This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/xICMKArLvTx29numTiutzmAayDM.roa File: xICMKArLvTx29numTiutzmAayDM.roa (raw, json) Hash identifier: Lqd0tIHATER1ygDumfjqbLFR0sPowEmoXTK5gpQqBN0= Subject key identifier: C4:80:8C:28:0A:CB:BD:3C:76:F6:7B:A6:4E:2B:AD:CE:60:1A:C8:33 Certificate issuer: /CN=869035c317734f661bbf85c2184155a1f3616add Certificate serial: 019B791035C311DB927AEC2C41A63339FDC5 Authority key identifier: 86:90:35:C3:17:73:4F:66:1B:BF:85:C2:18:41:55:A1:F3:61:6A:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpA1wxdzT2Ybv4XCGEFVofNhat0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/xICMKArLvTx29numTiutzmAayDM.roa Signing time: Thu 01 Jan 2026 10:17:44 +0000 ROA not before: Thu 01 Jan 2026 10:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41530 IP address blocks: 195.138.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.crl rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.mft rsync://rpki.ripe.net/repository/DEFAULT/hpA1wxdzT2Ybv4XCGEFVofNhat0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:35:c3:11:db:92:7a:ec:2c:41:a6:33:39:fd:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=869035c317734f661bbf85c2184155a1f3616add Validity Not Before: Jan 1 10:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4808c280acbbd3c76f67ba64e2badce601ac833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:83:87:95:c1:2f:1f:f6:f7:82:b0:02:46:af: f1:d6:26:37:f8:f6:e3:ab:93:40:b0:16:a2:88:3c: 94:c6:1f:28:82:8f:26:8e:e5:7c:d2:a1:bc:7c:3f: 96:db:f0:16:90:d9:77:e9:47:c5:65:96:d0:e1:52: 3f:e9:40:de:24:83:2b:69:c3:cc:3b:e5:c5:82:17: a6:55:19:d5:d4:09:59:39:1e:07:a3:ba:a1:8e:b4: df:1f:ff:ce:e1:fe:c2:58:88:b7:5e:2d:27:68:4d: e2:28:78:ed:6a:b3:3d:b6:21:62:1d:09:7a:2e:04: ba:eb:3f:ad:45:c2:d7:f6:38:9e:48:9a:6d:1f:b8: 4e:59:aa:ae:50:5d:0e:06:80:27:45:09:e2:28:81: 3e:51:01:3c:61:da:e1:b9:2a:2f:40:b0:d2:13:f8: 8a:40:63:d2:57:f4:ba:7b:0e:17:20:4b:c8:88:d6: f0:18:1f:43:e5:e2:e4:ff:16:73:42:13:71:16:0a: d2:90:b0:4b:2f:a0:20:f2:c9:ec:6b:a2:5c:9e:c4: d0:28:c4:8d:78:4d:ad:6d:2d:e8:0d:5c:f4:47:42: d6:74:51:4e:c5:06:0b:75:0b:3f:cf:2d:c2:aa:74: ec:cc:02:c2:29:04:84:fd:6f:8e:4e:aa:1a:c8:ba: ff:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:80:8C:28:0A:CB:BD:3C:76:F6:7B:A6:4E:2B:AD:CE:60:1A:C8:33 X509v3 Authority Key Identifier: keyid:86:90:35:C3:17:73:4F:66:1B:BF:85:C2:18:41:55:A1:F3:61:6A:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpA1wxdzT2Ybv4XCGEFVofNhat0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/xICMKArLvTx29numTiutzmAayDM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.138.192.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:4b:0b:92:30:c5:85:da:16:89:17:94:38:61:3f:71:d4:5c: 3b:aa:4a:71:0d:d2:a1:07:c8:bd:09:82:ae:1e:77:10:b4:e3: 8c:f6:e5:07:4e:1d:95:51:58:ae:49:70:75:c6:2f:4c:59:f0: 8c:68:73:3c:02:44:bf:d3:8c:5d:d6:ac:03:7f:5f:20:0d:ce: 3b:31:84:bd:4e:b7:4c:f2:65:52:6c:a6:09:b0:0c:dc:96:15: 08:75:c9:b6:97:a9:75:42:d0:d4:02:f7:17:34:91:4d:19:00: 4f:a6:81:d4:03:e6:84:6f:0a:98:7a:73:10:ae:24:46:c7:2b: 8d:da:80:76:f9:ac:77:9f:b2:3a:48:3d:15:5c:68:8f:d6:df: 23:d6:2a:d5:08:c2:01:88:a8:e0:12:14:9f:83:10:f5:55:1f: f4:ff:da:b9:db:9c:ec:4e:0c:82:54:04:8a:c8:41:12:0a:86: 1d:8e:52:59:e4:54:06:dd:35:ba:f4:86:ac:3f:57:e9:2f:31: fd:e3:d8:b2:1f:39:3a:b9:99:f8:ec:57:df:38:36:7e:86:26: c7:c0:96:ce:79:a5:d5:e7:54:3b:46:50:5b:be:d4:50:f3:e1: f7:ab:d3:20:76:4a:d2:35:b7:8c:94:3a:08:b7:fe:f6:56:7a: f1:6b:90:19 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EDXDEduSeuwsQaYzOf3FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2OTAzNWMzMTc3MzRmNjYxYmJmODVjMjE4NDE1NWExZjM2 MTZhZGQwHhcNMjYwMTAxMTAxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDgwOGMyODBhY2JiZDNjNzZmNjdiYTY0ZTJiYWRjZTYwMWFjODMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIOHlcEvH/b3grACRq/x1iY3+Pbj q5NAsBaiiDyUxh8ogo8mjuV80qG8fD+W2/AWkNl36UfFZZbQ4VI/6UDeJIMracPM O+XFghemVRnV1AlZOR4Ho7qhjrTfH//O4f7CWIi3Xi0naE3iKHjtarM9tiFiHQl6 LgS66z+tRcLX9jieSJptH7hOWaquUF0OBoAnRQniKIE+UQE8YdrhuSovQLDSE/iK QGPSV/S6ew4XIEvIiNbwGB9D5eLk/xZzQhNxFgrSkLBLL6Ag8snsa6JcnsTQKMSN eE2tbS3oDVz0R0LWdFFOxQYLdQs/zy3CqnTszALCKQSE/W+OTqoayLr/fQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMSAjCgKy708dvZ7pk4rrc5gGsgzMB8GA1UdIwQY MBaAFIaQNcMXc09mG7+FwhhBVaHzYWrdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHBBMXd4ZHpUMllidjRYQ0dFRlZvZk5oYXQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8zZmQ3NzQtM2Q3OS00NGIxLTg3OGEt NjAyOGMyNjU0OTQwLzEveElDTUtBckx2VHgyOW51bVRpdXR6bUFheURNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS8zZmQ3NzQtM2Q3OS00NGIxLTg3OGEtNjAyOGMyNjU0OTQw LzEvaHBBMXd4ZHpUMllidjRYQ0dFRlZvZk5oYXQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw4rAMA0G CSqGSIb3DQEBCwUAA4IBAQB8SwuSMMWF2haJF5Q4YT9x1Fw7qkpxDdKhB8i9CYKu HncQtOOM9uUHTh2VUViuSXB1xi9MWfCMaHM8AkS/04xd1qwDf18gDc47MYS9TrdM 8mVSbKYJsAzclhUIdcm2l6l1QtDUAvcXNJFNGQBPpoHUA+aEbwqYenMQriRGxyuN 2oB2+ax3n7I6SD0VXGiP1t8j1irVCMIBiKjgEhSfgxD1VR/0/9q525zsTgyCVASK yEESCoYdjlJZ5FQG3TW69IasP1fpLzH949iyHzk6uZn47FffODZ+hibHwJbOeaXV 51Q7RlBbvtRQ8+H3q9MgdkrSNbeMlDoIt/72Vnrxa5AZ -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:16 2026 by rpki-client