This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/xxgq5HG-QmNjBzaMBfrlY4oYiWo.roa File: xxgq5HG-QmNjBzaMBfrlY4oYiWo.roa (raw, json) Hash identifier: 9RVhG4mb4HAERj2h7BQzIgcQ9s4Zw7+7QG8h1MujBhk= Subject key identifier: C7:18:2A:E4:71:BE:42:63:63:07:36:8C:05:FA:E5:63:8A:18:89:6A Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82C0E704443B74019FE52431B783FB Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/xxgq5HG-QmNjBzaMBfrlY4oYiWo.roa Signing time: Fri 02 Jan 2026 16:20:34 +0000 ROA not before: Fri 02 Jan 2026 16:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57717 IP address blocks: 194.50.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:c0:e7:04:44:3b:74:01:9f:e5:24:31:b7:83:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7182ae471be42636307368c05fae5638a18896a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7c:ee:87:df:c1:06:58:81:0e:95:08:9c:1b: 59:89:ae:37:bb:c0:ff:25:a2:97:0e:fc:bd:5c:09: 96:3e:3e:d8:a8:48:94:ca:25:4a:3e:bf:d1:de:5c: 61:ae:a4:89:42:6c:3c:c1:06:fe:b4:06:2b:fe:65: 43:28:47:85:c2:6a:f1:6c:45:c8:00:86:f6:6e:f7: 9e:4b:b9:b9:b9:0a:52:d8:bb:fb:68:29:c8:25:ef: 47:57:a3:4f:ac:77:01:e7:24:f6:9f:28:b5:fb:98: 76:fb:55:b4:90:95:a3:44:33:16:d4:05:b6:b2:b8: 0b:68:94:55:45:21:55:4d:ae:23:1f:bf:72:09:56: 47:e0:7a:b5:62:71:88:01:72:e3:37:c4:97:9f:cb: 3c:3f:bf:68:7f:94:f1:5f:73:8c:4d:a4:0e:79:d6: 10:f7:7b:f4:f5:f9:86:08:75:f3:69:24:48:0c:2f: a7:f8:30:d1:9b:aa:e8:d4:af:29:ba:24:0d:0d:f8: af:07:f9:ff:8b:01:18:e6:81:0d:93:f9:93:37:ca: f5:9a:55:ec:08:e1:4d:57:7a:84:e0:f8:cd:a9:2f: 5d:8c:94:55:0e:66:69:ec:e7:11:b4:e8:aa:1d:bd: 19:4e:e2:62:8e:30:81:90:9b:bc:80:df:04:90:d3: f8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:18:2A:E4:71:BE:42:63:63:07:36:8C:05:FA:E5:63:8A:18:89:6A X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/xxgq5HG-QmNjBzaMBfrlY4oYiWo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.50.17.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:0f:24:13:c3:c6:5f:6b:f8:72:7e:e9:b2:da:c0:80:fb:15: 47:be:c8:cf:f7:9a:14:47:9d:e4:ad:ac:87:6b:ea:6e:dd:9e: 31:ab:1a:5d:b4:2d:57:65:44:7a:cf:fa:48:7e:6c:d7:39:f8: bf:b4:26:46:f3:94:50:bf:19:b1:3e:c5:dc:ef:91:6b:df:9e: 20:dc:b2:38:e3:a0:7c:85:de:be:f1:14:9c:18:5a:61:32:41: 7b:99:ec:d7:cd:1e:25:87:fc:9f:a3:e0:a5:76:32:a7:fb:f3: b5:46:c0:ac:1d:45:d4:19:d1:1e:9c:c9:05:65:e7:e9:4f:e5: 64:70:a2:ac:c0:93:dc:d6:b7:98:4b:a7:f7:76:b4:34:14:2d: 1d:33:03:b3:f2:1e:42:c5:cd:c3:70:0b:73:46:e0:e1:5b:39: 40:e1:b8:fe:bb:d5:48:9f:16:68:57:89:cf:ba:1c:bf:4a:7f: f9:e5:aa:1d:1c:8f:db:a6:28:07:99:b8:ec:00:1d:7e:6e:cc: b9:06:c6:39:7f:57:4b:2e:8a:9e:d7:31:01:fb:17:ef:fc:ac: 07:15:e1:15:18:b2:a1:bb:f8:d3:0b:53:fd:67:12:57:95:fe: 06:b6:42:a3:15:94:bb:18:3a:09:17:e1:d7:e4:c3:aa:21:e2: 3b:d1:21:36 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gsDnBEQ7dAGf5SQxt4P7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzE4MmFlNDcxYmU0MjYzNjMwNzM2OGMwNWZhZTU2MzhhMTg4OTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3zuh9/BBliBDpUInBtZia43u8D/ JaKXDvy9XAmWPj7YqEiUyiVKPr/R3lxhrqSJQmw8wQb+tAYr/mVDKEeFwmrxbEXI AIb2bveeS7m5uQpS2Lv7aCnIJe9HV6NPrHcB5yT2nyi1+5h2+1W0kJWjRDMW1AW2 srgLaJRVRSFVTa4jH79yCVZH4Hq1YnGIAXLjN8SXn8s8P79of5TxX3OMTaQOedYQ 93v09fmGCHXzaSRIDC+n+DDRm6ro1K8puiQNDfivB/n/iwEY5oENk/mTN8r1mlXs COFNV3qE4PjNqS9djJRVDmZp7OcRtOiqHb0ZTuJijjCBkJu8gN8EkNP4jQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMcYKuRxvkJjYwc2jAX65WOKGIlqMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEveHhncTVIRy1RbU5qQnphTUJmcmxZNG9ZaVdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjIRMA0G CSqGSIb3DQEBCwUAA4IBAQBODyQTw8Zfa/hyfumy2sCA+xVHvsjP95oUR53krayH a+pu3Z4xqxpdtC1XZUR6z/pIfmzXOfi/tCZG85RQvxmxPsXc75Fr354g3LI446B8 hd6+8RScGFphMkF7mezXzR4lh/yfo+CldjKn+/O1RsCsHUXUGdEenMkFZefpT+Vk cKKswJPc1reYS6f3drQ0FC0dMwOz8h5Cxc3DcAtzRuDhWzlA4bj+u9VInxZoV4nP uhy/Sn/55aodHI/bpigHmbjsAB1+bsy5BsY5f1dLLoqe1zEB+xfv/KwHFeEVGLKh u/jTC1P9ZxJXlf4GtkKjFZS7GDoJF+HX5MOqIeI70SE2 -----END CERTIFICATE-----Generated at Tue Jan 20 15:21:16 2026 by rpki-client