This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/xQH4kxn8xBsyaqhIlNPO4xn-4HA.roa File: xQH4kxn8xBsyaqhIlNPO4xn-4HA.roa (raw, json) Hash identifier: 4c/eyqsX/8YhnNDX8tQhJuM4UkjqguMRdc8B5oNvgSE= Subject key identifier: C5:01:F8:93:19:FC:C4:1B:32:6A:A8:48:94:D3:CE:E3:19:FE:E0:70 Certificate issuer: /CN=aee8e5dfec683ae5f1a0ebe0fb96fa256b304762 Certificate serial: 019B7F15885F4A290ECEF473A5315A0284E9 Authority key identifier: AE:E8:E5:DF:EC:68:3A:E5:F1:A0:EB:E0:FB:96:FA:25:6B:30:47:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rujl3-xoOuXxoOvg-5b6JWswR2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/xQH4kxn8xBsyaqhIlNPO4xn-4HA.roa Signing time: Fri 02 Jan 2026 14:21:16 +0000 ROA not before: Fri 02 Jan 2026 14:21:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210458 IP address blocks: 146.19.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.crl rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft rsync://rpki.ripe.net/repository/DEFAULT/rujl3-xoOuXxoOvg-5b6JWswR2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:88:5f:4a:29:0e:ce:f4:73:a5:31:5a:02:84:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aee8e5dfec683ae5f1a0ebe0fb96fa256b304762 Validity Not Before: Jan 2 14:21:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c501f89319fcc41b326aa84894d3cee319fee070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:56:ce:a6:b3:76:49:ca:0c:90:c2:de:aa:82: 89:c7:e8:19:48:65:e1:c3:8e:9c:86:b8:3e:ea:bf: 5c:80:7a:64:fd:37:38:12:38:47:a8:97:d5:e4:57: 3d:61:51:b7:a2:67:fd:17:86:14:81:de:66:47:39: e4:06:7d:18:aa:49:db:4e:5c:71:4b:bf:e8:65:6e: 72:8d:b9:41:12:c3:81:61:e4:6a:4e:23:dc:6e:29: e7:e0:77:28:28:7a:3a:09:ad:76:96:bf:62:c9:5c: 93:16:ed:f2:1b:a7:a0:fb:41:96:ce:f8:c3:02:99: 1c:23:ab:36:86:44:a2:d1:c8:43:fb:fd:35:70:0d: 20:fe:41:18:81:38:39:64:c1:00:9e:36:2c:61:73: cd:f6:b2:ae:65:1a:e3:2e:c2:44:63:8e:97:5f:2b: ec:df:ee:c1:a1:0a:55:98:ea:04:12:f8:09:28:52: a6:1c:2d:f9:da:fd:6a:3a:aa:f6:82:27:8e:dd:30: a2:90:94:7b:a0:a5:81:e2:00:a5:ac:f8:ca:2f:60: d5:68:c3:aa:c0:b3:81:51:c5:7b:97:f6:38:a9:37: 21:79:a2:1b:07:42:e1:9f:46:af:c9:8e:30:a3:82: 8b:4b:3b:27:b1:7b:32:7b:be:69:59:4e:47:b3:a0: 49:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:01:F8:93:19:FC:C4:1B:32:6A:A8:48:94:D3:CE:E3:19:FE:E0:70 X509v3 Authority Key Identifier: keyid:AE:E8:E5:DF:EC:68:3A:E5:F1:A0:EB:E0:FB:96:FA:25:6B:30:47:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rujl3-xoOuXxoOvg-5b6JWswR2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/xQH4kxn8xBsyaqhIlNPO4xn-4HA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.141.0/24 Signature Algorithm: sha256WithRSAEncryption 56:a9:d4:9b:ae:bf:c0:6c:76:b2:a9:b2:64:29:37:9e:76:c5: 46:f7:74:f4:0e:d5:cd:86:51:55:c4:cc:43:a5:9e:6e:96:61: 08:69:32:c3:a5:3d:ca:79:ca:23:e6:b9:85:01:7d:c6:0a:45: 1a:b4:a2:52:dd:08:d0:91:6d:af:ee:9d:c9:48:e3:9b:93:ed: 10:64:1e:42:f8:b7:d1:1b:76:eb:82:35:9b:26:7b:77:76:ee: 89:c1:f7:57:30:0b:ce:bc:b3:85:bf:50:fd:83:2c:c7:8f:8a: 80:31:c8:77:00:e7:42:37:5a:fd:c0:dd:ca:ed:f9:13:71:b1: 76:3d:b7:d5:82:89:5e:8e:c1:99:ca:95:eb:30:0b:3e:ab:9e: 38:dd:75:11:62:cd:21:a3:5f:90:6f:7e:74:f4:f5:a5:eb:ad: a8:b5:91:c2:31:49:0e:cc:72:11:a5:4f:7e:15:3a:fb:c5:cb: 98:e2:00:1c:46:41:7c:81:2c:ad:b9:dc:e2:d4:21:88:f2:a7: e9:a3:eb:5b:c3:f8:dc:e7:35:7d:28:5c:78:8a:19:00:58:36: be:30:e6:16:c5:20:54:f3:96:0e:3d:9c:35:02:bf:d1:17:5e: 9e:ca:5f:40:68:03:e2:9f:0d:b1:a0:74:8a:e9:f0:78:f4:3d: 48:a3:8d:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FYhfSikOzvRzpTFaAoTpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZThlNWRmZWM2ODNhZTVmMWEwZWJlMGZiOTZmYTI1NmIz MDQ3NjIwHhcNMjYwMTAyMTQyMTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTAxZjg5MzE5ZmNjNDFiMzI2YWE4NDg5NGQzY2VlMzE5ZmVlMDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVbOprN2ScoMkMLeqoKJx+gZSGXh w46chrg+6r9cgHpk/Tc4EjhHqJfV5Fc9YVG3omf9F4YUgd5mRznkBn0YqknbTlxx S7/oZW5yjblBEsOBYeRqTiPcbinn4HcoKHo6Ca12lr9iyVyTFu3yG6eg+0GWzvjD ApkcI6s2hkSi0chD+/01cA0g/kEYgTg5ZMEAnjYsYXPN9rKuZRrjLsJEY46XXyvs 3+7BoQpVmOoEEvgJKFKmHC352v1qOqr2gieO3TCikJR7oKWB4gClrPjKL2DVaMOq wLOBUcV7l/Y4qTcheaIbB0Lhn0avyY4wo4KLSzsnsXsye75pWU5Hs6BJgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMUB+JMZ/MQbMmqoSJTTzuMZ/uBwMB8GA1UdIwQY MBaAFK7o5d/saDrl8aDr4PuW+iVrMEdiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnVqbDMteG9PdVh4b092Zy01YjZKV3N3UjJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xOGI2OTAtYzVhZS00ZmI0LThiZjgt NjNhMGJlNmE4ZTVmLzEveFFINGt4bjh4QnN5YXFoSWxOUE80eG4tNEhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8xOGI2OTAtYzVhZS00ZmI0LThiZjgtNjNhMGJlNmE4ZTVm LzEvcnVqbDMteG9PdVh4b092Zy01YjZKV3N3UjJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhONMA0G CSqGSIb3DQEBCwUAA4IBAQBWqdSbrr/AbHayqbJkKTeedsVG93T0DtXNhlFVxMxD pZ5ulmEIaTLDpT3Kecoj5rmFAX3GCkUatKJS3QjQkW2v7p3JSOObk+0QZB5C+LfR G3brgjWbJnt3du6JwfdXMAvOvLOFv1D9gyzHj4qAMch3AOdCN1r9wN3K7fkTcbF2 PbfVgolejsGZypXrMAs+q5443XURYs0ho1+Qb3509PWl662otZHCMUkOzHIRpU9+ FTr7xcuY4gAcRkF8gSytudzi1CGI8qfpo+tbw/jc5zV9KFx4ihkAWDa+MOYWxSBU 85YOPZw1Ar/RF16eyl9AaAPinw2xoHSK6fB49D1Io41S -----END CERTIFICATE-----Generated at Mon Feb 9 21:26:03 2026 by rpki-client