This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/xmuj_RkEYzWnbOs5JZ4tP6TlfiU.roa File: xmuj_RkEYzWnbOs5JZ4tP6TlfiU.roa (raw, json) Hash identifier: FwlR2Kq1WJaDNos4JqVpfBkZPG7o7YC/NVuKTjoNm7U= Subject key identifier: C6:6B:A3:FD:19:04:63:35:A7:6C:EB:39:25:9E:2D:3F:A4:E5:7E:25 Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82D0F09B60B66B422B68B9E44ED332 Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/xmuj_RkEYzWnbOs5JZ4tP6TlfiU.roa Signing time: Fri 02 Jan 2026 16:20:38 +0000 ROA not before: Fri 02 Jan 2026 16:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208393 IP address blocks: 193.221.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:d0:f0:9b:60:b6:6b:42:2b:68:b9:e4:4e:d3:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c66ba3fd19046335a76ceb39259e2d3fa4e57e25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bb:c6:73:1d:4f:77:76:ed:2a:ab:5f:e2:15: 08:5b:b5:73:68:5f:e5:db:ae:b0:46:4b:77:1a:3c: dd:f3:26:15:46:59:a8:e7:39:b0:71:34:cb:f0:8f: 76:f7:86:c4:bd:fd:4a:4c:f3:6b:bd:0a:bf:fb:37: 0a:cf:69:7d:3c:49:30:22:5f:60:bb:64:6e:0c:45: d9:c2:19:60:b8:76:a5:00:90:41:f8:61:22:7e:81: 04:b4:f0:6c:f0:1e:ed:c4:75:78:52:4b:bb:81:a6: 78:0d:b6:ea:bd:5b:7a:8d:23:ab:fa:40:a0:58:3e: f8:0d:ec:71:66:4f:f5:d1:3e:fd:c9:74:8b:24:a8: 6c:ce:8d:32:05:a8:03:20:b0:4e:25:80:cc:b7:15: 91:6a:84:7c:df:ce:8a:0f:0d:cd:0c:9d:98:55:67: 26:32:cc:3b:5d:96:c4:eb:03:1c:69:a8:a9:e6:8d: 1f:8b:c5:89:ff:29:d1:a9:11:3c:a7:d5:7e:1c:8c: 67:3a:c6:75:b6:62:33:34:69:02:d1:cb:fe:05:86: e0:40:e2:4e:86:f2:86:34:da:3f:0c:60:04:88:91: 95:69:f0:c0:24:09:87:22:35:81:0f:69:99:c0:f9: e7:cd:7f:9e:fe:c4:43:e8:e4:f4:c4:83:80:dd:d1: 6d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:6B:A3:FD:19:04:63:35:A7:6C:EB:39:25:9E:2D:3F:A4:E5:7E:25 X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/xmuj_RkEYzWnbOs5JZ4tP6TlfiU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.221.192.0/24 Signature Algorithm: sha256WithRSAEncryption 99:f4:b6:5d:c0:88:11:f6:32:0c:58:52:b1:7c:16:23:25:c2: 97:dc:57:61:5e:52:7d:ff:24:cd:e2:53:53:a1:53:8a:d1:c1: be:5c:21:8b:57:9e:b8:42:57:65:f0:a5:fd:d4:d1:c6:6f:ba: df:ad:36:6c:b7:f2:04:81:67:cc:f5:a0:91:b0:0c:6d:1e:dc: 3f:75:25:78:96:9a:75:c4:5e:81:4e:44:96:a3:08:62:90:6f: 2a:61:ba:cc:91:56:22:04:db:1f:b3:1a:1a:a7:34:93:17:24: c6:c7:de:a9:8c:ad:6e:be:c6:83:dd:1d:0a:f9:bb:15:59:bf: e5:3b:1a:cc:b8:5e:8e:b2:46:f6:77:74:cb:81:b0:bb:6d:df: b3:aa:4c:ce:c0:30:40:be:99:96:fc:d2:2b:de:94:eb:d5:d9: 66:44:7b:7d:91:7f:d4:ab:e5:43:d0:b3:75:82:5f:e8:73:c2: 4a:65:a6:3b:09:29:ae:16:6b:47:78:84:a2:c2:ef:7b:13:fd: 4a:b7:22:f7:07:5a:1f:09:d3:14:4a:66:af:15:ec:55:84:1f: b6:7b:a8:a1:8c:9a:0d:c3:08:45:78:c3:62:61:f3:ca:49:20: 54:b9:fa:96:e9:fb:e2:0b:90:72:ac:67:f3:33:aa:43:f3:ee: 68:01:f2:9e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gtDwm2C2a0IraLnkTtMyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjZiYTNmZDE5MDQ2MzM1YTc2Y2ViMzkyNTllMmQzZmE0ZTU3ZTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLvGcx1Pd3btKqtf4hUIW7VzaF/l 266wRkt3Gjzd8yYVRlmo5zmwcTTL8I9294bEvf1KTPNrvQq/+zcKz2l9PEkwIl9g u2RuDEXZwhlguHalAJBB+GEifoEEtPBs8B7txHV4Uku7gaZ4DbbqvVt6jSOr+kCg WD74DexxZk/10T79yXSLJKhszo0yBagDILBOJYDMtxWRaoR8386KDw3NDJ2YVWcm Msw7XZbE6wMcaaip5o0fi8WJ/ynRqRE8p9V+HIxnOsZ1tmIzNGkC0cv+BYbgQOJO hvKGNNo/DGAEiJGVafDAJAmHIjWBD2mZwPnnzX+e/sRD6OT0xIOA3dFtkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMZro/0ZBGM1p2zrOSWeLT+k5X4lMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEveG11al9Sa0VZelduYk9zNUpaNHRQNlRsZmlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwd3AMA0G CSqGSIb3DQEBCwUAA4IBAQCZ9LZdwIgR9jIMWFKxfBYjJcKX3FdhXlJ9/yTN4lNT oVOK0cG+XCGLV564Qldl8KX91NHGb7rfrTZst/IEgWfM9aCRsAxtHtw/dSV4lpp1 xF6BTkSWowhikG8qYbrMkVYiBNsfsxoapzSTFyTGx96pjK1uvsaD3R0K+bsVWb/l OxrMuF6Oskb2d3TLgbC7bd+zqkzOwDBAvpmW/NIr3pTr1dlmRHt9kX/Uq+VD0LN1 gl/oc8JKZaY7CSmuFmtHeISiwu97E/1KtyL3B1ofCdMUSmavFexVhB+2e6ihjJoN wwhFeMNiYfPKSSBUufqW6fviC5ByrGfzM6pD8+5oAfKe -----END CERTIFICATE-----Generated at Tue Jan 20 15:20:19 2026 by rpki-client