This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/Xw9tVyuPLJRqNzDdc3wN3NyB9IA.roa File: Xw9tVyuPLJRqNzDdc3wN3NyB9IA.roa (raw, json) Hash identifier: nQERgQoU1LcOAXZoSGkitr1IswJcoffSa8r7ceEkAJs= Subject key identifier: 5F:0F:6D:57:2B:8F:2C:94:6A:37:30:DD:73:7C:0D:DC:DC:81:F4:80 Certificate issuer: /CN=204d7d8652a99fc17fff2d7decc49e556aa0eb80 Certificate serial: 019B7EA6B90A7C5B124820A1D02201AB7BB3 Authority key identifier: 20:4D:7D:86:52:A9:9F:C1:7F:FF:2D:7D:EC:C4:9E:55:6A:A0:EB:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IE19hlKpn8F__y197MSeVWqg64A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/Xw9tVyuPLJRqNzDdc3wN3NyB9IA.roa Signing time: Fri 02 Jan 2026 12:20:14 +0000 ROA not before: Fri 02 Jan 2026 12:20:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 195.242.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft rsync://rpki.ripe.net/repository/DEFAULT/IE19hlKpn8F__y197MSeVWqg64A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:b9:0a:7c:5b:12:48:20:a1:d0:22:01:ab:7b:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=204d7d8652a99fc17fff2d7decc49e556aa0eb80 Validity Not Before: Jan 2 12:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f0f6d572b8f2c946a3730dd737c0ddcdc81f480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0b:cf:86:7f:8a:f1:5e:cb:df:b5:86:95:5f: c2:93:ab:7b:54:36:c0:98:38:b5:8f:d7:03:01:47: 61:ba:d6:e5:02:ea:78:83:77:50:86:4f:bf:f8:4f: 69:aa:53:58:f0:4f:3b:e6:bf:1f:c9:14:42:1b:bf: e2:29:77:4a:70:1e:95:98:9c:59:fa:a2:ac:f8:e4: d4:75:a6:bc:90:25:56:f2:cb:1c:24:57:53:6e:df: f1:77:20:d1:64:01:28:0c:f6:d9:a4:ea:a3:a0:77: b8:10:8c:39:20:5f:51:f2:c9:3e:72:02:f4:70:e8: fe:bd:d3:11:56:2f:a5:f5:8f:e7:77:41:65:26:04: 61:51:9a:e8:ac:28:92:04:f3:f6:f8:52:1d:7f:b8: 19:22:9e:7a:29:a9:6a:91:4c:d5:12:8c:19:21:53: df:2a:ac:4c:e5:b0:ac:b8:23:1f:35:cf:db:f9:73: 32:4c:75:b6:b0:fd:6d:d5:99:a3:4c:20:42:38:3e: ee:86:0e:de:20:84:47:c1:5b:7f:ba:3a:c8:bd:00: ae:8e:ef:71:d1:66:cd:88:68:8b:90:aa:e9:f0:d8: 7b:b1:30:88:0a:d3:dc:9a:8a:28:e5:e8:26:7e:bb: cd:d6:e3:1d:28:71:2b:43:ad:be:3b:86:99:6e:78: f0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:0F:6D:57:2B:8F:2C:94:6A:37:30:DD:73:7C:0D:DC:DC:81:F4:80 X509v3 Authority Key Identifier: keyid:20:4D:7D:86:52:A9:9F:C1:7F:FF:2D:7D:EC:C4:9E:55:6A:A0:EB:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IE19hlKpn8F__y197MSeVWqg64A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/Xw9tVyuPLJRqNzDdc3wN3NyB9IA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.242.170.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:45:47:f5:ae:aa:c2:b3:ce:08:aa:3e:3d:1e:bf:80:45:9e: e9:5d:6b:5d:05:c2:69:cf:af:03:e3:3b:5b:6d:24:2e:2b:30: c5:9f:5f:10:34:ec:df:e1:f0:b2:be:a1:db:34:92:39:06:e4: 06:9c:d3:54:6e:6d:8e:e5:db:92:4a:7e:08:a4:23:78:11:75: 02:44:9d:d1:ff:b1:87:f5:b7:ff:45:c8:6d:79:b3:65:e5:48: 86:17:91:d6:fd:a0:d4:09:fb:3a:25:15:74:1c:df:7d:06:8d: 74:df:04:79:a7:2e:13:b0:c8:b3:48:4e:eb:03:a6:09:bf:12: 51:bb:dd:a5:a4:d7:cd:32:64:9f:db:63:20:12:58:71:8d:b3: 69:11:03:be:8a:e2:3f:30:37:70:93:2d:af:a1:e4:5d:30:27: a6:79:40:17:82:ee:f5:02:ae:06:3a:d8:50:68:b4:6c:a7:eb: 74:b7:d7:aa:9c:2f:74:dd:74:62:c2:e0:6a:b0:bd:0d:5f:12: c1:48:aa:2f:31:9c:e3:cc:a6:c6:07:23:18:a4:9b:cb:e4:f6: 8e:92:f5:ed:f4:77:20:a9:e4:88:3b:81:ba:f7:3d:15:37:ae: 82:c3:8e:89:de:77:20:71:c7:6a:5d:e0:03:6f:2b:99:4c:68: 5d:5d:59:db -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+prkKfFsSSCCh0CIBq3uzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNGQ3ZDg2NTJhOTlmYzE3ZmZmMmQ3ZGVjYzQ5ZTU1NmFh MGViODAwHhcNMjYwMTAyMTIyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjBmNmQ1NzJiOGYyYzk0NmEzNzMwZGQ3MzdjMGRkY2RjODFmNDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugvPhn+K8V7L37WGlV/Ck6t7VDbA mDi1j9cDAUdhutblAup4g3dQhk+/+E9pqlNY8E875r8fyRRCG7/iKXdKcB6VmJxZ +qKs+OTUdaa8kCVW8sscJFdTbt/xdyDRZAEoDPbZpOqjoHe4EIw5IF9R8sk+cgL0 cOj+vdMRVi+l9Y/nd0FlJgRhUZrorCiSBPP2+FIdf7gZIp56KalqkUzVEowZIVPf KqxM5bCsuCMfNc/b+XMyTHW2sP1t1ZmjTCBCOD7uhg7eIIRHwVt/ujrIvQCuju9x 0WbNiGiLkKrp8Nh7sTCICtPcmooo5egmfrvN1uMdKHErQ62+O4aZbnjwLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF8PbVcrjyyUajcw3XN8DdzcgfSAMB8GA1UdIwQY MBaAFCBNfYZSqZ/Bf/8tfezEnlVqoOuAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUUxOWhsS3BuOEZfX3kxOTdNU2VWV3FnNjRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9hYzA2OTQtMWUyMi00MzZkLTgyYzkt MTdjZTYyMGU3NGYxLzEvWHc5dFZ5dVBMSlJxTnpEZGMzd04zTnlCOUlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9hYzA2OTQtMWUyMi00MzZkLTgyYzktMTdjZTYyMGU3NGYx LzEvSUUxOWhsS3BuOEZfX3kxOTdNU2VWV3FnNjRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw/KqMA0G CSqGSIb3DQEBCwUAA4IBAQBKRUf1rqrCs84Iqj49Hr+ARZ7pXWtdBcJpz68D4ztb bSQuKzDFn18QNOzf4fCyvqHbNJI5BuQGnNNUbm2O5duSSn4IpCN4EXUCRJ3R/7GH 9bf/RchtebNl5UiGF5HW/aDUCfs6JRV0HN99Bo103wR5py4TsMizSE7rA6YJvxJR u92lpNfNMmSf22MgElhxjbNpEQO+iuI/MDdwky2voeRdMCemeUAXgu71Aq4GOthQ aLRsp+t0t9eqnC903XRiwuBqsL0NXxLBSKovMZzjzKbGByMYpJvL5PaOkvXt9Hcg qeSIO4G69z0VN66Cw46J3ncgccdqXeADbyuZTGhdXVnb -----END CERTIFICATE-----Generated at Sat Jan 17 06:46:21 2026 by rpki-client