This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/XvO3KugGyIUqy8DdZrWXqALiZv8.roa File: XvO3KugGyIUqy8DdZrWXqALiZv8.roa (raw, json) Hash identifier: yUk7+RcCJLoQMsjAjhgKG5a6qMpWaeW1ZTTyneRurSc= Subject key identifier: 5E:F3:B7:2A:E8:06:C8:85:2A:CB:C0:DD:66:B5:97:A8:02:E2:66:FF Certificate issuer: /CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97 Certificate serial: 019B7B35599B1E18878DDDCE9917164F4542 Authority key identifier: E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/XvO3KugGyIUqy8DdZrWXqALiZv8.roa Signing time: Thu 01 Jan 2026 20:17:32 +0000 ROA not before: Thu 01 Jan 2026 20:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 193.17.68.0/24 maxlen: 24 193.30.161.0/24 maxlen: 24 193.200.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:59:9b:1e:18:87:8d:dd:ce:99:17:16:4f:45:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97 Validity Not Before: Jan 1 20:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ef3b72ae806c8852acbc0dd66b597a802e266ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d0:b0:b3:61:e7:4f:c7:aa:8e:8e:1f:e4:ea: 93:fd:a7:41:0b:87:a5:e6:ed:9a:de:24:d4:9b:89: 8c:17:29:fb:9b:f0:2b:b3:da:c6:d8:1c:7e:f9:25: bb:63:2e:14:c4:fb:48:eb:4a:74:7c:42:9b:2d:b2: aa:66:3e:dc:15:74:eb:fd:2c:91:05:ca:b0:36:e0: 98:ff:06:9e:2b:b8:a1:65:5d:ce:d4:54:c5:3f:c1: a4:33:56:7f:00:cf:c9:7a:db:82:21:fc:9e:8d:2c: 2f:93:8a:c0:2e:8c:e2:1d:d4:5c:84:26:1a:41:ad: e1:c8:a0:f1:b1:76:68:af:0f:21:08:4b:13:e1:d4: cf:67:b2:36:94:dc:fa:eb:0b:20:80:44:fc:00:41: 77:db:23:3c:e8:9d:87:c9:94:85:cd:bf:35:f8:24: 97:f3:7c:d8:a4:0d:2a:1b:68:26:a6:76:40:d3:23: 81:11:fe:78:67:ea:84:ce:a9:52:dc:e1:f5:89:70: 1c:28:01:4c:42:02:e1:1e:03:7c:1f:bc:f7:9a:d1: 73:a2:46:18:9a:2d:a1:39:f4:87:7b:c8:04:fd:4a: c9:fa:27:4b:0f:c0:4a:a3:e7:50:68:3d:6c:d4:57: 50:fb:5d:01:20:9c:a4:f9:a2:cf:c9:f5:88:79:f7: 0a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:F3:B7:2A:E8:06:C8:85:2A:CB:C0:DD:66:B5:97:A8:02:E2:66:FF X509v3 Authority Key Identifier: keyid:E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/XvO3KugGyIUqy8DdZrWXqALiZv8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.17.68.0/24 193.30.161.0/24 193.200.30.0/24 Signature Algorithm: sha256WithRSAEncryption 59:6e:86:5a:10:d6:66:8c:d2:18:53:cd:b9:94:cb:92:c9:05: 05:a4:a8:58:9d:08:a6:91:4e:6a:07:55:20:ef:91:bc:b6:90: ef:57:1d:21:d5:b4:d1:57:dc:1b:76:8b:98:6d:2d:3e:ea:18: a5:71:87:50:81:86:27:9e:80:8f:b9:fb:16:04:0c:72:fb:01: bf:63:f0:4e:de:88:61:00:f0:22:f0:a8:97:03:59:08:d0:39: 1e:98:ea:46:a9:1a:8c:26:ff:72:fe:08:bc:fa:13:c6:c4:b5: ae:a8:0c:16:57:09:55:0e:6a:04:bb:25:6e:a3:29:5f:78:d8: fd:4e:36:c6:c1:6e:79:e0:8c:01:5d:4f:e5:8b:9f:bf:a3:8b: 8c:86:c7:80:bf:81:53:4b:c4:8a:e7:44:1e:38:a9:b4:88:54: e5:75:fe:23:28:31:1d:28:0e:74:3b:63:d9:82:92:be:17:7e: e5:8f:fb:98:4f:1a:1f:6f:2a:c6:9a:52:80:26:4a:16:99:75: 85:71:8b:64:a6:98:9f:aa:ac:8a:80:ed:34:b3:9d:69:da:e5: 76:d9:fb:61:27:30:b3:03:78:dc:69:2d:83:a4:ca:73:ad:83: e4:e8:3d:a9:35:10:94:ee:ec:10:93:41:5b:1a:9b:af:65:cc: 40:07:2c:f9 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7NVmbHhiHjd3OmRcWT0VCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YTcxNGZmYzU5OGIxNTY0N2JiYWZlMmM2NDYwYTg3ZWFm YmNmOTcwHhcNMjYwMTAxMjAxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZWYzYjcyYWU4MDZjODg1MmFjYmMwZGQ2NmI1OTdhODAyZTI2NmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dCws2HnT8eqjo4f5OqT/adBC4el 5u2a3iTUm4mMFyn7m/Ars9rG2Bx++SW7Yy4UxPtI60p0fEKbLbKqZj7cFXTr/SyR BcqwNuCY/waeK7ihZV3O1FTFP8GkM1Z/AM/JetuCIfyejSwvk4rALoziHdRchCYa Qa3hyKDxsXZorw8hCEsT4dTPZ7I2lNz66wsggET8AEF32yM86J2HyZSFzb81+CSX 83zYpA0qG2gmpnZA0yOBEf54Z+qEzqlS3OH1iXAcKAFMQgLhHgN8H7z3mtFzokYY mi2hOfSHe8gE/UrJ+idLD8BKo+dQaD1s1FdQ+10BIJyk+aLPyfWIefcKSQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFF7ztyroBsiFKsvA3Wa1l6gC4mb/MB8GA1UdIwQY MBaAFOSnFP/FmLFWR7uv4sZGCofq+8+XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUtjVV84V1lzVlpIdTZfaXhrWUtoLXI3ejVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kOTZkYTYtMTJiMi00NDZlLThkOTkt N2NiMzQ1ZTg1NDFhLzEvWHZPM0t1Z0d5SVVxeThEZFpyV1hxQUxpWnY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9kOTZkYTYtMTJiMi00NDZlLThkOTktN2NiMzQ1ZTg1NDFh LzEvNUtjVV84V1lzVlpIdTZfaXhrWUtoLXI3ejVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwRFEAwQA wR6hAwQAwcgeMA0GCSqGSIb3DQEBCwUAA4IBAQBZboZaENZmjNIYU825lMuSyQUF pKhYnQimkU5qB1Ug75G8tpDvVx0h1bTRV9wbdouYbS0+6hilcYdQgYYnnoCPufsW BAxy+wG/Y/BO3ohhAPAi8KiXA1kI0DkemOpGqRqMJv9y/gi8+hPGxLWuqAwWVwlV DmoEuyVuoylfeNj9TjbGwW554IwBXU/li5+/o4uMhseAv4FTS8SK50QeOKm0iFTl df4jKDEdKA50O2PZgpK+F37lj/uYTxofbyrGmlKAJkoWmXWFcYtkppifqqyKgO00 s51p2uV22fthJzCzA3jcaS2DpMpzrYPk6D2pNRCU7uwQk0FbGpuvZcxAByz5 -----END CERTIFICATE-----Generated at Fri Jan 2 11:03:58 2026 by rpki-client