This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/xu7t96CgIHN3hwNmggXTcfk-UpA.roa File: xu7t96CgIHN3hwNmggXTcfk-UpA.roa (raw, json) Hash identifier: iRBThFuWjKJSamtnuVG+6/kq+wDEj0e0hvd45FkbUb0= Subject key identifier: C6:EE:ED:F7:A0:A0:20:73:77:87:03:66:82:05:D3:71:F9:3E:52:90 Certificate issuer: /CN=dbbf37909ce17ba53ad90a8632377a5d938743e5 Certificate serial: 019B7EA6B8715470C7C535141AEACA6F24C7 Authority key identifier: DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/xu7t96CgIHN3hwNmggXTcfk-UpA.roa Signing time: Fri 02 Jan 2026 12:20:14 +0000 ROA not before: Fri 02 Jan 2026 12:20:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 271791 IP address blocks: 82.86.104.0/21 maxlen: 21 82.86.104.0/24 maxlen: 24 82.86.105.0/24 maxlen: 24 82.86.106.0/24 maxlen: 24 82.86.107.0/24 maxlen: 24 82.86.108.0/24 maxlen: 24 82.86.109.0/24 maxlen: 24 82.86.110.0/24 maxlen: 24 82.86.111.0/24 maxlen: 24 82.86.168.0/21 maxlen: 21 82.86.168.0/24 maxlen: 24 82.86.169.0/24 maxlen: 24 82.86.170.0/24 maxlen: 24 82.86.171.0/24 maxlen: 24 82.86.172.0/24 maxlen: 24 82.86.173.0/24 maxlen: 24 82.86.174.0/24 maxlen: 24 82.86.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:b8:71:54:70:c7:c5:35:14:1a:ea:ca:6f:24:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbbf37909ce17ba53ad90a8632377a5d938743e5 Validity Not Before: Jan 2 12:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6eeedf7a0a02073778703668205d371f93e5290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3f:8e:07:82:61:02:0a:09:f1:a4:1b:a0:10: 93:b4:ca:f2:a7:da:e6:c0:9c:fa:9e:66:3d:c4:49: fb:35:3e:16:e3:6f:65:ed:d2:44:9a:b1:bf:30:6b: e8:5b:6d:43:8d:c5:89:ac:8c:cd:fa:3f:f1:dc:1d: d2:ec:ba:2a:fd:36:8b:73:b5:66:e2:b1:2e:51:23: 18:2a:40:1a:f1:ee:0e:e5:1d:79:a3:6b:ea:28:e4: e6:9a:8f:7d:b6:1c:7b:f9:90:67:d7:08:27:c0:64: e5:d8:44:25:c5:97:24:72:39:0f:53:15:e6:8c:1e: 47:f1:06:cf:52:ed:e4:94:53:dd:06:a3:08:9c:9e: b7:99:4e:2b:41:a6:c0:ed:4d:ee:7c:54:49:ac:34: 26:24:12:d3:37:b1:f4:6e:74:b7:4a:d5:fc:d6:05: ee:7f:cf:79:e3:32:e1:12:c3:35:1e:8d:9b:f3:c7: 24:39:aa:fc:55:9a:af:86:dc:f5:bd:61:d5:7e:22: c6:5b:bf:ac:62:25:84:7d:08:df:b3:be:1e:e0:30: 16:9e:3c:11:ee:68:2e:0d:d1:98:33:29:c0:49:8c: 35:ec:d4:00:a3:28:ac:8a:ae:c8:86:0e:bc:c2:b1: 56:12:d6:16:a4:40:6c:38:9b:53:15:f4:73:cb:d6: 3b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:EE:ED:F7:A0:A0:20:73:77:87:03:66:82:05:D3:71:F9:3E:52:90 X509v3 Authority Key Identifier: keyid:DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/xu7t96CgIHN3hwNmggXTcfk-UpA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.86.104.0/21 82.86.168.0/21 Signature Algorithm: sha256WithRSAEncryption 78:56:ba:a0:9e:e9:32:33:41:c7:12:0f:26:b7:87:c0:8d:63: 52:09:3b:db:d4:2e:eb:fc:c3:00:4a:1b:95:fb:32:2c:ad:c3: 38:17:10:d4:9d:02:d3:72:d0:dd:bf:62:db:14:aa:ec:91:fc: 53:3d:c9:e9:59:32:13:cf:84:ac:6c:ea:19:32:94:61:2d:d0: a6:ca:c8:61:01:32:ed:f3:ee:d9:b4:b0:96:12:47:4f:52:39: de:b8:31:93:f5:f0:5d:a9:10:27:e1:e6:7a:c9:47:2d:86:df: b7:1f:a1:48:fb:05:50:97:80:13:35:be:6e:46:1f:ff:ce:0a: 1a:f7:6c:6e:30:57:5e:42:c9:88:b5:60:ae:37:41:49:49:a3: 58:2f:41:c3:6e:e0:e8:d4:d9:5a:ee:54:3a:06:7e:cb:23:de: 50:64:90:c8:72:86:9b:17:a4:8f:3c:8d:7b:c3:82:7d:d3:20: 87:41:73:dd:59:3b:56:f7:0f:23:79:a2:a4:17:28:73:18:f1: 4d:33:40:1b:95:63:d7:e3:48:46:3c:56:da:4c:b8:53:95:54: d1:6b:4d:7a:1b:1d:89:71:fc:87:20:23:ae:c8:15:8c:3e:e1: 78:00:0c:2a:0e:d0:c0:a3:b0:7e:6b:76:86:26:fe:9d:af:f1: 0f:6c:34:24 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+prhxVHDHxTUUGurKbyTHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiYmYzNzkwOWNlMTdiYTUzYWQ5MGE4NjMyMzc3YTVkOTM4 NzQzZTUwHhcNMjYwMTAyMTIyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmVlZWRmN2EwYTAyMDczNzc4NzAzNjY4MjA1ZDM3MWY5M2U1MjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxT+OB4JhAgoJ8aQboBCTtMryp9rm wJz6nmY9xEn7NT4W429l7dJEmrG/MGvoW21DjcWJrIzN+j/x3B3S7Loq/TaLc7Vm 4rEuUSMYKkAa8e4O5R15o2vqKOTmmo99thx7+ZBn1wgnwGTl2EQlxZckcjkPUxXm jB5H8QbPUu3klFPdBqMInJ63mU4rQabA7U3ufFRJrDQmJBLTN7H0bnS3StX81gXu f8954zLhEsM1Ho2b88ckOar8VZqvhtz1vWHVfiLGW7+sYiWEfQjfs74e4DAWnjwR 7mguDdGYMynASYw17NQAoyisiq7Ihg68wrFWEtYWpEBsOJtTFfRzy9Y7QwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMbu7fegoCBzd4cDZoIF03H5PlKQMB8GA1UdIwQY MBaAFNu/N5Cc4XulOtkKhjI3el2Th0PlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjc4M2tKemhlNlU2MlFxR01qZDZYWk9IUS1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8xMzczYTAtOGMzZC00MjgzLWE1Y2Ut ODIyZWE0M2RjMThkLzEveHU3dDk2Q2dJSE4zaHdObWdnWFRjZmstVXBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8xMzczYTAtOGMzZC00MjgzLWE1Y2UtODIyZWE0M2RjMThk LzEvMjc4M2tKemhlNlU2MlFxR01qZDZYWk9IUS1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDUlZoAwQD UlaoMA0GCSqGSIb3DQEBCwUAA4IBAQB4VrqgnukyM0HHEg8mt4fAjWNSCTvb1C7r /MMAShuV+zIsrcM4FxDUnQLTctDdv2LbFKrskfxTPcnpWTITz4SsbOoZMpRhLdCm yshhATLt8+7ZtLCWEkdPUjneuDGT9fBdqRAn4eZ6yUctht+3H6FI+wVQl4ATNb5u Rh//zgoa92xuMFdeQsmItWCuN0FJSaNYL0HDbuDo1Nla7lQ6Bn7LI95QZJDIcoab F6SPPI17w4J90yCHQXPdWTtW9w8jeaKkFyhzGPFNM0AblWPX40hGPFbaTLhTlVTR a016Gx2JcfyHICOuyBWMPuF4AAwqDtDAo7B+a3aGJv6dr/EPbDQk -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:34 2026 by rpki-client