This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xxCK5mdkOw01mNhw32XoGxq3k9c.roa File: xxCK5mdkOw01mNhw32XoGxq3k9c.roa (raw, json) Hash identifier: SH4Bw1zEcp2JwvlXw00V0uAVr+pNz+B0Qvha4WwBDas= Subject key identifier: C7:10:8A:E6:67:64:3B:0D:35:98:D8:70:DF:65:E8:1B:1A:B7:93:D7 Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B7F855158DBE050332E13ED40E5669F02 Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xxCK5mdkOw01mNhw32XoGxq3k9c.roa Signing time: Fri 02 Jan 2026 16:23:22 +0000 ROA not before: Fri 02 Jan 2026 16:23:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49392 IP address blocks: 195.133.10.0/23 maxlen: 23 195.133.52.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:51:58:db:e0:50:33:2e:13:ed:40:e5:66:9f:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 2 16:23:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7108ae667643b0d3598d870df65e81b1ab793d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:76:d1:6e:43:8d:26:30:c4:d4:4f:a7:78:27: 74:e4:a0:2d:f6:01:45:89:25:42:ac:51:df:30:92: f4:0b:00:cb:66:f8:11:0e:02:82:0e:12:87:6e:b0: b5:b1:c9:31:b8:74:6a:e8:63:7b:ab:bc:63:c8:bf: e4:f1:fd:d1:e3:8b:dc:22:fa:9a:36:f5:d1:de:f8: 89:81:fd:74:82:73:e1:55:4f:3c:f6:59:85:df:41: d0:95:d1:54:2c:a2:4a:75:34:8b:aa:9a:aa:39:25: 43:c1:15:00:71:53:e7:81:5e:71:79:2a:c7:58:52: 9c:45:68:22:46:8d:0a:61:fa:39:a7:4e:bb:05:82: 3f:c1:c7:d5:cb:e9:2c:f9:77:61:a1:de:28:c2:9d: cc:8a:f4:f6:7f:09:3f:73:ec:49:c2:f4:8e:c5:16: c6:84:ed:d3:cd:79:1d:ae:8b:73:3f:be:d2:cf:e2: 9c:45:cc:1c:d7:ee:1b:58:70:04:30:4d:94:d0:9e: cf:43:79:c4:1e:e8:92:3d:d4:f9:bc:0c:30:59:05: 0c:56:ed:1a:05:40:4c:69:74:99:1a:64:79:34:a2: 32:83:60:c0:e1:2b:47:36:cc:5b:7a:fc:74:6d:be: 1c:33:99:c6:62:a4:87:aa:b8:f3:31:47:f3:39:4e: 61:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:10:8A:E6:67:64:3B:0D:35:98:D8:70:DF:65:E8:1B:1A:B7:93:D7 X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xxCK5mdkOw01mNhw32XoGxq3k9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.133.10.0/23 195.133.52.0/23 Signature Algorithm: sha256WithRSAEncryption 7c:75:26:ed:14:4d:9b:58:73:b7:be:87:5d:13:b8:7c:36:c4: 07:45:8c:9e:46:9a:7c:62:a0:6e:16:79:2a:b0:1e:04:02:6a: 52:f9:4d:ef:65:81:6a:8f:1d:ed:46:cc:6c:98:ed:dd:59:0c: 8c:12:ba:a1:ca:66:77:ba:b9:3c:6a:ba:c8:ee:d0:5a:eb:13: 47:3c:49:c0:93:b1:5c:cf:ba:00:98:22:18:b3:9b:f3:34:6f: 49:55:30:b0:7d:97:13:75:45:39:df:68:ec:52:be:6c:70:42: a4:40:f2:bc:85:d3:22:c9:e0:9f:3a:5a:1a:8f:07:0e:3a:4c: a6:0a:d4:13:c5:7f:a7:67:13:75:8c:15:e4:63:e9:4f:10:e8: bf:54:01:2b:df:60:12:ca:c5:67:82:b5:4c:21:85:92:e7:2c: 55:12:01:af:f8:5c:22:de:db:b9:ae:2f:4a:50:3c:20:e2:69: b5:ae:d6:36:03:0a:81:6d:ae:a9:5c:c7:c0:96:6d:c5:d3:d7: 53:f3:96:70:bc:ae:ef:80:6d:cb:37:ca:2d:6a:a8:5f:48:00: 12:e2:c3:b8:c8:e9:ef:d3:50:3f:00:85:86:84:38:0c:d0:83: 0b:27:13:55:1e:f2:dc:0d:96:b2:92:be:5d:aa:1b:28:2d:13: b8:27:04:5f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hVFY2+BQMy4T7UDlZp8CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTAyMTYyMzIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzEwOGFlNjY3NjQzYjBkMzU5OGQ4NzBkZjY1ZTgxYjFhYjc5M2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43bRbkONJjDE1E+neCd05KAt9gFF iSVCrFHfMJL0CwDLZvgRDgKCDhKHbrC1sckxuHRq6GN7q7xjyL/k8f3R44vcIvqa NvXR3viJgf10gnPhVU889lmF30HQldFULKJKdTSLqpqqOSVDwRUAcVPngV5xeSrH WFKcRWgiRo0KYfo5p067BYI/wcfVy+ks+Xdhod4owp3MivT2fwk/c+xJwvSOxRbG hO3TzXkdrotzP77Sz+KcRcwc1+4bWHAEME2U0J7PQ3nEHuiSPdT5vAwwWQUMVu0a BUBMaXSZGmR5NKIyg2DA4StHNsxbevx0bb4cM5nGYqSHqrjzMUfzOU5h3wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMcQiuZnZDsNNZjYcN9l6Bsat5PXMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEveHhDSzVtZGtPdzAxbU5odzMyWG9HeHEzazljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBw4UKAwQB w4U0MA0GCSqGSIb3DQEBCwUAA4IBAQB8dSbtFE2bWHO3voddE7h8NsQHRYyeRpp8 YqBuFnkqsB4EAmpS+U3vZYFqjx3tRsxsmO3dWQyMErqhymZ3urk8arrI7tBa6xNH PEnAk7Fcz7oAmCIYs5vzNG9JVTCwfZcTdUU532jsUr5scEKkQPK8hdMiyeCfOloa jwcOOkymCtQTxX+nZxN1jBXkY+lPEOi/VAEr32ASysVngrVMIYWS5yxVEgGv+Fwi 3tu5ri9KUDwg4mm1rtY2AwqBba6pXMfAlm3F09dT85ZwvK7vgG3LN8otaqhfSAAS 4sO4yOnv01A/AIWGhDgM0IMLJxNVHvLcDZaykr5dqhsoLRO4JwRf -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:41 2026 by rpki-client