This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/3f7cda-1062-4b7c-afd9-9d0dfd38d949/1/xtgzbsY4RQgAHqGjGSJ0iMYk8Y4.roa File: xtgzbsY4RQgAHqGjGSJ0iMYk8Y4.roa (raw, json) Hash identifier: z72ZDa/NMuWUT8gblQL7edLWi92ZNQzGqAeFXRe+TZQ= Subject key identifier: C6:D8:33:6E:C6:38:45:08:00:1E:A1:A3:19:22:74:88:C6:24:F1:8E Certificate issuer: /CN=7515829b7f03411bbe21b1a200498ceebf5c06c0 Certificate serial: 019B79ED041BF58781DE90E17F0761164946 Authority key identifier: 75:15:82:9B:7F:03:41:1B:BE:21:B1:A2:00:49:8C:EE:BF:5C:06:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRWCm38DQRu-IbGiAEmM7r9cBsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/3f7cda-1062-4b7c-afd9-9d0dfd38d949/1/xtgzbsY4RQgAHqGjGSJ0iMYk8Y4.roa Signing time: Thu 01 Jan 2026 14:18:54 +0000 ROA not before: Thu 01 Jan 2026 14:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205786 IP address blocks: 185.146.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/3f7cda-1062-4b7c-afd9-9d0dfd38d949/1/dRWCm38DQRu-IbGiAEmM7r9cBsA.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/3f7cda-1062-4b7c-afd9-9d0dfd38d949/1/dRWCm38DQRu-IbGiAEmM7r9cBsA.mft rsync://rpki.ripe.net/repository/DEFAULT/dRWCm38DQRu-IbGiAEmM7r9cBsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:04:1b:f5:87:81:de:90:e1:7f:07:61:16:49:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7515829b7f03411bbe21b1a200498ceebf5c06c0 Validity Not Before: Jan 1 14:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6d8336ec6384508001ea1a319227488c624f18e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:eb:84:cb:6d:36:71:a8:3b:23:a1:71:6b:fb: 21:cd:df:3f:dc:5c:e1:48:b8:5e:7d:e9:09:d2:e4: b8:94:bf:21:1c:29:ea:1c:3a:43:0a:f2:cb:6d:e1: aa:65:b3:d5:a7:6a:97:5e:db:bd:08:18:f5:f9:50: 12:31:a6:4b:ee:d3:21:dc:b5:c1:2e:a7:e3:ce:22: 10:de:f7:ad:34:8a:7e:d2:bd:3a:6f:fe:bb:15:9c: ff:5d:5f:d6:a5:43:a9:5b:c7:a0:04:02:94:7f:b0: 73:32:a8:42:98:77:41:f9:22:4d:ba:1e:42:89:4d: bf:e7:79:b1:d4:90:55:19:c4:6f:37:6a:b4:c4:e4: 94:f4:de:35:b5:3b:1f:33:dd:92:9c:3f:ef:b4:a8: 9a:37:6c:9d:77:77:e3:29:f6:18:9a:b8:41:67:96: f6:45:c7:9e:71:7d:45:fd:fe:f0:cf:6e:5e:5a:de: b6:fa:b6:a5:15:12:80:ae:02:92:24:19:38:91:d9: 79:77:64:b4:08:fa:6c:d2:c3:b3:d8:f3:8a:98:23: 74:22:cc:e8:14:ac:08:56:97:67:58:06:ef:aa:40: e3:29:69:53:db:4d:21:11:71:ce:37:bd:c8:77:5c: c0:55:7f:03:32:b9:13:b6:77:32:bd:25:57:6d:e1: ba:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D8:33:6E:C6:38:45:08:00:1E:A1:A3:19:22:74:88:C6:24:F1:8E X509v3 Authority Key Identifier: keyid:75:15:82:9B:7F:03:41:1B:BE:21:B1:A2:00:49:8C:EE:BF:5C:06:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRWCm38DQRu-IbGiAEmM7r9cBsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3f7cda-1062-4b7c-afd9-9d0dfd38d949/1/xtgzbsY4RQgAHqGjGSJ0iMYk8Y4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3f7cda-1062-4b7c-afd9-9d0dfd38d949/1/dRWCm38DQRu-IbGiAEmM7r9cBsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.146.66.0/24 Signature Algorithm: sha256WithRSAEncryption 34:30:c7:e5:91:fc:e5:b9:f9:bd:37:ff:f2:96:21:43:d5:01: b4:1b:6e:a0:18:04:5f:94:15:c8:79:53:79:82:8c:88:83:27: 29:a3:f5:38:5e:34:29:d2:ba:f3:5f:08:76:07:53:18:f9:0d: ca:b8:a5:67:b9:fb:45:50:19:fc:29:24:e9:40:e4:20:f8:3c: 81:09:cb:63:7b:83:c2:ec:2c:f1:d3:18:bd:6f:9d:53:45:21: 09:be:ef:ea:8c:4a:f8:88:cd:59:50:98:bc:ed:8d:89:b7:91: 9e:83:23:f8:b8:af:98:d5:81:3e:27:a9:f0:ad:2c:e8:9c:45: 8b:f4:ed:a7:05:f2:19:e1:51:2e:6a:e0:ca:51:30:cc:e3:5b: 14:01:7e:cc:25:3f:e3:ad:10:19:73:59:b7:f7:0f:e6:b8:2d: 08:37:c3:81:3b:50:a2:64:6d:91:de:c9:25:e3:04:fc:58:cb: 17:8f:aa:dc:7f:dc:e1:ba:2c:fd:4d:26:8b:f8:a0:a6:8b:10: 03:8a:6e:b0:0d:f1:a6:e9:48:1f:6e:b9:31:b9:fd:1b:c2:0e: 8b:4d:62:19:8d:ed:c8:33:6b:59:03:cd:fd:f5:41:0c:94:0d: 43:67:42:90:ec:fe:c3:c0:56:19:4e:70:86:e0:8b:f6:bb:4b: d7:ab:28:5b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57QQb9YeB3pDhfwdhFklGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MTU4MjliN2YwMzQxMWJiZTIxYjFhMjAwNDk4Y2VlYmY1 YzA2YzAwHhcNMjYwMTAxMTQxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmQ4MzM2ZWM2Mzg0NTA4MDAxZWExYTMxOTIyNzQ4OGM2MjRmMThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOuEy202cag7I6Fxa/shzd8/3Fzh SLhefekJ0uS4lL8hHCnqHDpDCvLLbeGqZbPVp2qXXtu9CBj1+VASMaZL7tMh3LXB LqfjziIQ3vetNIp+0r06b/67FZz/XV/WpUOpW8egBAKUf7BzMqhCmHdB+SJNuh5C iU2/53mx1JBVGcRvN2q0xOSU9N41tTsfM92SnD/vtKiaN2ydd3fjKfYYmrhBZ5b2 RceecX1F/f7wz25eWt62+ralFRKArgKSJBk4kdl5d2S0CPps0sOz2POKmCN0Iszo FKwIVpdnWAbvqkDjKWlT200hEXHON73Id1zAVX8DMrkTtncyvSVXbeG63wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMbYM27GOEUIAB6hoxkidIjGJPGOMB8GA1UdIwQY MBaAFHUVgpt/A0EbviGxogBJjO6/XAbAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFJXQ20zOERRUnUtSWJHaUFFbU03cjljQnNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8zZjdjZGEtMTA2Mi00YjdjLWFmZDkt OWQwZGZkMzhkOTQ5LzEveHRnemJzWTRSUWdBSHFHakdTSjBpTVlrOFk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8zZjdjZGEtMTA2Mi00YjdjLWFmZDktOWQwZGZkMzhkOTQ5 LzEvZFJXQ20zOERRUnUtSWJHaUFFbU03cjljQnNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZJCMA0G CSqGSIb3DQEBCwUAA4IBAQA0MMflkfzlufm9N//yliFD1QG0G26gGARflBXIeVN5 goyIgycpo/U4XjQp0rrzXwh2B1MY+Q3KuKVnuftFUBn8KSTpQOQg+DyBCctje4PC 7Czx0xi9b51TRSEJvu/qjEr4iM1ZUJi87Y2Jt5GegyP4uK+Y1YE+J6nwrSzonEWL 9O2nBfIZ4VEuauDKUTDM41sUAX7MJT/jrRAZc1m39w/muC0IN8OBO1CiZG2R3skl 4wT8WMsXj6rcf9zhuiz9TSaL+KCmixADim6wDfGm6Ugfbrkxuf0bwg6LTWIZje3I M2tZA8399UEMlA1DZ0KQ7P7DwFYZTnCG4Iv2u0vXqyhb -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:39 2026 by rpki-client