This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/XnNZo1uWqlFlyqlTpvzS_oIrAYM.roa File: XnNZo1uWqlFlyqlTpvzS_oIrAYM.roa (raw, json) Hash identifier: 09EbBQ99AXa0i8SuJ8UOXgv+7EH1s7lIqBKXwZ5iGBI= Subject key identifier: 5E:73:59:A3:5B:96:AA:51:65:CA:A9:53:A6:FC:D2:FE:82:2B:01:83 Certificate issuer: /CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d Certificate serial: 019C05D6D19BCC1411877BFDF61C07BA55B1 Authority key identifier: 2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/XnNZo1uWqlFlyqlTpvzS_oIrAYM.roa Signing time: Wed 28 Jan 2026 18:21:30 +0000 ROA not before: Wed 28 Jan 2026 18:21:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202799 IP address blocks: 89.19.219.0/24 maxlen: 24 89.19.220.0/24 maxlen: 24 89.19.221.0/24 maxlen: 24 89.19.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 21:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:05:d6:d1:9b:cc:14:11:87:7b:fd:f6:1c:07:ba:55:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d Validity Not Before: Jan 28 18:21:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e7359a35b96aa5165caa953a6fcd2fe822b0183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:65:2e:80:aa:a7:73:00:72:cc:5e:51:0a:42: 37:41:4b:d3:83:46:ee:c6:1c:d3:da:40:ca:14:50: 2f:be:e4:b7:78:16:99:c2:5f:88:c6:dd:b7:d8:c4: 11:73:f0:f9:e5:9c:e7:c3:e6:9d:1f:9f:32:9a:28: 18:2a:27:6e:ad:a5:ef:ac:49:10:c6:c5:b7:52:d3: 94:ea:e2:52:bd:88:1c:bf:a2:21:06:87:a9:50:61: dc:ed:cc:74:ea:63:00:35:52:05:b0:c4:96:b9:d9: 61:e3:68:1a:77:81:f1:09:31:8e:89:f7:2f:9c:85: bd:61:40:ee:d1:b8:5c:c4:32:1b:73:8e:a3:1e:6c: 1f:46:0c:13:78:2f:c4:1f:14:4e:2d:2f:8e:40:13: 81:bd:83:44:62:0a:fe:60:33:46:9d:2c:c5:fc:48: 71:e6:18:ad:f9:9d:4e:a6:ee:d2:6b:6d:08:55:e4: 49:bb:fa:53:55:dc:cc:88:fd:43:ab:1d:f5:92:af: bf:2e:b0:ef:51:12:c5:3f:75:ec:48:96:fd:a0:f7: 3a:5a:57:2c:d1:a6:8d:46:4f:46:b5:91:ab:cf:20: 3a:84:0d:66:ed:14:9d:cd:7d:2b:50:a7:35:51:bb: b6:15:3a:39:5c:fa:da:df:2a:32:bb:1b:ad:2a:ae: ac:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:73:59:A3:5B:96:AA:51:65:CA:A9:53:A6:FC:D2:FE:82:2B:01:83 X509v3 Authority Key Identifier: keyid:2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/XnNZo1uWqlFlyqlTpvzS_oIrAYM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.19.219.0-89.19.222.255 Signature Algorithm: sha256WithRSAEncryption af:92:ac:6a:7b:d8:2f:68:bb:da:6f:1a:4f:7f:f1:2b:d5:44: 51:5f:64:82:04:9e:58:6e:24:f0:5c:c3:3c:38:4c:c4:b1:32: 0b:05:a0:27:ff:8d:99:72:d0:17:96:f7:b0:fa:d2:49:bd:6a: ce:65:11:20:14:e1:18:b8:cf:1f:72:df:a6:39:b9:92:15:6c: 07:48:6d:85:59:f5:5d:51:23:84:05:04:26:0f:e4:d6:6c:65: 73:40:1e:30:1f:2f:65:47:14:64:30:62:16:6c:72:00:c1:26: 08:2f:1d:c3:6b:1d:d7:3b:ef:b0:b3:e1:77:59:3b:e8:d8:62: 79:f9:9c:04:e8:f2:4b:c8:bc:1e:42:8a:a2:43:62:c6:d8:60: e5:f5:86:24:db:35:49:fb:ce:92:62:d2:ad:97:5e:02:4c:23: 0c:35:fe:d3:13:79:04:12:1b:2f:86:8e:45:76:dd:be:7f:e2: 1e:cb:b0:87:12:7c:6b:88:7e:97:14:85:9a:99:e1:04:b8:21: 18:2c:f9:e1:c3:1b:17:1b:c2:2e:b3:40:44:d4:4b:a9:86:da: 38:12:7a:ab:05:03:77:f3:a1:ba:00:3b:48:a1:d7:0b:15:86: 1b:e6:83:02:7c:7e:f9:b4:65:eb:a4:fc:9f:cd:3d:51:a2:d1: a6:4d:05:12 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZwF1tGbzBQRh3v99hwHulWxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZWJiNjkxYjI0ZjI4NzkyNTNlM2E2YTQ1ZTBiNWM1MjY3 M2IwOWQwHhcNMjYwMTI4MTgyMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTczNTlhMzViOTZhYTUxNjVjYWE5NTNhNmZjZDJmZTgyMmIwMTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2UugKqncwByzF5RCkI3QUvTg0bu xhzT2kDKFFAvvuS3eBaZwl+Ixt232MQRc/D55Zznw+adH58ymigYKiduraXvrEkQ xsW3UtOU6uJSvYgcv6IhBoepUGHc7cx06mMANVIFsMSWudlh42gad4HxCTGOifcv nIW9YUDu0bhcxDIbc46jHmwfRgwTeC/EHxROLS+OQBOBvYNEYgr+YDNGnSzF/Ehx 5hit+Z1Opu7Sa20IVeRJu/pTVdzMiP1Dqx31kq+/LrDvURLFP3XsSJb9oPc6Wlcs 0aaNRk9GtZGrzyA6hA1m7RSdzX0rUKc1Ubu2FTo5XPra3yoyuxutKq6sYwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFF5zWaNblqpRZcqpU6b80v6CKwGDMB8GA1UdIwQY MBaAFC7rtpGyTyh5JT46akXgtcUmc7CdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHV1MmtiSlBLSGtsUGpwcVJlQzF4U1p6c0owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xMzBkOTUtNTY0MS00YWRhLTgwYzAt ZGEzZTExOTJjZGY2LzEvWG5OWm8xdVdxbEZseXFsVHB2elNfb0lyQVlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8xMzBkOTUtNTY0MS00YWRhLTgwYzAtZGEzZTExOTJjZGY2 LzEvTHV1MmtiSlBLSGtsUGpwcVJlQzF4U1p6c0owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABZE9sD BABZE94wDQYJKoZIhvcNAQELBQADggEBAK+SrGp72C9ou9pvGk9/8SvVRFFfZIIE nlhuJPBcwzw4TMSxMgsFoCf/jZly0BeW97D60km9as5lESAU4Ri4zx9y36Y5uZIV bAdIbYVZ9V1RI4QFBCYP5NZsZXNAHjAfL2VHFGQwYhZscgDBJggvHcNrHdc777Cz 4XdZO+jYYnn5nATo8kvIvB5CiqJDYsbYYOX1hiTbNUn7zpJi0q2XXgJMIww1/tMT eQQSGy+GjkV23b5/4h7LsIcSfGuIfpcUhZqZ4QS4IRgs+eHDGxcbwi6zQETUS6mG 2jgSeqsFA3fzoboAO0ih1wsVhhvmgwJ8fvm0Zeuk/J/NPVGi0aZNBRI= -----END CERTIFICATE-----Generated at Fri Feb 6 05:19:24 2026 by rpki-client