This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/xbQqBkC_yIbHrEJGcdsWm38w6AQ.roa File: xbQqBkC_yIbHrEJGcdsWm38w6AQ.roa (raw, json) Hash identifier: mnlFvqvGOBeR1NpxE1zJLjk/fIHtse1E8f1C2W5NVg8= Subject key identifier: C5:B4:2A:06:40:BF:C8:86:C7:AC:42:46:71:DB:16:9B:7F:30:E8:04 Certificate issuer: /CN=6f46cf964a46fb50f25b5d14fd965fd6861048a5 Certificate serial: 019B7DCB6413D56FAAF81CE6E248F9C76E0B Authority key identifier: 6F:46:CF:96:4A:46:FB:50:F2:5B:5D:14:FD:96:5F:D6:86:10:48:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0bPlkpG-1DyW10U_ZZf1oYQSKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/xbQqBkC_yIbHrEJGcdsWm38w6AQ.roa Signing time: Fri 02 Jan 2026 08:20:39 +0000 ROA not before: Fri 02 Jan 2026 08:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 194.46.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.crl rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft rsync://rpki.ripe.net/repository/DEFAULT/b0bPlkpG-1DyW10U_ZZf1oYQSKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:64:13:d5:6f:aa:f8:1c:e6:e2:48:f9:c7:6e:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f46cf964a46fb50f25b5d14fd965fd6861048a5 Validity Not Before: Jan 2 08:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5b42a0640bfc886c7ac424671db169b7f30e804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:77:9b:2b:ec:e2:95:75:7d:87:7c:cf:aa:ef: 55:e6:49:35:07:be:19:d0:b7:c3:46:fa:87:56:80: 05:a9:fa:d3:48:d0:35:28:d8:f5:63:73:47:b0:40: d0:07:7c:02:56:45:e7:52:3b:80:fb:b4:57:5c:ad: 3f:57:86:b2:a7:4b:cb:bf:d7:33:4b:be:90:c5:d8: ed:6a:81:0d:89:37:9e:9b:bb:30:81:6c:14:3b:9a: eb:e7:33:f2:e5:e3:76:2f:ad:fb:6f:be:ef:3f:a7: e3:e6:9d:c5:fc:5e:14:d0:17:8b:9c:d6:7a:a6:11: 5f:94:ce:e0:4f:77:bd:f8:d6:a0:17:cf:77:4f:71: 31:9d:6c:10:1e:3c:fe:f6:a1:ea:f8:2b:33:ef:17: 08:05:40:d8:13:96:6e:9d:7a:5e:54:28:ab:32:6e: 82:9b:aa:51:b4:8d:81:61:42:cf:d6:13:af:48:8e: 55:4b:08:e3:1e:2a:66:cc:a5:b5:ab:54:bd:b7:a1: 67:d6:7c:18:4b:07:5f:3b:59:ec:fe:3c:29:dd:a3: 5d:d0:d1:e7:ba:3e:20:4e:d0:65:94:1f:a9:50:dd: d0:2b:22:82:bf:82:ac:93:ab:89:9a:d0:4e:45:0f: 63:12:ff:ee:2b:5e:bd:6c:4b:ce:cf:68:1d:78:9d: ea:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:B4:2A:06:40:BF:C8:86:C7:AC:42:46:71:DB:16:9B:7F:30:E8:04 X509v3 Authority Key Identifier: keyid:6F:46:CF:96:4A:46:FB:50:F2:5B:5D:14:FD:96:5F:D6:86:10:48:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0bPlkpG-1DyW10U_ZZf1oYQSKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/xbQqBkC_yIbHrEJGcdsWm38w6AQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.46.32.0/24 Signature Algorithm: sha256WithRSAEncryption 54:36:8d:3e:05:11:6e:b7:51:87:25:f1:ce:32:18:1d:c7:22: 5f:0b:2b:ad:50:98:9d:a0:9a:bc:8f:83:10:47:65:44:09:e6: 91:35:7f:0e:3c:b4:c6:7d:96:a2:cb:a3:8d:2a:f2:97:60:32: 38:0b:f7:cc:c4:77:fd:70:93:68:e4:17:f9:13:67:b2:f8:d9: 0a:63:58:bb:0a:00:dd:ec:38:25:8b:63:eb:0b:cf:18:68:b5: be:61:78:bf:00:28:67:01:bb:1c:74:83:00:17:a7:87:a9:9a: 9e:04:40:6a:2d:f5:20:f6:34:55:88:52:d8:85:e4:01:de:d2: 87:3c:d1:48:e3:d0:34:c9:bf:0e:62:f5:61:44:f0:34:6c:0a: fe:37:19:ae:6c:33:53:9f:7b:dd:c3:37:6a:76:54:24:58:44: dd:d5:bf:b5:09:77:4b:ad:e9:8f:79:32:9b:f0:09:d4:64:00: a7:24:37:06:4d:6f:17:58:f0:67:25:b4:81:0e:c6:7a:a3:a5: e2:89:c2:54:74:d7:52:91:7e:6b:3f:a6:8e:97:e8:f9:4f:15: 77:2b:9d:c7:25:f9:70:64:b8:f9:e1:9b:6e:97:e1:27:42:42: d9:86:51:89:f2:22:58:7f:b0:47:93:d4:f9:4a:a0:c1:fc:e4: 3a:96:83:25 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y2QT1W+q+Bzm4kj5x24LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNDZjZjk2NGE0NmZiNTBmMjViNWQxNGZkOTY1ZmQ2ODYx MDQ4YTUwHhcNMjYwMTAyMDgyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNWI0MmEwNjQwYmZjODg2YzdhYzQyNDY3MWRiMTY5YjdmMzBlODA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHebK+zilXV9h3zPqu9V5kk1B74Z 0LfDRvqHVoAFqfrTSNA1KNj1Y3NHsEDQB3wCVkXnUjuA+7RXXK0/V4ayp0vLv9cz S76QxdjtaoENiTeem7swgWwUO5rr5zPy5eN2L637b77vP6fj5p3F/F4U0BeLnNZ6 phFflM7gT3e9+NagF893T3ExnWwQHjz+9qHq+Csz7xcIBUDYE5ZunXpeVCirMm6C m6pRtI2BYULP1hOvSI5VSwjjHipmzKW1q1S9t6Fn1nwYSwdfO1ns/jwp3aNd0NHn uj4gTtBllB+pUN3QKyKCv4Ksk6uJmtBORQ9jEv/uK169bEvOz2gdeJ3qmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMW0KgZAv8iGx6xCRnHbFpt/MOgEMB8GA1UdIwQY MBaAFG9Gz5ZKRvtQ8ltdFP2WX9aGEEilMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjBiUGxrcEctMUR5VzEwVV9aWmYxb1lRU0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8xOTBkMDgtZjFiMS00ODAzLWE3MjIt OTlhMDhiOTEyNzRjLzEveGJRcUJrQ195SWJIckVKR2Nkc1dtMzh3NkFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8xOTBkMDgtZjFiMS00ODAzLWE3MjItOTlhMDhiOTEyNzRj LzEvYjBiUGxrcEctMUR5VzEwVV9aWmYxb1lRU0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwi4gMA0G CSqGSIb3DQEBCwUAA4IBAQBUNo0+BRFut1GHJfHOMhgdxyJfCyutUJidoJq8j4MQ R2VECeaRNX8OPLTGfZaiy6ONKvKXYDI4C/fMxHf9cJNo5Bf5E2ey+NkKY1i7CgDd 7Dgli2PrC88YaLW+YXi/AChnAbscdIMAF6eHqZqeBEBqLfUg9jRViFLYheQB3tKH PNFI49A0yb8OYvVhRPA0bAr+NxmubDNTn3vdwzdqdlQkWETd1b+1CXdLremPeTKb 8AnUZACnJDcGTW8XWPBnJbSBDsZ6o6XiicJUdNdSkX5rP6aOl+j5TxV3K53HJflw ZLj54Ztul+EnQkLZhlGJ8iJYf7BHk9T5SqDB/OQ6loMl -----END CERTIFICATE-----Generated at Fri Jan 9 06:25:41 2026 by rpki-client