This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/xYJNOiuy4j8LfXqPijvPDbsyKCs.roa File: xYJNOiuy4j8LfXqPijvPDbsyKCs.roa (raw, json) Hash identifier: XjFVGXZYnhKKZSPv2iOQnoaWZSCDkPQcxGHyVG/MCwM= Subject key identifier: C5:82:4D:3A:2B:B2:E2:3F:0B:7D:7A:8F:8A:3B:CF:0D:BB:32:28:2B Certificate issuer: /CN=712f9cb3c298b150beb79080376f74bdeac438ac Certificate serial: 019B77C74FD850DE0F7A512EB8AFD7E47C43 Authority key identifier: 71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/xYJNOiuy4j8LfXqPijvPDbsyKCs.roa Signing time: Thu 01 Jan 2026 04:18:29 +0000 ROA not before: Thu 01 Jan 2026 04:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203433 IP address blocks: 185.22.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:4f:d8:50:de:0f:7a:51:2e:b8:af:d7:e4:7c:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=712f9cb3c298b150beb79080376f74bdeac438ac Validity Not Before: Jan 1 04:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5824d3a2bb2e23f0b7d7a8f8a3bcf0dbb32282b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:25:b4:4f:ff:f5:23:d6:d6:42:d4:3a:d8:97: 36:1f:e0:9e:19:7d:dc:ee:1c:86:b5:d1:27:f6:06: 9e:71:ca:45:e6:41:d0:4b:6c:4a:81:50:5a:af:85: 7a:73:3b:d3:b7:6d:7b:ba:70:49:3b:2c:b9:32:cd: ed:51:8d:66:39:40:01:98:73:4d:f5:f5:5b:ee:fb: 00:f2:59:86:8b:63:d8:3c:19:02:18:be:44:7c:52: c6:13:ea:8c:21:b5:d2:5b:19:0d:b0:6d:2e:97:f0: f2:ad:71:77:cb:14:36:c0:8d:24:8f:a1:ca:1e:71: 0b:c0:20:fd:98:c7:e1:fc:20:92:f3:93:ac:60:9f: fb:f0:5d:ac:b1:85:fe:8a:f3:ea:eb:e9:a6:fa:9e: 37:7b:75:ff:84:c7:bf:79:c6:80:f5:a5:ba:01:0d: 03:a5:4e:ac:05:25:d8:f1:e9:fa:f7:a5:44:f9:64: 57:7f:ea:23:ad:b3:51:c6:14:9e:41:fb:a2:4e:e5: 17:b6:7d:69:0c:f4:76:84:35:ae:71:c6:5a:46:58: ac:8e:dd:c4:05:f9:b5:66:e1:e9:40:ff:fa:64:fa: 07:29:36:28:16:63:86:ee:24:e1:08:dd:40:c7:c1: 92:24:7f:ec:2c:e8:9a:cc:ba:be:a8:b8:20:20:a4: 19:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:82:4D:3A:2B:B2:E2:3F:0B:7D:7A:8F:8A:3B:CF:0D:BB:32:28:2B X509v3 Authority Key Identifier: keyid:71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/xYJNOiuy4j8LfXqPijvPDbsyKCs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.22.131.0/24 Signature Algorithm: sha256WithRSAEncryption 77:50:ca:7a:96:9f:10:58:bd:c0:f2:a6:7a:f7:bb:25:37:99: a4:1c:82:dc:e6:98:ec:8d:69:d4:9b:2a:e5:bc:36:88:b8:4a: cb:9a:ee:b9:44:c0:8e:78:50:b5:bd:c2:84:2c:7b:d6:a3:a5: ea:21:08:f4:b3:76:d4:3c:40:c1:48:87:a1:32:28:57:0b:49: 04:bc:4b:37:62:ce:d3:b9:54:28:e4:32:b5:ff:57:fb:c9:c1: 2c:bb:31:d6:48:f4:b0:57:b4:1f:a7:a8:09:d4:b8:49:09:eb: 25:bc:74:4c:73:72:d1:8a:6f:a7:0f:d9:8b:7e:f3:81:49:65: e5:03:66:99:15:e5:6b:85:fe:76:af:f8:6f:6e:09:29:75:9b: 52:d8:84:fe:b6:8e:86:f0:70:99:88:5c:14:8b:99:a8:2d:96: 0e:7d:ce:09:e7:af:b2:82:35:d4:a9:43:b1:b2:a6:31:1a:e3: b5:fc:1c:ee:56:50:a9:4d:b9:a5:bb:3f:c8:de:ed:ac:79:28: c0:2c:52:51:ee:62:8d:2d:46:b1:54:24:d3:6c:da:a5:e0:e9: 89:e0:d6:7f:f7:e0:67:a2:d3:a8:ff:6b:9f:83:7b:d3:23:7d: aa:a3:ba:23:56:28:14:b4:db:28:6c:ae:15:11:6b:62:82:f8: 15:ac:f9:d1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x0/YUN4PelEuuK/X5HxDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMmY5Y2IzYzI5OGIxNTBiZWI3OTA4MDM3NmY3NGJkZWFj NDM4YWMwHhcNMjYwMTAxMDQxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTgyNGQzYTJiYjJlMjNmMGI3ZDdhOGY4YTNiY2YwZGJiMzIyODJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iW0T//1I9bWQtQ62Jc2H+CeGX3c 7hyGtdEn9gaeccpF5kHQS2xKgVBar4V6czvTt217unBJOyy5Ms3tUY1mOUABmHNN 9fVb7vsA8lmGi2PYPBkCGL5EfFLGE+qMIbXSWxkNsG0ul/DyrXF3yxQ2wI0kj6HK HnELwCD9mMfh/CCS85OsYJ/78F2ssYX+ivPq6+mm+p43e3X/hMe/ecaA9aW6AQ0D pU6sBSXY8en696VE+WRXf+ojrbNRxhSeQfuiTuUXtn1pDPR2hDWuccZaRlisjt3E Bfm1ZuHpQP/6ZPoHKTYoFmOG7iThCN1Ax8GSJH/sLOiazLq+qLggIKQZRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMWCTTorsuI/C316j4o7zw27MigrMB8GA1UdIwQY MBaAFHEvnLPCmLFQvreQgDdvdL3qxDisMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1MtY3M4S1lzVkMtdDVDQU4yOTB2ZXJFT0t3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9lMmUxMTktZmQ3OC00YjFhLWIxNmEt OTg3ZGE0MzkyMDU2LzEveFlKTk9pdXk0ajhMZlhxUGlqdlBEYnN5S0NzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9lMmUxMTktZmQ3OC00YjFhLWIxNmEtOTg3ZGE0MzkyMDU2 LzEvY1MtY3M4S1lzVkMtdDVDQU4yOTB2ZXJFT0t3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRaDMA0G CSqGSIb3DQEBCwUAA4IBAQB3UMp6lp8QWL3A8qZ697slN5mkHILc5pjsjWnUmyrl vDaIuErLmu65RMCOeFC1vcKELHvWo6XqIQj0s3bUPEDBSIehMihXC0kEvEs3Ys7T uVQo5DK1/1f7ycEsuzHWSPSwV7Qfp6gJ1LhJCeslvHRMc3LRim+nD9mLfvOBSWXl A2aZFeVrhf52r/hvbgkpdZtS2IT+to6G8HCZiFwUi5moLZYOfc4J56+ygjXUqUOx sqYxGuO1/BzuVlCpTbmluz/I3u2seSjALFJR7mKNLUaxVCTTbNql4OmJ4NZ/9+Bn otOo/2ufg3vTI32qo7ojVigUtNsobK4VEWtigvgVrPnR -----END CERTIFICATE-----Generated at Mon Jan 26 10:52:55 2026 by rpki-client