This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/Xx27rFNzn0CKCl9qSt2PCELhh7M.roa File: Xx27rFNzn0CKCl9qSt2PCELhh7M.roa (raw, json) Hash identifier: lrSb36B35+cjoGY4fibEVUmY5+MNB48JzpR68OA81aQ= Subject key identifier: 5F:1D:BB:AC:53:73:9F:40:8A:0A:5F:6A:4A:DD:8F:08:42:E1:87:B3 Certificate issuer: /CN=e1e8b7cab521e88e8022a36424544185538a7b33 Certificate serial: 019B797EF46D7601DC6F2F60DD1DC4239F3E Authority key identifier: E1:E8:B7:CA:B5:21:E8:8E:80:22:A3:64:24:54:41:85:53:8A:7B:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/Xx27rFNzn0CKCl9qSt2PCELhh7M.roa Signing time: Thu 01 Jan 2026 12:18:41 +0000 ROA not before: Thu 01 Jan 2026 12:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216054 IP address blocks: 185.154.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f4:6d:76:01:dc:6f:2f:60:dd:1d:c4:23:9f:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1e8b7cab521e88e8022a36424544185538a7b33 Validity Not Before: Jan 1 12:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f1dbbac53739f408a0a5f6a4add8f0842e187b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:82:1d:26:41:78:3d:cc:c2:d1:a0:3e:8c:0a: d3:bb:16:f1:26:c8:56:a7:2a:26:c0:63:1e:ea:64: 87:fa:3b:81:e9:5d:d7:b0:fe:ff:38:f3:a7:ca:5b: 65:05:c3:b4:a9:9b:27:aa:0b:fc:d9:85:55:cb:21: ee:59:51:94:c7:f5:24:a6:09:21:34:7d:44:b2:2a: e9:53:b9:8b:f5:05:88:08:24:a0:39:24:c7:67:7d: e8:aa:78:86:a6:2b:54:08:84:1a:70:0d:9c:62:59: 45:92:65:0c:30:7c:c3:6b:3d:2e:a4:cf:cf:0a:67: 09:a8:8a:91:93:f5:38:9e:6d:a4:b2:d6:91:c9:a1: 7b:80:6e:1e:41:95:3a:d8:78:9f:f5:57:a4:b6:eb: f1:9e:2d:2d:ee:df:c4:dd:ee:50:61:20:af:ec:36: 66:95:09:21:ca:40:56:d8:f3:8d:c3:d5:8e:42:bc: 4f:b4:0e:29:d9:b8:f3:65:1f:15:6a:bf:c3:4b:b8: b5:7d:26:db:0c:05:ae:a5:80:e7:d7:fb:61:13:ba: 0d:65:a5:83:e7:dc:bb:d5:0e:6b:40:dc:72:39:b4: 39:7d:db:0f:ec:31:b6:bc:f0:25:4f:cf:22:ac:52: 40:94:98:ba:fc:9e:75:69:97:f7:aa:55:da:e6:36: 08:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:1D:BB:AC:53:73:9F:40:8A:0A:5F:6A:4A:DD:8F:08:42:E1:87:B3 X509v3 Authority Key Identifier: keyid:E1:E8:B7:CA:B5:21:E8:8E:80:22:A3:64:24:54:41:85:53:8A:7B:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/Xx27rFNzn0CKCl9qSt2PCELhh7M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.154.190.0/24 Signature Algorithm: sha256WithRSAEncryption a3:00:2c:d6:64:dc:26:f9:3d:09:06:1a:a8:74:9d:b8:97:2b: a9:c7:df:50:e6:21:98:ff:87:4b:09:72:a4:a8:c6:75:e8:21: ee:87:4e:96:e1:c2:3b:9d:4d:e0:a6:93:52:1c:92:ae:b8:c4: 38:32:21:36:01:4b:3c:61:67:1b:80:00:9d:45:ca:1a:57:b2: da:70:2b:ee:6d:5a:1f:28:de:a2:46:af:7f:f9:d6:ae:3e:c4: d8:47:f5:15:db:09:ef:9b:4c:ee:38:a0:0a:93:97:e7:71:69: 9c:cc:53:95:28:73:d7:62:e8:00:03:ab:51:4c:4a:06:ea:6d: b2:48:4e:60:32:47:0d:77:8d:5e:3d:b0:d9:e3:0d:96:12:b9: bc:52:c4:0e:35:57:e2:70:9a:20:2f:15:75:ad:9e:1d:eb:be: e4:e1:50:5e:9c:1c:25:77:e6:5b:f0:8a:bb:2f:77:0f:2a:e8: 6d:1b:5f:9e:46:9f:82:32:9f:9f:6e:a2:09:2e:06:20:a9:76: 70:10:69:95:53:e2:f4:f9:65:77:63:eb:ca:b6:43:bb:23:12: 3c:37:33:3d:20:9a:6f:24:c2:22:50:3a:b3:dd:e0:4f:45:bf: 4f:30:b3:0d:e6:3a:bb:aa:46:05:ed:be:7c:9b:bf:72:0a:74: ac:e1:00:ce -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fvRtdgHcby9g3R3EI58+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZThiN2NhYjUyMWU4OGU4MDIyYTM2NDI0NTQ0MTg1NTM4 YTdiMzMwHhcNMjYwMTAxMTIxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjFkYmJhYzUzNzM5ZjQwOGEwYTVmNmE0YWRkOGYwODQyZTE4N2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroIdJkF4PczC0aA+jArTuxbxJshW pyomwGMe6mSH+juB6V3XsP7/OPOnyltlBcO0qZsnqgv82YVVyyHuWVGUx/Ukpgkh NH1EsirpU7mL9QWICCSgOSTHZ33oqniGpitUCIQacA2cYllFkmUMMHzDaz0upM/P CmcJqIqRk/U4nm2kstaRyaF7gG4eQZU62Hif9Vektuvxni0t7t/E3e5QYSCv7DZm lQkhykBW2PONw9WOQrxPtA4p2bjzZR8Var/DS7i1fSbbDAWupYDn1/thE7oNZaWD 59y71Q5rQNxyObQ5fdsP7DG2vPAlT88irFJAlJi6/J51aZf3qlXa5jYInQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF8du6xTc59AigpfakrdjwhC4YezMB8GA1UdIwQY MBaAFOHot8q1IeiOgCKjZCRUQYVTinszMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGVpM3lyVWg2STZBSXFOa0pGUkJoVk9LZXpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8xNGYyYzUtNDZmZS00NjcwLTlkZDYt MjFjNTg0NzBiOGQyLzEvWHgyN3JGTnpuMENLQ2w5cVN0MlBDRUxoaDdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8xNGYyYzUtNDZmZS00NjcwLTlkZDYtMjFjNTg0NzBiOGQy LzEvNGVpM3lyVWg2STZBSXFOa0pGUkJoVk9LZXpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZq+MA0G CSqGSIb3DQEBCwUAA4IBAQCjACzWZNwm+T0JBhqodJ24lyupx99Q5iGY/4dLCXKk qMZ16CHuh06W4cI7nU3gppNSHJKuuMQ4MiE2AUs8YWcbgACdRcoaV7LacCvubVof KN6iRq9/+dauPsTYR/UV2wnvm0zuOKAKk5fncWmczFOVKHPXYugAA6tRTEoG6m2y SE5gMkcNd41ePbDZ4w2WErm8UsQONVficJogLxV1rZ4d677k4VBenBwld+Zb8Iq7 L3cPKuhtG1+eRp+CMp+fbqIJLgYgqXZwEGmVU+L0+WV3Y+vKtkO7IxI8NzM9IJpv JMIiUDqz3eBPRb9PMLMN5jq7qkYF7b58m79yCnSs4QDO -----END CERTIFICATE-----Generated at Mon Jan 26 05:30:32 2026 by rpki-client