This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/XoroHKzHcF4gIRR_sz3VpH7FRlk.roa File: XoroHKzHcF4gIRR_sz3VpH7FRlk.roa (raw, json) Hash identifier: gbEFPzyD3F8+HScFUiNxrYjDnQgNn3EhyOvcJtp08oc= Subject key identifier: 5E:8A:E8:1C:AC:C7:70:5E:20:21:14:7F:B3:3D:D5:A4:7E:C5:46:59 Certificate issuer: /CN=21269675acefbbf8497b1e21ca73764af4aa8c7b Certificate serial: 019B7AC7809B4CCA9DC88C320C0B8A438698 Authority key identifier: 21:26:96:75:AC:EF:BB:F8:49:7B:1E:21:CA:73:76:4A:F4:AA:8C:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/XoroHKzHcF4gIRR_sz3VpH7FRlk.roa Signing time: Thu 01 Jan 2026 18:17:33 +0000 ROA not before: Thu 01 Jan 2026 18:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39591 IP address blocks: 77.94.240.0/21 maxlen: 24 79.143.208.0/20 maxlen: 24 185.3.104.0/22 maxlen: 24 2a00:1280::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft rsync://rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:80:9b:4c:ca:9d:c8:8c:32:0c:0b:8a:43:86:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21269675acefbbf8497b1e21ca73764af4aa8c7b Validity Not Before: Jan 1 18:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e8ae81cacc7705e2021147fb33dd5a47ec54659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:de:8a:d1:cd:00:ca:b8:8d:5c:a9:1a:50:9f: ec:93:b8:85:09:c0:28:4f:5e:f5:16:dc:d7:19:73: 84:1f:b4:01:6d:06:a6:3c:ff:cb:2f:0a:ca:10:ee: c4:de:32:ab:83:a5:e0:00:04:ee:f3:7e:e4:79:14: 7c:fd:4f:f8:a9:aa:82:0d:0d:27:d9:18:d9:ee:b6: 67:4a:b5:6c:e6:2d:4b:fb:46:0e:3b:2e:18:0c:40: 1b:3f:c8:59:0d:fa:5e:8b:e2:71:bb:95:5b:26:33: a7:54:2f:9c:ef:36:e2:6d:b7:70:70:1f:01:9b:9c: 4e:96:08:0c:2c:d4:52:a4:1b:57:c0:00:68:a1:cf: 5d:7a:da:c1:eb:6e:d1:c0:47:46:d8:de:14:11:cd: e6:59:4d:26:60:7a:f0:0d:20:cb:40:1a:80:ae:49: 70:d4:80:8a:14:97:6b:71:8d:ca:3c:72:09:28:1d: e9:52:0e:37:6f:dc:e7:df:61:3f:ca:08:91:a2:0d: ee:8e:42:be:af:78:1a:2e:a7:0b:a5:e5:12:38:b3: 2e:37:7b:51:ff:1c:d8:11:09:2d:7e:e6:b8:5c:88: e4:a9:2c:82:1f:e6:35:1e:ad:da:3f:bf:2a:4b:32: 3f:01:68:5c:e9:63:88:01:92:f5:89:00:6d:0b:34: b1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:8A:E8:1C:AC:C7:70:5E:20:21:14:7F:B3:3D:D5:A4:7E:C5:46:59 X509v3 Authority Key Identifier: keyid:21:26:96:75:AC:EF:BB:F8:49:7B:1E:21:CA:73:76:4A:F4:AA:8C:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/XoroHKzHcF4gIRR_sz3VpH7FRlk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.94.240.0/21 79.143.208.0/20 185.3.104.0/22 IPv6: 2a00:1280::/32 Signature Algorithm: sha256WithRSAEncryption 44:64:59:46:dd:b5:4a:a5:26:17:3a:ee:6d:5f:c9:7c:55:fc: 9b:d2:2a:74:91:fb:b2:d7:8c:d5:bb:df:a3:ee:8d:49:c0:4b: 0b:98:a2:56:ed:d8:f0:a7:91:7c:20:0c:33:ed:5f:21:8d:99: 92:83:fc:25:97:71:c7:f9:07:01:be:ea:6e:7e:49:54:f3:44: a7:ef:93:bc:78:6d:da:93:c8:2e:12:bf:c3:6f:69:f0:96:8f: 83:54:9c:d2:bf:2b:44:a8:59:51:2e:85:1b:dc:30:4d:eb:3e: 15:5b:35:d0:44:2e:bb:34:bf:c7:56:97:1d:56:38:27:d2:58: 0e:ed:56:76:0e:60:ca:66:60:fc:62:48:0f:5f:32:be:43:f9: 1b:92:be:1b:79:ea:8c:4b:0d:b0:30:d6:79:24:2e:65:72:f9: d9:74:7b:a2:d1:d7:e2:b5:6c:1f:f1:b1:f1:63:0b:87:bd:57: 5e:ab:12:4c:31:fb:3d:d9:eb:7d:40:fe:5c:9d:1e:c3:05:fa: 7b:31:c3:b1:9d:0c:4b:af:b1:fa:d0:f7:16:3e:3a:30:36:c6: 46:b6:6a:b7:50:0d:73:63:a6:8e:1e:66:30:50:03:51:79:a9: a7:2e:d3:73:b8:ac:e5:47:e8:13:20:ec:f5:2a:6e:56:75:ec: 74:74:28:09 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt6x4CbTMqdyIwyDAuKQ4aYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMjY5Njc1YWNlZmJiZjg0OTdiMWUyMWNhNzM3NjRhZjRh YThjN2IwHhcNMjYwMTAxMTgxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZThhZTgxY2FjYzc3MDVlMjAyMTE0N2ZiMzNkZDVhNDdlYzU0NjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmN6K0c0AyriNXKkaUJ/sk7iFCcAo T171FtzXGXOEH7QBbQamPP/LLwrKEO7E3jKrg6XgAATu837keRR8/U/4qaqCDQ0n 2RjZ7rZnSrVs5i1L+0YOOy4YDEAbP8hZDfpei+Jxu5VbJjOnVC+c7zbibbdwcB8B m5xOlggMLNRSpBtXwABooc9detrB627RwEdG2N4UEc3mWU0mYHrwDSDLQBqArklw 1ICKFJdrcY3KPHIJKB3pUg43b9zn32E/ygiRog3ujkK+r3gaLqcLpeUSOLMuN3tR /xzYEQktfua4XIjkqSyCH+Y1Hq3aP78qSzI/AWhc6WOIAZL1iQBtCzSx6QIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFF6K6Bysx3BeICEUf7M91aR+xUZZMB8GA1UdIwQY MBaAFCEmlnWs77v4SXseIcpzdkr0qox7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVNhV2RhenZ1X2hKZXg0aHluTjJTdlNxakhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS81YWY2OTktYjFhOS00OWRjLWJkYzkt MWQ0ZGZiNGY0ODAwLzEvWG9yb0hLekhjRjRnSVJSX3N6M1ZwSDdGUmxrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS81YWY2OTktYjFhOS00OWRjLWJkYzktMWQ0ZGZiNGY0ODAw LzEvSVNhV2RhenZ1X2hKZXg0aHluTjJTdlNxakhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDTV7wAwQE T4/QAwQCuQNoMA0EAgACMAcDBQAqABKAMA0GCSqGSIb3DQEBCwUAA4IBAQBEZFlG 3bVKpSYXOu5tX8l8Vfyb0ip0kfuy14zVu9+j7o1JwEsLmKJW7djwp5F8IAwz7V8h jZmSg/wll3HH+QcBvupufklU80Sn75O8eG3ak8guEr/Db2nwlo+DVJzSvytEqFlR LoUb3DBN6z4VWzXQRC67NL/HVpcdVjgn0lgO7VZ2DmDKZmD8YkgPXzK+Q/kbkr4b eeqMSw2wMNZ5JC5lcvnZdHui0dfitWwf8bHxYwuHvVdeqxJMMfs92et9QP5cnR7D Bfp7McOxnQxLr7H60PcWPjowNsZGtmq3UA1zY6aOHmYwUANReamnLtNzuKzlR+gT IOz1Km5Wdex0dCgJ -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:52 2026 by rpki-client