This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/xJFI4mrIs8uN5TlhHVLxpsA2hsU.roa File: xJFI4mrIs8uN5TlhHVLxpsA2hsU.roa (raw, json) Hash identifier: 7LWb0I2IanjDr9ngdvZoV0Vpn7u1mnQr4dTehW6hxdQ= Subject key identifier: C4:91:48:E2:6A:C8:B3:CB:8D:E5:39:61:1D:52:F1:A6:C0:36:86:C5 Certificate issuer: /CN=a4e7205f5d41257a6bb95f900eec0a1123e75164 Certificate serial: 019B7DCA11C96B9C7359CD99D89856145CB6 Authority key identifier: A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/xJFI4mrIs8uN5TlhHVLxpsA2hsU.roa Signing time: Fri 02 Jan 2026 08:19:13 +0000 ROA not before: Fri 02 Jan 2026 08:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207199 IP address blocks: 46.36.204.0/22 maxlen: 22 46.36.208.0/21 maxlen: 21 77.243.128.0/20 maxlen: 20 81.95.240.0/20 maxlen: 20 81.95.249.0/24 maxlen: 24 91.197.248.0/22 maxlen: 22 91.217.201.0/24 maxlen: 24 109.71.56.0/21 maxlen: 21 178.251.0.0/21 maxlen: 21 178.251.1.0/24 maxlen: 24 185.25.140.0/24 maxlen: 24 185.154.240.0/22 maxlen: 22 185.235.52.0/22 maxlen: 22 185.235.52.0/24 maxlen: 24 193.239.96.0/22 maxlen: 22 195.69.128.0/22 maxlen: 22 2a02:2339::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:11:c9:6b:9c:73:59:cd:99:d8:98:56:14:5c:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4e7205f5d41257a6bb95f900eec0a1123e75164 Validity Not Before: Jan 2 08:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c49148e26ac8b3cb8de539611d52f1a6c03686c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d7:3a:90:e1:7f:16:d7:8f:46:1f:47:e4:76: 4c:07:86:3b:a4:54:39:5e:11:dc:87:8d:52:d1:74: 5b:90:ff:34:c0:43:6f:72:90:1f:49:8b:7d:2e:f7: b2:a4:20:9c:e9:62:8c:a1:fb:ae:e9:aa:5e:62:25: dd:f8:74:fe:fb:b1:57:dc:94:14:75:77:42:ac:2d: 3e:65:cf:e8:25:b5:61:b5:c6:c6:2d:d1:bb:66:39: 2b:d1:4b:b7:3b:e2:44:e9:9f:6c:42:dc:ff:82:be: c1:a7:c7:0b:7e:27:c7:90:d6:68:ce:f4:57:5a:11: 88:5a:46:c8:d1:c7:77:32:29:7d:37:3c:bf:88:d9: 2e:c1:ac:38:57:71:3b:a8:1a:e9:31:f8:d0:49:37: 7d:22:14:ed:b9:52:ec:a5:d6:b9:a6:a3:78:fb:79: 0b:e5:79:0b:85:be:12:d3:b8:22:74:5d:6f:d3:98: e4:0e:15:25:97:b5:a7:79:55:a8:88:c6:0a:28:02: b8:3f:59:54:95:10:1c:82:ac:bf:6d:8e:f6:1e:02: 32:d2:1f:2d:71:48:03:f5:ff:45:58:0d:2d:61:95: b3:90:53:7d:ef:44:bc:e7:9e:ee:a9:ae:0b:f8:a4: 60:d5:7c:a0:70:1d:aa:32:02:f5:7f:1a:1e:0a:58: bc:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:91:48:E2:6A:C8:B3:CB:8D:E5:39:61:1D:52:F1:A6:C0:36:86:C5 X509v3 Authority Key Identifier: keyid:A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/xJFI4mrIs8uN5TlhHVLxpsA2hsU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.36.204.0-46.36.215.255 77.243.128.0/20 81.95.240.0/20 91.197.248.0/22 91.217.201.0/24 109.71.56.0/21 178.251.0.0/21 185.25.140.0/24 185.154.240.0/22 185.235.52.0/22 193.239.96.0/22 195.69.128.0/22 IPv6: 2a02:2339::/36 Signature Algorithm: sha256WithRSAEncryption 0d:8a:70:03:95:45:15:50:50:4b:7f:29:98:15:e9:0e:e6:5b: b7:55:82:54:77:3c:8b:ac:f9:1a:12:ae:3e:43:31:ae:7e:f9: df:0f:65:e4:8f:ca:db:56:22:f3:ff:4d:3b:97:21:59:9c:71: 71:59:09:26:22:44:46:68:37:ec:48:11:67:85:c0:58:fa:af: f1:83:5d:9a:c6:fa:ef:d6:51:f2:4d:48:55:6d:f5:44:3f:dc: 2f:02:5c:ca:5b:16:8f:95:ce:00:cf:30:ea:0f:79:4f:90:c7: 31:12:d2:94:90:93:94:a5:21:dd:73:1a:b9:7e:6e:59:f8:b4: 40:95:8b:72:ed:e8:e1:18:08:9a:30:4d:85:dc:8c:60:7f:72: 08:8a:7a:4a:48:83:d9:f6:b2:44:f8:91:92:e5:fa:28:6d:51: fb:cb:c8:5c:80:84:54:0b:8f:75:c1:9e:52:63:25:83:ca:e2: 78:5e:ad:e3:1a:92:07:b6:d2:55:bd:5d:cc:43:39:af:31:19: d3:33:ed:82:6e:1a:d8:09:ee:55:ec:28:b9:76:2d:57:a9:4c: 85:7a:a3:45:21:fc:bf:d3:32:01:74:0f:8f:42:72:52:e7:8b: a8:41:67:86:71:e9:c2:d2:ce:80:68:12:10:ee:a0:3c:1c:61: b5:b3:a6:37 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgISAZt9yhHJa5xzWc2Z2JhWFFy2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZTcyMDVmNWQ0MTI1N2E2YmI5NWY5MDBlZWMwYTExMjNl NzUxNjQwHhcNMjYwMTAyMDgxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDkxNDhlMjZhYzhiM2NiOGRlNTM5NjExZDUyZjFhNmMwMzY4NmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNc6kOF/FtePRh9H5HZMB4Y7pFQ5 XhHch41S0XRbkP80wENvcpAfSYt9LveypCCc6WKMofuu6apeYiXd+HT++7FX3JQU dXdCrC0+Zc/oJbVhtcbGLdG7Zjkr0Uu3O+JE6Z9sQtz/gr7Bp8cLfifHkNZozvRX WhGIWkbI0cd3Mil9Nzy/iNkuwaw4V3E7qBrpMfjQSTd9IhTtuVLspda5pqN4+3kL 5XkLhb4S07gidF1v05jkDhUll7WneVWoiMYKKAK4P1lUlRAcgqy/bY72HgIy0h8t cUgD9f9FWA0tYZWzkFN970S8557uqa4L+KRg1XygcB2qMgL1fxoeCli8bwIDAQAB o4ICYzCCAl8wHQYDVR0OBBYEFMSRSOJqyLPLjeU5YR1S8abANobFMB8GA1UdIwQY MBaAFKTnIF9dQSV6a7lfkA7sChEj51FkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE9jZ1gxMUJKWHBydVYtUUR1d0tFU1BuVVdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9mNzYxYmQtNWMzYS00ZDJmLThjZDkt M2U1OWNlNDQ1YjFjLzEveEpGSTRtcklzOHVONVRsaEhWTHhwc0EyaHNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9mNzYxYmQtNWMzYS00ZDJmLThjZDktM2U1OWNlNDQ1YjFj LzEvcE9jZ1gxMUJKWHBydVYtUUR1d0tFU1BuVVdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHkGCCsGAQUFBwEHAQH/BGowaDBWBAIAATBQMAwDBAIuJMwD BAMuJNADBARN84ADBARRX/ADBAJbxfgDBABb2ckDBANtRzgDBAOy+wADBAC5GYwD BAK5mvADBAK56zQDBALB72ADBALDRYAwDgQCAAIwCAMGBCoCIzkAMA0GCSqGSIb3 DQEBCwUAA4IBAQANinADlUUVUFBLfymYFekO5lu3VYJUdzyLrPkaEq4+QzGufvnf D2Xkj8rbViLz/007lyFZnHFxWQkmIkRGaDfsSBFnhcBY+q/xg12axvrv1lHyTUhV bfVEP9wvAlzKWxaPlc4AzzDqD3lPkMcxEtKUkJOUpSHdcxq5fm5Z+LRAlYty7ejh GAiaME2F3Ixgf3IIinpKSIPZ9rJE+JGS5foobVH7y8hcgIRUC491wZ5SYyWDyuJ4 Xq3jGpIHttJVvV3MQzmvMRnTM+2CbhrYCe5V7Ci5di1XqUyFeqNFIfy/0zIBdA+P QnJS54uoQWeGcenC0s6AaBIQ7qA8HGG1s6Y3 -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:15 2026 by rpki-client