This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/XyvlakrX669O27yJ8vUEJgcOTBA.roa File: XyvlakrX669O27yJ8vUEJgcOTBA.roa (raw, json) Hash identifier: bXnP/tpzRgnQjjCGNcc58oyJ9DS3aNnplVA7Ww2qw84= Subject key identifier: 5F:2B:E5:6A:4A:D7:EB:AF:4E:DB:BC:89:F2:F5:04:26:07:0E:4C:10 Certificate issuer: /CN=d466d170c810ba34c42e920e84d4262845977f85 Certificate serial: 019B7C80B38A7B6E8E7BD84C8E6378412C4A Authority key identifier: D4:66:D1:70:C8:10:BA:34:C4:2E:92:0E:84:D4:26:28:45:97:7F:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GbRcMgQujTELpIOhNQmKEWXf4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/XyvlakrX669O27yJ8vUEJgcOTBA.roa Signing time: Fri 02 Jan 2026 02:19:27 +0000 ROA not before: Fri 02 Jan 2026 02:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212665 IP address blocks: 193.105.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.mft rsync://rpki.ripe.net/repository/DEFAULT/1GbRcMgQujTELpIOhNQmKEWXf4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:b3:8a:7b:6e:8e:7b:d8:4c:8e:63:78:41:2c:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d466d170c810ba34c42e920e84d4262845977f85 Validity Not Before: Jan 2 02:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f2be56a4ad7ebaf4edbbc89f2f50426070e4c10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:63:f6:ab:99:85:bb:28:f3:21:f0:b2:43:b0: b6:51:55:51:a3:01:87:b9:d9:ac:bc:0d:0b:af:94: e0:b2:f0:34:a2:8a:47:ca:96:3e:de:5c:21:f9:f0: 74:27:2d:07:79:6a:4b:61:fb:92:3f:43:87:43:d8: 4d:e3:be:63:5d:4c:3e:01:7e:2c:b0:74:ca:6c:5c: 55:e6:19:4e:79:7b:4f:b8:6d:08:19:87:35:24:5f: 88:e6:a7:ce:31:cc:51:06:48:28:12:d9:bc:81:f1: 40:94:84:aa:01:4a:33:ce:80:21:3d:a9:05:65:7d: 95:57:30:03:c5:a1:58:cf:e4:ab:38:95:d9:0c:91: ce:4e:eb:d2:7e:b4:12:a0:64:03:77:1a:49:6a:b0: 12:d7:29:22:9a:13:bf:92:e4:af:28:7e:de:6b:53: 07:60:cb:f8:3c:5a:dd:db:a1:22:d3:b8:24:b2:12: 2d:17:21:7d:3f:23:ab:9f:bf:3c:9f:57:a1:a7:28: 29:b8:3c:de:61:28:f7:c8:16:84:44:90:37:aa:eb: fb:81:ad:81:4a:e6:54:7d:4a:e7:f9:85:87:16:93: 0d:f2:d3:6b:a3:f4:38:42:7a:9a:77:68:26:4e:71: 11:19:55:e7:85:56:28:22:54:2a:e0:43:a1:fe:a8: 3d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:2B:E5:6A:4A:D7:EB:AF:4E:DB:BC:89:F2:F5:04:26:07:0E:4C:10 X509v3 Authority Key Identifier: keyid:D4:66:D1:70:C8:10:BA:34:C4:2E:92:0E:84:D4:26:28:45:97:7F:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GbRcMgQujTELpIOhNQmKEWXf4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/XyvlakrX669O27yJ8vUEJgcOTBA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.105.172.0/24 Signature Algorithm: sha256WithRSAEncryption 14:17:e5:1c:43:63:d7:28:33:9c:56:ad:1b:4c:b5:cf:2f:03: 5c:fb:bd:82:6a:d1:bd:d6:65:f2:74:5f:58:8b:98:30:5f:c0: 8f:1c:4c:68:a0:4b:80:50:45:8c:7d:5f:81:7c:31:14:f9:39: de:95:89:ce:8b:4d:55:04:57:7e:de:35:37:4f:49:07:cc:4b: 92:29:83:31:87:83:8c:33:80:01:3b:97:4d:12:98:f8:58:e6: fc:ce:b0:fe:c0:60:55:6f:91:99:ef:b7:82:73:fa:53:59:7f: 4b:d1:f9:ad:84:cb:f0:36:3e:47:58:3f:b1:82:ed:55:7d:d3: 62:60:19:da:f7:9a:91:a7:8f:67:ee:a5:9c:9d:a5:7d:26:c4: be:a8:28:04:fd:bb:e8:33:96:0b:d5:c6:96:60:71:e8:b0:d0: 5a:bc:f7:2d:f4:2c:54:3d:a7:63:b3:12:b9:90:36:aa:42:a2: 41:17:0c:59:12:fd:14:04:7f:07:e9:70:a9:5f:dc:5b:12:00: 40:1b:12:e2:ec:22:c0:8b:fd:45:d3:fc:ac:b6:e8:50:52:72: e9:73:f2:81:33:64:c7:66:14:e1:58:7a:fb:ab:e9:16:3c:7e: 45:f7:76:e8:aa:5b:c4:22:97:61:26:24:c0:e7:32:4e:29:d3: ff:c8:43:7b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gLOKe26Oe9hMjmN4QSxKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NjZkMTcwYzgxMGJhMzRjNDJlOTIwZTg0ZDQyNjI4NDU5 NzdmODUwHhcNMjYwMTAyMDIxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjJiZTU2YTRhZDdlYmFmNGVkYmJjODlmMmY1MDQyNjA3MGU0YzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2P2q5mFuyjzIfCyQ7C2UVVRowGH udmsvA0Lr5TgsvA0oopHypY+3lwh+fB0Jy0HeWpLYfuSP0OHQ9hN475jXUw+AX4s sHTKbFxV5hlOeXtPuG0IGYc1JF+I5qfOMcxRBkgoEtm8gfFAlISqAUozzoAhPakF ZX2VVzADxaFYz+SrOJXZDJHOTuvSfrQSoGQDdxpJarAS1ykimhO/kuSvKH7ea1MH YMv4PFrd26Ei07gkshItFyF9PyOrn788n1ehpygpuDzeYSj3yBaERJA3quv7ga2B SuZUfUrn+YWHFpMN8tNro/Q4Qnqad2gmTnERGVXnhVYoIlQq4EOh/qg9LQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF8r5WpK1+uvTtu8ifL1BCYHDkwQMB8GA1UdIwQY MBaAFNRm0XDIELo0xC6SDoTUJihFl3+FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUdiUmNNZ1F1alRFTHBJT2hOUW1LRVdYZjRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8yMzA2ZjYtNmNjMC00OTgyLWE1MjMt MTY4NDJiZGFkOTI1LzEvWHl2bGFrclg2NjlPMjd5Sjh2VUVKZ2NPVEJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy8yMzA2ZjYtNmNjMC00OTgyLWE1MjMtMTY4NDJiZGFkOTI1 LzEvMUdiUmNNZ1F1alRFTHBJT2hOUW1LRVdYZjRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWmsMA0G CSqGSIb3DQEBCwUAA4IBAQAUF+UcQ2PXKDOcVq0bTLXPLwNc+72CatG91mXydF9Y i5gwX8CPHExooEuAUEWMfV+BfDEU+TnelYnOi01VBFd+3jU3T0kHzEuSKYMxh4OM M4ABO5dNEpj4WOb8zrD+wGBVb5GZ77eCc/pTWX9L0fmthMvwNj5HWD+xgu1VfdNi YBna95qRp49n7qWcnaV9JsS+qCgE/bvoM5YL1caWYHHosNBavPct9CxUPadjsxK5 kDaqQqJBFwxZEv0UBH8H6XCpX9xbEgBAGxLi7CLAi/1F0/ystuhQUnLpc/KBM2TH ZhThWHr7q+kWPH5F93boqlvEIpdhJiTA5zJOKdP/yEN7 -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:00 2026 by rpki-client