This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/XMyxg50FUIvcPAmn3dgQAD2rX5A.roa File: XMyxg50FUIvcPAmn3dgQAD2rX5A.roa (raw, json) Hash identifier: p3P3/d+pjMB4dPGP7cLvPY1UtOYfXIrBb9Vr7UC3pqg= Subject key identifier: 5C:CC:B1:83:9D:05:50:8B:DC:3C:09:A7:DD:D8:10:00:3D:AB:5F:90 Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f Certificate serial: 019B7C12BB5747FB72AFFFE9F7EE37EAC4AE Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/XMyxg50FUIvcPAmn3dgQAD2rX5A.roa Signing time: Fri 02 Jan 2026 00:19:20 +0000 ROA not before: Fri 02 Jan 2026 00:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206271 IP address blocks: 195.93.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 12:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:bb:57:47:fb:72:af:ff:e9:f7:ee:37:ea:c4:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f Validity Not Before: Jan 2 00:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5cccb1839d05508bdc3c09a7ddd810003dab5f90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cf:a8:e4:27:a2:c8:94:e5:ab:48:79:ba:fb: 42:f9:46:ab:50:bb:16:a0:af:e6:81:05:f6:68:e8: 9a:84:14:3f:f9:92:a5:a4:31:06:ee:87:84:4f:32: ad:41:14:0d:1d:cb:08:7f:e4:26:1e:d6:08:0f:6a: f8:f4:59:41:1f:09:3a:f9:9b:51:37:7a:7a:ba:9a: 27:9e:d3:a5:f3:30:1b:f2:13:52:c0:e7:d4:2a:cc: 5d:70:d5:f1:1c:6b:5e:5f:a5:9e:a6:d0:1d:70:22: 64:8f:59:ab:b6:78:1f:6f:06:95:73:f4:dd:de:04: 34:2a:e1:ff:0d:a2:6a:ee:f5:ad:43:73:4a:e6:66: 05:f6:0f:11:8e:6f:69:5a:f1:20:60:03:eb:cc:5b: 94:b9:d7:b9:11:ef:9f:b0:6b:d0:25:3e:2a:f7:08: f5:50:0c:eb:06:29:7c:f4:a4:d9:ac:5b:6b:4f:61: e5:bb:69:5b:bf:35:a7:e6:36:dd:48:46:e4:28:86: 6b:71:db:57:4f:3c:cb:5d:a4:ec:33:78:19:3a:e0: 37:34:51:07:93:66:06:53:b8:c1:76:f0:b0:95:bd: 87:b7:44:37:09:64:24:de:ee:25:91:b0:29:ad:0e: a3:6d:14:f0:7b:e0:be:81:59:db:d7:c0:19:f8:bf: d8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:CC:B1:83:9D:05:50:8B:DC:3C:09:A7:DD:D8:10:00:3D:AB:5F:90 X509v3 Authority Key Identifier: keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/XMyxg50FUIvcPAmn3dgQAD2rX5A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.93.226.0/24 Signature Algorithm: sha256WithRSAEncryption 29:63:36:03:21:c4:64:24:32:5b:ef:a8:ca:b0:97:b9:9d:ec: 4a:aa:2b:8f:03:bb:17:25:2b:9f:5a:b3:04:13:46:78:9a:6f: 76:74:be:57:2f:32:7e:d7:1f:e0:ae:f0:c9:86:50:e9:be:75: 2f:5e:97:6f:94:7a:07:d5:a9:c7:fd:0d:8d:ee:c3:5e:59:f6: ac:41:87:9d:0e:ec:2a:57:ea:34:81:cb:79:25:77:a1:19:2c: 8c:af:c5:da:de:7c:67:9e:74:3f:ed:0f:63:57:58:e1:e8:54: 49:7f:4f:e8:2a:db:30:88:c3:03:51:08:1a:03:a8:2d:69:28: 6b:e6:de:48:d5:06:12:b6:5b:ad:c3:c0:3b:78:ee:58:3f:19: 27:96:13:81:e9:6f:b6:c2:d7:c0:d1:4e:59:c3:75:1d:9d:7e: 34:67:17:29:c1:e2:69:4a:a4:1d:e0:7a:bf:cb:00:c3:f0:cd: 50:05:9c:18:93:80:0f:9b:8a:01:99:54:de:ff:69:97:1a:d6: 15:08:61:af:15:fe:dd:e2:c2:a4:e7:49:69:73:5e:fd:16:70: 4c:d2:8e:4a:72:35:a0:ee:80:fc:1c:ff:da:dc:cc:2d:7a:86: e1:e7:f3:64:bd:20:fa:57:f1:5e:4c:96:be:64:6d:d3:c3:cc: a1:f1:21:24 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8ErtXR/tyr//p9+436sSuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiOWYyMWJhMDRlNWUzMDc3YjM5MWUzZDQ4ZmY1YjBhNTBi MzM2OWYwHhcNMjYwMTAyMDAxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2NjYjE4MzlkMDU1MDhiZGMzYzA5YTdkZGQ4MTAwMDNkYWI1ZjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyM+o5CeiyJTlq0h5uvtC+UarULsW oK/mgQX2aOiahBQ/+ZKlpDEG7oeETzKtQRQNHcsIf+QmHtYID2r49FlBHwk6+ZtR N3p6uponntOl8zAb8hNSwOfUKsxdcNXxHGteX6WeptAdcCJkj1mrtngfbwaVc/Td 3gQ0KuH/DaJq7vWtQ3NK5mYF9g8Rjm9pWvEgYAPrzFuUude5Ee+fsGvQJT4q9wj1 UAzrBil89KTZrFtrT2Hlu2lbvzWn5jbdSEbkKIZrcdtXTzzLXaTsM3gZOuA3NFEH k2YGU7jBdvCwlb2Ht0Q3CWQk3u4lkbAprQ6jbRTwe+C+gVnb18AZ+L/YSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFzMsYOdBVCL3DwJp93YEAA9q1+QMB8GA1UdIwQY MBaAFBufIboE5eMHezkePUj/WwpQszafMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9mNjdhNzgtMTgzZC00OTRhLTk5NWUt ZjUxYzVmYjNkZjlhLzEvWE15eGc1MEZVSXZjUEFtbjNkZ1FBRDJyWDVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9mNjdhNzgtMTgzZC00OTRhLTk5NWUtZjUxYzVmYjNkZjlh LzEvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw13iMA0G CSqGSIb3DQEBCwUAA4IBAQApYzYDIcRkJDJb76jKsJe5nexKqiuPA7sXJSufWrME E0Z4mm92dL5XLzJ+1x/grvDJhlDpvnUvXpdvlHoH1anH/Q2N7sNeWfasQYedDuwq V+o0gct5JXehGSyMr8Xa3nxnnnQ/7Q9jV1jh6FRJf0/oKtswiMMDUQgaA6gtaShr 5t5I1QYStlutw8A7eO5YPxknlhOB6W+2wtfA0U5Zw3UdnX40ZxcpweJpSqQd4Hq/ ywDD8M1QBZwYk4APm4oBmVTe/2mXGtYVCGGvFf7d4sKk50lpc179FnBM0o5KcjWg 7oD8HP/a3Mwteobh5/NkvSD6V/FeTJa+ZG3Tw8yh8SEk -----END CERTIFICATE-----Generated at Wed Jan 21 17:32:15 2026 by rpki-client