This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/xCi0G_e0Q695aPNT6gcJGjk5Aik.roa File: xCi0G_e0Q695aPNT6gcJGjk5Aik.roa (raw, json) Hash identifier: 5ipSKU666jOWKtI/B+Mronv23Zfmy4lLPWtuX/CkhF0= Subject key identifier: C4:28:B4:1B:F7:B4:43:AF:79:68:F3:53:EA:07:09:1A:39:39:02:29 Certificate issuer: /CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0 Certificate serial: 019B79ED387C4B053BF259C49A2A140B2A03 Authority key identifier: 8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/xCi0G_e0Q695aPNT6gcJGjk5Aik.roa Signing time: Thu 01 Jan 2026 14:19:08 +0000 ROA not before: Thu 01 Jan 2026 14:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197746 IP address blocks: 31.22.112.0/24 maxlen: 24 31.22.113.0/24 maxlen: 24 31.22.114.0/24 maxlen: 24 31.22.115.0/24 maxlen: 24 31.22.116.0/24 maxlen: 24 31.22.119.0/24 maxlen: 24 185.23.88.0/24 maxlen: 24 185.23.89.0/24 maxlen: 24 2a00:6620:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:38:7c:4b:05:3b:f2:59:c4:9a:2a:14:0b:2a:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0 Validity Not Before: Jan 1 14:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c428b41bf7b443af7968f353ea07091a39390229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d7:5f:79:5a:44:89:60:88:60:88:4a:cc:9b: 34:ad:19:74:30:be:29:3d:12:52:d8:d7:89:59:7d: 6c:f8:e4:22:ed:24:98:f3:d0:c8:56:f0:1a:9f:16: c3:5b:9b:fd:a6:05:69:e7:c8:d4:f3:6e:5a:5b:fa: 0f:af:90:01:26:e5:ec:60:5b:e5:e1:41:a7:39:09: 7a:fc:55:88:f4:2f:4c:c3:e3:10:a7:c6:b9:e9:ef: 01:83:d1:1e:10:c4:14:10:cd:22:30:b7:be:9f:a8: 31:46:f9:69:98:c5:ff:fe:d1:48:a0:db:6b:e4:f0: 1d:28:0f:53:3e:62:47:bf:71:f5:cf:09:03:bf:cf: 45:72:97:cc:a4:14:89:b6:aa:7e:1d:1b:dd:95:1d: ca:98:df:71:b8:69:14:cc:18:a1:1f:d5:86:7c:d4: c3:1e:dc:9e:2e:34:1c:c7:7d:56:44:74:40:ec:ee: a6:b3:90:8f:eb:71:22:ee:c2:10:e0:10:34:3c:07: e6:cb:c8:af:cd:34:d6:19:7e:4d:87:ef:a8:40:2d: 9c:1e:18:79:db:d9:5f:16:ae:73:03:e6:1f:b4:3e: a7:97:14:fb:b8:f9:89:ae:c7:7f:f9:33:bc:23:3d: 16:40:ed:8b:0e:0a:4c:04:85:5e:8e:64:55:79:95: e6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:28:B4:1B:F7:B4:43:AF:79:68:F3:53:EA:07:09:1A:39:39:02:29 X509v3 Authority Key Identifier: keyid:8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/xCi0G_e0Q695aPNT6gcJGjk5Aik.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.22.112.0-31.22.116.255 31.22.119.0/24 185.23.88.0/23 IPv6: 2a00:6620:2000::/48 Signature Algorithm: sha256WithRSAEncryption ac:b4:bd:60:4d:e6:7f:59:36:da:8a:95:06:7f:78:78:16:2f: 26:76:7e:59:ff:d7:9a:89:7c:d8:58:7c:dd:92:d9:e3:f5:af: 95:9b:ef:e8:21:bb:8a:29:36:d9:0d:37:27:67:0c:cc:05:07: d7:6b:69:74:33:9a:77:93:c6:48:a6:45:15:0a:51:ad:33:92: 88:5c:2f:0f:18:d8:40:70:15:3f:f6:9e:6b:ce:66:a7:3e:3d: 5f:9d:73:79:4f:04:dd:d0:d3:2d:03:4e:ce:80:6e:78:52:e0: d6:d7:32:cd:18:e4:06:0c:f1:e2:ae:ac:25:4b:3d:ac:40:51: 72:af:7a:d8:88:e9:02:e6:cf:f7:a1:25:11:63:a1:68:d7:cf: 1b:35:11:3f:e5:56:ef:03:cb:ac:da:62:28:25:af:07:0b:0c: 53:ed:08:68:3a:d5:c2:58:5f:f8:1b:07:6a:2c:30:5b:40:56: bf:71:2d:17:e0:5d:a5:25:ef:6e:bf:13:95:0a:cf:73:e8:0a: e2:e2:94:00:a4:58:b7:b3:ad:fd:1d:82:fa:96:a7:a8:9c:af: 89:3a:e3:3a:4d:fa:dc:08:c0:90:e6:a8:be:4b:ec:f1:47:41: 3f:74:29:e0:1c:4f:71:8d:0b:cd:1c:ed:01:eb:52:09:af:9e: 6f:39:e7:55 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgISAZt57Th8SwU78lnEmioUCyoDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYTQzYmIzOGQ2ZTBiZThjMjg5MDk0YmE0YWRmMzg3ZDBk ZTQwYTAwHhcNMjYwMTAxMTQxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDI4YjQxYmY3YjQ0M2FmNzk2OGYzNTNlYTA3MDkxYTM5MzkwMjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNdfeVpEiWCIYIhKzJs0rRl0ML4p PRJS2NeJWX1s+OQi7SSY89DIVvAanxbDW5v9pgVp58jU825aW/oPr5ABJuXsYFvl 4UGnOQl6/FWI9C9Mw+MQp8a56e8Bg9EeEMQUEM0iMLe+n6gxRvlpmMX//tFIoNtr 5PAdKA9TPmJHv3H1zwkDv89FcpfMpBSJtqp+HRvdlR3KmN9xuGkUzBihH9WGfNTD HtyeLjQcx31WRHRA7O6ms5CP63Ei7sIQ4BA0PAfmy8ivzTTWGX5Nh++oQC2cHhh5 29lfFq5zA+YftD6nlxT7uPmJrsd/+TO8Iz0WQO2LDgpMBIVejmRVeZXmqQIDAQAB o4ICLjCCAiowHQYDVR0OBBYEFMQotBv3tEOveWjzU+oHCRo5OQIpMB8GA1UdIwQY MBaAFI6kO7ONbgvowokJS6St84fQ3kCgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanFRN3M0MXVDLWpDaVFsTHBLM3poOURlUUtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82Zjg1YjEtNmEzYy00MDhkLWEzOWIt MjRmN2Y5NDM2Y2VjLzEveENpMEdfZTBRNjk1YVBOVDZnY0pHams1QWlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82Zjg1YjEtNmEzYy00MDhkLWEzOWItMjRmN2Y5NDM2Y2Vj LzEvanFRN3M0MXVDLWpDaVFsTHBLM3poOURlUUtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEQGCCsGAQUFBwEHAQH/BDUwMzAgBAIAATAaMAwDBAQfFnAD BAAfFnQDBAAfFncDBAG5F1gwDwQCAAIwCQMHACoAZiAgADANBgkqhkiG9w0BAQsF AAOCAQEArLS9YE3mf1k22oqVBn94eBYvJnZ+Wf/Xmol82Fh83ZLZ4/WvlZvv6CG7 iik22Q03J2cMzAUH12tpdDOad5PGSKZFFQpRrTOSiFwvDxjYQHAVP/aea85mpz49 X51zeU8E3dDTLQNOzoBueFLg1tcyzRjkBgzx4q6sJUs9rEBRcq962IjpAubP96El EWOhaNfPGzURP+VW7wPLrNpiKCWvBwsMU+0IaDrVwlhf+BsHaiwwW0BWv3EtF+Bd pSXvbr8TlQrPc+gK4uKUAKRYt7Ot/R2C+panqJyviTrjOk363AjAkOaovkvs8UdB P3Qp4BxPcY0LzRztAetSCa+ebznnVQ== -----END CERTIFICATE-----Generated at Mon Jan 26 10:14:49 2026 by rpki-client