This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/XuukxU-tlW0CeszOQgKBmYFAyTQ.roa File: XuukxU-tlW0CeszOQgKBmYFAyTQ.roa (raw, json) Hash identifier: 9nk9CwQyG3k5mV3mRfxVILIHb2D4afmOKcerEfm46YE= Subject key identifier: 5E:EB:A4:C5:4F:AD:95:6D:02:7A:CC:CE:42:02:81:99:81:40:C9:34 Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d Certificate serial: 019B7C12F7EF3D28DCBACDF0937F5FB2AC4F Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/XuukxU-tlW0CeszOQgKBmYFAyTQ.roa Signing time: Fri 02 Jan 2026 00:19:36 +0000 ROA not before: Fri 02 Jan 2026 00:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48318 IP address blocks: 194.209.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:f7:ef:3d:28:dc:ba:cd:f0:93:7f:5f:b2:ac:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d Validity Not Before: Jan 2 00:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5eeba4c54fad956d027accce420281998140c934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:51:68:98:7c:51:11:ea:80:b3:29:c4:2c:43: 9c:51:30:7b:25:eb:fa:9b:f7:97:94:c6:79:fd:7b: 2f:98:52:2c:1e:2b:18:6c:10:3a:4f:f8:7c:8d:c1: 76:ba:bc:12:38:7c:01:32:e5:64:72:5b:ae:64:7f: 50:73:20:62:1e:b7:34:10:1d:a4:30:68:ea:c7:c0: e0:af:a2:69:67:ba:00:11:9d:a0:b5:30:1a:56:b6: 00:f2:a8:f8:e9:85:b9:98:b1:9e:68:c9:61:03:fd: b8:90:88:98:30:2c:03:54:bb:17:61:db:3b:13:dd: f5:12:95:54:ea:9f:76:67:60:7d:b2:b9:2d:66:9e: e0:5e:b1:5b:0b:ac:3c:b3:fa:70:ff:13:6a:9f:ba: 34:bc:66:0d:fb:26:23:c5:47:35:58:7b:e8:13:73: eb:0c:66:d6:d0:7c:56:65:dd:89:d5:6c:7e:92:85: 0c:72:7a:34:c1:c3:96:cf:e3:83:56:4a:08:f6:7f: c9:88:22:90:56:c2:30:a7:af:e3:dc:e9:a2:6d:15: 15:11:84:97:02:1b:2b:ee:02:08:e4:b6:38:b2:16: a4:f9:18:9f:dc:46:03:82:e1:96:ad:9b:c7:25:22: ce:b0:a0:2c:b0:81:df:88:f6:08:f5:c6:76:15:5e: 29:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:EB:A4:C5:4F:AD:95:6D:02:7A:CC:CE:42:02:81:99:81:40:C9:34 X509v3 Authority Key Identifier: keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/XuukxU-tlW0CeszOQgKBmYFAyTQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.209.227.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:48:11:cb:13:36:1e:09:db:55:1b:3f:ae:1e:95:22:b7:d2: 1b:fa:f7:b0:2e:09:c2:1c:0a:9c:2a:d4:4c:04:e3:3e:6a:93: 74:5a:10:ae:59:9b:bd:bf:19:f6:b1:9c:be:84:de:a4:49:9b: c1:a4:a8:22:4e:dc:ba:e0:1f:8f:61:51:55:1a:fa:58:ef:06: 6a:d9:6f:0d:06:51:ca:19:06:3b:83:3e:0d:6d:b8:82:ae:17: b8:0e:3d:24:9b:e9:86:eb:e5:a4:62:0e:44:2a:9f:a7:cc:14: 6d:30:e9:be:43:84:51:6f:7a:18:54:0a:f5:de:ed:1b:60:fc: a0:8c:09:ec:20:b7:c5:c8:7a:58:98:41:d0:81:ee:0d:87:00: c9:ad:ec:b0:c8:3b:2c:66:e4:a5:d9:b4:45:f2:d6:99:9c:ab: 89:a5:70:5d:2e:c8:b8:28:76:d2:6b:a4:ae:de:e7:3e:68:72: 1f:5b:bc:7e:79:b5:68:55:f9:c9:67:3a:a1:18:0f:ba:84:0d: 31:1c:01:86:7f:da:56:d1:a1:0c:ab:7d:23:02:29:4c:6a:08: 98:18:ea:98:d2:2e:56:f7:d9:cc:12:8a:ea:39:e8:1c:31:e7: c9:bc:7e:ba:2c:e6:ad:c0:08:25:bd:31:90:79:d6:a0:94:68: d1:f9:2c:d9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EvfvPSjcus3wk39fsqxPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy MDRjOGQwHhcNMjYwMTAyMDAxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZWViYTRjNTRmYWQ5NTZkMDI3YWNjY2U0MjAyODE5OTgxNDBjOTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1FomHxREeqAsynELEOcUTB7Jev6 m/eXlMZ5/XsvmFIsHisYbBA6T/h8jcF2urwSOHwBMuVkcluuZH9QcyBiHrc0EB2k MGjqx8Dgr6JpZ7oAEZ2gtTAaVrYA8qj46YW5mLGeaMlhA/24kIiYMCwDVLsXYds7 E931EpVU6p92Z2B9srktZp7gXrFbC6w8s/pw/xNqn7o0vGYN+yYjxUc1WHvoE3Pr DGbW0HxWZd2J1Wx+koUMcno0wcOWz+ODVkoI9n/JiCKQVsIwp6/j3OmibRUVEYSX Ahsr7gII5LY4shak+Rif3EYDguGWrZvHJSLOsKAssIHfiPYI9cZ2FV4pBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF7rpMVPrZVtAnrMzkICgZmBQMk0MB8GA1UdIwQY MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt YmQxOTI2NzZjOWJiLzEvWHV1a3hVLXRsVzBDZXN6T1FnS0JtWUZBeVRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwtHjMA0G CSqGSIb3DQEBCwUAA4IBAQBrSBHLEzYeCdtVGz+uHpUit9Ib+vewLgnCHAqcKtRM BOM+apN0WhCuWZu9vxn2sZy+hN6kSZvBpKgiTty64B+PYVFVGvpY7wZq2W8NBlHK GQY7gz4NbbiCrhe4Dj0km+mG6+WkYg5EKp+nzBRtMOm+Q4RRb3oYVAr13u0bYPyg jAnsILfFyHpYmEHQge4NhwDJreywyDssZuSl2bRF8taZnKuJpXBdLsi4KHbSa6Su 3uc+aHIfW7x+ebVoVfnJZzqhGA+6hA0xHAGGf9pW0aEMq30jAilMagiYGOqY0i5W 99nMEorqOegcMefJvH66LOatwAglvTGQedaglGjR+SzZ -----END CERTIFICATE-----Generated at Mon Jan 26 17:46:29 2026 by rpki-client