This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/XB5JQ6tMGhK6VXwjo3nOEFMkM-U.roa File: XB5JQ6tMGhK6VXwjo3nOEFMkM-U.roa (raw, json) Hash identifier: KV414vkbOzOU+S9G8Ie1ETRwhJyk99wklT+FH+pmi/w= Subject key identifier: 5C:1E:49:43:AB:4C:1A:12:BA:55:7C:23:A3:79:CE:10:53:24:33:E5 Certificate issuer: /CN=af6c2be7bf4282e1cd6908f289a79cec0a5df42e Certificate serial: 019B7F825A72E2F9554C95195CFB8797AF0E Authority key identifier: AF:6C:2B:E7:BF:42:82:E1:CD:69:08:F2:89:A7:9C:EC:0A:5D:F4:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2wr579CguHNaQjyiaec7Apd9C4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/XB5JQ6tMGhK6VXwjo3nOEFMkM-U.roa Signing time: Fri 02 Jan 2026 16:20:07 +0000 ROA not before: Fri 02 Jan 2026 16:20:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42484 IP address blocks: 195.114.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.crl rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.mft rsync://rpki.ripe.net/repository/DEFAULT/r2wr579CguHNaQjyiaec7Apd9C4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:5a:72:e2:f9:55:4c:95:19:5c:fb:87:97:af:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af6c2be7bf4282e1cd6908f289a79cec0a5df42e Validity Not Before: Jan 2 16:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c1e4943ab4c1a12ba557c23a379ce10532433e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c6:ab:67:ee:89:23:04:fe:30:b1:e9:37:e1: c0:29:53:91:87:15:9d:7c:4c:01:26:d6:fb:79:8d: 2d:0b:40:28:6b:a7:a1:06:0d:09:b8:51:9b:b7:dd: 1b:1f:77:59:12:95:18:bd:ba:ed:7c:af:81:7b:f0: ce:1f:2d:55:48:6a:c4:1e:75:e5:14:c0:de:5c:0d: e0:45:ef:f4:87:67:7b:bb:9a:c5:21:e1:05:f8:c2: db:f0:20:2a:aa:02:24:fd:98:81:cc:21:2c:58:d3: 11:0f:ab:94:b9:e7:bd:25:38:b6:a5:ae:1a:ac:d1: e3:67:44:c6:28:77:51:c2:70:74:14:73:bf:fb:98: 2a:27:c1:c8:30:01:82:e9:1f:06:ac:b3:8a:9f:db: 7c:25:50:32:9b:79:96:82:d9:9c:a0:59:36:f6:ce: fd:6d:b1:c2:16:f2:45:e3:1d:12:d3:90:d9:f8:f5: 31:49:ca:d5:4a:ae:43:bb:ff:ac:25:11:c5:98:30: cf:e8:3a:84:b4:e6:d1:e8:5c:6b:bd:bb:8e:ca:e0: 05:f8:c1:58:c4:25:c7:45:94:9d:d0:13:00:8f:11: db:fb:43:78:d7:65:0c:d3:48:d6:e3:c4:81:aa:26: 94:ee:de:1b:71:3a:3e:86:06:74:eb:db:57:f0:d0: ac:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:1E:49:43:AB:4C:1A:12:BA:55:7C:23:A3:79:CE:10:53:24:33:E5 X509v3 Authority Key Identifier: keyid:AF:6C:2B:E7:BF:42:82:E1:CD:69:08:F2:89:A7:9C:EC:0A:5D:F4:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2wr579CguHNaQjyiaec7Apd9C4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/XB5JQ6tMGhK6VXwjo3nOEFMkM-U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.114.116.0/24 Signature Algorithm: sha256WithRSAEncryption 39:01:a0:e1:84:b0:eb:58:c5:b1:5b:7a:3c:c5:6b:7a:e1:4c: 5d:88:b1:41:77:8d:7a:ed:27:0e:af:3e:e7:4e:6b:56:61:ab: a6:66:43:07:81:fc:13:39:39:d4:68:5d:f8:e4:ee:7b:88:3e: 39:dc:36:12:56:1d:d4:37:cc:44:4c:a6:06:40:c9:12:12:e8: 95:4c:50:12:2b:d9:50:41:5d:02:81:69:bf:e3:88:d6:3e:6a: 86:43:5e:6e:74:48:94:21:ba:36:0d:70:d9:40:96:63:84:41: 5e:86:95:bd:10:6f:bb:7d:5c:06:2b:a3:3f:cb:3e:41:24:bc: 0a:92:79:22:36:c6:25:e6:6c:3f:fc:46:c1:90:37:e3:09:fd: 87:d5:87:a8:56:7e:7b:ce:82:55:c4:2c:f7:b9:78:c4:8e:2a: f6:e3:6a:17:f8:f3:02:7d:37:df:e4:9f:bf:30:16:c1:e7:f2: 80:65:d2:d2:3a:27:e1:48:fc:fb:94:e5:a3:cc:b6:a6:1c:6a: 77:8a:a4:f4:1c:01:d4:c1:03:97:70:f8:7b:06:f9:98:bd:47: 39:6c:3a:3a:03:6c:56:c6:0c:c0:18:91:04:f7:3d:f1:84:f8: de:ef:10:66:53:a0:1b:01:f5:57:d9:64:1b:77:73:a9:a4:ab: 2a:e0:25:54 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/glpy4vlVTJUZXPuHl68OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNmMyYmU3YmY0MjgyZTFjZDY5MDhmMjg5YTc5Y2VjMGE1 ZGY0MmUwHhcNMjYwMTAyMTYyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzFlNDk0M2FiNGMxYTEyYmE1NTdjMjNhMzc5Y2UxMDUzMjQzM2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8arZ+6JIwT+MLHpN+HAKVORhxWd fEwBJtb7eY0tC0Aoa6ehBg0JuFGbt90bH3dZEpUYvbrtfK+Be/DOHy1VSGrEHnXl FMDeXA3gRe/0h2d7u5rFIeEF+MLb8CAqqgIk/ZiBzCEsWNMRD6uUuee9JTi2pa4a rNHjZ0TGKHdRwnB0FHO/+5gqJ8HIMAGC6R8GrLOKn9t8JVAym3mWgtmcoFk29s79 bbHCFvJF4x0S05DZ+PUxScrVSq5Du/+sJRHFmDDP6DqEtObR6FxrvbuOyuAF+MFY xCXHRZSd0BMAjxHb+0N412UM00jW48SBqiaU7t4bcTo+hgZ069tX8NCsUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFweSUOrTBoSulV8I6N5zhBTJDPlMB8GA1UdIwQY MBaAFK9sK+e/QoLhzWkI8omnnOwKXfQuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjJ3cjU3OUNndUhOYVFqeWlhZWM3QXBkOUM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS82ZGY4N2YtMWUzYy00N2M1LTg1ZGUt MGQ4ZWJjZTg2Y2FjLzEvWEI1SlE2dE1HaEs2Vlh3am8zbk9FRk1rTS1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS82ZGY4N2YtMWUzYy00N2M1LTg1ZGUtMGQ4ZWJjZTg2Y2Fj LzEvcjJ3cjU3OUNndUhOYVFqeWlhZWM3QXBkOUM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw3J0MA0G CSqGSIb3DQEBCwUAA4IBAQA5AaDhhLDrWMWxW3o8xWt64UxdiLFBd4167ScOrz7n TmtWYaumZkMHgfwTOTnUaF345O57iD453DYSVh3UN8xETKYGQMkSEuiVTFASK9lQ QV0CgWm/44jWPmqGQ15udEiUIbo2DXDZQJZjhEFehpW9EG+7fVwGK6M/yz5BJLwK knkiNsYl5mw//EbBkDfjCf2H1YeoVn57zoJVxCz3uXjEjir242oX+PMCfTff5J+/ MBbB5/KAZdLSOifhSPz7lOWjzLamHGp3iqT0HAHUwQOXcPh7BvmYvUc5bDo6A2xW xgzAGJEE9z3xhPje7xBmU6AbAfVX2WQbd3OppKsq4CVU -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:22 2026 by rpki-client