This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/xh2ktDWXopMlUxwLXDcaZmh4chw.roa File: xh2ktDWXopMlUxwLXDcaZmh4chw.roa (raw, json) Hash identifier: KZLHD74s+6ijD7vg9mCkLBFyndzUla57bu6HUOQXpOk= Subject key identifier: C6:1D:A4:B4:35:97:A2:93:25:53:1C:0B:5C:37:1A:66:68:78:72:1C Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Certificate serial: 019B797E656084F9D134E7F1EF2BE0DB16CC Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/xh2ktDWXopMlUxwLXDcaZmh4chw.roa Signing time: Thu 01 Jan 2026 12:18:05 +0000 ROA not before: Thu 01 Jan 2026 12:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5650 IP address blocks: 89.251.17.0/24 maxlen: 24 193.93.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:65:60:84:f9:d1:34:e7:f1:ef:2b:e0:db:16:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Validity Not Before: Jan 1 12:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c61da4b43597a29325531c0b5c371a666878721c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4a:c3:5b:cd:48:e3:00:72:8a:6e:91:37:89: 20:c7:fa:87:2c:e3:c0:a1:34:2d:6d:9b:e7:be:c8: 6f:01:92:12:a4:a0:ce:53:32:94:ca:ef:d1:e3:53: ae:c4:f9:7b:45:2f:2a:67:72:9a:08:fc:94:71:e7: 05:31:0e:46:66:b2:a8:fa:67:4c:29:0e:0b:ef:c4: 4f:b1:67:f3:53:00:28:1b:dd:0b:3a:ec:11:43:2f: af:9d:b3:49:d9:fe:dd:1a:d7:d0:e8:b2:dc:5d:a3: 78:26:83:6c:85:27:b5:d8:4b:89:f6:fd:5d:51:26: 8f:5e:a3:9a:6b:e9:a5:bc:24:69:70:e7:b9:96:11: 99:49:ce:38:fa:1d:95:db:b0:0e:31:1c:fb:e8:0d: fc:f3:54:6b:67:98:81:6c:48:fa:94:9f:d8:4f:1c: 81:de:66:57:d8:fa:a4:e8:a9:7e:c0:59:7d:be:86: 57:8c:56:8f:00:0a:16:ff:c4:aa:df:dd:ec:24:30: 6e:f6:32:c1:e8:e3:18:cb:b7:98:f4:7a:3a:81:c8: 1c:0a:02:d2:d3:4e:66:ef:bf:94:b5:4d:53:11:4a: 80:0d:d0:ba:43:54:ff:2f:8b:cc:ef:85:14:97:af: 94:07:3b:58:5a:ad:f0:c5:ec:de:81:e6:9b:b5:97: 07:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:1D:A4:B4:35:97:A2:93:25:53:1C:0B:5C:37:1A:66:68:78:72:1C X509v3 Authority Key Identifier: keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/xh2ktDWXopMlUxwLXDcaZmh4chw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.251.17.0/24 193.93.53.0/24 Signature Algorithm: sha256WithRSAEncryption 37:3d:f8:7d:29:17:cb:64:0f:f2:d9:9c:9f:da:a5:0e:a0:ab: cf:12:70:b6:27:74:52:52:c5:54:06:2c:6c:75:92:45:db:e7: a7:78:5e:c0:e9:ea:76:2b:f0:b6:2f:75:6e:df:c0:f9:4f:d7: fe:f8:98:dd:18:55:2e:d8:5f:92:9c:35:8e:09:bb:91:1a:bc: c1:60:87:cd:97:cc:50:db:11:97:24:02:36:9b:8b:18:92:64: 25:ca:77:6c:6b:13:35:76:35:23:e0:43:47:6e:7b:5a:50:6b: 5f:d5:35:a6:a0:f6:44:33:ee:f5:eb:af:96:1c:0b:fd:23:7b: a7:13:f0:e2:12:c1:d7:7b:e3:00:b1:6f:67:f1:ce:51:32:79: bd:88:1c:e2:2d:5e:48:6e:01:86:d7:e4:9a:c0:7a:74:12:cb: 29:fb:a2:4f:f9:d7:4e:c8:59:31:6f:79:4b:c4:5b:18:db:20: a3:17:3c:d8:91:e7:ca:d5:b5:b5:f7:05:b6:b2:da:47:71:dd: 9c:7e:c9:0b:0f:eb:5a:d5:d9:d7:2a:c4:a5:b4:9a:25:7d:92: 93:3e:a0:e9:8e:04:d2:2d:6b:fb:ed:32:d3:af:ca:25:c4:46: 81:01:a5:3b:b9:7b:b5:9f:65:68:58:c9:50:4d:95:ef:f1:0c: af:f0:e1:6a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fmVghPnRNOfx7yvg2xbMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj NWFjOGQwHhcNMjYwMTAxMTIxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjFkYTRiNDM1OTdhMjkzMjU1MzFjMGI1YzM3MWE2NjY4Nzg3MjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10rDW81I4wByim6RN4kgx/qHLOPA oTQtbZvnvshvAZISpKDOUzKUyu/R41OuxPl7RS8qZ3KaCPyUcecFMQ5GZrKo+mdM KQ4L78RPsWfzUwAoG90LOuwRQy+vnbNJ2f7dGtfQ6LLcXaN4JoNshSe12EuJ9v1d USaPXqOaa+mlvCRpcOe5lhGZSc44+h2V27AOMRz76A3881RrZ5iBbEj6lJ/YTxyB 3mZX2Pqk6Kl+wFl9voZXjFaPAAoW/8Sq393sJDBu9jLB6OMYy7eY9Ho6gcgcCgLS 005m77+UtU1TEUqADdC6Q1T/L4vM74UUl6+UBztYWq3wxezegeabtZcHoQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMYdpLQ1l6KTJVMcC1w3GmZoeHIcMB8GA1UdIwQY MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt MzE4YTI2ZDRhOGM5LzEveGgya3REV1hvcE1sVXh3TFhEY2FabWg0Y2h3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5 LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWfsRAwQA wV01MA0GCSqGSIb3DQEBCwUAA4IBAQA3Pfh9KRfLZA/y2Zyf2qUOoKvPEnC2J3RS UsVUBixsdZJF2+eneF7A6ep2K/C2L3Vu38D5T9f++JjdGFUu2F+SnDWOCbuRGrzB YIfNl8xQ2xGXJAI2m4sYkmQlyndsaxM1djUj4ENHbntaUGtf1TWmoPZEM+7166+W HAv9I3unE/DiEsHXe+MAsW9n8c5RMnm9iBziLV5IbgGG1+SawHp0Essp+6JP+ddO yFkxb3lLxFsY2yCjFzzYkefK1bW19wW2stpHcd2cfskLD+ta1dnXKsSltJolfZKT PqDpjgTSLWv77TLTr8olxEaBAaU7uXu1n2VoWMlQTZXv8Qyv8OFq -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:22 2026 by rpki-client