This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Xs0mZW0UQgjvO4TMNrlF4bDMCxA.roa File: Xs0mZW0UQgjvO4TMNrlF4bDMCxA.roa (raw, json) Hash identifier: cQ57TfvbvdFJaSx8sMv+hxQVfSzSLlgxoCuA+GBrLyo= Subject key identifier: 5E:CD:26:65:6D:14:42:08:EF:3B:84:CC:36:B9:45:E1:B0:CC:0B:10 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A329838353F574C7776614E60DDF50 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Xs0mZW0UQgjvO4TMNrlF4bDMCxA.roa Signing time: Thu 01 Jan 2026 08:18:37 +0000 ROA not before: Thu 01 Jan 2026 08:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202129 IP address blocks: 93.123.104.0/22 maxlen: 24 2a00:1728:1e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:29:83:83:53:f5:74:c7:77:66:14:e6:0d:df:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ecd26656d144208ef3b84cc36b945e1b0cc0b10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:71:ce:42:15:98:dd:f4:f4:86:71:b7:4e:8c: 84:ee:fe:a0:c7:cd:1b:d8:cb:cd:71:54:b9:ee:c6: 4a:80:b5:ee:0d:df:eb:0c:89:21:b1:c7:3b:a2:00: c4:33:6f:d5:40:7a:63:a0:5d:e6:72:25:8d:9c:c6: ef:7e:48:9d:55:6a:29:83:4a:10:e3:61:01:2f:bf: 1c:67:10:3a:5d:3b:13:b1:88:9b:94:72:4e:e9:34: eb:e9:b2:69:65:07:e7:31:cf:6b:33:a2:95:a3:ad: a8:13:1c:a0:f0:97:7a:5d:a8:e7:c5:ee:c8:fe:69: 11:90:c3:f8:49:8c:56:60:24:26:f7:0a:8e:4c:aa: 04:eb:7b:78:af:75:4d:f4:71:89:07:e5:65:f7:8e: 80:35:20:9d:f5:93:fd:7c:43:1b:34:a5:d3:3d:55: 8c:08:ca:f9:5d:2a:72:d0:99:9f:67:4d:ad:59:5c: 50:30:b2:3c:35:d0:64:8b:24:56:02:6a:de:51:12: 0f:98:90:54:9d:79:5c:c6:a5:3f:06:a1:c1:c8:d3: 16:b1:98:eb:3f:cb:34:aa:db:cc:36:bc:4c:ec:17: e9:98:78:9a:f8:10:c0:89:94:06:a5:15:96:82:ce: 96:e6:c0:f2:90:eb:37:3e:5f:50:52:3d:b5:5a:44: 66:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:CD:26:65:6D:14:42:08:EF:3B:84:CC:36:B9:45:E1:B0:CC:0B:10 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Xs0mZW0UQgjvO4TMNrlF4bDMCxA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.123.104.0/22 IPv6: 2a00:1728:1e::/48 Signature Algorithm: sha256WithRSAEncryption a6:ff:55:f2:37:a6:93:dd:9c:66:32:32:89:6e:03:e2:fe:b5: 8f:38:d9:06:3e:60:3d:5f:35:fa:00:4a:32:28:b8:a0:da:a5: ad:cb:1b:1d:c0:e1:21:94:1e:a5:ca:08:8b:e1:f8:a6:41:50: ed:1b:e0:e5:37:d4:c6:d1:c5:72:f5:46:d7:43:14:ed:0c:1f: b3:a2:d8:06:27:e3:ff:34:f7:68:30:2b:64:72:54:54:ee:2c: 9c:4d:a3:9f:8b:eb:9c:ae:1c:11:96:ec:5f:51:97:44:15:e8: dd:7d:8e:51:2a:3c:2d:11:9b:d4:c2:55:85:47:a8:8e:b9:20: e3:93:a4:8d:62:27:a2:f6:bc:cf:09:67:bc:00:7c:04:6f:be: 0b:68:a1:8f:1e:f1:3c:e8:49:49:88:4f:d0:2b:c9:9e:79:e2: 7f:4c:31:6d:d3:63:4c:b8:0f:72:80:59:a5:cb:98:d7:79:d5: f7:e7:8d:30:4e:cb:c1:23:61:82:e7:3b:86:aa:09:91:db:c0: 87:ca:e6:c9:8b:3c:6a:1d:39:0b:9b:1a:2b:1f:58:aa:6a:b5: 26:e6:69:5d:2e:ad:98:b7:28:3f:8d:de:55:72:22:71:49:82: df:aa:11:98:39:04:3e:5b:a8:6b:29:f4:b9:a1:26:c7:7d:11: fd:ca:8d:c6 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4oymDg1P1dMd3ZhTmDd9QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZWNkMjY2NTZkMTQ0MjA4ZWYzYjg0Y2MzNmI5NDVlMWIwY2MwYjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13HOQhWY3fT0hnG3ToyE7v6gx80b 2MvNcVS57sZKgLXuDd/rDIkhscc7ogDEM2/VQHpjoF3mciWNnMbvfkidVWopg0oQ 42EBL78cZxA6XTsTsYiblHJO6TTr6bJpZQfnMc9rM6KVo62oExyg8Jd6Xajnxe7I /mkRkMP4SYxWYCQm9wqOTKoE63t4r3VN9HGJB+Vl946ANSCd9ZP9fEMbNKXTPVWM CMr5XSpy0JmfZ02tWVxQMLI8NdBkiyRWAmreURIPmJBUnXlcxqU/BqHByNMWsZjr P8s0qtvMNrxM7BfpmHia+BDAiZQGpRWWgs6W5sDykOs3Pl9QUj21WkRmlQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFF7NJmVtFEII7zuEzDa5ReGwzAsQMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvWHMwbVpXMFVRZ2p2TzRUTU5ybEY0YkRNQ3hBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCXXtoMA8E AgACMAkDBwAqABcoAB4wDQYJKoZIhvcNAQELBQADggEBAKb/VfI3ppPdnGYyMolu A+L+tY842QY+YD1fNfoASjIouKDapa3LGx3A4SGUHqXKCIvh+KZBUO0b4OU31MbR xXL1RtdDFO0MH7Oi2AYn4/8092gwK2RyVFTuLJxNo5+L65yuHBGW7F9Rl0QV6N19 jlEqPC0Rm9TCVYVHqI65IOOTpI1iJ6L2vM8JZ7wAfARvvgtooY8e8TzoSUmIT9Ar yZ554n9MMW3TY0y4D3KAWaXLmNd51ffnjTBOy8EjYYLnO4aqCZHbwIfK5smLPGod OQubGisfWKpqtSbmaV0urZi3KD+N3lVyInFJgt+qEZg5BD5bqGsp9LmhJsd9Ef3K jcY= -----END CERTIFICATE-----Generated at Fri Jan 2 12:05:04 2026 by rpki-client