This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/XPbIAQjvWUhps2QzwB4FO6KMPQg.roa File: XPbIAQjvWUhps2QzwB4FO6KMPQg.roa (raw, json) Hash identifier: WmuXuAfgAD/HSjGwGkFBdZOZhMWpJ738UuXdMSLFck4= Subject key identifier: 5C:F6:C8:01:08:EF:59:48:69:B3:64:33:C0:1E:05:3B:A2:8C:3D:08 Certificate issuer: /CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61 Certificate serial: 019B7EA69F9F6B03DB430AC84FB29FC5A118 Authority key identifier: C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/XPbIAQjvWUhps2QzwB4FO6KMPQg.roa Signing time: Fri 02 Jan 2026 12:20:07 +0000 ROA not before: Fri 02 Jan 2026 12:20:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62145 IP address blocks: 193.104.9.0/24 maxlen: 32 193.109.236.0/24 maxlen: 32 195.66.154.0/23 maxlen: 32 195.234.129.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 06:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:9f:9f:6b:03:db:43:0a:c8:4f:b2:9f:c5:a1:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61 Validity Not Before: Jan 2 12:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5cf6c80108ef594869b36433c01e053ba28c3d08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:59:f0:aa:f6:9d:76:74:3c:ff:f8:5d:54:4e: 43:70:ff:2b:19:fa:c1:f9:b8:bf:ca:9f:e8:8b:af: c3:c9:2a:ab:30:d5:69:8d:56:8c:b5:45:ec:01:f4: 80:ae:bd:d3:61:6e:88:31:e7:09:f2:a7:5e:8b:33: 45:38:a6:54:19:27:ab:77:4e:f9:75:21:d4:d9:d1: cb:87:ce:88:a0:51:a6:cd:a6:f9:92:1c:1e:a2:dc: cb:e1:f7:e4:f9:eb:4e:55:0c:97:ff:f7:90:2b:aa: d8:6a:b9:37:9b:c2:7e:0f:f3:3e:b9:1e:85:79:41: 0a:9d:f3:ee:f1:bf:19:05:51:13:b6:eb:25:f4:69: 82:48:02:3e:fc:5d:22:06:a8:c0:85:f3:8b:36:fe: c1:46:08:4c:24:91:90:92:44:2f:11:ab:35:52:62: 87:46:f7:b6:64:73:31:f5:94:55:c2:3f:a0:96:a0: cb:26:60:e4:2b:04:57:02:95:83:cb:4d:8c:64:14: 74:f8:99:f2:28:7f:cc:1c:ef:2d:8a:04:88:bf:95: 2e:14:32:bb:21:ba:8d:28:2f:ad:cc:71:8e:bb:21: 6c:c6:53:5e:b2:38:0a:56:88:6b:db:09:a0:a4:6f: 50:8b:7f:a5:87:b2:67:07:70:10:a9:4f:21:4e:6e: 56:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F6:C8:01:08:EF:59:48:69:B3:64:33:C0:1E:05:3B:A2:8C:3D:08 X509v3 Authority Key Identifier: keyid:C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/XPbIAQjvWUhps2QzwB4FO6KMPQg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.9.0/24 193.109.236.0/24 195.66.154.0/23 195.234.129.0/24 Signature Algorithm: sha256WithRSAEncryption 53:f3:92:d3:de:7c:05:1a:ab:3e:44:90:13:a7:c0:58:60:58: 8c:f4:19:89:e1:7d:a4:40:07:49:6c:d9:53:5a:7a:c1:ad:1b: d6:c9:1b:45:24:63:4d:de:78:e8:0c:6a:15:57:53:80:b8:84: cb:0e:42:66:3a:3f:01:ad:3e:44:9d:2b:c2:0e:64:73:43:d9: db:63:7e:59:db:5e:00:25:9f:bd:33:01:ef:a7:98:2a:b2:8f: b0:f8:c5:e9:71:b7:aa:c1:b4:f2:04:90:c0:73:b4:dd:54:50: 4a:3c:61:c1:bd:43:5b:c1:70:62:2b:b8:2b:d6:5c:8b:4d:38: fe:84:23:c3:cb:42:e0:f3:10:a7:ae:88:10:04:ef:4a:d5:51: ff:64:6c:a6:ed:d4:7a:67:e9:f0:ee:57:fd:24:e9:9e:95:94: 5e:16:2e:69:c6:e0:c4:fe:84:86:11:a1:86:48:02:7f:a9:93: b3:10:ef:be:89:ff:9b:d0:73:50:84:70:a1:31:e8:97:98:a6: be:e7:58:36:f4:95:5e:e5:e6:68:fd:e6:5e:3c:be:d1:61:43: 72:ad:47:67:ab:b4:49:7a:02:63:e2:62:a3:be:2b:b1:f7:54: b8:19:78:28:4b:5d:16:86:38:f8:74:90:ef:79:5b:95:b1:7a: b2:12:32:46 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+pp+fawPbQwrIT7KfxaEYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1ZGUzMmJiOWNjOTllMTE1ZGRiYWY2YjdmYTIzMDUxNzg5 ZjJmNjEwHhcNMjYwMTAyMTIyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2Y2YzgwMTA4ZWY1OTQ4NjliMzY0MzNjMDFlMDUzYmEyOGMzZDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lnwqvaddnQ8//hdVE5DcP8rGfrB +bi/yp/oi6/DySqrMNVpjVaMtUXsAfSArr3TYW6IMecJ8qdeizNFOKZUGSerd075 dSHU2dHLh86IoFGmzab5khweotzL4ffk+etOVQyX//eQK6rYark3m8J+D/M+uR6F eUEKnfPu8b8ZBVETtusl9GmCSAI+/F0iBqjAhfOLNv7BRghMJJGQkkQvEas1UmKH Rve2ZHMx9ZRVwj+glqDLJmDkKwRXApWDy02MZBR0+JnyKH/MHO8tigSIv5UuFDK7 IbqNKC+tzHGOuyFsxlNesjgKVohr2wmgpG9Qi3+lh7JnB3AQqU8hTm5WkQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFFz2yAEI71lIabNkM8AeBTuijD0IMB8GA1UdIwQY MBaAFMXeMrucyZ4RXduva3+iMFF4ny9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGQ0eXU1ekpuaEZkMjY5cmY2SXdVWGlmTDJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9iZDA5ZTctYzQwYi00N2E2LThhMmUt MDYzNjc1MzY3OWI2LzEvWFBiSUFRanZXVWhwczJRendCNEZPNktNUFFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9iZDA5ZTctYzQwYi00N2E2LThhMmUtMDYzNjc1MzY3OWI2 LzEveGQ0eXU1ekpuaEZkMjY5cmY2SXdVWGlmTDJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwWgJAwQA wW3sAwQBw0KaAwQAw+qBMA0GCSqGSIb3DQEBCwUAA4IBAQBT85LT3nwFGqs+RJAT p8BYYFiM9BmJ4X2kQAdJbNlTWnrBrRvWyRtFJGNN3njoDGoVV1OAuITLDkJmOj8B rT5EnSvCDmRzQ9nbY35Z214AJZ+9MwHvp5gqso+w+MXpcbeqwbTyBJDAc7TdVFBK PGHBvUNbwXBiK7gr1lyLTTj+hCPDy0Lg8xCnrogQBO9K1VH/ZGym7dR6Z+nw7lf9 JOmelZReFi5pxuDE/oSGEaGGSAJ/qZOzEO++if+b0HNQhHChMeiXmKa+51g29JVe 5eZo/eZePL7RYUNyrUdnq7RJegJj4mKjviux91S4GXgoS10Whjj4dJDveVuVsXqy EjJG -----END CERTIFICATE-----Generated at Tue Jan 27 12:39:38 2026 by rpki-client