This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/xpDFBpHGQaFnP9MpnuaCHNbLzJs.roa File: xpDFBpHGQaFnP9MpnuaCHNbLzJs.roa (raw, json) Hash identifier: SsxKYAQGX3e7wzVGbaFU/iHO6tpmd+csayT0lIwGpTw= Subject key identifier: C6:90:C5:06:91:C6:41:A1:67:3F:D3:29:9E:E6:82:1C:D6:CB:CC:9B Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Certificate serial: 019B7910EEDA03053BF0F5AFE2B12D24B84D Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/xpDFBpHGQaFnP9MpnuaCHNbLzJs.roa Signing time: Thu 01 Jan 2026 10:18:31 +0000 ROA not before: Thu 01 Jan 2026 10:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39486 IP address blocks: 171.22.248.0/22 maxlen: 24 193.42.224.0/22 maxlen: 24 194.116.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ee:da:03:05:3b:f0:f5:af:e2:b1:2d:24:b8:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Validity Not Before: Jan 1 10:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c690c50691c641a1673fd3299ee6821cd6cbcc9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:10:40:64:a5:fb:38:db:c9:05:28:d3:3c:1b: 72:0d:65:8a:ab:a4:07:2d:54:72:15:5f:31:ea:07: 3b:aa:d0:ec:f6:1c:7c:f8:2e:0a:af:40:91:c7:d1: 55:6c:d9:b1:f3:78:05:a8:7c:5b:9f:20:b4:1a:f7: 75:d2:cf:50:c8:ed:a3:67:56:03:9a:ac:ba:e4:bb: cf:bc:a7:eb:c0:86:52:35:97:11:de:b6:02:a2:f8: 70:c2:ac:f1:ca:c6:ba:2d:d2:4d:ed:64:f4:62:ce: 5c:22:eb:aa:51:04:d7:3c:da:fc:76:f0:52:80:49: 47:d1:d8:3e:7a:36:ed:9f:80:5a:b6:63:8c:e5:cb: b1:4f:30:26:a0:ae:7b:05:d0:73:cd:bb:6c:a0:8a: ca:41:01:ed:bb:9a:e3:a3:c1:4c:b1:51:b8:70:1b: 99:98:81:53:b4:56:d6:d9:79:2b:07:d3:32:f1:79: 9f:67:22:a5:33:8e:5b:66:c4:01:da:99:6d:47:07: 5a:4b:c2:45:98:eb:c9:1c:ba:52:9b:12:76:29:8d: 1e:8c:2e:12:73:b1:88:69:37:bd:49:ab:49:85:d2: 73:f8:02:ac:22:5c:a5:e3:ea:68:53:ad:50:15:8a: 29:0d:dc:b6:74:a4:b7:32:2c:b6:b6:29:ec:32:65: 29:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:90:C5:06:91:C6:41:A1:67:3F:D3:29:9E:E6:82:1C:D6:CB:CC:9B X509v3 Authority Key Identifier: keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/xpDFBpHGQaFnP9MpnuaCHNbLzJs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 171.22.248.0/22 193.42.224.0/22 194.116.248.0/22 Signature Algorithm: sha256WithRSAEncryption 62:82:a9:54:c2:eb:98:e7:17:57:3f:16:2e:42:62:89:d2:37: 09:cd:9b:76:c0:4a:aa:33:28:e4:34:46:a6:12:66:be:ad:a8: 73:a1:21:2f:9c:43:31:cc:f0:c9:53:46:a1:11:9f:4c:c1:6c: 4d:2e:d5:02:0c:49:a3:03:4e:6b:aa:6e:91:a9:c3:35:8e:bb: a1:bf:99:79:d1:12:52:dd:70:4f:af:e8:19:e9:03:03:ea:87: a6:8d:93:c6:9d:4c:b5:89:6f:b3:f7:d6:5c:2b:cb:1d:19:0d: 2b:cb:3f:b4:e9:79:af:35:3f:dc:01:a9:0c:56:0c:c1:59:63: b2:0f:81:99:4f:38:04:0d:f8:fb:7c:84:0b:9d:c4:38:20:d1: 55:2c:73:ec:b9:c8:20:e7:6e:51:d4:bf:7e:3c:7e:26:80:b2: 64:90:5f:10:ea:a3:48:7b:38:19:8a:b8:3b:a2:a8:6b:e1:4d: cd:b5:ef:44:5f:b9:22:b2:c4:a8:85:c0:64:75:40:2b:e3:31: e5:9a:7a:a5:b2:16:0c:11:09:1e:66:4b:55:85:5d:07:89:05: e2:84:1f:b3:91:35:0d:c5:42:65:32:e5:08:b6:12:85:66:19: 6f:96:00:0e:b9:3f:ba:bc:24:88:1c:47:79:03:1e:99:77:30: 7f:b4:ac:f0 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5EO7aAwU78PWv4rEtJLhNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDBjNDlhMGU5N2UwZDVmM2NlZDNiN2I2YjlmNzJjYTBj YjUzZDYwHhcNMjYwMTAxMTAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjkwYzUwNjkxYzY0MWExNjczZmQzMjk5ZWU2ODIxY2Q2Y2JjYzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxBAZKX7ONvJBSjTPBtyDWWKq6QH LVRyFV8x6gc7qtDs9hx8+C4Kr0CRx9FVbNmx83gFqHxbnyC0Gvd10s9QyO2jZ1YD mqy65LvPvKfrwIZSNZcR3rYCovhwwqzxysa6LdJN7WT0Ys5cIuuqUQTXPNr8dvBS gElH0dg+ejbtn4BatmOM5cuxTzAmoK57BdBzzbtsoIrKQQHtu5rjo8FMsVG4cBuZ mIFTtFbW2XkrB9My8XmfZyKlM45bZsQB2pltRwdaS8JFmOvJHLpSmxJ2KY0ejC4S c7GIaTe9SatJhdJz+AKsIlyl4+poU61QFYopDdy2dKS3Miy2tinsMmUp+QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMaQxQaRxkGhZz/TKZ7mghzWy8ybMB8GA1UdIwQY MBaAFOLQxJoOl+DV887Tt7a59yygy1PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEt NDY5MGEwMDcxNDFmLzEveHBERkJwSEdRYUZuUDlNcG51YUNITmJMekpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEtNDY5MGEwMDcxNDFm LzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCqxb4AwQC wSrgAwQCwnT4MA0GCSqGSIb3DQEBCwUAA4IBAQBigqlUwuuY5xdXPxYuQmKJ0jcJ zZt2wEqqMyjkNEamEma+rahzoSEvnEMxzPDJU0ahEZ9MwWxNLtUCDEmjA05rqm6R qcM1jruhv5l50RJS3XBPr+gZ6QMD6oemjZPGnUy1iW+z99ZcK8sdGQ0ryz+06Xmv NT/cAakMVgzBWWOyD4GZTzgEDfj7fIQLncQ4INFVLHPsucgg525R1L9+PH4mgLJk kF8Q6qNIezgZirg7oqhr4U3Nte9EX7kissSohcBkdUAr4zHlmnqlshYMEQkeZktV hV0HiQXihB+zkTUNxUJlMuUIthKFZhlvlgAOuT+6vCSIHEd5Ax6ZdzB/tKzw -----END CERTIFICATE-----Generated at Sun Jan 25 10:29:08 2026 by rpki-client