This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/XNNDjNoOu_LuV45c4vtNYBjjTPg.roa File: XNNDjNoOu_LuV45c4vtNYBjjTPg.roa (raw, json) Hash identifier: P6Hg46pm5YZnREJ4HE6uOmX9gYMa63KvRqf51l0pf9U= Subject key identifier: 5C:D3:43:8C:DA:0E:BB:F2:EE:57:8E:5C:E2:FB:4D:60:18:E3:4C:F8 Certificate issuer: /CN=819ca93d13ec213591289594c41763ac07046c54 Certificate serial: 019B7DCA694F5DC36CA7F30BC8777A1AB95D Authority key identifier: 81:9C:A9:3D:13:EC:21:35:91:28:95:94:C4:17:63:AC:07:04:6C:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZypPRPsITWRKJWUxBdjrAcEbFQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/XNNDjNoOu_LuV45c4vtNYBjjTPg.roa Signing time: Fri 02 Jan 2026 08:19:35 +0000 ROA not before: Fri 02 Jan 2026 08:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39243 IP address blocks: 194.165.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/gZypPRPsITWRKJWUxBdjrAcEbFQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/gZypPRPsITWRKJWUxBdjrAcEbFQ.mft rsync://rpki.ripe.net/repository/DEFAULT/gZypPRPsITWRKJWUxBdjrAcEbFQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:69:4f:5d:c3:6c:a7:f3:0b:c8:77:7a:1a:b9:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=819ca93d13ec213591289594c41763ac07046c54 Validity Not Before: Jan 2 08:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5cd3438cda0ebbf2ee578e5ce2fb4d6018e34cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8f:3b:11:2c:9c:88:1b:2f:eb:f2:cd:c7:69: 3c:18:0e:c1:e9:fc:dc:3d:d3:34:58:36:59:72:21: e5:96:44:0a:2f:04:1e:57:5b:32:69:d3:99:7b:c7: e7:ca:03:bf:f4:ab:da:21:75:11:af:53:36:17:75: 2c:35:07:f3:31:40:89:32:15:38:4e:aa:39:f3:41: 6d:ec:83:6d:09:7c:c0:15:ed:0b:52:b9:aa:73:6c: c1:92:de:79:2f:60:08:50:80:91:97:af:b0:5b:b4: 21:4f:b6:40:5e:a9:3d:14:a9:1c:98:02:1b:83:5d: 9e:f0:8e:93:15:df:70:25:42:4d:ac:de:f0:44:58: fa:45:fe:36:35:62:a1:12:07:1d:9b:25:57:3c:c9: e7:78:80:45:1e:df:49:5e:b4:6e:40:91:ab:66:c0: a8:4e:ce:59:6f:5c:e8:08:56:d2:c5:c6:36:73:21: 8c:86:08:72:e8:e9:77:d5:f2:8a:9f:98:a1:c9:91: 8a:92:31:99:f9:75:f3:ff:18:c3:1a:6f:3c:86:1d: db:c6:51:89:29:43:85:83:ba:f1:6a:b0:5c:fc:27: 2c:31:81:45:04:28:ea:ae:66:b4:7e:89:e9:1d:26: ce:0e:42:60:89:8d:ef:98:1c:08:55:b5:93:55:cd: c4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:D3:43:8C:DA:0E:BB:F2:EE:57:8E:5C:E2:FB:4D:60:18:E3:4C:F8 X509v3 Authority Key Identifier: keyid:81:9C:A9:3D:13:EC:21:35:91:28:95:94:C4:17:63:AC:07:04:6C:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZypPRPsITWRKJWUxBdjrAcEbFQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/XNNDjNoOu_LuV45c4vtNYBjjTPg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/gZypPRPsITWRKJWUxBdjrAcEbFQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.165.54.0/24 Signature Algorithm: sha256WithRSAEncryption bf:f5:4b:b6:1f:86:63:7e:81:ec:5a:b7:24:d6:c5:97:4d:f1: 32:2a:9b:48:b6:fb:0c:2a:1f:23:4c:2d:ec:b8:e3:bb:7d:bd: 22:a4:73:39:d2:d5:80:1a:47:28:2a:dd:c1:a6:17:fa:3b:bf: 96:1b:3f:b2:12:19:14:b9:cb:56:ce:15:07:d3:06:16:80:a1: fe:fb:a8:bc:18:50:de:2a:aa:d7:e8:4b:9c:b8:d2:0e:0d:5d: 16:8d:95:6b:8d:c0:71:5b:e7:fd:a9:7e:89:60:ed:50:b6:e1: f8:b6:ed:c8:b6:f0:9a:59:b5:27:40:9d:6a:2f:4c:31:f0:a1: e6:eb:c9:84:49:d7:01:2b:89:e8:2d:6a:bf:cf:c0:4c:73:0e: e4:d3:75:20:f8:ea:06:0e:a1:d8:35:65:8a:53:08:e5:94:ea: 67:27:df:d5:f0:52:fb:52:90:ac:72:43:76:63:2a:b1:bb:6f: 75:3b:d7:35:b4:5d:89:c3:0c:b8:04:05:47:60:ef:ca:4c:04: d8:d4:91:a8:6d:94:06:ad:c8:cc:a6:d4:b2:88:74:69:fe:77: 1c:6e:b8:36:eb:34:3d:04:06:8e:59:4c:5e:b8:46:87:38:24: 31:18:49:27:db:4a:3d:78:5e:e1:d2:9c:0d:18:76:c2:2d:33: 06:f6:79:2c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ymlPXcNsp/MLyHd6GrldMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxOWNhOTNkMTNlYzIxMzU5MTI4OTU5NGM0MTc2M2FjMDcw NDZjNTQwHhcNMjYwMTAyMDgxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2QzNDM4Y2RhMGViYmYyZWU1NzhlNWNlMmZiNGQ2MDE4ZTM0Y2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqI87ESyciBsv6/LNx2k8GA7B6fzc PdM0WDZZciHllkQKLwQeV1syadOZe8fnygO/9KvaIXURr1M2F3UsNQfzMUCJMhU4 Tqo580Ft7INtCXzAFe0LUrmqc2zBkt55L2AIUICRl6+wW7QhT7ZAXqk9FKkcmAIb g12e8I6TFd9wJUJNrN7wRFj6Rf42NWKhEgcdmyVXPMnneIBFHt9JXrRuQJGrZsCo Ts5Zb1zoCFbSxcY2cyGMhghy6Ol31fKKn5ihyZGKkjGZ+XXz/xjDGm88hh3bxlGJ KUOFg7rxarBc/CcsMYFFBCjqrma0fonpHSbODkJgiY3vmBwIVbWTVc3EaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFzTQ4zaDrvy7leOXOL7TWAY40z4MB8GA1UdIwQY MBaAFIGcqT0T7CE1kSiVlMQXY6wHBGxUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1p5cFBSUHNJVFdSS0pXVXhCZGpyQWNFYkZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi81Zjk1YmUtNjI2Ny00N2JiLTlhMjkt YjAwZDAzZjFiN2E0LzEvWE5ORGpOb091X0x1VjQ1YzR2dE5ZQmpqVFBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi81Zjk1YmUtNjI2Ny00N2JiLTlhMjktYjAwZDAzZjFiN2E0 LzEvZ1p5cFBSUHNJVFdSS0pXVXhCZGpyQWNFYkZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwqU2MA0G CSqGSIb3DQEBCwUAA4IBAQC/9Uu2H4ZjfoHsWrck1sWXTfEyKptItvsMKh8jTC3s uOO7fb0ipHM50tWAGkcoKt3Bphf6O7+WGz+yEhkUuctWzhUH0wYWgKH++6i8GFDe KqrX6EucuNIODV0WjZVrjcBxW+f9qX6JYO1QtuH4tu3ItvCaWbUnQJ1qL0wx8KHm 68mESdcBK4noLWq/z8BMcw7k03Ug+OoGDqHYNWWKUwjllOpnJ9/V8FL7UpCsckN2 Yyqxu291O9c1tF2Jwwy4BAVHYO/KTATY1JGobZQGrcjMptSyiHRp/nccbrg26zQ9 BAaOWUxeuEaHOCQxGEkn20o9eF7h0pwNGHbCLTMG9nks -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:37 2026 by rpki-client