This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/xwkiTS8aTruHWOotr04K0InjtdM.roa File: xwkiTS8aTruHWOotr04K0InjtdM.roa (raw, json) Hash identifier: rdXpiKH2rlgCbhkR5hLn70AMDGefSGF/6zXgPFgyzwU= Subject key identifier: C7:09:22:4D:2F:1A:4E:BB:87:58:EA:2D:AF:4E:0A:D0:89:E3:B5:D3 Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019BB78E4D76940A77AECD0D25870A105F14 Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/xwkiTS8aTruHWOotr04K0InjtdM.roa Signing time: Tue 13 Jan 2026 13:31:55 +0000 ROA not before: Tue 13 Jan 2026 13:31:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200019 IP address blocks: 80.97.128.0/20 maxlen: 20 81.180.92.0/23 maxlen: 24 85.120.81.0/24 maxlen: 24 85.121.4.0/23 maxlen: 24 85.121.149.0/24 maxlen: 24 85.121.183.0/24 maxlen: 24 194.102.105.0/24 maxlen: 24 217.156.8.0/23 maxlen: 24 217.156.64.0/24 maxlen: 24 217.156.65.0/24 maxlen: 24 217.156.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b7:8e:4d:76:94:0a:77:ae:cd:0d:25:87:0a:10:5f:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Jan 13 13:31:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c709224d2f1a4ebb8758ea2daf4e0ad089e3b5d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:12:53:e6:08:c1:0c:e8:c9:b2:88:66:57:e5: b9:1b:cf:d6:39:3f:49:73:b2:8e:19:a9:6b:ed:77: 31:f6:23:71:31:f1:3e:2c:45:db:4b:1d:0a:6e:84: 78:d1:99:a8:0f:c2:ef:4a:55:46:6d:a4:6c:13:e2: ff:7e:8b:97:c7:52:5d:0b:23:26:8b:f2:10:56:de: 8f:92:4e:c6:89:ff:24:f1:47:32:eb:d3:96:97:04: bc:6d:0a:c0:5f:e5:c3:9c:5e:e4:06:54:c1:7c:23: 5b:9b:64:1f:22:8e:70:c1:cf:04:c7:c1:20:21:d6: bc:e5:68:94:69:09:d0:cc:e9:90:ed:b8:19:bb:8b: 95:3f:94:9d:15:d4:6b:35:1a:75:0d:45:2c:63:af: c8:d1:4c:83:d6:17:e5:a5:52:7b:e1:3e:94:be:1d: 08:16:28:f9:7f:99:c1:49:be:b1:df:65:56:b2:61: 36:38:56:aa:82:7b:49:c9:59:ce:a9:e9:18:a3:ce: 46:cc:68:97:4c:ec:a1:8b:c5:b7:fe:4f:12:be:e6: c1:f3:da:a9:09:fa:eb:0d:90:5b:05:ce:c2:09:9d: 2c:dd:97:36:0c:2e:8f:d0:6b:bb:fa:3e:ff:30:29: 47:8f:50:05:36:11:a5:98:d0:e5:ff:42:ed:c9:2e: 26:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:09:22:4D:2F:1A:4E:BB:87:58:EA:2D:AF:4E:0A:D0:89:E3:B5:D3 X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/xwkiTS8aTruHWOotr04K0InjtdM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.97.128.0/20 81.180.92.0/23 85.120.81.0/24 85.121.4.0/23 85.121.149.0/24 85.121.183.0/24 194.102.105.0/24 217.156.8.0/23 217.156.64.0/23 217.156.123.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:4a:12:0e:3f:e0:8c:7a:d8:7e:96:dd:72:c5:4a:2d:22:ad: b8:9c:03:03:b4:6a:44:20:6b:6b:73:da:6d:1f:80:af:d7:48: 09:f4:f4:45:a7:5d:d3:89:f4:16:16:f5:4d:34:14:80:b6:8f: 06:fc:ac:c0:c8:bd:00:24:45:28:c2:97:ab:3e:b3:0c:bf:9d: 50:35:0d:68:fc:63:ca:a7:1f:ba:9b:34:49:68:91:1a:9e:b3: 3f:86:01:80:37:44:a7:11:d3:f4:43:37:a7:e0:eb:f2:c3:d0: be:d4:d6:52:93:1c:4d:1c:12:e4:f2:83:34:22:9a:a7:d4:b6: 2f:e7:20:30:3a:b5:01:5d:a7:0f:df:55:9d:33:1f:84:d5:c4: 03:b9:ee:ad:db:05:5b:f7:fd:65:38:11:a3:61:e3:46:0b:14: d7:19:66:ca:9e:0a:55:88:5f:55:77:01:df:e7:92:30:d0:54: 28:cb:60:d3:bf:00:62:63:f5:f5:af:55:35:c8:bd:23:14:b5: 83:4a:56:1c:fe:32:10:ac:3c:84:c0:d5:0c:a8:81:fe:a2:d5: 8b:93:44:3e:f6:60:e9:56:05:e4:05:5d:44:2f:98:03:20:b8: 2b:65:91:45:58:b6:e2:48:9d:e9:a0:1d:fc:a3:fc:19:5b:1e: ce:78:19:6e -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZu3jk12lAp3rs0NJYcKEF8UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjYwMTEzMTMzMTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzA5MjI0ZDJmMWE0ZWJiODc1OGVhMmRhZjRlMGFkMDg5ZTNiNWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RJT5gjBDOjJsohmV+W5G8/WOT9J c7KOGalr7Xcx9iNxMfE+LEXbSx0KboR40ZmoD8LvSlVGbaRsE+L/fouXx1JdCyMm i/IQVt6Pkk7Gif8k8Ucy69OWlwS8bQrAX+XDnF7kBlTBfCNbm2QfIo5wwc8Ex8Eg Ida85WiUaQnQzOmQ7bgZu4uVP5SdFdRrNRp1DUUsY6/I0UyD1hflpVJ74T6Uvh0I Fij5f5nBSb6x32VWsmE2OFaqgntJyVnOqekYo85GzGiXTOyhi8W3/k8SvubB89qp CfrrDZBbBc7CCZ0s3Zc2DC6P0Gu7+j7/MClHj1AFNhGlmNDl/0LtyS4mAwIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFMcJIk0vGk67h1jqLa9OCtCJ47XTMB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEveHdraVRTOGFUcnVIV09vdHIwNEswSW5qdGRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQEUGGAAwQB UbRcAwQAVXhRAwQBVXkEAwQAVXmVAwQAVXm3AwQAwmZpAwQB2ZwIAwQB2ZxAAwQA 2Zx7MA0GCSqGSIb3DQEBCwUAA4IBAQBeShIOP+CMeth+lt1yxUotIq24nAMDtGpE IGtrc9ptH4Cv10gJ9PRFp13TifQWFvVNNBSAto8G/KzAyL0AJEUowperPrMMv51Q NQ1o/GPKpx+6mzRJaJEanrM/hgGAN0SnEdP0Qzen4Ovyw9C+1NZSkxxNHBLk8oM0 Ipqn1LYv5yAwOrUBXacP31WdMx+E1cQDue6t2wVb9/1lOBGjYeNGCxTXGWbKngpV iF9VdwHf55Iw0FQoy2DTvwBiY/X1r1U1yL0jFLWDSlYc/jIQrDyEwNUMqIH+otWL k0Q+9mDpVgXkBV1EL5gDILgrZZFFWLbiSJ3poB38o/wZWx7OeBlu -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:16 2026 by rpki-client