This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/XuGR4gys41wGOBr9uLcSOWnLX6E.roa File: XuGR4gys41wGOBr9uLcSOWnLX6E.roa (raw, json) Hash identifier: H8Y6ppYgmlgcN1bcTGYWIEFF/87PUD4eVRIKC0ZZ42M= Subject key identifier: 5E:E1:91:E2:0C:AC:E3:5C:06:38:1A:FD:B8:B7:12:39:69:CB:5F:A1 Certificate issuer: /CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0 Certificate serial: 019B7A5B0865DCED674E909551437BC19FD7 Authority key identifier: 82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/XuGR4gys41wGOBr9uLcSOWnLX6E.roa Signing time: Thu 01 Jan 2026 16:19:04 +0000 ROA not before: Thu 01 Jan 2026 16:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42346 IP address blocks: 194.56.124.0/23 maxlen: 23 194.56.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 04:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:08:65:dc:ed:67:4e:90:95:51:43:7b:c1:9f:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0 Validity Not Before: Jan 1 16:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ee191e20cace35c06381afdb8b7123969cb5fa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:25:06:8a:32:b2:f8:64:bc:a3:ab:60:4d:87: 8d:cd:96:88:ad:33:d4:6a:d8:b1:19:fb:dd:54:e4: c3:fb:0c:96:50:92:17:12:21:8a:68:9c:a1:36:08: 2e:e1:74:1f:11:f3:c2:85:cc:37:45:f1:2f:d3:32: b2:38:48:34:07:f0:bf:15:06:ac:46:67:ab:aa:f3: df:c4:72:3e:b5:6f:5f:74:e0:98:8b:bd:d5:da:fd: f6:96:31:db:0e:cc:5c:b6:f9:df:a5:eb:4e:30:17: 68:6a:1d:55:ac:a6:3e:81:0d:cb:bd:7d:0a:00:cd: 74:aa:12:89:f1:7b:f0:f1:f4:e5:04:47:bc:93:be: 2b:fc:13:65:4d:4e:ad:63:89:64:7b:58:99:e3:82: a0:c7:ca:a7:35:b5:b6:6d:2a:52:e3:9a:70:48:72: 83:20:55:c5:34:da:bd:09:04:d5:c4:bf:46:70:fc: ce:a4:8c:d9:58:e8:4e:bc:53:94:18:9b:4e:fd:00: 60:23:f5:49:d3:0b:cd:94:f0:97:e0:b9:28:a3:1b: bb:5e:05:ec:36:02:0f:a2:a6:00:0e:b4:86:49:33: 1c:fa:6a:d5:e5:7e:20:b7:ed:af:b7:8c:6a:59:89: 24:ca:d5:ab:7f:0d:4b:59:0d:76:09:64:26:ae:10: b9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:E1:91:E2:0C:AC:E3:5C:06:38:1A:FD:B8:B7:12:39:69:CB:5F:A1 X509v3 Authority Key Identifier: keyid:82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/XuGR4gys41wGOBr9uLcSOWnLX6E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.56.124.0-194.56.126.255 Signature Algorithm: sha256WithRSAEncryption 29:84:40:ae:a8:ce:fb:3c:29:64:ff:b3:5c:73:22:e7:0b:00: 5c:6f:12:59:af:95:86:e2:40:30:a4:a1:a3:4c:4e:b8:3b:88: 3e:6a:16:97:8e:4f:0e:26:83:d0:b7:27:88:3b:f8:7d:26:48: 99:ee:aa:13:c2:d3:c1:c1:74:3c:c7:d4:c2:ce:ec:80:d1:2d: 60:5c:2b:fc:f9:82:8f:29:32:df:a2:ae:cd:7b:2d:93:22:70: 9c:a0:1f:47:02:22:b9:bc:b5:b9:69:a3:8a:5a:7d:72:da:43: 5e:16:4b:51:d3:27:f9:3f:0b:a4:6d:db:1c:6a:7b:ab:93:10: a6:55:08:d1:fa:5f:90:7b:1d:34:f1:cd:63:f0:b3:e9:9f:81: 4b:de:37:b4:02:5c:fa:46:50:fd:4e:6b:c0:c1:6f:a7:d7:bc: f2:ff:86:69:e6:3f:50:75:50:7a:f0:ce:40:67:80:5f:29:80: 67:48:d4:9a:6a:ee:4e:ff:77:e8:ab:13:f9:78:e0:03:b7:f7: 68:6b:3b:b5:26:f1:0d:fe:6b:f4:4a:19:9c:f2:00:97:57:c1: a5:64:4f:45:0b:57:aa:23:44:96:e2:de:53:98:23:a8:57:aa: da:3b:10:a2:b6:9d:67:34:0b:93:bc:1c:56:d9:d6:02:b7:a3: 20:6c:b0:3c -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt6Wwhl3O1nTpCVUUN7wZ/XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyZTAxNGYxYzhjYTM5NjZhOTNlZjM5ZGJjNjEyZGFhYzBk ODNkYzAwHhcNMjYwMTAxMTYxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZWUxOTFlMjBjYWNlMzVjMDYzODFhZmRiOGI3MTIzOTY5Y2I1ZmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7yUGijKy+GS8o6tgTYeNzZaIrTPU atixGfvdVOTD+wyWUJIXEiGKaJyhNggu4XQfEfPChcw3RfEv0zKyOEg0B/C/FQas RmerqvPfxHI+tW9fdOCYi73V2v32ljHbDsxctvnfpetOMBdoah1VrKY+gQ3LvX0K AM10qhKJ8Xvw8fTlBEe8k74r/BNlTU6tY4lke1iZ44Kgx8qnNbW2bSpS45pwSHKD IFXFNNq9CQTVxL9GcPzOpIzZWOhOvFOUGJtO/QBgI/VJ0wvNlPCX4Lkooxu7XgXs NgIPoqYADrSGSTMc+mrV5X4gt+2vt4xqWYkkytWrfw1LWQ12CWQmrhC5XQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFF7hkeIMrONcBjga/bi3Ejlpy1+hMB8GA1UdIwQY MBaAFILgFPHIyjlmqT7znbxhLarA2D3AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3VBVThjaktPV2FwUHZPZHZHRXRxc0RZUGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84ZmE3OGYtMWQ3My00YzVhLTllMGIt NjZkODBlZDA5YmM3LzEvWHVHUjRneXM0MXdHT0JyOXVMY1NPV25MWDZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS84ZmE3OGYtMWQ3My00YzVhLTllMGItNjZkODBlZDA5YmM3 LzEvZ3VBVThjaktPV2FwUHZPZHZHRXRxc0RZUGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALCOHwD BADCOH4wDQYJKoZIhvcNAQELBQADggEBACmEQK6ozvs8KWT/s1xzIucLAFxvElmv lYbiQDCkoaNMTrg7iD5qFpeOTw4mg9C3J4g7+H0mSJnuqhPC08HBdDzH1MLO7IDR LWBcK/z5go8pMt+irs17LZMicJygH0cCIrm8tblpo4pafXLaQ14WS1HTJ/k/C6Rt 2xxqe6uTEKZVCNH6X5B7HTTxzWPws+mfgUveN7QCXPpGUP1Oa8DBb6fXvPL/hmnm P1B1UHrwzkBngF8pgGdI1Jpq7k7/d+irE/l44AO392hrO7Um8Q3+a/RKGZzyAJdX waVkT0ULV6ojRJbi3lOYI6hXqto7EKK2nWc0C5O8HFbZ1gK3oyBssDw= -----END CERTIFICATE-----Generated at Wed Jan 21 10:28:45 2026 by rpki-client