This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/XBrtcFkYFYn1d8wOUs-MH4MggIg.roa File: XBrtcFkYFYn1d8wOUs-MH4MggIg.roa (raw, json) Hash identifier: 3la0XwUD6TEcGr6MZx4dbGc7QsVb0VebdIcmX6590Pg= Subject key identifier: 5C:1A:ED:70:59:18:15:89:F5:77:CC:0E:52:CF:8C:1F:83:20:80:88 Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Certificate serial: 019B7F83867F7D32D62B70D2E02A1514352B Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/XBrtcFkYFYn1d8wOUs-MH4MggIg.roa Signing time: Fri 02 Jan 2026 16:21:24 +0000 ROA not before: Fri 02 Jan 2026 16:21:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63023 IP address blocks: 188.209.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:86:7f:7d:32:d6:2b:70:d2:e0:2a:15:14:35:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Validity Not Before: Jan 2 16:21:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c1aed7059181589f577cc0e52cf8c1f83208088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f6:bf:c0:83:17:ca:c4:33:7a:e6:c8:1a:1e: 99:02:ab:aa:b0:e3:11:b3:cb:69:4e:ff:f1:b1:69: 19:69:ef:29:9a:af:95:38:40:dd:d3:67:b4:16:db: 54:60:27:1d:0c:2b:2e:64:41:fe:07:54:57:b2:e8: 95:74:23:f9:46:3a:58:00:8d:4b:9b:52:c9:0a:2e: 8e:b5:4f:d3:38:f4:da:a4:85:d9:27:04:c0:be:ed: d7:68:a4:45:ce:98:b3:a3:2e:73:1f:11:8b:8d:66: 6a:a7:4c:d4:5d:43:40:79:0c:df:58:ae:6c:84:b1: 95:12:31:ec:6e:df:d9:14:a7:e7:39:f5:1f:53:a1: 08:09:c1:bb:03:b9:a3:15:d7:4e:d4:8a:b3:08:c4: 34:47:ae:68:b4:90:28:81:72:ee:5f:58:17:de:e7: d1:61:03:83:ce:2c:bb:f9:a8:4a:15:7d:35:72:01: a9:89:df:b1:dc:22:d8:77:15:99:c9:bc:cc:fd:c5: df:12:03:51:8c:b0:05:03:31:d1:b3:b3:68:b3:14: 6e:4c:62:ca:c8:05:cf:72:44:ae:ba:1d:37:4f:0e: 5c:27:8b:a3:76:ea:5d:e9:79:8c:d5:d5:ea:9e:6e: 09:83:c2:9a:f8:19:e4:76:8f:09:a8:27:8a:82:14: 8b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:1A:ED:70:59:18:15:89:F5:77:CC:0E:52:CF:8C:1F:83:20:80:88 X509v3 Authority Key Identifier: keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/XBrtcFkYFYn1d8wOUs-MH4MggIg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.209.128.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:8c:73:6d:a7:dc:47:42:c8:9b:98:95:6d:91:fc:5e:87:82: f6:de:42:c2:c7:d0:39:f6:2a:52:9e:04:8f:14:2b:39:ef:53: d6:c9:09:f6:90:15:2c:29:86:d2:56:cb:08:ec:92:ee:da:3a: af:2d:a8:85:6c:3a:de:89:97:d9:a0:a5:d7:fd:e8:7a:98:4e: d5:dc:d6:5b:9e:94:94:61:9f:a1:5f:83:46:62:83:23:c3:a3: a5:f5:9a:7b:ee:14:c6:b0:01:ec:16:8a:6d:7d:23:37:fd:e5: 87:fd:6f:d8:12:b0:b9:12:46:26:2b:7d:54:67:2c:ee:51:94: f3:6c:7e:31:17:0d:04:73:8b:51:95:6e:09:a4:15:aa:fd:a9: 91:1e:ee:6b:f0:aa:ed:16:4e:82:e8:78:56:51:81:27:4d:c6: 21:a3:24:45:56:17:dc:1a:ea:36:d2:5e:dd:03:9e:f4:c0:39: 76:47:3d:67:9d:14:db:6f:4d:1d:d4:82:b9:bc:95:d8:e9:2a: 34:fd:81:00:79:2b:a0:41:51:58:d1:70:6b:88:f3:62:bf:3a: 5a:13:91:78:7a:fb:08:95:e6:d7:d3:f2:a3:e7:96:a8:68:bf: 51:2a:1c:f9:ce:d8:d1:bd:25:eb:a6:1d:1d:a2:7b:8c:e9:00: a0:16:11:fa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g4Z/fTLWK3DS4CoVFDUrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MWYyOTQ2MmU3YTdkYTdlYjVmNDVkYTc4NzNmMTRlNDAz ZmUzYWIwHhcNMjYwMTAyMTYyMTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzFhZWQ3MDU5MTgxNTg5ZjU3N2NjMGU1MmNmOGMxZjgzMjA4MDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArva/wIMXysQzeubIGh6ZAquqsOMR s8tpTv/xsWkZae8pmq+VOEDd02e0FttUYCcdDCsuZEH+B1RXsuiVdCP5RjpYAI1L m1LJCi6OtU/TOPTapIXZJwTAvu3XaKRFzpizoy5zHxGLjWZqp0zUXUNAeQzfWK5s hLGVEjHsbt/ZFKfnOfUfU6EICcG7A7mjFddO1IqzCMQ0R65otJAogXLuX1gX3ufR YQODziy7+ahKFX01cgGpid+x3CLYdxWZybzM/cXfEgNRjLAFAzHRs7NosxRuTGLK yAXPckSuuh03Tw5cJ4ujdupd6XmM1dXqnm4Jg8Ka+Bnkdo8JqCeKghSLmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFwa7XBZGBWJ9XfMDlLPjB+DIICIMB8GA1UdIwQY MBaAFAUfKUYuen2n619F2nhz8U5AP+OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEt M2Y4YjU1ZGExYWM0LzEvWEJydGNGa1lGWW4xZDh3T1VzLU1INE1nZ0lnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEtM2Y4YjU1ZGExYWM0 LzEvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNGAMA0G CSqGSIb3DQEBCwUAA4IBAQAdjHNtp9xHQsibmJVtkfxeh4L23kLCx9A59ipSngSP FCs571PWyQn2kBUsKYbSVssI7JLu2jqvLaiFbDreiZfZoKXX/eh6mE7V3NZbnpSU YZ+hX4NGYoMjw6Ol9Zp77hTGsAHsFoptfSM3/eWH/W/YErC5EkYmK31UZyzuUZTz bH4xFw0Ec4tRlW4JpBWq/amRHu5r8KrtFk6C6HhWUYEnTcYhoyRFVhfcGuo20l7d A570wDl2Rz1nnRTbb00d1IK5vJXY6So0/YEAeSugQVFY0XBriPNivzpaE5F4evsI lebX0/Kj55aoaL9RKhz5ztjRvSXrph0donuM6QCgFhH6 -----END CERTIFICATE-----Generated at Mon Jan 19 18:05:04 2026 by rpki-client