This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/XYRMpXTmrwZ9ysuk8CmU8-sXMDE.roa File: XYRMpXTmrwZ9ysuk8CmU8-sXMDE.roa (raw, json) Hash identifier: HTGn1k4c6oETgpfUTnE83wF8MXn0cJBcwbbcColhYVo= Subject key identifier: 5D:84:4C:A5:74:E6:AF:06:7D:CA:CB:A4:F0:29:94:F3:EB:17:30:31 Certificate issuer: /CN=8ef66691ad3a41652f5bd8596230b3ac743d2a2c Certificate serial: 019B77597229EB8D995D889B42F31A05319B Authority key identifier: 8E:F6:66:91:AD:3A:41:65:2F:5B:D8:59:62:30:B3:AC:74:3D:2A:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvZmka06QWUvW9hZYjCzrHQ9Kiw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/XYRMpXTmrwZ9ysuk8CmU8-sXMDE.roa Signing time: Thu 01 Jan 2026 02:18:29 +0000 ROA not before: Thu 01 Jan 2026 02:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211130 IP address blocks: 31.128.112.0/24 maxlen: 24 31.128.113.0/24 maxlen: 24 31.128.114.0/24 maxlen: 24 31.128.115.0/24 maxlen: 24 31.128.116.0/24 maxlen: 24 31.128.117.0/24 maxlen: 24 31.128.118.0/24 maxlen: 24 31.128.119.0/24 maxlen: 24 31.128.120.0/24 maxlen: 24 31.128.121.0/24 maxlen: 24 31.128.122.0/24 maxlen: 24 31.128.123.0/24 maxlen: 24 31.128.124.0/24 maxlen: 24 31.128.125.0/24 maxlen: 24 31.128.126.0/24 maxlen: 24 31.128.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/jvZmka06QWUvW9hZYjCzrHQ9Kiw.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/jvZmka06QWUvW9hZYjCzrHQ9Kiw.mft rsync://rpki.ripe.net/repository/DEFAULT/jvZmka06QWUvW9hZYjCzrHQ9Kiw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:72:29:eb:8d:99:5d:88:9b:42:f3:1a:05:31:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ef66691ad3a41652f5bd8596230b3ac743d2a2c Validity Not Before: Jan 1 02:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d844ca574e6af067dcacba4f02994f3eb173031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:4d:5e:c9:22:3a:c3:c2:fa:ae:24:6a:6b:b2: 42:ab:61:84:01:96:3b:77:71:64:88:50:de:9e:fd: c4:86:f9:b9:d0:a3:87:f6:22:8c:4c:2c:25:7a:c8: 9c:b9:a7:f8:50:dc:ca:cd:a6:75:58:5e:cb:e6:4a: 0f:86:ce:d8:83:1f:a1:14:e8:6f:f6:7c:15:f2:05: 7f:2d:68:20:4a:71:31:1b:03:91:9a:06:f0:6f:c0: a3:3d:8a:e3:1b:99:01:c7:c7:ee:c5:28:ed:51:9d: de:94:7d:24:24:92:42:71:18:c0:26:01:70:dc:d3: 7b:75:cd:b3:9c:91:6e:08:8d:2c:79:11:a1:20:8b: d0:68:27:09:82:d9:3c:58:6b:93:05:c0:33:6a:05: 23:7f:4a:7e:28:58:08:55:ac:5e:23:eb:dd:d2:24: 31:f5:dd:78:1a:0b:f4:4b:5f:98:2f:6b:b6:c7:24: 95:2e:a7:d4:f6:d8:5e:3d:9a:48:f3:d4:0e:8d:c8: 86:ff:34:4f:52:c6:17:12:0a:f6:e8:52:ee:3d:91: a9:01:38:46:d0:77:4d:8c:57:ea:44:ab:66:3c:15: d7:c5:bc:c9:65:07:d2:77:57:fc:e8:cf:66:7b:10: f0:50:d8:ef:56:59:4e:ca:87:7f:14:86:c9:c3:6d: da:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:84:4C:A5:74:E6:AF:06:7D:CA:CB:A4:F0:29:94:F3:EB:17:30:31 X509v3 Authority Key Identifier: keyid:8E:F6:66:91:AD:3A:41:65:2F:5B:D8:59:62:30:B3:AC:74:3D:2A:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvZmka06QWUvW9hZYjCzrHQ9Kiw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/XYRMpXTmrwZ9ysuk8CmU8-sXMDE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/jvZmka06QWUvW9hZYjCzrHQ9Kiw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.128.112.0/20 Signature Algorithm: sha256WithRSAEncryption 5e:86:88:c9:56:1c:de:d0:87:6c:30:d8:c5:3c:1e:17:c4:23: 55:fd:75:21:13:26:9b:5b:f9:de:7a:c3:89:9e:7e:35:7b:6f: 18:4c:57:82:a0:1b:b9:70:e4:2d:eb:7e:3b:7b:e7:86:37:38: e2:36:c5:4a:50:26:de:57:9f:d5:23:de:35:3d:cd:42:76:71: 74:58:92:87:9a:89:ca:b8:34:14:65:0b:c8:c4:84:e5:20:b0: a4:41:9d:35:a9:fe:77:a7:a7:46:b4:9c:ac:7c:dc:85:79:98: 08:a1:7a:4f:36:14:22:f2:3f:3f:22:c3:65:3e:e7:93:fe:79: 85:aa:48:ce:75:e6:6a:54:5b:d2:c0:37:64:bb:88:a1:22:80: a9:9f:e7:00:cc:c8:2c:b9:01:11:78:b6:f7:e0:b9:ec:ab:56: 3a:b9:ef:f2:50:f2:64:b4:e1:1d:c5:84:eb:38:fb:85:38:26: cc:d7:4f:85:36:7b:64:37:af:da:67:d9:2b:ce:4e:32:23:14: e3:22:fa:90:f7:3e:c1:7b:fa:6f:b4:05:cb:dc:98:3b:b1:57: f0:76:72:01:0a:d3:55:93:2c:cc:70:da:03:3b:26:7e:13:24: ab:b3:37:98:fd:e0:82:0a:42:d8:40:f9:56:c8:39:f4:92:e1: 75:1e:d6:97 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WXIp642ZXYibQvMaBTGbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlZjY2NjkxYWQzYTQxNjUyZjViZDg1OTYyMzBiM2FjNzQz ZDJhMmMwHhcNMjYwMTAxMDIxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDg0NGNhNTc0ZTZhZjA2N2RjYWNiYTRmMDI5OTRmM2ViMTczMDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8E1eySI6w8L6riRqa7JCq2GEAZY7 d3FkiFDenv3Ehvm50KOH9iKMTCwlesicuaf4UNzKzaZ1WF7L5koPhs7Ygx+hFOhv 9nwV8gV/LWggSnExGwORmgbwb8CjPYrjG5kBx8fuxSjtUZ3elH0kJJJCcRjAJgFw 3NN7dc2znJFuCI0seRGhIIvQaCcJgtk8WGuTBcAzagUjf0p+KFgIVaxeI+vd0iQx 9d14Ggv0S1+YL2u2xySVLqfU9thePZpI89QOjciG/zRPUsYXEgr26FLuPZGpAThG 0HdNjFfqRKtmPBXXxbzJZQfSd1f86M9mexDwUNjvVllOyod/FIbJw23aZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF2ETKV05q8GfcrLpPAplPPrFzAxMB8GA1UdIwQY MBaAFI72ZpGtOkFlL1vYWWIws6x0PSosMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanZabWthMDZRV1V2VzloWllqQ3pySFE5S2l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mYzg3ZmEtY2JmYS00ZjNjLTg4ZDMt YmE5MjJiYjFlYmI0LzEvWFlSTXBYVG1yd1o5eXN1azhDbVU4LXNYTURFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9mYzg3ZmEtY2JmYS00ZjNjLTg4ZDMtYmE5MjJiYjFlYmI0 LzEvanZabWthMDZRV1V2VzloWllqQ3pySFE5S2l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEH4BwMA0G CSqGSIb3DQEBCwUAA4IBAQBehojJVhze0IdsMNjFPB4XxCNV/XUhEyabW/neesOJ nn41e28YTFeCoBu5cOQt6347e+eGNzjiNsVKUCbeV5/VI941Pc1CdnF0WJKHmonK uDQUZQvIxITlILCkQZ01qf53p6dGtJysfNyFeZgIoXpPNhQi8j8/IsNlPueT/nmF qkjOdeZqVFvSwDdku4ihIoCpn+cAzMgsuQEReLb34Lnsq1Y6ue/yUPJktOEdxYTr OPuFOCbM10+FNntkN6/aZ9krzk4yIxTjIvqQ9z7Be/pvtAXL3Jg7sVfwdnIBCtNV kyzMcNoDOyZ+EySrszeY/eCCCkLYQPlWyDn0kuF1HtaX -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:03 2026 by rpki-client