This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/xl7hpqZJ1vTXp8SVYJa8rN-KYfc.roa File: xl7hpqZJ1vTXp8SVYJa8rN-KYfc.roa (raw, json) Hash identifier: LniWd40MUm27qbAUJ/AFuq8QyhRMHVdc7tCz6NRyg3k= Subject key identifier: C6:5E:E1:A6:A6:49:D6:F4:D7:A7:C4:95:60:96:BC:AC:DF:8A:61:F7 Certificate issuer: /CN=e0e53bb30d07520f857ae656f7ad813f22efd152 Certificate serial: 019B7C7F70B3295DB00F0DD163A81355E5BA Authority key identifier: E0:E5:3B:B3:0D:07:52:0F:85:7A:E6:56:F7:AD:81:3F:22:EF:D1:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OU7sw0HUg-FeuZW962BPyLv0VI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/xl7hpqZJ1vTXp8SVYJa8rN-KYfc.roa Signing time: Fri 02 Jan 2026 02:18:05 +0000 ROA not before: Fri 02 Jan 2026 02:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216220 IP address blocks: 216.162.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.mft rsync://rpki.ripe.net/repository/DEFAULT/4OU7sw0HUg-FeuZW962BPyLv0VI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:70:b3:29:5d:b0:0f:0d:d1:63:a8:13:55:e5:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0e53bb30d07520f857ae656f7ad813f22efd152 Validity Not Before: Jan 2 02:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c65ee1a6a649d6f4d7a7c4956096bcacdf8a61f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b8:c6:0d:7f:2d:61:c5:22:79:9b:94:46:60: d0:d8:a6:44:9b:ef:da:eb:b5:a2:ee:f8:80:41:3b: 6e:6b:af:92:9b:ce:9e:3e:78:8e:32:d6:d3:9f:d8: 6d:79:8e:25:aa:38:3c:ee:19:46:a6:cc:ce:58:a6: bb:23:9e:12:c5:6d:76:9d:d3:50:60:bc:a7:a4:7c: 7e:cf:0c:15:ce:24:33:8d:06:ff:31:27:95:f7:80: 4d:e3:fc:5b:9b:31:76:c5:89:a5:a3:f6:f0:80:e3: 5c:98:a9:2e:36:d5:71:01:45:8f:e6:d9:ea:5b:3d: 91:6e:78:96:42:b9:bf:7a:f0:29:05:dd:dd:47:be: ea:97:c5:43:0d:c3:c0:72:37:91:4a:bc:e0:a7:b2: 8b:da:49:ca:f5:ad:29:3f:ee:f3:88:ad:d7:16:9a: 39:21:70:33:9d:99:b8:f8:97:f5:6c:f8:1f:81:f3: bd:86:c7:01:7d:f9:07:9d:80:78:09:f4:c2:72:bf: 62:85:18:fc:86:da:8b:72:42:b7:14:59:05:f3:7d: 3d:93:b9:9e:00:23:5a:44:4e:d2:38:f3:18:da:88: 39:47:98:e0:36:8c:ab:51:98:89:44:34:ea:7f:5d: fc:fa:31:cb:4d:88:06:9a:7c:cf:f9:fc:dc:16:ae: de:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:5E:E1:A6:A6:49:D6:F4:D7:A7:C4:95:60:96:BC:AC:DF:8A:61:F7 X509v3 Authority Key Identifier: keyid:E0:E5:3B:B3:0D:07:52:0F:85:7A:E6:56:F7:AD:81:3F:22:EF:D1:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OU7sw0HUg-FeuZW962BPyLv0VI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/xl7hpqZJ1vTXp8SVYJa8rN-KYfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.162.198.0/23 Signature Algorithm: sha256WithRSAEncryption 6b:63:3d:48:a4:b9:71:d4:a9:ad:b5:ed:d6:86:07:56:6f:4f: 61:51:87:db:9b:3a:e6:1f:9a:88:71:8e:69:de:0b:58:55:f5: c1:6e:a7:51:f0:85:f2:c3:f6:38:1d:57:de:30:b4:a2:73:7f: a0:d2:64:ea:36:59:27:2e:7a:9e:17:41:d0:19:60:16:9a:5e: 56:e9:a2:fe:4b:88:66:cd:d5:fb:b1:35:19:47:c8:bf:f7:82: 1d:a0:41:49:90:f7:fc:17:3e:da:a2:b6:54:54:6e:8d:f6:91: d7:75:01:2b:35:24:82:7e:8d:08:b1:fe:a4:97:07:42:a1:b8: 3d:e1:34:30:36:22:9a:de:bc:a8:19:8e:10:7c:f8:f9:b1:71: fc:5f:ee:79:2b:be:9d:e8:97:b6:e8:54:a5:1b:a9:d1:b5:85: 61:66:3b:7d:25:27:b6:ba:25:90:e4:44:cc:07:d3:36:2f:45: 18:1b:a9:50:7a:c2:21:43:60:bc:73:a8:9d:7d:dc:40:ea:ea: d7:3e:ac:10:b8:d3:4a:d6:37:84:31:d0:dc:42:cf:cf:6f:63: 28:bd:e5:69:29:d7:bd:72:3a:2d:18:99:41:a5:01:33:c8:ce: ae:a4:d3:37:25:54:44:e1:d6:56:40:84:97:0b:df:f8:66:cb: 4f:8b:15:1f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f3CzKV2wDw3RY6gTVeW6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZTUzYmIzMGQwNzUyMGY4NTdhZTY1NmY3YWQ4MTNmMjJl ZmQxNTIwHhcNMjYwMTAyMDIxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjVlZTFhNmE2NDlkNmY0ZDdhN2M0OTU2MDk2YmNhY2RmOGE2MWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7LjGDX8tYcUieZuURmDQ2KZEm+/a 67Wi7viAQTtua6+Sm86ePniOMtbTn9hteY4lqjg87hlGpszOWKa7I54SxW12ndNQ YLynpHx+zwwVziQzjQb/MSeV94BN4/xbmzF2xYmlo/bwgONcmKkuNtVxAUWP5tnq Wz2RbniWQrm/evApBd3dR77ql8VDDcPAcjeRSrzgp7KL2knK9a0pP+7ziK3XFpo5 IXAznZm4+Jf1bPgfgfO9hscBffkHnYB4CfTCcr9ihRj8htqLckK3FFkF8309k7me ACNaRE7SOPMY2og5R5jgNoyrUZiJRDTqf138+jHLTYgGmnzP+fzcFq7enQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMZe4aamSdb016fElWCWvKzfimH3MB8GA1UdIwQY MBaAFODlO7MNB1IPhXrmVvetgT8i79FSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE9VN3N3MEhVZy1GZXVaVzk2MkJQeUx2MFZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9iYzJmNTMtOGU3NS00ZTBlLWJmZDQt MjliOWJmNTNhNTdmLzEveGw3aHBxWkoxdlRYcDhTVllKYThyTi1LWWZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9iYzJmNTMtOGU3NS00ZTBlLWJmZDQtMjliOWJmNTNhNTdm LzEvNE9VN3N3MEhVZy1GZXVaVzk2MkJQeUx2MFZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2KLGMA0G CSqGSIb3DQEBCwUAA4IBAQBrYz1IpLlx1Kmtte3WhgdWb09hUYfbmzrmH5qIcY5p 3gtYVfXBbqdR8IXyw/Y4HVfeMLSic3+g0mTqNlknLnqeF0HQGWAWml5W6aL+S4hm zdX7sTUZR8i/94IdoEFJkPf8Fz7aorZUVG6N9pHXdQErNSSCfo0Isf6klwdCobg9 4TQwNiKa3ryoGY4QfPj5sXH8X+55K76d6Je26FSlG6nRtYVhZjt9JSe2uiWQ5ETM B9M2L0UYG6lQesIhQ2C8c6idfdxA6urXPqwQuNNK1jeEMdDcQs/Pb2MoveVpKde9 cjotGJlBpQEzyM6upNM3JVRE4dZWQISXC9/4ZstPixUf -----END CERTIFICATE-----Generated at Sun Jan 25 15:12:12 2026 by rpki-client