.0/24 maxlen: 24 103.226.194.0/23 maxlen: 23 103.229.170.0/24 maxlen: 24 103.229.171.0/24 maxlen: 24 185.117.44.0/24 maxlen: 24 185.117.45.0/24 maxlen: 24 185.117.46.0/24 maxlen: 24 185.117.47.0/24 maxlen: 24 185.145.68.0/24 maxlen: 24 185.145.69.0/24 maxlen: 24 185.167.181.0/24 maxlen: 24 185.201.4.0/24 maxlen: 24 185.204.203.0/24 maxlen: 24 185.223.176.0/24 maxlen: 24 185.223.177.0/24 maxlen: 24 185.223.179.0/24 maxlen: 24 185.237.212.0/24 maxlen: 24 185.237.213.0/24 maxlen: 24 185.237.214.0/24 maxlen: 24 2a07:4640::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.mft rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:ae:26:74:d7:ec:d8:2a:36:2b:fd:ac:c6:18:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7af57dd52c75fce39ffe2915469d9e656dbcb873 Validity Not Before: Jan 1 08:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c499698b27dff4967a812df2483504ef252c4cc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b0:fb:06:5c:6b:cc:fe:b1:c0:36:76:b0:de: dd:c2:ea:8e:8d:08:58:1d:31:f4:01:a0:da:f7:26: 9c:28:64:6a:b3:6c:29:26:80:78:82:fc:82:c8:02: b1:d7:bc:f8:0d:f4:00:47:c7:fb:bd:90:a0:73:25: 12:0c:a5:99:95:73:28:1f:7e:32:8a:e7:a6:c6:8b: 6c:f9:46:c3:b4:15:f0:78:75:9d:bf:7b:f0:7e:21: 58:ba:4e:ab:74:8f:2c:0f:6c:fa:03:8e:2c:2c:35: 2e:b5:72:97:7a:64:a7:51:d1:31:83:1e:33:5c:9e: 5e:21:b3:f2:df:1b:0c:8f:0a:d8:57:ec:15:ca:01: b4:34:13:4a:53:54:ef:db:4a:68:20:6b:8b:aa:78: 63:d3:f6:d3:fd:76:c1:13:e8:37:1a:19:58:26:2e: e3:ec:27:55:ba:e5:58:67:ec:3c:0d:74:c0:c3:5b: ce:be:45:5e:78:c4:69:0a:a4:61:8e:49:7d:52:47: cd:e9:12:ef:0c:3e:5f:bb:e7:8f:7f:94:b3:6e:6a: 27:51:c2:fe:16:5a:9a:c7:dd:55:48:02:70:72:a1: 49:22:62:25:1f:69:35:d3:9c:fa:cf:f7:01:00:71: 77:5b:61:71:0e:89:45:6e:2e:cf:2b:b9:df:ed:bc: 96:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:99:69:8B:27:DF:F4:96:7A:81:2D:F2:48:35:04:EF:25:2C:4C:C1 X509v3 Authority Key Identifier: keyid:7A:F5:7D:D5:2C:75:FC:E3:9F:FE:29:15:46:9D:9E:65:6D:BC:B8:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/xJlpiyff9JZ6gS3ySDUE7yUsTME.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.246.80.0/22 103.226.192.0/24 103.226.194.0/23 103.229.170.0/23 185.117.44.0/22 185.145.68.0/23 185.167.181.0/24 185.201.4.0/24 185.204.203.0/24 185.223.176.0/23 185.223.179.0/24 185.237.212.0-185.237.214.255 IPv6: 2a07:4640::/29 Signature Algorithm: sha256WithRSAEncryption 2a:4a:f3:6a:91:93:7f:93:66:f8:63:27:16:fb:9d:81:d3:3d: 98:ac:7b:9f:f7:36:c9:58:e0:7f:28:d9:51:64:2d:4f:ef:2b: be:64:cf:b8:09:2b:9c:70:56:70:c0:39:bc:bf:28:88:74:b7: 7a:84:b2:d9:fc:12:0d:24:ec:34:c1:89:ad:3b:a5:6d:d4:ae: c5:62:35:b5:84:ca:1c:b3:a7:38:31:de:6c:98:0e:74:1c:63: 82:8f:d7:15:36:66:42:9a:47:ee:e1:fa:da:90:97:e9:e1:ec: 6e:58:88:b2:72:b2:53:69:f7:b1:68:73:02:c8:7c:9d:05:b9: 36:2d:7f:5c:34:76:5f:23:20:7b:fd:1f:7a:3d:e5:14:e3:6d: d2:70:75:6b:2b:a8:de:a6:01:e4:03:d6:fc:82:87:7b:51:b2: ba:25:9c:40:cc:01:34:b9:69:55:36:1c:e4:f8:67:bd:fa:58: da:65:1b:0a:94:89:bf:e9:ac:d0:a5:a2:cf:75:66:6d:41:37: 49:1e:b3:5e:0c:21:b5:af:3d:2e:75:5a:a2:06:c0:59:8e:f4: b7:73:f9:d2:6e:25:5a:b2:dc:75:3a:c7:63:71:77:bb:0c:f6: a1:7b:c4:3a:60:60:5e:f9:4e:f9:b3:ca:95:b2:04:af:72:c8: 91:72:55:61 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgISAZt4oq4mdNfs2Co2K/2sxhg+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhZjU3ZGQ1MmM3NWZjZTM5ZmZlMjkxNTQ2OWQ5ZTY1NmRi Y2I4NzMwHhcNMjYwMTAxMDgxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDk5Njk4YjI3ZGZmNDk2N2E4MTJkZjI0ODM1MDRlZjI1MmM0Y2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLD7BlxrzP6xwDZ2sN7dwuqOjQhY HTH0AaDa9yacKGRqs2wpJoB4gvyCyAKx17z4DfQAR8f7vZCgcyUSDKWZlXMoH34y iuemxots+UbDtBXweHWdv3vwfiFYuk6rdI8sD2z6A44sLDUutXKXemSnUdExgx4z XJ5eIbPy3xsMjwrYV+wVygG0NBNKU1Tv20poIGuLqnhj0/bT/XbBE+g3GhlYJi7j 7CdVuuVYZ+w8DXTAw1vOvkVeeMRpCqRhjkl9UkfN6RLvDD5fu+ePf5SzbmonUcL+ Flqax91VSAJwcqFJImIlH2k105z6z/cBAHF3W2FxDolFbi7PK7nf7byWZQIDAQAB o4ICYjCCAl4wHQYDVR0OBBYEFMSZaYsn3/SWeoEt8kg1BO8lLEzBMB8GA1UdIwQY MBaAFHr1fdUsdfzjn/4pFUadnmVtvLhzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXZWOTFTeDFfT09mX2lrVlJwMmVaVzI4dUhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi84Nzk3ZGUtM2FlOS00ZTA1LTgwZmYt YzI1MzQwOTZjNjBkLzEveEpscGl5ZmY5Slo2Z1MzeVNEVUU3eVVzVE1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi84Nzk3ZGUtM2FlOS00ZTA1LTgwZmYtYzI1MzQwOTZjNjBk LzEvZXZWOTFTeDFfT09mX2lrVlJwMmVaVzI4dUhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHgGCCsGAQUFBwEHAQH/BGkwZzBWBAIAATBQAwQCXPZQAwQA Z+LAAwQBZ+LCAwQBZ+WqAwQCuXUsAwQBuZFEAwQAuae1AwQAuckEAwQAuczLAwQB ud+wAwQAud+zMAwDBAK57dQDBAC57dYwDQQCAAIwBwMFAyoHRkAwDQYJKoZIhvcN AQELBQADggEBACpK82qRk3+TZvhjJxb7nYHTPZise5/3NslY4H8o2VFkLU/vK75k z7gJK5xwVnDAOby/KIh0t3qEstn8Eg0k7DTBia07pW3UrsViNbWEyhyzpzgx3myY DnQcY4KP1xU2ZkKaR+7h+tqQl+nh7G5YiLJyslNp97FocwLIfJ0FuTYtf1w0dl8j IHv9H3o95RTjbdJwdWsrqN6mAeQD1vyCh3tRsrolnEDMATS5aVU2HOT4Z736WNpl GwqUib/prNClos91Zm1BN0kes14MIbWvPS51WqIGwFmO9Ldz+dJuJVqy3HU6x2Nx d7sM9qF7xDpgYF75TvmzypWyBK9yyJFyVWE= -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:33 2026 by rpki-client