This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/XcMHnxKZY2e5dQr9lhfnKoyrzgg.roa File: XcMHnxKZY2e5dQr9lhfnKoyrzgg.roa (raw, json) Hash identifier: uL7kMGiEjQGkL0k1PwdcqBNO3gC59+oxrHmDwgqaEOM= Subject key identifier: 5D:C3:07:9F:12:99:63:67:B9:75:0A:FD:96:17:E7:2A:8C:AB:CE:08 Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Certificate serial: 019B7F838CC0C2EFA94CDDF2157B6F2C7715 Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/XcMHnxKZY2e5dQr9lhfnKoyrzgg.roa Signing time: Fri 02 Jan 2026 16:21:26 +0000 ROA not before: Fri 02 Jan 2026 16:21:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209263 IP address blocks: 194.15.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:8c:c0:c2:ef:a9:4c:dd:f2:15:7b:6f:2c:77:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Validity Not Before: Jan 2 16:21:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5dc3079f12996367b9750afd9617e72a8cabce08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:79:bc:6a:b3:9a:32:ff:db:57:19:39:55:d0: ce:9b:5a:59:c6:fe:78:45:8c:f2:04:94:7a:5d:15: 6a:6e:7e:7b:ca:b6:f5:90:1d:6e:bb:3a:9a:f0:18: c2:97:2c:1a:8a:9d:34:ba:2f:f1:a4:76:47:c8:67: 77:d7:d4:30:47:b6:ca:88:ce:8c:be:1d:c9:82:44: 08:ca:13:b4:36:5f:55:41:c0:4a:65:44:15:ed:43: be:04:4f:79:26:85:a2:76:40:4b:ef:46:63:3d:66: 3a:78:9d:60:1a:68:d2:03:31:3b:5a:e6:71:93:a0: 8a:ae:24:82:60:0d:a6:67:57:88:c1:8e:41:be:a8: d0:3b:4c:09:b5:75:d1:50:36:4d:7d:f3:99:98:07: fc:9a:ac:44:a6:ba:a4:76:c1:c6:3b:65:20:11:62: 31:14:24:74:8c:f6:76:c9:0a:b8:95:3d:5e:86:da: 01:5a:67:30:76:c9:32:93:8b:7a:bd:52:b7:bf:d0: fa:47:5a:82:45:db:ad:d8:bd:10:c7:81:34:40:83: b4:37:20:26:99:b7:a3:56:46:fb:98:f3:80:73:d4: 2e:da:42:d1:86:5d:8e:a9:2a:38:75:b8:ef:b6:8d: 56:3f:33:aa:28:53:6b:b4:42:36:d0:48:d1:8f:46: 93:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:C3:07:9F:12:99:63:67:B9:75:0A:FD:96:17:E7:2A:8C:AB:CE:08 X509v3 Authority Key Identifier: keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/XcMHnxKZY2e5dQr9lhfnKoyrzgg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.15.98.0/24 Signature Algorithm: sha256WithRSAEncryption 41:af:b2:c8:37:c7:eb:cd:1b:5e:8b:9c:7a:79:4d:cd:27:c1: f6:23:1e:49:d5:06:8e:9b:39:cf:1c:d2:05:3d:b6:59:9c:b4: 0f:86:f0:51:cb:ca:c5:6e:78:b3:e1:83:94:c5:47:8e:80:c8: fc:80:b9:3e:31:e6:af:61:94:c6:15:db:43:1b:bb:74:8c:dd: 7a:ab:18:87:d2:37:d3:b7:a4:74:e4:7d:9e:61:e9:df:63:5e: f9:f4:4d:33:5a:1f:9a:46:77:bd:f1:6a:5b:f5:66:1b:77:63: 4b:a1:9b:9e:b6:dc:43:b3:6d:c9:3b:a4:a3:42:6c:6a:92:68: 20:48:63:0f:9b:65:e2:89:30:04:6c:ba:0a:a6:38:e2:06:f3: 19:93:4d:a7:c7:0e:a9:ec:4e:51:25:f0:d4:70:ae:4b:9c:f3: 29:35:ed:89:8c:96:9c:ef:a1:69:ea:1d:cf:e5:90:38:3a:d4: 48:87:42:c9:0d:ea:fe:8f:18:a1:6e:f5:57:17:74:89:65:9f: d3:02:90:9b:9f:e3:da:8c:94:d7:ed:79:ba:28:d5:8c:57:0f: dc:44:b2:3f:da:e1:3f:bf:5c:86:e1:df:44:42:c2:c0:df:26: b9:a0:d9:33:9e:fb:de:01:8c:9e:a9:5f:e4:da:be:75:f6:3c: 4b:10:fe:18 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g4zAwu+pTN3yFXtvLHcVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MWYyOTQ2MmU3YTdkYTdlYjVmNDVkYTc4NzNmMTRlNDAz ZmUzYWIwHhcNMjYwMTAyMTYyMTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZGMzMDc5ZjEyOTk2MzY3Yjk3NTBhZmQ5NjE3ZTcyYThjYWJjZTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXm8arOaMv/bVxk5VdDOm1pZxv54 RYzyBJR6XRVqbn57yrb1kB1uuzqa8BjClywaip00ui/xpHZHyGd319QwR7bKiM6M vh3JgkQIyhO0Nl9VQcBKZUQV7UO+BE95JoWidkBL70ZjPWY6eJ1gGmjSAzE7WuZx k6CKriSCYA2mZ1eIwY5BvqjQO0wJtXXRUDZNffOZmAf8mqxEprqkdsHGO2UgEWIx FCR0jPZ2yQq4lT1ehtoBWmcwdskyk4t6vVK3v9D6R1qCRdut2L0Qx4E0QIO0NyAm mbejVkb7mPOAc9Qu2kLRhl2OqSo4dbjvto1WPzOqKFNrtEI20EjRj0aT1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF3DB58SmWNnuXUK/ZYX5yqMq84IMB8GA1UdIwQY MBaAFAUfKUYuen2n619F2nhz8U5AP+OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEt M2Y4YjU1ZGExYWM0LzEvWGNNSG54S1pZMmU1ZFFyOWxoZm5Lb3lyemdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEtM2Y4YjU1ZGExYWM0 LzEvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwg9iMA0G CSqGSIb3DQEBCwUAA4IBAQBBr7LIN8frzRtei5x6eU3NJ8H2Ix5J1QaOmznPHNIF PbZZnLQPhvBRy8rFbniz4YOUxUeOgMj8gLk+MeavYZTGFdtDG7t0jN16qxiH0jfT t6R05H2eYenfY1759E0zWh+aRne98Wpb9WYbd2NLoZuettxDs23JO6SjQmxqkmgg SGMPm2XiiTAEbLoKpjjiBvMZk02nxw6p7E5RJfDUcK5LnPMpNe2JjJac76Fp6h3P 5ZA4OtRIh0LJDer+jxihbvVXF3SJZZ/TApCbn+PajJTX7Xm6KNWMVw/cRLI/2uE/ v1yG4d9EQsLA3ya5oNkznvveAYyeqV/k2r519jxLEP4Y -----END CERTIFICATE-----Generated at Tue Jan 20 02:50:01 2026 by rpki-client