This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/Xh_fZpcuD-kXAKnMm-XCgP1QCcM.roa File: Xh_fZpcuD-kXAKnMm-XCgP1QCcM.roa (raw, json) Hash identifier: E/KI5295u2flUvuXh7zmO0XDhUT77Ekqi6kGos1unAA= Subject key identifier: 5E:1F:DF:66:97:2E:0F:E9:17:00:A9:CC:9B:E5:C2:80:FD:50:09:C3 Certificate issuer: /CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab Certificate serial: 019B78A348C08E4EC01AD77760F06B415529 Authority key identifier: C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/Xh_fZpcuD-kXAKnMm-XCgP1QCcM.roa Signing time: Thu 01 Jan 2026 08:18:45 +0000 ROA not before: Thu 01 Jan 2026 08:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212335 IP address blocks: 185.193.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:48:c0:8e:4e:c0:1a:d7:77:60:f0:6b:41:55:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab Validity Not Before: Jan 1 08:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e1fdf66972e0fe91700a9cc9be5c280fd5009c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:da:da:cc:a5:01:df:42:9f:2d:bc:8a:3e:af: 3c:e9:67:4b:28:82:5b:ef:05:34:04:f0:21:cd:62: 65:a9:15:c6:85:cd:9a:e3:4d:62:29:19:c6:0a:15: 24:0e:b8:35:39:c0:c2:21:6f:48:66:f3:eb:fa:9b: f5:91:4f:85:c0:1b:eb:90:67:f5:41:55:14:92:e8: 73:2d:7d:20:37:72:60:19:03:b1:82:9c:6a:a0:ac: c0:48:c8:2d:46:b0:8d:de:fd:8e:5a:3d:ea:29:e0: 2d:9f:c8:ea:4c:67:0d:2c:b6:19:7f:4f:b4:84:25: 40:57:87:0b:7c:fb:75:dd:20:86:68:1e:5e:65:e7: 9c:76:fe:34:3a:47:6f:72:97:1a:06:64:de:e9:ad: b0:16:7e:63:e3:92:be:8d:ec:7c:15:c3:0b:5c:d9: ce:a8:c2:4d:0d:bf:70:22:97:c1:56:49:f2:55:88: 2e:25:4c:9e:12:e8:cd:e3:5c:db:3d:24:67:b9:ab: 78:b6:df:cf:16:36:5c:38:d0:ab:dc:41:4f:a0:f4: a6:4f:e1:f6:1c:86:ae:0f:30:dc:d8:de:9d:97:7f: 8c:c6:d3:07:11:e0:5d:ec:6c:be:e6:a3:82:ca:0b: 42:65:53:2e:e6:e8:73:c8:d0:9c:2d:5b:a3:f4:82: 04:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:1F:DF:66:97:2E:0F:E9:17:00:A9:CC:9B:E5:C2:80:FD:50:09:C3 X509v3 Authority Key Identifier: keyid:C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/Xh_fZpcuD-kXAKnMm-XCgP1QCcM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.193.164.0/24 Signature Algorithm: sha256WithRSAEncryption 02:fa:5f:80:da:41:c9:ab:5e:39:49:1e:bc:fb:6b:57:13:ab: 70:f9:4a:6e:f2:9e:e4:2f:cb:f9:28:30:39:d7:e4:3a:86:b9: 9c:a6:fb:67:9b:b0:90:9a:8e:0e:55:c0:39:ad:34:eb:f7:67: 6e:90:50:45:04:f0:3a:0a:08:70:d6:c9:62:05:1d:fb:d4:54: 63:16:27:26:0a:a3:67:68:35:e0:e0:0d:6f:57:d6:1b:26:4b: e5:cf:25:4b:2c:7a:6c:c1:10:a9:58:28:35:e4:9f:16:ea:3d: e6:5e:10:a3:7f:73:34:c5:11:42:3e:39:28:57:ea:17:be:93: 48:d1:82:f3:6a:df:7d:aa:8e:ec:1c:d8:d4:f2:9f:e8:ce:f1: 14:67:a4:61:2d:4c:07:d1:14:ee:39:58:06:7c:b7:19:a9:b9: 09:0e:38:ff:c5:b8:69:63:89:78:a9:2b:4c:3c:6e:92:2d:7a: 92:f4:63:55:f0:5e:42:6d:67:5f:8b:fd:e2:5f:34:ba:f7:d4: 87:84:6f:37:a3:6f:dd:80:f2:8e:59:a8:76:2f:30:48:b9:e9: 6c:1d:3e:0d:f1:b6:f4:4a:16:b2:71:fa:f6:36:8c:58:86:ee: af:5b:81:ae:15:e1:3d:83:ba:25:39:c8:54:f8:86:5d:d3:bc: 1d:10:63:30 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o0jAjk7AGtd3YPBrQVUpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDZiNTlhOTNlMzI0MDgzZmJjYTQyMzdlNDdlOWY1ZWJm MzcxYWIwHhcNMjYwMTAxMDgxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTFmZGY2Njk3MmUwZmU5MTcwMGE5Y2M5YmU1YzI4MGZkNTAwOWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNrazKUB30KfLbyKPq886WdLKIJb 7wU0BPAhzWJlqRXGhc2a401iKRnGChUkDrg1OcDCIW9IZvPr+pv1kU+FwBvrkGf1 QVUUkuhzLX0gN3JgGQOxgpxqoKzASMgtRrCN3v2OWj3qKeAtn8jqTGcNLLYZf0+0 hCVAV4cLfPt13SCGaB5eZeecdv40OkdvcpcaBmTe6a2wFn5j45K+jex8FcMLXNnO qMJNDb9wIpfBVknyVYguJUyeEujN41zbPSRnuat4tt/PFjZcONCr3EFPoPSmT+H2 HIauDzDc2N6dl3+MxtMHEeBd7Gy+5qOCygtCZVMu5uhzyNCcLVuj9IIEiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF4f32aXLg/pFwCpzJvlwoD9UAnDMB8GA1UdIwQY MBaAFMnWtZqT4yQIP7ykI35H6fXr83GrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRhMW1wUGpKQWdfdktRamZrZnA5ZXZ6Y2FzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny82ODJiMDctNzczZi00NmZkLTgyZTIt YjkyMTFlMWZjMWFjLzEvWGhfZlpwY3VELWtYQUtuTW0tWENnUDFRQ2NNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny82ODJiMDctNzczZi00NmZkLTgyZTItYjkyMTFlMWZjMWFj LzEveWRhMW1wUGpKQWdfdktRamZrZnA5ZXZ6Y2FzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucGkMA0G CSqGSIb3DQEBCwUAA4IBAQAC+l+A2kHJq145SR68+2tXE6tw+Upu8p7kL8v5KDA5 1+Q6hrmcpvtnm7CQmo4OVcA5rTTr92dukFBFBPA6Cghw1sliBR371FRjFicmCqNn aDXg4A1vV9YbJkvlzyVLLHpswRCpWCg15J8W6j3mXhCjf3M0xRFCPjkoV+oXvpNI 0YLzat99qo7sHNjU8p/ozvEUZ6RhLUwH0RTuOVgGfLcZqbkJDjj/xbhpY4l4qStM PG6SLXqS9GNV8F5CbWdfi/3iXzS699SHhG83o2/dgPKOWah2LzBIuelsHT4N8bb0 Shaycfr2NoxYhu6vW4GuFeE9g7olOchU+IZd07wdEGMw -----END CERTIFICATE-----Generated at Mon Jan 19 16:53:33 2026 by rpki-client