This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XpoAYZcWbItpC9qUfb3c989eOTQ.roa File: XpoAYZcWbItpC9qUfb3c989eOTQ.roa (raw, json) Hash identifier: WskrvLzprQ8RaIgUwmG3skIYmQAGc1pIuTjX+La9zQw= Subject key identifier: 5E:9A:00:61:97:16:6C:8B:69:0B:DA:94:7D:BD:DC:F7:CF:5E:39:34 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A3405F67D4C4559A3E23C3FBDA8B05 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XpoAYZcWbItpC9qUfb3c989eOTQ.roa Signing time: Thu 01 Jan 2026 08:18:43 +0000 ROA not before: Thu 01 Jan 2026 08:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212755 IP address blocks: 84.54.50.0/24 maxlen: 24 194.55.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:40:5f:67:d4:c4:55:9a:3e:23:c3:fb:da:8b:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e9a006197166c8b690bda947dbddcf7cf5e3934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9b:7a:06:4c:9b:11:50:05:9d:89:25:09:aa: c2:e7:94:44:bb:13:18:1a:98:e7:4d:c1:17:8d:12: ce:48:07:20:37:3f:84:ca:c7:76:e1:56:9b:0b:0a: d8:71:bf:6e:e9:02:08:c1:fc:b6:b8:be:cb:72:0c: 15:10:23:bd:5e:9b:8f:cc:0e:dd:75:e7:e5:9f:42: 02:9c:75:51:73:e8:b5:42:0b:8c:58:36:14:fc:4f: 79:6d:08:ff:61:a6:9e:7b:0f:8c:76:c4:70:bc:e5: a4:0f:b5:18:fb:32:03:bb:08:f8:7d:e7:9a:cb:65: 3c:a8:5c:ea:ba:81:1a:17:9f:21:ae:d7:c3:63:aa: 62:f2:95:55:72:c1:9a:4f:cd:11:60:85:a5:36:af: 62:72:52:a7:e1:71:c5:a9:51:9a:29:fc:ed:75:2b: d1:a8:e9:91:5c:e8:31:21:d5:a9:a9:8e:33:14:44: 18:6a:10:66:2d:f6:c2:5e:d7:61:a8:a3:36:48:b9: ac:5e:9d:9b:bc:35:b5:81:13:18:1d:43:af:a1:93: 17:a8:a0:9e:fb:49:44:60:ce:7f:2c:47:30:f9:96: 7f:d4:69:a6:ae:3c:eb:69:dc:0e:05:f6:07:b4:cd: 8c:c6:6c:dd:6e:96:1b:a2:7a:c2:35:53:eb:ab:ee: 51:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:9A:00:61:97:16:6C:8B:69:0B:DA:94:7D:BD:DC:F7:CF:5E:39:34 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XpoAYZcWbItpC9qUfb3c989eOTQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.54.50.0/24 194.55.227.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:0f:b2:8f:ca:e3:13:ad:8b:4b:7c:b7:4c:b7:59:95:e6:6a: 38:ae:a2:5d:94:41:04:29:bb:23:a8:c5:e3:2a:59:06:54:39: 17:37:a5:f8:51:61:a1:c6:a5:38:d2:a0:97:ab:91:e3:67:2c: 04:ca:4e:89:68:5b:22:16:02:85:09:7e:54:91:6d:7c:90:10: 2b:91:1a:47:c6:2e:6f:bb:50:e7:c2:4d:68:ab:f4:db:f6:28: 1c:43:85:d3:ee:1c:fd:fc:c5:5a:8b:8b:fd:52:8f:e3:10:4d: f2:37:74:3c:e4:45:9f:9a:c5:d7:9d:e2:bb:5a:23:4f:f3:69: 6e:ee:57:68:c8:99:8c:4c:13:74:42:5d:c0:64:5e:9f:0f:b6: 56:68:10:ce:65:84:01:75:54:a7:46:7b:85:79:ca:85:55:26: ac:7a:eb:28:6e:b2:e1:49:6d:80:5a:27:29:dc:4c:f1:de:29: 85:ef:e3:ec:2d:91:f2:59:25:3e:1f:db:01:26:37:d6:04:00: 31:2e:22:d5:9d:a2:c2:1d:70:46:1c:2b:82:7c:82:35:c6:b1: 41:d3:eb:76:5b:2b:e5:5d:12:c9:f1:3d:58:b8:cf:fb:36:12: 4e:08:10:a5:ab:5d:0e:c3:b6:d0:2b:7a:83:62:f7:65:e4:7d: be:28:9a:7a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4o0BfZ9TEVZo+I8P72osFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTlhMDA2MTk3MTY2YzhiNjkwYmRhOTQ3ZGJkZGNmN2NmNWUzOTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5t6BkybEVAFnYklCarC55REuxMY GpjnTcEXjRLOSAcgNz+Eysd24VabCwrYcb9u6QIIwfy2uL7LcgwVECO9XpuPzA7d defln0ICnHVRc+i1QguMWDYU/E95bQj/Yaaeew+MdsRwvOWkD7UY+zIDuwj4feea y2U8qFzquoEaF58hrtfDY6pi8pVVcsGaT80RYIWlNq9iclKn4XHFqVGaKfztdSvR qOmRXOgxIdWpqY4zFEQYahBmLfbCXtdhqKM2SLmsXp2bvDW1gRMYHUOvoZMXqKCe +0lEYM5/LEcw+ZZ/1GmmrjzradwOBfYHtM2MxmzdbpYbonrCNVPrq+5RdwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFF6aAGGXFmyLaQvalH293PfPXjk0MB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvWHBvQVlaY1diSXRwQzlxVWZiM2M5ODllT1RRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVDYyAwQA wjfjMA0GCSqGSIb3DQEBCwUAA4IBAQA9D7KPyuMTrYtLfLdMt1mV5mo4rqJdlEEE KbsjqMXjKlkGVDkXN6X4UWGhxqU40qCXq5HjZywEyk6JaFsiFgKFCX5UkW18kBAr kRpHxi5vu1Dnwk1oq/Tb9igcQ4XT7hz9/MVai4v9Uo/jEE3yN3Q85EWfmsXXneK7 WiNP82lu7ldoyJmMTBN0Ql3AZF6fD7ZWaBDOZYQBdVSnRnuFecqFVSaseusobrLh SW2AWicp3Ezx3imF7+PsLZHyWSU+H9sBJjfWBAAxLiLVnaLCHXBGHCuCfII1xrFB 0+t2WyvlXRLJ8T1YuM/7NhJOCBClq10Ow7bQK3qDYvdl5H2+KJp6 -----END CERTIFICATE-----Generated at Fri Jan 2 12:05:04 2026 by rpki-client