This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/xhHlMs8V-oVtGZTag2-dr0XM40o.roa File: xhHlMs8V-oVtGZTag2-dr0XM40o.roa (raw, json) Hash identifier: 7w/XbPL00KDOhcqVYw/WDbhjmiBSuWyGqB7xgQc6Wmw= Subject key identifier: C6:11:E5:32:CF:15:FA:85:6D:19:94:DA:83:6F:9D:AF:45:CC:E3:4A Certificate issuer: /CN=513bdfec55b048b0d2f03b43bf66e3e67e86553f Certificate serial: 019B7CED7C523F70F9E81C39C47FE60BF299 Authority key identifier: 51:3B:DF:EC:55:B0:48:B0:D2:F0:3B:43:BF:66:E3:E6:7E:86:55:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTvf7FWwSLDS8DtDv2bj5n6GVT8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/xhHlMs8V-oVtGZTag2-dr0XM40o.roa Signing time: Fri 02 Jan 2026 04:18:16 +0000 ROA not before: Fri 02 Jan 2026 04:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41768 IP address blocks: 193.37.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.crl rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft rsync://rpki.ripe.net/repository/DEFAULT/UTvf7FWwSLDS8DtDv2bj5n6GVT8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:7c:52:3f:70:f9:e8:1c:39:c4:7f:e6:0b:f2:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=513bdfec55b048b0d2f03b43bf66e3e67e86553f Validity Not Before: Jan 2 04:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c611e532cf15fa856d1994da836f9daf45cce34a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2f:e5:70:c0:cb:c7:26:b4:d5:0e:98:a2:2a: 75:41:54:a3:d9:50:9a:67:e6:fb:17:3e:e3:9c:23: 2a:b0:1a:c4:fd:21:ca:8b:da:ba:1b:63:01:1d:49: c3:8a:d2:8b:65:d3:0f:75:fd:88:80:8f:71:47:41: f7:16:ec:73:00:fa:c2:b6:3a:04:64:f9:79:84:d3: 4d:49:1f:15:d6:13:6e:58:8f:08:ce:28:e2:e5:90: d2:71:61:87:3c:4c:99:cb:4b:5c:65:2b:37:02:5b: 3c:2c:00:5a:4f:18:4d:8e:b7:9c:92:6d:64:b6:9b: 57:c7:fe:28:1d:3a:2a:40:f5:3c:04:70:8d:e6:86: 34:65:f4:0c:cc:db:93:05:ed:67:f6:a1:29:7e:25: 39:27:40:20:e3:f5:90:1f:5c:5e:0e:dc:29:fe:98: 25:3b:4b:48:83:82:6e:33:24:52:a8:77:24:c7:ce: c2:4e:97:32:bf:1c:5f:a1:01:4a:a6:3c:90:7f:90: 8c:03:34:49:e9:06:00:1c:33:1c:e6:5e:70:62:95: 91:0a:68:dc:09:80:f3:2e:8a:c9:f1:59:3c:c0:1e: c2:75:41:cb:9c:10:aa:1a:82:a8:bc:40:72:79:57: 24:d6:7b:fe:ba:d0:32:5c:0c:ff:9d:ac:14:44:a6: b6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:11:E5:32:CF:15:FA:85:6D:19:94:DA:83:6F:9D:AF:45:CC:E3:4A X509v3 Authority Key Identifier: keyid:51:3B:DF:EC:55:B0:48:B0:D2:F0:3B:43:BF:66:E3:E6:7E:86:55:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTvf7FWwSLDS8DtDv2bj5n6GVT8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/xhHlMs8V-oVtGZTag2-dr0XM40o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.37.159.0/24 Signature Algorithm: sha256WithRSAEncryption 59:8f:4a:ca:6f:84:9d:da:76:8f:cd:99:a6:e5:80:1f:4d:26: ad:53:37:73:68:8d:18:2f:ce:ee:0d:05:6b:b2:af:81:f0:bb: 8a:d2:f1:78:74:91:82:a2:62:54:33:15:95:b8:f6:d9:2b:c6: ea:dd:aa:e1:b0:dc:52:6f:b7:69:8c:59:98:3c:58:9d:89:c3: 82:19:33:a5:35:2b:21:54:2a:c4:0e:f1:e1:06:5f:d7:fa:30: 6e:9b:62:8c:77:01:90:50:6e:85:a9:02:34:84:98:44:0e:c3: 01:4e:5f:09:51:5c:7b:93:10:86:8e:bd:b2:75:4e:bd:5a:0a: f7:3a:d1:ce:d1:1e:14:23:ea:ff:c0:e3:7e:d9:06:dd:ef:dc: ee:45:37:52:9d:21:35:44:cf:08:ba:cc:ae:de:f9:5d:8a:7e: 49:34:a3:b9:f8:ba:c8:07:56:68:d0:1c:e0:53:d7:56:21:bf: 64:65:41:9d:20:df:b0:38:a8:56:89:24:14:d1:3d:bb:08:f7: 8c:aa:35:06:71:cf:37:c7:d7:11:63:4b:ea:b6:41:93:fa:fb: 09:77:16:5e:dc:95:f8:35:09:60:0c:8a:d2:c6:4e:3e:96:94: c6:23:f3:90:e3:ea:65:dc:88:1b:0a:ee:fa:d2:39:32:e5:2b: a5:fd:6e:12 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87XxSP3D56Bw5xH/mC/KZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxM2JkZmVjNTViMDQ4YjBkMmYwM2I0M2JmNjZlM2U2N2U4 NjU1M2YwHhcNMjYwMTAyMDQxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjExZTUzMmNmMTVmYTg1NmQxOTk0ZGE4MzZmOWRhZjQ1Y2NlMzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAry/lcMDLxya01Q6Yoip1QVSj2VCa Z+b7Fz7jnCMqsBrE/SHKi9q6G2MBHUnDitKLZdMPdf2IgI9xR0H3FuxzAPrCtjoE ZPl5hNNNSR8V1hNuWI8Iziji5ZDScWGHPEyZy0tcZSs3Als8LABaTxhNjreckm1k tptXx/4oHToqQPU8BHCN5oY0ZfQMzNuTBe1n9qEpfiU5J0Ag4/WQH1xeDtwp/pgl O0tIg4JuMyRSqHckx87CTpcyvxxfoQFKpjyQf5CMAzRJ6QYAHDMc5l5wYpWRCmjc CYDzLorJ8Vk8wB7CdUHLnBCqGoKovEByeVck1nv+utAyXAz/nawURKa2PwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMYR5TLPFfqFbRmU2oNvna9FzONKMB8GA1UdIwQY MBaAFFE73+xVsEiw0vA7Q79m4+Z+hlU/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVR2ZjdGV3dTTERTOER0RHYyYmo1bjZHVlQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9jYmU2OTUtZDJkOS00ZDZmLTg3ZTIt YTFjY2U2ZjgwY2EzLzEveGhIbE1zOFYtb1Z0R1pUYWcyLWRyMFhNNDBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9jYmU2OTUtZDJkOS00ZDZmLTg3ZTItYTFjY2U2ZjgwY2Ez LzEvVVR2ZjdGV3dTTERTOER0RHYyYmo1bjZHVlQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSWfMA0G CSqGSIb3DQEBCwUAA4IBAQBZj0rKb4Sd2naPzZmm5YAfTSatUzdzaI0YL87uDQVr sq+B8LuK0vF4dJGComJUMxWVuPbZK8bq3arhsNxSb7dpjFmYPFidicOCGTOlNSsh VCrEDvHhBl/X+jBum2KMdwGQUG6FqQI0hJhEDsMBTl8JUVx7kxCGjr2ydU69Wgr3 OtHO0R4UI+r/wON+2Qbd79zuRTdSnSE1RM8Iusyu3vldin5JNKO5+LrIB1Zo0Bzg U9dWIb9kZUGdIN+wOKhWiSQU0T27CPeMqjUGcc83x9cRY0vqtkGT+vsJdxZe3JX4 NQlgDIrSxk4+lpTGI/OQ4+pl3IgbCu760jky5Sul/W4S -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:07 2026 by rpki-client