This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/XdtoN-G6_JHehbj0D7l71OQKEXE.roa File: XdtoN-G6_JHehbj0D7l71OQKEXE.roa (raw, json) Hash identifier: bDoA0XebMdpMlFP6CJH1fk3V+NG+IRgcZpROF4NtHwY= Subject key identifier: 5D:DB:68:37:E1:BA:FC:91:DE:85:B8:F4:0F:B9:7B:D4:E4:0A:11:71 Certificate issuer: /CN=007e6b5aa437d3693151502a211496e37d4ae2c5 Certificate serial: 019B7B361432F38560DD3EEA04C7408542D7 Authority key identifier: 00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/XdtoN-G6_JHehbj0D7l71OQKEXE.roa Signing time: Thu 01 Jan 2026 20:18:20 +0000 ROA not before: Thu 01 Jan 2026 20:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 160.92.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.crl rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:14:32:f3:85:60:dd:3e:ea:04:c7:40:85:42:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=007e6b5aa437d3693151502a211496e37d4ae2c5 Validity Not Before: Jan 1 20:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ddb6837e1bafc91de85b8f40fb97bd4e40a1171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:d5:1e:eb:1d:4d:73:03:ce:2f:3a:94:0d:74: c3:3c:93:e6:ae:ae:71:34:33:61:bd:b7:9c:62:6d: ed:c6:aa:93:dd:ad:8a:cf:ef:06:ff:f0:3f:ee:62: 13:04:1d:f7:cb:75:18:fc:37:6f:cc:f8:05:2e:65: 78:a3:8c:4e:a6:a5:6b:47:db:f3:86:24:af:fc:8b: 5e:30:e7:db:7b:31:1f:ca:5c:ee:ad:d4:5e:66:bd: 10:a0:c4:4b:45:db:03:a8:e0:b8:65:eb:ca:21:b3: 1e:d5:ff:06:2c:d7:cf:52:ee:e5:83:30:95:67:96: eb:a5:1f:c6:32:a5:ca:7c:f7:69:19:ed:ca:fd:38: ed:23:b0:21:a2:53:82:3a:11:22:18:59:f5:ee:70: ab:fb:33:65:7d:8b:36:a6:97:b0:ac:c9:06:f7:73: dc:50:b7:51:f0:7c:4c:00:f3:74:d9:84:d2:f2:30: dc:e6:99:0c:81:24:f6:7d:9d:07:ed:58:b8:e6:cb: 40:e3:ab:62:46:dd:9e:6a:8e:a3:2b:45:dd:df:d6: ee:81:72:ca:67:8f:3e:fb:4a:29:36:e6:45:a3:27: 52:ae:8b:7a:35:86:0a:ed:39:20:e1:da:21:aa:00: 15:98:6e:ac:29:24:e6:00:a8:1b:50:d7:aa:e5:e1: b8:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:DB:68:37:E1:BA:FC:91:DE:85:B8:F4:0F:B9:7B:D4:E4:0A:11:71 X509v3 Authority Key Identifier: keyid:00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/XdtoN-G6_JHehbj0D7l71OQKEXE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.92.192.0/24 Signature Algorithm: sha256WithRSAEncryption b4:e3:39:7d:e0:ae:93:9e:26:21:30:13:07:d3:53:6d:f3:6a: d5:8c:b8:4a:4e:53:5d:c6:0f:cf:47:0b:fa:59:d3:bb:9e:27: 13:22:de:28:ca:61:c1:bd:f1:ee:e1:f8:14:31:30:1b:29:7b: a0:69:3c:46:16:8a:80:f6:82:a4:8e:00:bf:6a:b4:b6:75:e8: 02:aa:ec:2c:9f:d8:89:ec:b4:ec:be:a3:36:5b:18:19:b8:b5: a3:9f:37:c8:33:46:20:ef:07:52:94:a8:2a:f6:89:8e:2d:ea: df:9c:32:35:f2:12:e1:01:0d:ea:7f:dc:4c:64:f9:30:42:0d: d7:ef:be:46:59:57:c5:ec:2d:4e:6a:1e:85:d4:2c:49:74:9f: 40:fb:be:d7:46:72:0d:a9:0c:e9:9e:66:c2:c9:e3:8a:dd:d6: a4:33:52:73:7a:46:76:fc:45:90:33:10:40:fe:62:78:a9:32: 49:dd:da:c2:9d:4d:17:1d:6b:31:3e:02:a8:c7:9b:27:45:c3: c0:59:c1:24:8a:86:b5:e2:60:76:0f:9a:2a:88:07:11:0b:8a: e1:41:aa:ee:a4:e1:90:08:4c:47:15:ef:7c:34:51:da:9a:32: 91:47:d5:10:d2:f9:44:22:b7:e7:dd:2d:e9:22:14:24:8b:04: 3c:e2:10:cb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NhQy84Vg3T7qBMdAhULXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwN2U2YjVhYTQzN2QzNjkzMTUxNTAyYTIxMTQ5NmUzN2Q0 YWUyYzUwHhcNMjYwMTAxMjAxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZGRiNjgzN2UxYmFmYzkxZGU4NWI4ZjQwZmI5N2JkNGU0MGExMTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6tUe6x1NcwPOLzqUDXTDPJPmrq5x NDNhvbecYm3txqqT3a2Kz+8G//A/7mITBB33y3UY/DdvzPgFLmV4o4xOpqVrR9vz hiSv/IteMOfbezEfylzurdReZr0QoMRLRdsDqOC4ZevKIbMe1f8GLNfPUu7lgzCV Z5brpR/GMqXKfPdpGe3K/TjtI7AholOCOhEiGFn17nCr+zNlfYs2ppewrMkG93Pc ULdR8HxMAPN02YTS8jDc5pkMgST2fZ0H7Vi45stA46tiRt2eao6jK0Xd39bugXLK Z48++0opNuZFoydSrot6NYYK7Tkg4dohqgAVmG6sKSTmAKgbUNeq5eG4MwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF3baDfhuvyR3oW49A+5e9TkChFxMB8GA1UdIwQY MBaAFAB+a1qkN9NpMVFQKiEUluN9SuLFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUg1cldxUTMwMmt4VVZBcUlSU1c0MzFLNHNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy81MThmYWItNzYwNi00ODMyLWFhNjYt NWE4YzY3ODQyMzg5LzEvWGR0b04tRzZfSkhlaGJqMEQ3bDcxT1FLRVhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy81MThmYWItNzYwNi00ODMyLWFhNjYtNWE4YzY3ODQyMzg5 LzEvQUg1cldxUTMwMmt4VVZBcUlSU1c0MzFLNHNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoFzAMA0G CSqGSIb3DQEBCwUAA4IBAQC04zl94K6TniYhMBMH01Nt82rVjLhKTlNdxg/PRwv6 WdO7nicTIt4oymHBvfHu4fgUMTAbKXugaTxGFoqA9oKkjgC/arS2degCquwsn9iJ 7LTsvqM2WxgZuLWjnzfIM0Yg7wdSlKgq9omOLerfnDI18hLhAQ3qf9xMZPkwQg3X 775GWVfF7C1Oah6F1CxJdJ9A+77XRnINqQzpnmbCyeOK3dakM1JzekZ2/EWQMxBA /mJ4qTJJ3drCnU0XHWsxPgKox5snRcPAWcEkioa14mB2D5oqiAcRC4rhQarupOGQ CExHFe98NFHamjKRR9UQ0vlEIrfn3S3pIhQkiwQ84hDL -----END CERTIFICATE-----Generated at Sun Jan 18 15:29:20 2026 by rpki-client