This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/XEYiiN3BOEIRPz4xSOYL_41xhiw.roa File: XEYiiN3BOEIRPz4xSOYL_41xhiw.roa (raw, json) Hash identifier: 0ywms5lLpzQH6FFtmE9+FqNLyVuKgqHknSLCPnwXsEI= Subject key identifier: 5C:46:22:88:DD:C1:38:42:11:3F:3E:31:48:E6:0B:FF:8D:71:86:2C Certificate issuer: /CN=8aad9c0ce5ba3905b41970a04e51976076c67e00 Certificate serial: 019B7F1576921870EB1ED8D9E28FBD02504B Authority key identifier: 8A:AD:9C:0C:E5:BA:39:05:B4:19:70:A0:4E:51:97:60:76:C6:7E:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/XEYiiN3BOEIRPz4xSOYL_41xhiw.roa Signing time: Fri 02 Jan 2026 14:21:11 +0000 ROA not before: Fri 02 Jan 2026 14:21:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 193.135.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.crl rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 08:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:76:92:18:70:eb:1e:d8:d9:e2:8f:bd:02:50:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8aad9c0ce5ba3905b41970a04e51976076c67e00 Validity Not Before: Jan 2 14:21:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c462288ddc13842113f3e3148e60bff8d71862c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:37:a0:ae:c1:86:26:06:fd:a3:79:b7:44:8c: 68:b2:d8:99:a7:a3:d4:27:c2:52:be:63:36:95:a3: 7b:15:67:70:9c:19:a3:79:16:49:36:31:d8:d7:40: 7a:a3:a3:b9:73:31:f7:74:03:c1:cc:34:14:a0:26: c1:e2:4f:7a:3a:de:ab:d7:4e:f9:06:90:b6:02:52: 02:df:d9:95:1c:ef:4c:58:e3:9e:85:fe:80:b3:3c: ce:9f:66:3a:f9:9d:29:9b:47:d2:3d:cd:b1:b1:c9: 78:d0:fd:69:f2:92:6a:9d:65:86:8c:35:16:44:78: ef:4c:29:6e:44:fc:64:9d:9e:68:ff:97:e5:a6:17: 0f:4b:7e:c8:ae:d6:b5:03:4f:6b:f3:8d:ee:c5:d5: ca:ec:b8:63:04:cc:28:c0:7f:47:b6:cd:fc:7a:1c: 2b:3a:17:6d:cc:bf:6e:7c:93:47:74:fe:38:46:80: f6:d3:ef:69:87:6e:7c:31:a2:f7:8a:c1:aa:c9:ca: 77:c7:cf:aa:ce:02:33:7b:90:4d:dc:d2:41:1b:f8: 82:f9:f4:c9:03:43:55:57:db:e3:42:c1:eb:62:c2: cb:47:12:4d:9d:99:61:e5:e6:93:26:79:57:ce:8d: 3a:fd:ab:d3:9e:20:38:d3:35:b7:4f:71:5f:38:c8: a5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:46:22:88:DD:C1:38:42:11:3F:3E:31:48:E6:0B:FF:8D:71:86:2C X509v3 Authority Key Identifier: keyid:8A:AD:9C:0C:E5:BA:39:05:B4:19:70:A0:4E:51:97:60:76:C6:7E:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/XEYiiN3BOEIRPz4xSOYL_41xhiw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.135.40.0/21 Signature Algorithm: sha256WithRSAEncryption 4c:7e:2c:76:38:52:6e:12:30:8d:a5:10:ed:75:6a:7b:57:8d: 17:17:6f:87:ad:36:43:1d:4d:a2:dc:9c:b7:69:33:5c:91:cf: 15:97:81:d8:85:38:ae:55:d1:6f:22:d5:95:16:55:55:84:84: 66:fa:4e:09:8a:b6:35:11:94:cd:6c:a5:73:d7:6e:53:62:28: 2e:94:77:b5:c3:26:f4:75:d0:4d:d2:5f:6c:c7:a3:00:39:54: c4:cd:6b:1c:34:6a:a0:95:76:41:22:17:d0:a0:65:2e:7f:1e: bc:53:fb:38:bd:60:ed:40:4d:08:08:61:4d:2f:8a:d1:23:5f: f7:0a:3a:47:9f:da:91:cb:4e:8a:18:00:96:d0:c6:d0:62:d2: c3:90:c1:cb:91:b8:de:dc:5c:c2:8c:af:58:93:b6:48:fc:89: b3:6a:cf:41:89:51:e0:a9:e0:3c:57:c9:35:af:c7:49:32:60: 8f:38:f1:96:24:94:93:13:10:5d:42:df:b6:c7:94:14:a1:04: 2e:a1:fa:82:f9:91:dc:7e:6f:cd:da:d1:18:eb:28:40:00:98: 03:6c:7e:44:02:5c:0d:91:83:1b:9d:fe:6c:5d:53:61:8a:a9: 7d:1f:16:88:54:44:5d:d7:cb:4c:e6:74:8f:1c:77:da:ca:e2: b0:74:00:74 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FXaSGHDrHtjZ4o+9AlBLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhYWQ5YzBjZTViYTM5MDViNDE5NzBhMDRlNTE5NzYwNzZj NjdlMDAwHhcNMjYwMTAyMTQyMTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzQ2MjI4OGRkYzEzODQyMTEzZjNlMzE0OGU2MGJmZjhkNzE4NjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTegrsGGJgb9o3m3RIxostiZp6PU J8JSvmM2laN7FWdwnBmjeRZJNjHY10B6o6O5czH3dAPBzDQUoCbB4k96Ot6r1075 BpC2AlIC39mVHO9MWOOehf6AszzOn2Y6+Z0pm0fSPc2xscl40P1p8pJqnWWGjDUW RHjvTCluRPxknZ5o/5flphcPS37Irta1A09r843uxdXK7LhjBMwowH9Hts38ehwr OhdtzL9ufJNHdP44RoD20+9ph258MaL3isGqycp3x8+qzgIze5BN3NJBG/iC+fTJ A0NVV9vjQsHrYsLLRxJNnZlh5eaTJnlXzo06/avTniA40zW3T3FfOMilrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFxGIojdwThCET8+MUjmC/+NcYYsMB8GA1UdIwQY MBaAFIqtnAzlujkFtBlwoE5Rl2B2xn4AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXEyY0RPVzZPUVcwR1hDZ1RsR1hZSGJHZmdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lNDQ1ZTQtMjZiZC00OGM5LTgzZGIt N2EwZWNlOWMwYWY4LzEvWEVZaWlOM0JPRUlSUHo0eFNPWUxfNDF4aGl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9lNDQ1ZTQtMjZiZC00OGM5LTgzZGItN2EwZWNlOWMwYWY4 LzEvaXEyY0RPVzZPUVcwR1hDZ1RsR1hZSGJHZmdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwYcoMA0G CSqGSIb3DQEBCwUAA4IBAQBMfix2OFJuEjCNpRDtdWp7V40XF2+HrTZDHU2i3Jy3 aTNckc8Vl4HYhTiuVdFvItWVFlVVhIRm+k4JirY1EZTNbKVz125TYigulHe1wyb0 ddBN0l9sx6MAOVTEzWscNGqglXZBIhfQoGUufx68U/s4vWDtQE0ICGFNL4rRI1/3 CjpHn9qRy06KGACW0MbQYtLDkMHLkbje3FzCjK9Yk7ZI/Imzas9BiVHgqeA8V8k1 r8dJMmCPOPGWJJSTExBdQt+2x5QUoQQuofqC+ZHcfm/N2tEY6yhAAJgDbH5EAlwN kYMbnf5sXVNhiql9HxaIVERd18tM5nSPHHfayuKwdAB0 -----END CERTIFICATE-----Generated at Fri Jan 9 17:06:35 2026 by rpki-client