This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/XEqJnovhgmlZgzUaoH0QY-Pq0m8.roa File: XEqJnovhgmlZgzUaoH0QY-Pq0m8.roa (raw, json) Hash identifier: A+cm36ghd3qpGHymXYtK/TQFwbzcM2Y3ceUO8BKbudo= Subject key identifier: 5C:4A:89:9E:8B:E1:82:69:59:83:35:1A:A0:7D:10:63:E3:EA:D2:6F Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d Certificate serial: 019B7C12EF9D95E6E5F79DE551FC71050952 Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/XEqJnovhgmlZgzUaoH0QY-Pq0m8.roa Signing time: Fri 02 Jan 2026 00:19:34 +0000 ROA not before: Fri 02 Jan 2026 00:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 194.6.190.0/24 maxlen: 24 194.209.178.0/24 maxlen: 24 195.65.17.0/24 maxlen: 24 195.65.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:ef:9d:95:e6:e5:f7:9d:e5:51:fc:71:05:09:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d Validity Not Before: Jan 2 00:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c4a899e8be182695983351aa07d1063e3ead26f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f5:c4:ca:04:62:bd:13:d3:e9:a5:5d:44:de: 6a:0d:44:62:ca:c2:ce:92:aa:e3:48:2e:39:9d:46: 83:af:a4:f7:6d:40:34:30:b8:ca:b4:a9:5a:7f:2d: 64:11:ba:44:e7:95:60:a8:52:5a:24:2a:24:2d:5f: c8:86:b4:a1:6d:76:65:8d:0c:ed:86:46:56:b2:9e: 47:49:cf:7e:b4:d1:25:a1:40:c4:8c:e6:6b:84:1a: 39:db:83:db:f4:00:0c:9b:15:bf:c5:bc:8d:9a:6b: bf:90:a7:ed:e7:9e:f2:08:c1:57:00:e1:12:dd:25: 60:cb:fc:0b:26:e4:a5:ac:ed:e1:9f:d7:7c:b4:e9: b0:b8:26:cb:2b:d9:c9:d4:75:a4:17:75:42:4e:93: c9:10:8a:ee:e5:c4:d7:26:c5:03:5b:27:2e:2c:09: af:db:4f:1f:b7:a3:78:b3:b3:16:d5:c1:3b:8e:c4: 04:08:52:37:99:7c:a4:5c:04:f9:4c:03:e7:40:64: 5f:e8:b2:0c:75:14:1d:97:50:b8:d3:a0:27:5f:72: b8:0d:e1:09:b5:07:5d:4a:f1:ea:5b:85:13:8f:f6: 71:3c:aa:23:64:84:ae:8c:ee:0c:5c:26:71:94:a8: ea:4f:d5:5b:69:eb:8e:f5:d0:49:71:92:73:54:10: 4b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:4A:89:9E:8B:E1:82:69:59:83:35:1A:A0:7D:10:63:E3:EA:D2:6F X509v3 Authority Key Identifier: keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/XEqJnovhgmlZgzUaoH0QY-Pq0m8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.6.190.0/24 194.209.178.0/24 195.65.17.0/24 195.65.208.0/24 Signature Algorithm: sha256WithRSAEncryption 00:79:36:54:ad:9e:75:0a:cc:f5:d3:1b:2e:15:a1:a8:8e:b2: d8:15:33:f5:d6:40:76:2d:88:0f:fe:a4:c7:e3:3c:c2:82:01: 27:54:b0:72:2d:8d:3c:df:ae:29:b8:e5:6f:da:de:c7:d5:24: c1:c2:bc:a6:a5:d6:9a:20:68:e4:85:5b:aa:af:23:43:28:48: e0:ef:d1:91:7e:6e:87:96:78:1d:20:27:92:83:63:d2:8d:40: ef:3e:1c:e9:cf:40:98:0a:84:28:31:3f:25:13:ce:bb:57:63: 4e:8c:45:94:4f:4f:4b:9f:2f:e4:84:89:eb:f0:10:5a:df:a5: 45:d2:0a:76:45:06:65:b4:59:c0:6b:90:8e:16:37:9f:6c:f2: 35:ab:2c:0b:87:79:b7:ef:00:a5:22:73:5f:d0:e4:aa:32:e8: e8:9c:1d:85:02:ab:30:2e:10:7a:89:9c:2b:c7:d8:92:06:55: 9d:23:43:c2:fd:d0:fa:23:ae:dc:75:36:75:17:79:65:35:81: 8c:f7:f8:7e:76:4e:d3:4b:22:27:9c:69:64:d3:ed:a3:a7:f1: 61:03:5d:db:52:7e:ad:df:6a:86:ef:ad:4d:88:77:67:0c:f1: 79:4e:44:25:c0:55:94:90:8b:c5:6e:f0:2d:e7:df:41:ba:8c: 86:da:69:36 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt8Eu+dlebl953lUfxxBQlSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy MDRjOGQwHhcNMjYwMTAyMDAxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzRhODk5ZThiZTE4MjY5NTk4MzM1MWFhMDdkMTA2M2UzZWFkMjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fXEygRivRPT6aVdRN5qDURiysLO kqrjSC45nUaDr6T3bUA0MLjKtKlafy1kEbpE55VgqFJaJCokLV/IhrShbXZljQzt hkZWsp5HSc9+tNEloUDEjOZrhBo524Pb9AAMmxW/xbyNmmu/kKft557yCMFXAOES 3SVgy/wLJuSlrO3hn9d8tOmwuCbLK9nJ1HWkF3VCTpPJEIru5cTXJsUDWycuLAmv 208ft6N4s7MW1cE7jsQECFI3mXykXAT5TAPnQGRf6LIMdRQdl1C406AnX3K4DeEJ tQddSvHqW4UTj/ZxPKojZISujO4MXCZxlKjqT9VbaeuO9dBJcZJzVBBLiQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFFxKiZ6L4YJpWYM1GqB9EGPj6tJvMB8GA1UdIwQY MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt YmQxOTI2NzZjOWJiLzEvWEVxSm5vdmhnbWxaZ3pVYW9IMFFZLVBxMG04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwga+AwQA wtGyAwQAw0ERAwQAw0HQMA0GCSqGSIb3DQEBCwUAA4IBAQAAeTZUrZ51Csz10xsu FaGojrLYFTP11kB2LYgP/qTH4zzCggEnVLByLY08364puOVv2t7H1STBwrympdaa IGjkhVuqryNDKEjg79GRfm6HlngdICeSg2PSjUDvPhzpz0CYCoQoMT8lE867V2NO jEWUT09Lny/khInr8BBa36VF0gp2RQZltFnAa5COFjefbPI1qywLh3m37wClInNf 0OSqMujonB2FAqswLhB6iZwrx9iSBlWdI0PC/dD6I67cdTZ1F3llNYGM9/h+dk7T SyInnGlk0+2jp/FhA13bUn6t32qG761NiHdnDPF5TkQlwFWUkIvFbvAt599BuoyG 2mk2 -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:13 2026 by rpki-client