This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/XMKD_uL-_xpLcGykuiVvTz0Lk_Q.roa File: XMKD_uL-_xpLcGykuiVvTz0Lk_Q.roa (raw, json) Hash identifier: DVyghc/+oczNtpuL5IQwr/AUwvhMtTGB7a5mAO7hdgE= Subject key identifier: 5C:C2:83:FE:E2:FE:FF:1A:4B:70:6C:A4:BA:25:6F:4F:3D:0B:93:F4 Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B79106E9684BB7352745D52AC434901E5 Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/XMKD_uL-_xpLcGykuiVvTz0Lk_Q.roa Signing time: Thu 01 Jan 2026 10:17:58 +0000 ROA not before: Thu 01 Jan 2026 10:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213245 IP address blocks: 188.132.211.0/24 maxlen: 24 188.132.225.0/24 maxlen: 24 212.68.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:6e:96:84:bb:73:52:74:5d:52:ac:43:49:01:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5cc283fee2feff1a4b706ca4ba256f4f3d0b93f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:70:18:8f:a8:81:ca:df:1e:49:60:fc:5d:a3: be:27:b9:a8:61:cc:4c:e4:67:d8:9a:0a:c8:56:19: d7:37:ca:94:9b:99:f2:3f:a7:75:c0:74:e6:76:1e: fd:be:c0:e2:d8:b3:33:f2:9f:6f:6c:75:b0:ce:59: cf:f9:7d:5f:21:9a:ff:95:05:60:cd:6a:09:f1:d1: 44:b9:2c:cb:01:7b:8d:54:3e:d1:a0:7a:a4:3d:5b: da:a9:6a:81:46:b7:ce:07:8c:97:b5:f5:13:83:3a: fd:31:69:2e:2a:b8:a6:94:6c:05:d8:35:19:c9:63: 4d:df:a7:68:5b:5a:a7:59:d2:1c:39:39:32:4e:47: 05:69:17:e3:d2:bf:ee:22:c9:84:68:90:b9:be:4d: 0c:68:dd:ab:9e:56:2b:24:a3:97:8f:8e:c6:f2:73: fe:9d:19:b0:5a:fc:7f:f3:2e:8c:53:e9:d3:b1:4e: d5:d1:13:c8:19:1a:f8:8f:ca:86:89:02:36:16:97: f0:30:7f:83:ea:e0:c9:5b:6a:7d:bb:9d:01:f2:3c: 95:4a:d0:53:a4:c7:e4:ad:32:fc:5e:90:bd:cd:6d: 5e:fa:c8:6e:5b:3a:31:85:b2:18:d3:4c:bf:b2:3d: 95:71:44:69:e4:71:24:79:0d:b4:4b:4d:36:98:27: c3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:C2:83:FE:E2:FE:FF:1A:4B:70:6C:A4:BA:25:6F:4F:3D:0B:93:F4 X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/XMKD_uL-_xpLcGykuiVvTz0Lk_Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.132.211.0/24 188.132.225.0/24 212.68.56.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:af:d3:bf:cb:e4:b3:7b:29:9d:73:99:23:bf:c4:a7:a2:5e: c9:08:8c:95:ba:27:dc:24:43:1f:26:b5:01:94:c9:29:21:42: c6:19:a9:8d:0d:88:09:24:44:d8:6f:40:97:f5:86:cc:65:fe: a3:d5:30:d7:cf:24:00:ca:ea:9d:c6:e3:5c:4d:49:22:54:da: 15:b7:c0:4f:ce:5f:d7:56:bb:dc:33:58:0b:22:7d:70:76:e7: 62:b7:ea:71:a6:71:e5:c1:e3:8c:50:e9:fe:b9:ea:b6:83:1a: fc:62:2f:84:6b:47:23:0a:ba:f5:3e:3e:72:79:e5:ca:fd:24: b2:42:aa:37:41:e8:45:b5:fd:cf:34:d1:0a:df:0d:44:2b:bb: 4a:51:ad:59:04:8c:e5:2d:89:90:38:b7:c4:5f:0e:af:e3:bd: 9b:03:cf:5b:5d:cb:00:1e:24:6c:48:73:91:c6:f5:ca:10:08: c4:dd:05:62:0c:f0:d2:fe:8d:a3:77:4c:1e:4c:46:56:e7:b8: 7d:ee:85:4e:81:ea:24:7c:49:2b:2b:98:af:5c:ec:68:1b:67: 7f:bc:ba:e0:1d:5c:e7:64:6e:4a:52:f5:b1:f6:9b:e1:b3:bb: 13:7a:3e:dc:49:39:f6:3c:e7:f1:fd:84:a0:d2:7a:1b:cf:5f: df:71:77:b2 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5EG6WhLtzUnRdUqxDSQHlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2MyODNmZWUyZmVmZjFhNGI3MDZjYTRiYTI1NmY0ZjNkMGI5M2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3AYj6iByt8eSWD8XaO+J7moYcxM 5GfYmgrIVhnXN8qUm5nyP6d1wHTmdh79vsDi2LMz8p9vbHWwzlnP+X1fIZr/lQVg zWoJ8dFEuSzLAXuNVD7RoHqkPVvaqWqBRrfOB4yXtfUTgzr9MWkuKrimlGwF2DUZ yWNN36doW1qnWdIcOTkyTkcFaRfj0r/uIsmEaJC5vk0MaN2rnlYrJKOXj47G8nP+ nRmwWvx/8y6MU+nTsU7V0RPIGRr4j8qGiQI2FpfwMH+D6uDJW2p9u50B8jyVStBT pMfkrTL8XpC9zW1e+shuWzoxhbIY00y/sj2VcURp5HEkeQ20S002mCfDcQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFzCg/7i/v8aS3BspLolb089C5P0MB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvWE1LRF91TC1feHBMY0d5a3VpVnZUejBMa19RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAvITTAwQA vIThAwQA1EQ4MA0GCSqGSIb3DQEBCwUAA4IBAQALr9O/y+Szeymdc5kjv8Snol7J CIyVuifcJEMfJrUBlMkpIULGGamNDYgJJETYb0CX9YbMZf6j1TDXzyQAyuqdxuNc TUkiVNoVt8BPzl/XVrvcM1gLIn1wdudit+pxpnHlweOMUOn+ueq2gxr8Yi+Ea0cj Crr1Pj5yeeXK/SSyQqo3QehFtf3PNNEK3w1EK7tKUa1ZBIzlLYmQOLfEXw6v472b A89bXcsAHiRsSHORxvXKEAjE3QViDPDS/o2jd0weTEZW57h97oVOgeokfEkrK5iv XOxoG2d/vLrgHVznZG5KUvWx9pvhs7sTej7cSTn2POfx/YSg0nobz1/fcXey -----END CERTIFICATE-----Generated at Wed Jan 21 13:33:07 2026 by rpki-client