This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/xdAaexAUdUDttJM21F7tUlAz2vs.roa File: xdAaexAUdUDttJM21F7tUlAz2vs.roa (raw, json) Hash identifier: VedRkQ44jOEPcPIUd0dHiyi/hpTJ8KF1xUzmzLpT6Aw= Subject key identifier: C5:D0:1A:7B:10:14:75:40:ED:B4:93:36:D4:5E:ED:52:50:33:DA:FB Certificate issuer: /CN=77eda8f726a69b504de994943b0a5f2308c2a96b Certificate serial: 019B7F1459313EDDF2DE2C2908C265D347C9 Authority key identifier: 77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/xdAaexAUdUDttJM21F7tUlAz2vs.roa Signing time: Fri 02 Jan 2026 14:19:58 +0000 ROA not before: Fri 02 Jan 2026 14:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 193.102.32.0/22 maxlen: 22 193.102.32.0/24 maxlen: 24 193.102.33.0/24 maxlen: 24 193.102.34.0/24 maxlen: 24 193.102.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:59:31:3e:dd:f2:de:2c:29:08:c2:65:d3:47:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77eda8f726a69b504de994943b0a5f2308c2a96b Validity Not Before: Jan 2 14:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5d01a7b10147540edb49336d45eed525033dafb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2f:f4:e5:84:64:1e:23:6b:cd:a0:2d:80:b2: 09:4f:5a:fb:d1:6a:0c:38:f2:c0:d5:cc:cd:54:d9: 1a:69:a8:db:65:ba:9c:28:3a:fc:82:89:fa:f5:e8: ca:97:5e:82:94:eb:7b:e7:e2:78:ec:c4:87:c5:90: ec:87:c7:f9:bc:eb:c0:7f:b5:c6:ec:d1:4a:d6:32: 77:8d:59:3c:e2:86:da:a8:33:80:2f:df:f7:12:96: f1:e4:0b:64:e9:d3:56:55:d6:29:d6:7c:03:d7:9a: b0:2a:f3:d9:c4:0c:d5:a5:a2:07:af:7f:bc:31:7d: da:8d:c5:d5:11:fc:4f:29:11:45:15:33:b4:a1:98: 36:79:19:cd:83:18:89:50:c7:05:3a:88:e1:37:9b: 8f:40:35:c1:be:c5:ba:65:56:ed:b4:50:10:98:98: cf:7b:6b:db:fd:fa:c7:1e:81:77:f5:48:29:3b:f2: 4e:01:e7:f2:9a:80:db:61:50:ec:68:c9:03:70:05: 35:ff:bc:9b:41:b0:02:23:e5:a3:05:42:ff:93:8a: 37:dd:3e:90:ca:81:8f:9e:ce:0f:bf:26:2d:25:eb: 6d:50:2d:d0:ae:d6:33:9b:b8:21:05:42:65:17:aa: 89:34:9b:67:db:90:6a:62:1f:bf:3f:dc:db:bd:c9: f4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D0:1A:7B:10:14:75:40:ED:B4:93:36:D4:5E:ED:52:50:33:DA:FB X509v3 Authority Key Identifier: keyid:77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/xdAaexAUdUDttJM21F7tUlAz2vs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.102.32.0/22 Signature Algorithm: sha256WithRSAEncryption 38:d2:d5:df:40:ae:13:08:87:5c:dc:3f:68:54:70:d4:21:08: b6:20:43:ea:f9:be:ed:8f:79:a3:1a:d3:2b:ba:a2:1c:c5:9c: e8:5e:23:75:dc:ee:b9:39:b1:83:d2:06:77:18:a4:6d:c5:40: a3:f2:a3:d3:db:89:e1:0e:ac:67:84:38:ab:60:c7:34:ba:a4: 86:df:24:70:97:c4:12:d3:d0:5f:3a:6f:a1:5c:78:34:bf:d9: a4:e9:75:c6:bd:84:95:71:18:17:77:03:6c:7b:51:97:b7:8d: f9:ff:22:a7:7a:c6:69:aa:58:cd:6a:01:0f:f9:74:bd:f7:ff: b3:11:e2:c8:c3:8b:84:68:98:ac:b5:4c:8d:9f:af:65:77:17: c1:a5:3b:c7:aa:c2:1d:99:22:7b:d9:a8:bf:b8:32:c0:b3:03: 0f:47:f5:72:12:29:b7:38:4f:7c:8c:45:9c:f9:9f:68:b0:37: ba:11:19:d5:9d:cf:bf:cc:06:7f:69:35:58:d1:56:0b:cf:4c: ef:8a:fe:81:8d:30:e1:6e:c4:d8:5a:af:a7:84:53:17:c6:4d: fe:88:b8:fb:c4:37:66:a0:70:08:ec:75:52:2d:f3:ef:4e:ab: 75:2b:7c:42:9c:09:ca:8d:45:6c:a1:66:3a:22:4d:7f:ec:e2: e8:52:1e:4b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FFkxPt3y3iwpCMJl00fJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3ZWRhOGY3MjZhNjliNTA0ZGU5OTQ5NDNiMGE1ZjIzMDhj MmE5NmIwHhcNMjYwMTAyMTQxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNWQwMWE3YjEwMTQ3NTQwZWRiNDkzMzZkNDVlZWQ1MjUwMzNkYWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzi/05YRkHiNrzaAtgLIJT1r70WoM OPLA1czNVNkaaajbZbqcKDr8gon69ejKl16ClOt75+J47MSHxZDsh8f5vOvAf7XG 7NFK1jJ3jVk84obaqDOAL9/3Epbx5Atk6dNWVdYp1nwD15qwKvPZxAzVpaIHr3+8 MX3ajcXVEfxPKRFFFTO0oZg2eRnNgxiJUMcFOojhN5uPQDXBvsW6ZVbttFAQmJjP e2vb/frHHoF39UgpO/JOAefymoDbYVDsaMkDcAU1/7ybQbACI+WjBUL/k4o33T6Q yoGPns4PvyYtJettUC3QrtYzm7ghBUJlF6qJNJtn25BqYh+/P9zbvcn0HwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMXQGnsQFHVA7bSTNtRe7VJQM9r7MB8GA1UdIwQY MBaAFHftqPcmpptQTemUlDsKXyMIwqlrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZC0ybzl5YW1tMUJONlpTVU93cGZJd2pDcVdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi83Mjc2ZjMtYzg4ZS00ODE5LTllNTkt NjA4NGNmYzZlNGM0LzEveGRBYWV4QVVkVUR0dEpNMjFGN3RVbEF6MnZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi83Mjc2ZjMtYzg4ZS00ODE5LTllNTktNjA4NGNmYzZlNGM0 LzEvZC0ybzl5YW1tMUJONlpTVU93cGZJd2pDcVdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwWYgMA0G CSqGSIb3DQEBCwUAA4IBAQA40tXfQK4TCIdc3D9oVHDUIQi2IEPq+b7tj3mjGtMr uqIcxZzoXiN13O65ObGD0gZ3GKRtxUCj8qPT24nhDqxnhDirYMc0uqSG3yRwl8QS 09BfOm+hXHg0v9mk6XXGvYSVcRgXdwNse1GXt435/yKnesZpqljNagEP+XS99/+z EeLIw4uEaJistUyNn69ldxfBpTvHqsIdmSJ72ai/uDLAswMPR/VyEim3OE98jEWc +Z9osDe6ERnVnc+/zAZ/aTVY0VYLz0zviv6BjTDhbsTYWq+nhFMXxk3+iLj7xDdm oHAI7HVSLfPvTqt1K3xCnAnKjUVsoWY6Ik1/7OLoUh5L -----END CERTIFICATE-----Generated at Fri Jan 9 06:24:38 2026 by rpki-client