This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/xg2sgavTjn9r--041vId62JcIfo.roa File: xg2sgavTjn9r--041vId62JcIfo.roa (raw, json) Hash identifier: VtS2WuJ9jn0q1st7pFfGhIbx5gx/oPDSVZumr6RlX7c= Subject key identifier: C6:0D:AC:81:AB:D3:8E:7F:6B:FB:ED:38:D6:F2:1D:EB:62:5C:21:FA Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019B7B359ECAAF077D7291CE23849CD634F1 Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/xg2sgavTjn9r--041vId62JcIfo.roa Signing time: Thu 01 Jan 2026 20:17:50 +0000 ROA not before: Thu 01 Jan 2026 20:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215201 IP address blocks: 80.96.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:9e:ca:af:07:7d:72:91:ce:23:84:9c:d6:34:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Jan 1 20:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c60dac81abd38e7f6bfbed38d6f21deb625c21fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:69:1c:e2:01:30:76:ef:8f:09:53:63:71:e3: a6:56:02:71:78:91:9a:0c:ed:76:86:e5:19:13:fb: 03:ee:4c:92:a8:a0:48:fc:2c:63:7c:04:87:ea:de: ba:24:1e:f9:93:56:a9:7f:e8:4a:3f:b0:91:4a:a0: 57:6e:5e:7f:fb:46:f7:bb:6e:20:9f:07:28:dc:9f: 79:5f:d7:0e:09:01:1c:02:b9:97:aa:3f:b0:b8:dc: b1:29:2d:e6:f4:a2:0d:b3:e1:7f:60:fb:a5:2d:4e: b3:2a:7b:6c:04:d1:79:bf:ae:5e:e8:27:22:3d:10: 9a:d6:af:55:f5:72:48:50:fc:42:2b:45:e2:a8:83: 2d:ae:91:28:a2:50:39:b8:27:06:c1:b7:36:ee:8a: 9b:51:19:32:94:6d:a5:17:13:53:d0:5c:3b:82:a3: f0:5c:77:07:fc:54:f0:6f:b7:0f:65:f0:d1:5c:1c: 5d:f9:7c:de:00:70:d6:fc:00:a6:a5:05:ef:a6:d4: 7a:05:8f:5a:54:d2:c5:0b:ce:03:37:3e:4e:e7:e6: 25:9e:4f:15:d0:f7:9e:f7:d8:b4:7e:36:49:7f:f0: 6c:2e:12:4c:c1:de:dc:3a:2c:2e:a4:f4:13:b7:e0: 71:8d:de:70:fc:21:c6:0e:74:96:27:92:25:f6:85: 70:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:0D:AC:81:AB:D3:8E:7F:6B:FB:ED:38:D6:F2:1D:EB:62:5C:21:FA X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/xg2sgavTjn9r--041vId62JcIfo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.96.53.0/24 Signature Algorithm: sha256WithRSAEncryption 82:f5:b9:da:bd:92:60:82:e1:f5:2a:c8:fb:db:60:c7:0d:4d: 05:25:9f:d8:cc:e1:b8:eb:f0:b9:4e:06:df:84:a3:40:62:cd: bc:77:42:f1:7a:02:f1:64:9a:7e:67:e9:8c:23:bd:b6:76:4c: 96:94:36:25:7e:a4:3d:3a:c5:9b:c5:7f:ac:1a:11:87:30:5a: 33:31:19:1a:ee:ec:09:0a:a8:60:16:53:4c:17:46:14:6c:64: dd:0d:63:48:26:b0:55:8f:fb:e6:72:fe:ae:cb:8a:47:19:19: 04:0f:94:49:42:07:8d:de:b6:23:63:d1:1a:37:64:85:9e:4d: 63:b3:b4:b3:68:11:15:d3:df:03:45:57:ef:90:73:58:db:e3: b1:81:2d:8c:89:14:fa:f1:a4:21:cd:4d:68:e2:55:7d:bc:a9: b4:d1:3c:c1:5a:9f:f8:f4:7a:3c:5e:39:b0:23:d2:95:5e:c0: af:84:0e:26:ec:56:48:8e:e7:f7:4e:d4:bc:59:83:ec:0e:39: c7:30:7f:3e:0b:49:be:e7:f2:33:d9:a3:94:6d:c4:75:be:11: b9:b9:7b:87:e8:0b:38:ac:96:82:ae:47:03:44:5b:5b:c5:9a: 31:5a:ad:72:65:29:c3:c4:0e:32:34:62:88:9c:1b:c5:79:24: 1f:1f:5e:20 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NZ7Krwd9cpHOI4Sc1jTxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjYwMTAxMjAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjBkYWM4MWFiZDM4ZTdmNmJmYmVkMzhkNmYyMWRlYjYyNWMyMWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Gkc4gEwdu+PCVNjceOmVgJxeJGa DO12huUZE/sD7kySqKBI/CxjfASH6t66JB75k1apf+hKP7CRSqBXbl5/+0b3u24g nwco3J95X9cOCQEcArmXqj+wuNyxKS3m9KINs+F/YPulLU6zKntsBNF5v65e6Cci PRCa1q9V9XJIUPxCK0XiqIMtrpEoolA5uCcGwbc27oqbURkylG2lFxNT0Fw7gqPw XHcH/FTwb7cPZfDRXBxd+XzeAHDW/ACmpQXvptR6BY9aVNLFC84DNz5O5+Ylnk8V 0Pee99i0fjZJf/BsLhJMwd7cOiwupPQTt+Bxjd5w/CHGDnSWJ5Il9oVwaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMYNrIGr045/a/vtONbyHetiXCH6MB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEveGcyc2dhdlRqbjlyLS0wNDF2SWQ2MkpjSWZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUGA1MA0G CSqGSIb3DQEBCwUAA4IBAQCC9bnavZJgguH1Ksj722DHDU0FJZ/YzOG46/C5Tgbf hKNAYs28d0LxegLxZJp+Z+mMI722dkyWlDYlfqQ9OsWbxX+sGhGHMFozMRka7uwJ CqhgFlNMF0YUbGTdDWNIJrBVj/vmcv6uy4pHGRkED5RJQgeN3rYjY9EaN2SFnk1j s7SzaBEV098DRVfvkHNY2+OxgS2MiRT68aQhzU1o4lV9vKm00TzBWp/49Ho8Xjmw I9KVXsCvhA4m7FZIjuf3TtS8WYPsDjnHMH8+C0m+5/Iz2aOUbcR1vhG5uXuH6As4 rJaCrkcDRFtbxZoxWq1yZSnDxA4yNGKInBvFeSQfH14g -----END CERTIFICATE-----Generated at Tue Jan 20 02:49:13 2026 by rpki-client