This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/X0C-jW-JvrYRehOUZc1q8qR_Alg.roa File: X0C-jW-JvrYRehOUZc1q8qR_Alg.roa (raw, json) Hash identifier: kkuwe92elfxQBb6MWA1wN1ame7fs+u6hfUmN0ZMLiZQ= Subject key identifier: 5F:40:BE:8D:6F:89:BE:B6:11:7A:13:94:65:CD:6A:F2:A4:7F:02:58 Certificate issuer: /CN=85dc9c55e1597e88564daf567e5a4665978c7b85 Certificate serial: 019B797E2E4EAED2F9A80A8276371635D141 Authority key identifier: 85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/X0C-jW-JvrYRehOUZc1q8qR_Alg.roa Signing time: Thu 01 Jan 2026 12:17:51 +0000 ROA not before: Thu 01 Jan 2026 12:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213354 IP address blocks: 91.228.68.0/22 maxlen: 22 185.248.192.0/23 maxlen: 23 185.248.194.0/23 maxlen: 23 194.15.112.0/24 maxlen: 24 194.15.113.0/24 maxlen: 24 194.26.18.0/24 maxlen: 24 2a11:9c00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.crl rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 23:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:2e:4e:ae:d2:f9:a8:0a:82:76:37:16:35:d1:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85dc9c55e1597e88564daf567e5a4665978c7b85 Validity Not Before: Jan 1 12:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f40be8d6f89beb6117a139465cd6af2a47f0258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ad:a5:f3:54:34:71:b5:8d:f7:7b:df:cc:3f: 22:0f:da:02:1b:4f:de:87:22:44:94:cf:3e:10:27: 49:0c:1d:17:dd:99:a7:66:d9:cb:71:1e:98:9a:c8: b8:01:bb:4f:50:b5:a1:57:5b:b5:0d:2d:dd:56:99: cd:3f:97:79:00:2d:53:77:a3:2d:28:ea:94:bb:fc: 7a:46:b2:cd:ca:e1:b7:50:72:3a:32:0b:cd:9c:38: 9b:66:5d:73:d5:85:af:ee:76:13:48:05:d8:c8:44: 98:4e:57:91:51:7c:3f:49:89:de:7c:22:26:4f:6f: fd:4e:6a:44:a0:d1:fa:56:eb:61:96:e0:03:fe:86: e7:5c:9d:a3:6d:62:c1:46:9c:fe:db:45:0b:92:cd: 5d:8e:18:c9:d7:a1:96:3b:24:6c:3a:9c:24:2a:f1: e1:82:ef:77:fb:df:e7:c0:8d:f9:10:d9:ed:eb:73: 36:b4:fe:46:75:8f:a3:a2:7a:57:db:a3:2e:ea:11: c0:c8:63:7f:96:22:db:74:a1:9d:d7:80:cd:ac:09: b0:8b:1e:2c:c0:1a:07:02:74:b7:c8:1b:17:e4:16: e1:41:d0:a8:c5:9c:da:1c:d8:22:a9:f0:85:03:8a: d5:8d:7d:d8:66:36:6b:3e:80:20:11:ab:7b:c6:16: a4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:40:BE:8D:6F:89:BE:B6:11:7A:13:94:65:CD:6A:F2:A4:7F:02:58 X509v3 Authority Key Identifier: keyid:85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/X0C-jW-JvrYRehOUZc1q8qR_Alg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.228.68.0/22 185.248.192.0/22 194.15.112.0/23 194.26.18.0/24 IPv6: 2a11:9c00::/40 Signature Algorithm: sha256WithRSAEncryption 8a:b7:d7:50:e3:1a:9b:9e:73:a6:98:57:3a:a4:79:80:e5:3c: d4:e1:96:f5:07:13:fc:b3:8c:f8:cd:67:70:7b:70:7c:bd:c2: 6f:cd:7c:39:bc:a4:d7:ce:ee:4f:07:62:94:99:2c:a1:f3:66: 05:fc:c9:83:71:79:a6:4c:11:40:ab:76:d3:76:45:88:53:75: 78:34:f9:41:bb:45:8a:d4:22:90:ed:52:71:13:a8:da:96:3e: ac:0d:ea:35:12:b3:01:7f:86:fc:81:cf:75:95:fb:d2:c5:9e: 62:05:0b:10:46:c6:5f:1b:6f:51:bc:84:e3:3e:e3:ac:bb:fd: fc:1e:0e:90:0d:d7:f8:e1:d1:c6:9d:d7:ac:63:47:21:a6:7a: 6f:9a:a1:bb:8d:f8:ca:05:77:94:c8:96:da:66:21:1f:90:35: bb:5a:90:74:bb:73:52:ae:25:a5:b1:97:76:08:db:ca:b4:8c: 61:dc:c6:06:dd:73:ee:95:b4:dc:a8:ff:2b:9c:87:67:ea:7f: 7a:74:b2:f9:4e:a1:f0:55:b5:81:71:cf:21:c7:40:ab:f6:5b: 93:ee:82:b7:7b:f2:51:e7:1d:59:28:6b:86:e3:9a:44:ca:1f: 34:36:4a:a8:57:e1:11:64:8c:61:5c:12:11:fe:e2:54:7a:0f: 79:b0:38:e4 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt5fi5OrtL5qAqCdjcWNdFBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ZGM5YzU1ZTE1OTdlODg1NjRkYWY1NjdlNWE0NjY1OTc4 YzdiODUwHhcNMjYwMTAxMTIxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjQwYmU4ZDZmODliZWI2MTE3YTEzOTQ2NWNkNmFmMmE0N2YwMjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs62l81Q0cbWN93vfzD8iD9oCG0/e hyJElM8+ECdJDB0X3ZmnZtnLcR6Ymsi4AbtPULWhV1u1DS3dVpnNP5d5AC1Td6Mt KOqUu/x6RrLNyuG3UHI6MgvNnDibZl1z1YWv7nYTSAXYyESYTleRUXw/SYnefCIm T2/9TmpEoNH6VuthluAD/obnXJ2jbWLBRpz+20ULks1djhjJ16GWOyRsOpwkKvHh gu93+9/nwI35ENnt63M2tP5GdY+jonpX26Mu6hHAyGN/liLbdKGd14DNrAmwix4s wBoHAnS3yBsX5BbhQdCoxZzaHNgiqfCFA4rVjX3YZjZrPoAgEat7xhak1wIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFF9Avo1vib62EXoTlGXNavKkfwJYMB8GA1UdIwQY MBaAFIXcnFXhWX6IVk2vVn5aRmWXjHuFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGR5Y1ZlRlpmb2hXVGE5V2ZscEdaWmVNZTRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mMDdmYmMtNGMzMi00ZDg3LWE0Mjkt ODZlYTE5ZDI5MTYzLzEvWDBDLWpXLUp2cllSZWhPVVpjMXE4cVJfQWxnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9mMDdmYmMtNGMzMi00ZDg3LWE0MjktODZlYTE5ZDI5MTYz LzEvaGR5Y1ZlRlpmb2hXVGE5V2ZscEdaWmVNZTRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAeBAIAATAYAwQCW+REAwQC ufjAAwQBwg9wAwQAwhoSMA4EAgACMAgDBgAqEZwAADANBgkqhkiG9w0BAQsFAAOC AQEAirfXUOMam55zpphXOqR5gOU81OGW9QcT/LOM+M1ncHtwfL3Cb818Obyk187u TwdilJksofNmBfzJg3F5pkwRQKt203ZFiFN1eDT5QbtFitQikO1ScROo2pY+rA3q NRKzAX+G/IHPdZX70sWeYgULEEbGXxtvUbyE4z7jrLv9/B4OkA3X+OHRxp3XrGNH IaZ6b5qhu434ygV3lMiW2mYhH5A1u1qQdLtzUq4lpbGXdgjbyrSMYdzGBt1z7pW0 3Kj/K5yHZ+p/enSy+U6h8FW1gXHPIcdAq/Zbk+6Ct3vyUecdWShrhuOaRMofNDZK qFfhEWSMYVwSEf7iVHoPebA45A== -----END CERTIFICATE-----Generated at Sat Jan 10 08:47:14 2026 by rpki-client