This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/xzXaYpELPohXHyaBsryyzKsxpi8.roa File: xzXaYpELPohXHyaBsryyzKsxpi8.roa (raw, json) Hash identifier: Pac357tmTBXSGA3lzxCsfoP5+/cvABrR8JYDv2qCuqQ= Subject key identifier: C7:35:DA:62:91:0B:3E:88:57:1F:26:81:B2:BC:B2:CC:AB:31:A6:2F Certificate issuer: /CN=69507f066f2bb0389dd88436074e1426114f2d92 Certificate serial: 019B7758F40194AA87476F7570F06BCC9DB5 Authority key identifier: 69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/xzXaYpELPohXHyaBsryyzKsxpi8.roa Signing time: Thu 01 Jan 2026 02:17:56 +0000 ROA not before: Thu 01 Jan 2026 02:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210079 IP address blocks: 2.56.88.0/24 maxlen: 24 2.56.89.0/24 maxlen: 24 95.142.35.0/24 maxlen: 24 95.142.36.0/24 maxlen: 24 95.142.37.0/24 maxlen: 24 95.142.38.0/24 maxlen: 24 95.142.39.0/24 maxlen: 24 95.142.40.0/24 maxlen: 24 95.142.42.0/24 maxlen: 24 95.142.43.0/24 maxlen: 24 95.142.44.0/24 maxlen: 24 178.208.68.0/24 maxlen: 24 178.208.69.0/24 maxlen: 24 178.208.70.0/24 maxlen: 24 178.208.71.0/24 maxlen: 24 178.208.92.0/24 maxlen: 24 178.208.94.0/24 maxlen: 24 178.208.95.0/24 maxlen: 24 185.105.109.0/24 maxlen: 24 185.105.110.0/24 maxlen: 24 185.105.111.0/24 maxlen: 24 185.154.52.0/24 maxlen: 24 185.154.53.0/24 maxlen: 24 185.154.54.0/24 maxlen: 24 185.154.55.0/24 maxlen: 24 2a09:c140:3::/48 maxlen: 48 2a09:c140:db::/48 maxlen: 48 2a09:c140:900d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:f4:01:94:aa:87:47:6f:75:70:f0:6b:cc:9d:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69507f066f2bb0389dd88436074e1426114f2d92 Validity Not Before: Jan 1 02:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c735da62910b3e88571f2681b2bcb2ccab31a62f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c2:12:d7:f7:c4:f7:42:05:4a:6d:65:b7:c0: 54:64:f8:3a:32:d0:46:57:ab:93:db:55:e1:3d:90: 07:42:51:76:2e:6d:7f:85:2e:fb:b4:da:bc:df:ad: bc:f9:1f:33:f3:55:a6:86:fa:c5:6f:83:3e:9d:8a: c7:a2:d6:1a:13:46:57:52:98:9a:d9:ef:32:57:0c: ce:34:b5:5d:a2:39:4b:3e:44:76:bb:bc:2a:da:91: f0:22:67:5f:fa:46:8e:f0:68:0b:75:12:19:07:02: 3a:1e:f9:aa:aa:0f:fe:87:a9:83:1c:88:ab:0f:0a: 62:82:dd:f3:a3:e1:6a:e6:92:1a:1b:7f:c5:9a:d8: 4f:e0:5d:ce:9c:11:bd:76:05:25:95:ee:c1:5f:47: 56:77:26:93:a2:54:83:d0:08:b8:cc:95:a3:51:24: b2:fe:9a:87:01:e1:a6:45:e7:42:61:ea:6b:e4:41: f4:ee:bb:61:82:0e:c9:85:db:62:df:fe:73:e6:1b: ff:60:3c:d5:65:02:41:1e:6f:7f:83:48:46:e2:c2: 56:c8:6d:64:31:a7:ad:9e:67:9b:8a:1f:7a:5d:14: 66:f4:da:48:77:41:a3:e0:e2:ce:c4:5f:8f:66:39: e7:25:bc:76:5d:72:59:22:c6:03:1b:3d:39:ea:0d: ac:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:35:DA:62:91:0B:3E:88:57:1F:26:81:B2:BC:B2:CC:AB:31:A6:2F X509v3 Authority Key Identifier: keyid:69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/xzXaYpELPohXHyaBsryyzKsxpi8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.88.0/23 95.142.35.0-95.142.40.255 95.142.42.0-95.142.44.255 178.208.68.0/22 178.208.92.0/24 178.208.94.0/23 185.105.109.0-185.105.111.255 185.154.52.0/22 IPv6: 2a09:c140:3::/48 2a09:c140:db::/48 2a09:c140:900d::/48 Signature Algorithm: sha256WithRSAEncryption a9:c6:d2:b3:e4:e2:2c:56:38:0d:89:ab:51:48:ff:b5:26:ab: 1c:bb:c5:c0:72:27:71:25:31:c1:17:df:28:40:cf:02:3a:16: 25:51:ee:7d:95:12:39:db:88:a2:87:a2:f7:9e:e3:70:68:4e: 70:20:d3:95:b7:70:d2:ff:7d:18:26:1c:7d:9a:5e:25:b1:31: c1:06:43:6e:9f:25:6f:34:7a:01:ad:45:48:a3:73:9f:5c:f2: 66:41:14:8d:72:cc:6f:72:3d:4f:93:be:0d:e4:58:3d:cd:7f: b5:99:dc:20:0c:6b:0a:39:73:9a:e3:c7:0c:d3:d1:97:96:90: ad:ff:8f:bf:d6:08:b1:5e:36:fa:09:1d:20:b4:f5:0c:d8:f6: 68:f5:26:d3:5c:a2:f0:c3:55:c5:ed:6a:a7:92:36:76:9f:92: 29:98:a5:91:95:52:12:dd:f4:bc:49:b9:27:d8:6a:d6:5c:ac: 45:da:40:ed:3c:d0:05:95:53:8b:8b:19:8c:b9:d7:9e:73:0b: bc:ae:76:0a:09:39:79:ea:96:4a:58:f7:a6:2d:0b:44:b4:30: 3f:bf:a6:ec:91:e4:94:24:af:a0:72:ab:a0:9f:5e:fe:a6:cc: 6f:6b:36:99:2d:ab:79:1e:27:36:6d:3a:b4:2d:92:4c:84:90: 73:75:0d:a1 -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgISAZt3WPQBlKqHR291cPBrzJ21MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NTA3ZjA2NmYyYmIwMzg5ZGQ4ODQzNjA3NGUxNDI2MTE0 ZjJkOTIwHhcNMjYwMTAxMDIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzM1ZGE2MjkxMGIzZTg4NTcxZjI2ODFiMmJjYjJjY2FiMzFhNjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMIS1/fE90IFSm1lt8BUZPg6MtBG V6uT21XhPZAHQlF2Lm1/hS77tNq83628+R8z81WmhvrFb4M+nYrHotYaE0ZXUpia 2e8yVwzONLVdojlLPkR2u7wq2pHwImdf+kaO8GgLdRIZBwI6Hvmqqg/+h6mDHIir Dwpigt3zo+Fq5pIaG3/FmthP4F3OnBG9dgUlle7BX0dWdyaTolSD0Ai4zJWjUSSy /pqHAeGmRedCYepr5EH07rthgg7Jhdti3/5z5hv/YDzVZQJBHm9/g0hG4sJWyG1k Maetnmebih96XRRm9NpId0Gj4OLOxF+PZjnnJbx2XXJZIsYDGz056g2svwIDAQAB o4ICbzCCAmswHQYDVR0OBBYEFMc12mKRCz6IVx8mgbK8ssyrMaYvMB8GA1UdIwQY MBaAFGlQfwZvK7A4ndiENgdOFCYRTy2SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVZCX0JtOHJzRGlkMklRMkIwNFVKaEZQTFpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9iZjgzMzgtODc1Mi00ZDU1LTljMzEt MGUxYjhmZWE4OTEzLzEveHpYYVlwRUxQb2hYSHlhQnNyeXl6S3N4cGk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9iZjgzMzgtODc1Mi00ZDU1LTljMzEtMGUxYjhmZWE4OTEz LzEvYVZCX0JtOHJzRGlkMklRMkIwNFVKaEZQTFpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGEBggrBgEFBQcBBwEB/wR1MHMwTgQCAAEwSAMEAQI4WDAM AwQAX44jAwQAX44oMAwDBAFfjioDBABfjiwDBAKy0EQDBACy0FwDBAGy0F4wDAME ALlpbQMEBLlpYAMEArmaNDAhBAIAAjAbAwcAKgnBQAADAwcAKgnBQADbAwcAKgnB QJANMA0GCSqGSIb3DQEBCwUAA4IBAQCpxtKz5OIsVjgNiatRSP+1Jqscu8XAcidx JTHBF98oQM8COhYlUe59lRI524iih6L3nuNwaE5wINOVt3DS/30YJhx9ml4lsTHB BkNunyVvNHoBrUVIo3OfXPJmQRSNcsxvcj1Pk74N5Fg9zX+1mdwgDGsKOXOa48cM 09GXlpCt/4+/1gixXjb6CR0gtPUM2PZo9SbTXKLww1XF7WqnkjZ2n5IpmKWRlVIS 3fS8Sbkn2GrWXKxF2kDtPNAFlVOLixmMudeecwu8rnYKCTl56pZKWPemLQtEtDA/ v6bskeSUJK+gcqugn17+psxvazaZLat5Hic2bTq0LZJMhJBzdQ2h -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:58 2026 by rpki-client