This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/_xGsVJQeBzbBLpCkFLNfOvZbW4U.roa File: _xGsVJQeBzbBLpCkFLNfOvZbW4U.roa (raw, json) Hash identifier: Y4500/iUXADzSRR+OyCO6ojWBN6EGiCPjwgXlWxzhhA= Subject key identifier: FF:11:AC:54:94:1E:07:36:C1:2E:90:A4:14:B3:5F:3A:F6:5B:5B:85 Certificate issuer: /CN=44a7e5a33d9c5a965d9fbfdeecdc871af0a5d4f8 Certificate serial: 019B791042C7F7F279AB446492372E55359A Authority key identifier: 44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/_xGsVJQeBzbBLpCkFLNfOvZbW4U.roa Signing time: Thu 01 Jan 2026 10:17:47 +0000 ROA not before: Thu 01 Jan 2026 10:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5411 IP address blocks: 82.196.160.0/19 maxlen: 19 82.196.160.0/20 maxlen: 20 82.196.176.0/20 maxlen: 20 185.222.176.0/22 maxlen: 22 185.222.176.0/23 maxlen: 23 185.222.178.0/23 maxlen: 23 193.8.32.0/22 maxlen: 22 193.8.32.0/23 maxlen: 23 193.8.34.0/23 maxlen: 23 193.41.168.0/23 maxlen: 23 193.41.168.0/24 maxlen: 24 193.41.169.0/24 maxlen: 24 193.192.54.0/23 maxlen: 23 193.192.54.0/24 maxlen: 24 193.192.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:42:c7:f7:f2:79:ab:44:64:92:37:2e:55:35:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44a7e5a33d9c5a965d9fbfdeecdc871af0a5d4f8 Validity Not Before: Jan 1 10:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff11ac54941e0736c12e90a414b35f3af65b5b85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3b:a3:53:93:9e:f4:10:82:e3:db:52:16:de: 57:9e:b8:d4:fb:9f:d4:d6:a8:4f:a7:a1:7a:0b:b7: 2a:69:4d:68:e8:4f:35:db:ee:f6:d1:af:9f:70:4b: 39:20:5c:63:67:bb:92:2f:67:06:7b:bf:6d:69:f8: 53:3d:90:12:cc:98:90:61:95:c1:ac:87:ab:1f:32: f8:ec:be:36:8d:6d:e6:cb:d6:18:aa:30:4a:31:c6: 94:2f:f0:94:a8:f7:3a:95:33:3a:90:0a:82:d5:6f: a6:54:cc:8c:08:6e:0d:50:1c:f0:55:35:a2:4d:b2: 72:3b:4a:0d:ba:e3:06:46:ea:a4:53:e8:c1:d6:57: 0d:6c:f9:0a:33:ad:46:a8:bb:24:04:82:c7:d3:d8: 1e:a5:9a:ce:8d:f6:cb:72:68:d1:4f:be:49:42:5a: 9a:0d:6f:13:6e:46:64:74:36:f9:92:2a:83:1b:89: 0a:01:27:20:ee:60:d2:d6:54:2e:e6:c4:be:47:ad: 56:ac:61:96:ff:53:d3:c6:8d:bd:c8:01:2e:0e:61: 60:34:b9:65:2f:3f:fd:a2:4a:8d:c2:01:1f:eb:88: de:9e:87:ca:c8:36:b9:d2:c8:e2:86:e4:45:c6:42: 5a:3c:d2:95:bd:3c:84:bd:0c:3f:41:a3:46:f6:db: 7d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:11:AC:54:94:1E:07:36:C1:2E:90:A4:14:B3:5F:3A:F6:5B:5B:85 X509v3 Authority Key Identifier: keyid:44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/_xGsVJQeBzbBLpCkFLNfOvZbW4U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.196.160.0/19 185.222.176.0/22 193.8.32.0/22 193.41.168.0/23 193.192.54.0/23 Signature Algorithm: sha256WithRSAEncryption cd:64:31:1e:d0:44:1e:34:36:3c:4d:bd:66:6d:58:5b:0d:a2: ce:07:d5:ef:35:04:bf:43:1a:75:f9:06:98:62:fb:c7:86:b8: 5c:d7:4f:a9:ef:10:49:90:22:e4:a1:ce:c9:cb:ec:26:fc:0f: b7:79:ad:5a:88:93:04:f1:fd:6e:70:e9:9e:c4:1e:4a:0a:8d: c9:a8:56:37:23:1c:75:2c:cb:75:1d:ef:ae:f7:0e:ae:6b:d7: 2f:94:aa:d5:74:a3:56:21:17:03:70:33:04:33:a6:81:4d:fc: f2:cc:5a:2d:0d:3e:5c:f2:a9:55:f7:ed:7a:9f:b0:eb:2d:2f: 4e:cf:f4:2b:2c:8b:d1:5a:4d:ed:91:34:d6:bf:0c:e6:9b:17: ed:f9:6b:0a:9d:e0:5e:c2:33:19:3d:ce:f3:10:3c:a8:48:21: 9f:2a:36:23:b1:21:15:dd:2d:1f:5a:19:86:c5:d4:56:a8:41: 53:ea:21:ba:af:73:96:85:19:11:8a:e9:16:87:48:ac:16:6b: c8:13:5b:67:dd:47:98:31:95:c7:de:0c:e2:61:d5:ed:48:a3: be:1d:fa:50:67:2a:58:04:91:64:dc:cf:15:96:bb:50:0e:2e: 23:17:41:3b:86:72:71:d3:78:e4:a7:5b:df:76:82:4e:63:4d: 75:5d:50:79 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt5EELH9/J5q0RkkjcuVTWaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0YTdlNWEzM2Q5YzVhOTY1ZDlmYmZkZWVjZGM4NzFhZjBh NWQ0ZjgwHhcNMjYwMTAxMTAxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjExYWM1NDk0MWUwNzM2YzEyZTkwYTQxNGIzNWYzYWY2NWI1Yjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTujU5Oe9BCC49tSFt5XnrjU+5/U 1qhPp6F6C7cqaU1o6E812+720a+fcEs5IFxjZ7uSL2cGe79tafhTPZASzJiQYZXB rIerHzL47L42jW3my9YYqjBKMcaUL/CUqPc6lTM6kAqC1W+mVMyMCG4NUBzwVTWi TbJyO0oNuuMGRuqkU+jB1lcNbPkKM61GqLskBILH09gepZrOjfbLcmjRT75JQlqa DW8TbkZkdDb5kiqDG4kKAScg7mDS1lQu5sS+R61WrGGW/1PTxo29yAEuDmFgNLll Lz/9okqNwgEf64jenofKyDa50sjihuRFxkJaPNKVvTyEvQw/QaNG9tt9WwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFP8RrFSUHgc2wS6QpBSzXzr2W1uFMB8GA1UdIwQY MBaAFESn5aM9nFqWXZ+/3uzchxrwpdT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUktmbG96MmNXcFpkbjdfZTdOeUhHdkNsMVBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wZDgwODgtZWE5My00YWJiLTg5OTYt MjFjZjU2Y2JjZTEyLzEvX3hHc1ZKUWVCemJCTHBDa0ZMTmZPdlpiVzRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8wZDgwODgtZWE5My00YWJiLTg5OTYtMjFjZjU2Y2JjZTEy LzEvUktmbG96MmNXcFpkbjdfZTdOeUhHdkNsMVBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQFUsSgAwQC ud6wAwQCwQggAwQBwSmoAwQBwcA2MA0GCSqGSIb3DQEBCwUAA4IBAQDNZDEe0EQe NDY8Tb1mbVhbDaLOB9XvNQS/Qxp1+QaYYvvHhrhc10+p7xBJkCLkoc7Jy+wm/A+3 ea1aiJME8f1ucOmexB5KCo3JqFY3Ixx1LMt1He+u9w6ua9cvlKrVdKNWIRcDcDME M6aBTfzyzFotDT5c8qlV9+16n7DrLS9Oz/QrLIvRWk3tkTTWvwzmmxft+WsKneBe wjMZPc7zEDyoSCGfKjYjsSEV3S0fWhmGxdRWqEFT6iG6r3OWhRkRiukWh0isFmvI E1tn3UeYMZXH3gziYdXtSKO+HfpQZypYBJFk3M8VlrtQDi4jF0E7hnJx03jkp1vf doJOY011XVB5 -----END CERTIFICATE-----Generated at Sun Jan 25 13:00:54 2026 by rpki-client