This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/xGmOekfubsRhvEzmUx6DfhI2UQg.roa File: xGmOekfubsRhvEzmUx6DfhI2UQg.roa (raw, json) Hash identifier: GZJDN9gV3iv+l7toxADzRe6VfxkXCMDMjsfL9sGYifs= Subject key identifier: C4:69:8E:7A:47:EE:6E:C4:61:BC:4C:E6:53:1E:83:7E:12:36:51:08 Certificate issuer: /CN=d3abf8f4cdf8963a182da0cdf908c38447fa7a09 Certificate serial: 019B77C661538BFC52520A91620B32547DA5 Authority key identifier: D3:AB:F8:F4:CD:F8:96:3A:18:2D:A0:CD:F9:08:C3:84:47:FA:7A:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/xGmOekfubsRhvEzmUx6DfhI2UQg.roa Signing time: Thu 01 Jan 2026 04:17:28 +0000 ROA not before: Thu 01 Jan 2026 04:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39704 IP address blocks: 185.146.216.0/23 maxlen: 23 185.146.218.0/23 maxlen: 23 2a07:52c0::/29 maxlen: 29 2a07:52c0::/32 maxlen: 32 2a07:52c2::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.crl rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:61:53:8b:fc:52:52:0a:91:62:0b:32:54:7d:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3abf8f4cdf8963a182da0cdf908c38447fa7a09 Validity Not Before: Jan 1 04:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4698e7a47ee6ec461bc4ce6531e837e12365108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:86:fc:24:24:4a:b2:81:2f:53:7f:69:3b:5b: 52:a9:d6:1f:db:81:3d:28:e8:0d:ed:93:f1:53:e3: 51:7c:6d:62:33:ce:e6:6d:5e:86:a7:a3:09:65:51: 3b:d9:c7:e5:e8:d8:e0:37:1d:e6:a1:2b:67:6c:5b: f1:76:31:ce:21:44:f6:59:5f:72:25:b1:70:22:e4: 76:6b:43:26:e5:bd:ab:da:5c:af:3e:bb:18:64:18: a8:85:80:88:3b:53:74:27:69:8d:75:23:d1:8c:cf: 51:d6:0e:5a:76:3b:fe:cf:c9:07:1f:2a:bf:20:af: 03:75:66:0c:c4:69:70:dd:ae:79:43:67:c5:e8:4b: ff:d2:36:be:22:e1:e5:92:e3:6d:40:fd:c2:74:79: 06:60:de:a3:1a:c5:70:15:88:6b:e1:ed:70:db:dc: 87:33:5a:bd:42:51:f2:31:70:e5:f4:40:85:a5:7d: e7:fd:12:36:26:e4:c1:99:27:5f:e6:35:6b:b1:a7: 21:68:b5:94:da:c6:d9:37:52:0b:ab:1b:08:e7:d6: fd:5f:2b:e8:e9:ce:81:63:d1:70:81:50:82:ac:5b: 74:29:30:7e:b9:bd:66:e0:58:88:62:da:fc:a9:98: 3f:ff:d1:d7:d4:c7:af:5d:3d:e9:f9:38:07:f2:38: d7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:69:8E:7A:47:EE:6E:C4:61:BC:4C:E6:53:1E:83:7E:12:36:51:08 X509v3 Authority Key Identifier: keyid:D3:AB:F8:F4:CD:F8:96:3A:18:2D:A0:CD:F9:08:C3:84:47:FA:7A:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/xGmOekfubsRhvEzmUx6DfhI2UQg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.146.216.0/22 IPv6: 2a07:52c0::/29 Signature Algorithm: sha256WithRSAEncryption 3b:d6:92:86:b7:d5:b8:41:92:37:c5:dc:ea:70:25:be:68:8b: 7e:4f:d2:d9:2b:f6:f9:5e:2c:06:09:a9:03:9d:28:40:4f:85: 62:22:cb:87:9a:43:4a:b0:88:44:f2:5b:a3:27:e2:9a:28:1a: 08:af:9d:83:c4:b7:67:b7:bd:39:6e:a0:52:19:9c:49:e2:c6: 48:46:ec:7a:03:2b:1d:1c:07:c3:2b:b0:23:4b:09:b0:98:58: a5:fc:8c:2a:bc:f5:e8:dd:e1:14:3d:e8:05:46:ab:f3:74:6a: 57:41:e5:47:0f:50:b4:b6:d9:90:ea:7c:14:a5:f7:96:ac:f9: c1:0a:43:ac:79:8d:88:29:31:ff:b5:24:db:b9:3a:12:88:e5: a7:f5:c0:7f:cb:8d:41:1d:57:22:b1:8a:88:37:c7:4c:4f:41: 02:65:f6:22:43:7e:6e:74:6e:64:2b:ca:9a:50:7c:87:7d:f9: b3:e0:90:8e:e0:58:ff:8f:24:09:fd:4e:2f:a9:42:24:fd:7f: be:bb:d4:71:34:4b:4e:b3:e9:c3:43:0d:5f:02:7e:ea:f6:2b: 05:14:44:82:3a:04:f0:bd:7d:5e:bd:67:93:ef:18:79:b7:32: 70:4c:44:e3:b2:05:4f:9b:38:d3:5f:77:fb:84:42:74:58:9e: 28:ba:d9:51 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3xmFTi/xSUgqRYgsyVH2lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYWJmOGY0Y2RmODk2M2ExODJkYTBjZGY5MDhjMzg0NDdm YTdhMDkwHhcNMjYwMTAxMDQxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDY5OGU3YTQ3ZWU2ZWM0NjFiYzRjZTY1MzFlODM3ZTEyMzY1MTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYb8JCRKsoEvU39pO1tSqdYf24E9 KOgN7ZPxU+NRfG1iM87mbV6Gp6MJZVE72cfl6NjgNx3moStnbFvxdjHOIUT2WV9y JbFwIuR2a0Mm5b2r2lyvPrsYZBiohYCIO1N0J2mNdSPRjM9R1g5adjv+z8kHHyq/ IK8DdWYMxGlw3a55Q2fF6Ev/0ja+IuHlkuNtQP3CdHkGYN6jGsVwFYhr4e1w29yH M1q9QlHyMXDl9ECFpX3n/RI2JuTBmSdf5jVrsachaLWU2sbZN1ILqxsI59b9Xyvo 6c6BY9FwgVCCrFt0KTB+ub1m4FiIYtr8qZg//9HX1MevXT3p+TgH8jjX9QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMRpjnpH7m7EYbxM5lMeg34SNlEIMB8GA1UdIwQY MBaAFNOr+PTN+JY6GC2gzfkIw4RH+noJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDZ2NDlNMzRsam9ZTGFETi1RakRoRWY2ZWdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yNmQxOTMtNDBjMi00MTdiLWJkNTIt NWMxMGJkYjg2NmUwLzEveEdtT2VrZnVic1JodkV6bVV4NkRmaEkyVVFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8yNmQxOTMtNDBjMi00MTdiLWJkNTItNWMxMGJkYjg2NmUw LzEvMDZ2NDlNMzRsam9ZTGFETi1RakRoRWY2ZWdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZLYMA0E AgACMAcDBQMqB1LAMA0GCSqGSIb3DQEBCwUAA4IBAQA71pKGt9W4QZI3xdzqcCW+ aIt+T9LZK/b5XiwGCakDnShAT4ViIsuHmkNKsIhE8lujJ+KaKBoIr52DxLdnt705 bqBSGZxJ4sZIRux6AysdHAfDK7AjSwmwmFil/IwqvPXo3eEUPegFRqvzdGpXQeVH D1C0ttmQ6nwUpfeWrPnBCkOseY2IKTH/tSTbuToSiOWn9cB/y41BHVcisYqIN8dM T0ECZfYiQ35udG5kK8qaUHyHffmz4JCO4Fj/jyQJ/U4vqUIk/X++u9RxNEtOs+nD Qw1fAn7q9isFFESCOgTwvX1evWeT7xh5tzJwTETjsgVPmzjTX3f7hEJ0WJ4outlR -----END CERTIFICATE-----Generated at Mon Jan 26 04:40:40 2026 by rpki-client