This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/xXH0TOzedy66ElcG97fd78bjZKs.roa File: xXH0TOzedy66ElcG97fd78bjZKs.roa (raw, json) Hash identifier: o+POX8ljapRUWPdy9GAdGv8frb0Y/VYtVrs0Cw6iNAc= Subject key identifier: C5:71:F4:4C:EC:DE:77:2E:BA:12:57:06:F7:B7:DD:EF:C6:E3:64:AB Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Certificate serial: 019B7DCA247EB05B38AD26E11232FB406D53 Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/xXH0TOzedy66ElcG97fd78bjZKs.roa Signing time: Fri 02 Jan 2026 08:19:18 +0000 ROA not before: Fri 02 Jan 2026 08:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 27323 IP address blocks: 193.42.244.0/24 maxlen: 24 194.62.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:24:7e:b0:5b:38:ad:26:e1:12:32:fb:40:6d:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Validity Not Before: Jan 2 08:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c571f44cecde772eba125706f7b7ddefc6e364ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:cc:5f:f4:57:c3:81:65:f1:65:d3:f0:c0:9e: 1e:47:8e:1a:1f:9f:9c:e9:36:6d:7d:ed:c3:f9:ae: 4e:a0:1e:47:9e:0e:c4:6c:64:e0:f2:28:4f:25:29: f9:6c:a2:d5:cd:b6:f0:f8:c4:fd:77:c3:f6:d4:37: 6e:54:55:07:a8:a6:26:7e:40:a8:46:14:df:23:af: 6c:1b:26:54:7f:db:cf:c0:23:ba:90:22:13:77:27: de:38:48:8e:9c:bd:48:4f:21:f3:78:a8:46:a2:cc: 5c:1d:a8:07:be:de:69:d0:8f:64:00:ae:1b:e3:4a: 66:df:e4:05:55:ae:1c:6f:f3:50:d1:f0:ad:63:d1: a8:ba:90:6a:dc:7c:47:6f:49:ff:01:c2:a1:6b:76: 99:69:68:43:32:6b:56:d1:f7:87:87:20:74:8c:7f: f7:5c:fa:63:0b:68:4e:f7:d2:d9:9f:b7:f6:72:97: a1:b6:74:f8:5d:3b:c3:76:50:6e:36:47:1d:eb:7d: 7d:3b:56:bb:b4:ee:a4:9f:cc:df:7d:64:d1:e0:3f: 91:2a:04:4c:9e:28:c6:5f:d2:54:04:14:9e:61:ff: f7:00:2c:1d:18:59:af:76:00:ac:a6:7b:85:00:63: 87:2f:26:c9:a2:57:ee:d0:62:7a:71:a5:96:f3:3e: aa:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:71:F4:4C:EC:DE:77:2E:BA:12:57:06:F7:B7:DD:EF:C6:E3:64:AB X509v3 Authority Key Identifier: keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/xXH0TOzedy66ElcG97fd78bjZKs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.42.244.0/24 194.62.166.0/24 Signature Algorithm: sha256WithRSAEncryption 88:d1:d4:b8:2b:6f:15:86:00:f8:36:bf:ef:70:89:c2:fc:92: fa:bc:5c:e1:dc:e8:44:67:20:5d:7f:38:fc:e3:fd:78:61:c2: 84:69:32:14:4e:74:96:68:92:4c:93:d3:d3:b7:a3:62:7e:bd: b6:d3:1f:d8:c0:90:46:bc:75:09:19:c0:df:47:c5:59:41:f9: 3c:53:f4:26:c6:15:be:6d:b3:e2:30:cb:a9:f4:0b:34:e2:35: 73:a9:f4:5b:fd:07:1a:17:dc:39:d8:b3:80:57:5d:ed:05:89: 64:72:e8:08:15:d8:a1:76:7b:37:25:cb:38:4d:b5:7c:b5:43: 16:10:1f:7b:f6:02:5e:0c:44:9d:a5:e9:33:7d:b7:f0:43:4c: 35:c9:63:62:7a:30:34:d6:2b:cc:32:a7:64:cc:cb:02:6b:bf: 32:43:39:1c:7e:02:0c:0a:94:28:3e:5f:70:66:00:6a:ce:e0: 95:a2:03:18:a7:50:c4:e0:22:ca:8c:dc:6b:ab:66:8a:e0:b1: 20:60:50:d5:64:8e:f6:00:75:5f:44:ef:aa:ac:0f:95:1c:fc: e5:6d:ee:2d:87:6c:18:62:18:71:7c:d5:8b:e4:25:73:e0:e2: aa:03:77:04:da:f4:09:3d:cc:81:e7:f7:03:c0:c0:c8:15:f6: 87:bb:f4:a2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9yiR+sFs4rSbhEjL7QG1TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2 OWExZmQwHhcNMjYwMTAyMDgxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTcxZjQ0Y2VjZGU3NzJlYmExMjU3MDZmN2I3ZGRlZmM2ZTM2NGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8xf9FfDgWXxZdPwwJ4eR44aH5+c 6TZtfe3D+a5OoB5Hng7EbGTg8ihPJSn5bKLVzbbw+MT9d8P21DduVFUHqKYmfkCo RhTfI69sGyZUf9vPwCO6kCITdyfeOEiOnL1ITyHzeKhGosxcHagHvt5p0I9kAK4b 40pm3+QFVa4cb/NQ0fCtY9GoupBq3HxHb0n/AcKha3aZaWhDMmtW0feHhyB0jH/3 XPpjC2hO99LZn7f2cpehtnT4XTvDdlBuNkcd6319O1a7tO6kn8zffWTR4D+RKgRM nijGX9JUBBSeYf/3ACwdGFmvdgCspnuFAGOHLybJolfu0GJ6caWW8z6q8wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMVx9Ezs3ncuuhJXBve33e/G42SrMB8GA1UdIwQY MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et OTk0ODA2ZjA4MWYwLzEveFhIMFRPemVkeTY2RWxjRzk3ZmQ3OGJqWktzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwSr0AwQA wj6mMA0GCSqGSIb3DQEBCwUAA4IBAQCI0dS4K28VhgD4Nr/vcInC/JL6vFzh3OhE ZyBdfzj84/14YcKEaTIUTnSWaJJMk9PTt6Nifr220x/YwJBGvHUJGcDfR8VZQfk8 U/QmxhW+bbPiMMup9As04jVzqfRb/QcaF9w52LOAV13tBYlkcugIFdihdns3Jcs4 TbV8tUMWEB979gJeDESdpekzfbfwQ0w1yWNiejA01ivMMqdkzMsCa78yQzkcfgIM CpQoPl9wZgBqzuCVogMYp1DE4CLKjNxrq2aK4LEgYFDVZI72AHVfRO+qrA+VHPzl be4th2wYYhhxfNWL5CVz4OKqA3cE2vQJPcyB5/cDwMDIFfaHu/Si -----END CERTIFICATE-----Generated at Mon Jan 19 21:24:31 2026 by rpki-client