This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/Xudz0hLe8s3SLmiPVONXMND3hRM.roa File: Xudz0hLe8s3SLmiPVONXMND3hRM.roa (raw, json) Hash identifier: oORSmt43XgnSynXZgH2ISuQJ8Cm/DBrmnJwy75rrXHU= Subject key identifier: 5E:E7:73:D2:12:DE:F2:CD:D2:2E:68:8F:54:E3:57:30:D0:F7:85:13 Certificate issuer: /CN=d248185956e443b55b062200f964537bc10bc130 Certificate serial: 019B7CED0D6525A106F82963E888A15B00B0 Authority key identifier: D2:48:18:59:56:E4:43:B5:5B:06:22:00:F9:64:53:7B:C1:0B:C1:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/Xudz0hLe8s3SLmiPVONXMND3hRM.roa Signing time: Fri 02 Jan 2026 04:17:48 +0000 ROA not before: Fri 02 Jan 2026 04:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207788 IP address blocks: 195.43.159.0/24 maxlen: 24 195.47.210.0/24 maxlen: 24 195.47.212.0/24 maxlen: 24 195.47.216.0/24 maxlen: 24 2a0f:b6c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.crl rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.mft rsync://rpki.ripe.net/repository/DEFAULT/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:0d:65:25:a1:06:f8:29:63:e8:88:a1:5b:00:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d248185956e443b55b062200f964537bc10bc130 Validity Not Before: Jan 2 04:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ee773d212def2cdd22e688f54e35730d0f78513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6c:0d:c1:fd:fe:10:90:a9:f2:73:28:34:46: 8a:3d:24:eb:33:b4:2a:67:09:72:f1:29:7d:75:7f: 01:2b:df:2d:e8:33:f8:cc:7a:99:f6:54:9f:13:97: dc:23:d9:98:02:db:4b:41:fb:01:00:e4:19:ac:bd: e7:98:b2:91:02:12:91:db:a0:4b:11:11:d1:cc:2c: e7:ba:82:97:96:18:db:b3:cd:af:1a:4c:52:b5:47: a4:90:66:7a:e1:17:28:ab:84:2b:5b:9c:df:6f:67: e9:6e:05:72:18:48:98:0c:db:26:3a:81:63:28:e5: 6b:0c:3e:39:f5:8a:31:65:c4:e2:63:67:f4:90:0f: d1:a2:d6:35:99:42:a1:6f:30:0f:5d:44:75:90:4b: 64:f3:e3:fe:8e:7f:55:e7:8f:c3:59:d0:e8:4a:35: dc:c2:8d:62:94:8f:ea:e3:e5:16:34:7c:db:c7:61: 32:8a:1d:70:00:54:f6:f5:51:d7:81:f8:c0:f5:b2: 66:ce:d2:2a:0d:b7:4f:07:27:f7:19:36:be:81:ce: ac:a8:76:e8:67:ee:25:a1:e2:a0:2f:de:73:a7:8b: 9c:e8:8f:d3:e4:86:2e:4f:95:bb:2b:2f:f5:f2:1f: 1c:dd:4f:0a:99:4a:b3:c0:55:e5:09:6d:d0:fb:12: 52:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:E7:73:D2:12:DE:F2:CD:D2:2E:68:8F:54:E3:57:30:D0:F7:85:13 X509v3 Authority Key Identifier: keyid:D2:48:18:59:56:E4:43:B5:5B:06:22:00:F9:64:53:7B:C1:0B:C1:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/Xudz0hLe8s3SLmiPVONXMND3hRM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.43.159.0/24 195.47.210.0/24 195.47.212.0/24 195.47.216.0/24 IPv6: 2a0f:b6c0::/29 Signature Algorithm: sha256WithRSAEncryption 4b:a7:a8:d0:9b:43:92:17:25:94:14:a3:7f:ce:45:66:be:44: 15:fa:18:51:2e:7d:78:76:50:79:67:82:0a:06:a6:b2:8e:74: 9c:9a:fa:89:d8:54:85:83:99:74:28:bd:3a:81:40:2f:0f:42: 78:21:a8:a8:90:8b:3d:dd:81:7a:fe:c2:12:4c:4d:7e:0d:ae: fb:79:f0:b4:35:0a:a2:c6:b3:5f:dd:a8:d6:ec:b3:95:d6:a0: 55:fb:5b:ad:30:a4:11:c9:ee:9b:35:56:4c:bd:b1:4c:de:f6: 37:04:dc:0d:78:40:22:e6:af:06:e9:78:f9:c4:54:b9:0f:fd: 61:f1:fb:42:ae:53:90:d5:89:6d:b1:ea:19:c5:ee:fd:5d:41: 82:24:09:99:20:8a:12:4e:84:34:47:b3:22:94:8b:66:b2:e4: 1e:7e:c4:2f:bc:32:a2:f8:48:bc:52:4c:db:4d:09:fd:22:95: 30:c3:43:9b:43:49:e3:01:8b:ae:0d:79:7f:30:19:2f:28:60: 71:14:c4:db:30:97:af:ac:a9:a8:9c:e5:43:2c:8d:53:f5:ed: fc:10:0a:da:fb:2c:f6:79:bd:41:84:ed:f2:f0:e1:1e:8e:7c: fd:2d:e3:9a:04:e0:3e:b8:8d:5d:7c:de:dc:ec:c8:aa:5d:a0: 4c:a0:cb:0d -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt87Q1lJaEG+Clj6IihWwCwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNDgxODU5NTZlNDQzYjU1YjA2MjIwMGY5NjQ1MzdiYzEw YmMxMzAwHhcNMjYwMTAyMDQxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZWU3NzNkMjEyZGVmMmNkZDIyZTY4OGY1NGUzNTczMGQwZjc4NTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWwNwf3+EJCp8nMoNEaKPSTrM7Qq Zwly8Sl9dX8BK98t6DP4zHqZ9lSfE5fcI9mYAttLQfsBAOQZrL3nmLKRAhKR26BL ERHRzCznuoKXlhjbs82vGkxStUekkGZ64Rcoq4QrW5zfb2fpbgVyGEiYDNsmOoFj KOVrDD459YoxZcTiY2f0kA/RotY1mUKhbzAPXUR1kEtk8+P+jn9V54/DWdDoSjXc wo1ilI/q4+UWNHzbx2Eyih1wAFT29VHXgfjA9bJmztIqDbdPByf3GTa+gc6sqHbo Z+4loeKgL95zp4uc6I/T5IYuT5W7Ky/18h8c3U8KmUqzwFXlCW3Q+xJSkwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFF7nc9IS3vLN0i5oj1TjVzDQ94UTMB8GA1UdIwQY MBaAFNJIGFlW5EO1WwYiAPlkU3vBC8EwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGtnWVdWYmtRN1ZiQmlJQS1XUlRlOEVMd1RBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZTg3NWEtMDU3Ni00YTE1LWJlMjMt YWVhMDU0Y2Y0M2JiLzEvWHVkejBoTGU4czNTTG1pUFZPTlhNTkQzaFJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZTg3NWEtMDU3Ni00YTE1LWJlMjMtYWVhMDU0Y2Y0M2Ji LzEvMGtnWVdWYmtRN1ZiQmlJQS1XUlRlOEVMd1RBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAwyufAwQA wy/SAwQAwy/UAwQAwy/YMA0EAgACMAcDBQMqD7bAMA0GCSqGSIb3DQEBCwUAA4IB AQBLp6jQm0OSFyWUFKN/zkVmvkQV+hhRLn14dlB5Z4IKBqayjnScmvqJ2FSFg5l0 KL06gUAvD0J4IaiokIs93YF6/sISTE1+Da77efC0NQqixrNf3ajW7LOV1qBV+1ut MKQRye6bNVZMvbFM3vY3BNwNeEAi5q8G6Xj5xFS5D/1h8ftCrlOQ1YltseoZxe79 XUGCJAmZIIoSToQ0R7MilItmsuQefsQvvDKi+Ei8UkzbTQn9IpUww0ObQ0njAYuu DXl/MBkvKGBxFMTbMJevrKmonOVDLI1T9e38EAra+yz2eb1BhO3y8OEejnz9LeOa BOA+uI1dfN7c7MiqXaBMoMsN -----END CERTIFICATE-----Generated at Tue Feb 10 06:03:59 2026 by rpki-client