This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/X3fPlEcezz2LtewMmlGePOr2KHg.roa File: X3fPlEcezz2LtewMmlGePOr2KHg.roa (raw, json) Hash identifier: 5g36Sq2zpkP21Y5qWvGwR57g8qXOqKbe5sby4b2OVKE= Subject key identifier: 5F:77:CF:94:47:1E:CF:3D:8B:B5:EC:0C:9A:51:9E:3C:EA:F6:28:78 Certificate issuer: /CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f Certificate serial: 019B7758D553C6127B369C6B860983D9AFEA Authority key identifier: CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/X3fPlEcezz2LtewMmlGePOr2KHg.roa Signing time: Thu 01 Jan 2026 02:17:48 +0000 ROA not before: Thu 01 Jan 2026 02:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212413 IP address blocks: 185.235.98.0/23 maxlen: 23 185.235.98.0/24 maxlen: 24 185.235.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:d5:53:c6:12:7b:36:9c:6b:86:09:83:d9:af:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f Validity Not Before: Jan 1 02:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f77cf94471ecf3d8bb5ec0c9a519e3ceaf62878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:59:24:2c:1c:db:03:b8:f1:82:8a:d9:4b:a6: 1f:58:a0:aa:bd:3b:5c:29:59:49:43:32:ef:8b:de: 45:bc:f3:c3:cd:ea:c7:2d:06:58:e5:53:c7:d7:57: 81:6f:e9:3e:c2:e3:09:3d:b8:64:61:c4:11:d0:d2: ad:c8:5b:8c:20:ec:a0:c6:af:ee:5e:37:1d:2c:84: cb:e5:f8:dc:ec:b7:c1:92:f3:af:71:ef:9e:1c:60: ec:79:24:fa:3b:a3:c4:93:48:33:96:31:37:cb:fa: 9a:f2:4d:35:92:a6:28:0b:4b:83:1c:d4:26:55:50: 8e:4a:e5:34:95:1b:be:8a:da:e6:d4:38:ce:d7:66: ef:1e:21:63:9f:36:1d:5c:de:b2:84:52:10:bd:d8: 93:73:2d:b2:1a:4b:d7:9f:c2:29:26:1d:cc:49:ed: f7:2e:2a:5b:cb:32:a6:c7:0a:04:54:9d:fb:2b:ee: a2:db:94:18:76:3a:3f:3e:9b:b9:89:09:db:81:d4: 4a:99:f6:41:83:73:a3:4c:1f:7a:01:99:06:be:43: 19:e6:11:7f:72:2e:0b:25:81:f9:e4:eb:25:4a:d1: cf:26:09:39:0e:a8:d3:bf:06:b3:79:6a:fa:d9:0c: e5:b6:8a:c9:23:cd:cd:d5:b7:50:af:a0:1e:a6:72: 62:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:77:CF:94:47:1E:CF:3D:8B:B5:EC:0C:9A:51:9E:3C:EA:F6:28:78 X509v3 Authority Key Identifier: keyid:CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/X3fPlEcezz2LtewMmlGePOr2KHg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.235.98.0/23 Signature Algorithm: sha256WithRSAEncryption 72:c8:27:7f:87:f4:16:a3:bb:4d:50:56:80:4b:3f:46:20:54: 1a:0d:e2:ed:a1:5c:2e:47:48:05:4f:c7:79:9b:e0:0a:4c:c2: c7:f1:60:4a:cb:0e:cc:5a:2b:49:62:14:2a:41:3b:5b:98:71: d9:00:03:02:74:a1:59:33:63:5f:29:13:a2:1b:a4:b0:71:3c: 5a:10:5e:de:4c:02:0e:b0:37:23:1b:72:6f:a1:e0:45:d9:36: b6:82:ea:1b:8e:95:3a:79:af:61:d0:7a:6d:cd:96:eb:6d:ec: da:5e:93:bb:05:aa:e2:25:fd:da:5c:c4:24:d5:f2:a2:22:d0: 19:50:96:91:92:28:00:c2:d4:38:7c:34:0a:08:34:7a:0e:ab: 15:97:d1:5f:df:29:63:2f:21:ce:1e:19:80:14:67:c5:d3:1e: 9b:99:43:ac:9a:b0:8f:38:09:7e:00:90:5e:37:55:d7:2d:e2: 20:1c:53:8a:74:27:b9:c3:6a:d7:56:8c:9c:46:fe:8f:f4:4b: 8b:dd:97:7a:da:76:fb:f2:c0:33:51:d4:49:67:e1:ce:7a:47: 2e:c1:6a:c1:50:35:f7:37:0d:b4:3a:eb:c9:3b:3a:ee:b6:bb: d2:73:08:5a:5a:90:7f:c2:74:53:43:2b:67:0a:d6:b9:3f:a3: f4:52:98:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WNVTxhJ7NpxrhgmD2a/qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZDJkODAwZGM2YzMzYjY5ZmE0NzI5MWUyZjE1YjMzNWVh MzYwMGYwHhcNMjYwMTAxMDIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Zjc3Y2Y5NDQ3MWVjZjNkOGJiNWVjMGM5YTUxOWUzY2VhZjYyODc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1kkLBzbA7jxgorZS6YfWKCqvTtc KVlJQzLvi95FvPPDzerHLQZY5VPH11eBb+k+wuMJPbhkYcQR0NKtyFuMIOygxq/u XjcdLITL5fjc7LfBkvOvce+eHGDseST6O6PEk0gzljE3y/qa8k01kqYoC0uDHNQm VVCOSuU0lRu+itrm1DjO12bvHiFjnzYdXN6yhFIQvdiTcy2yGkvXn8IpJh3MSe33 LipbyzKmxwoEVJ37K+6i25QYdjo/Ppu5iQnbgdRKmfZBg3OjTB96AZkGvkMZ5hF/ ci4LJYH55OslStHPJgk5DqjTvwazeWr62QzltorJI83N1bdQr6AepnJiPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF93z5RHHs89i7XsDJpRnjzq9ih4MB8GA1UdIwQY MBaAFM7S2ADcbDO2n6RykeLxWzNeo2APMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenRMWUFOeHNNN2FmcEhLUjR2RmJNMTZqWUE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mODg4NTctY2MwNS00YmRiLTkxZTYt ZWQ0ZjA2NDNiZjI1LzEvWDNmUGxFY2V6ejJMdGV3TW1sR2VQT3IyS0hnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9mODg4NTctY2MwNS00YmRiLTkxZTYtZWQ0ZjA2NDNiZjI1 LzEvenRMWUFOeHNNN2FmcEhLUjR2RmJNMTZqWUE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuetiMA0G CSqGSIb3DQEBCwUAA4IBAQByyCd/h/QWo7tNUFaASz9GIFQaDeLtoVwuR0gFT8d5 m+AKTMLH8WBKyw7MWitJYhQqQTtbmHHZAAMCdKFZM2NfKROiG6SwcTxaEF7eTAIO sDcjG3JvoeBF2Ta2guobjpU6ea9h0HptzZbrbezaXpO7BariJf3aXMQk1fKiItAZ UJaRkigAwtQ4fDQKCDR6DqsVl9Ff3yljLyHOHhmAFGfF0x6bmUOsmrCPOAl+AJBe N1XXLeIgHFOKdCe5w2rXVoycRv6P9EuL3Zd62nb78sAzUdRJZ+HOekcuwWrBUDX3 Nw20OuvJOzrutrvScwhaWpB/wnRTQytnCta5P6P0Upgz -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:37 2026 by rpki-client