This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/xJUfKNZ1xwiWMdelR8iN_NauVcs.roa File: xJUfKNZ1xwiWMdelR8iN_NauVcs.roa (raw, json) Hash identifier: W+SoqO5Yn7RcvEpB633UMr3Dz2Q++VpVK6LVgymGZUo= Subject key identifier: C4:95:1F:28:D6:75:C7:08:96:31:D7:A5:47:C8:8D:FC:D6:AE:55:CB Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Certificate serial: 019B79105DD1751C08F801CF9E96C106BFF7 Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/xJUfKNZ1xwiWMdelR8iN_NauVcs.roa Signing time: Thu 01 Jan 2026 10:17:54 +0000 ROA not before: Thu 01 Jan 2026 10:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211440 IP address blocks: 188.191.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:5d:d1:75:1c:08:f8:01:cf:9e:96:c1:06:bf:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Validity Not Before: Jan 1 10:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4951f28d675c7089631d7a547c88dfcd6ae55cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:37:bc:43:7c:55:a2:ac:b2:e5:46:76:ce:05: a2:7f:bc:d2:02:6c:f4:eb:ea:3b:0b:6f:6b:01:3f: 5a:19:b9:9b:b0:f1:44:ce:3d:6e:1a:c0:03:73:e6: 1a:f6:07:a2:bb:40:a9:25:93:2e:bc:58:9a:70:c1: b4:da:b7:fc:e4:96:ed:9c:70:62:c0:4c:c0:83:0a: b8:ed:b9:8d:9f:f1:17:cb:62:60:b5:39:c0:2d:20: c1:22:88:be:01:be:c4:ba:80:9c:a1:9e:4b:62:a5: da:25:bf:4d:19:3f:59:ac:dd:de:b1:3c:4a:58:10: bb:dc:2f:15:64:8e:73:dc:39:a0:51:fc:18:11:16: e6:ec:bc:ed:78:0b:0a:90:91:d6:6f:bc:39:82:3f: c4:4c:0e:59:4e:ad:44:1b:26:35:7d:f4:e6:57:55: 3d:e0:46:5f:9a:e1:0d:ef:52:11:92:66:99:25:e6: 60:e0:2c:2c:51:69:9d:77:14:43:4a:cc:74:ac:70: 23:8c:07:bc:ff:5c:cd:20:82:52:59:ad:af:c8:61: 1e:8d:e1:46:f3:41:11:b6:cf:f3:e6:16:f7:c0:8b: 19:5c:77:07:32:74:a8:49:89:1e:10:60:94:6e:f6: 02:f7:87:8d:c2:2b:23:88:50:57:cd:cc:ac:93:e6: c2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:95:1F:28:D6:75:C7:08:96:31:D7:A5:47:C8:8D:FC:D6:AE:55:CB X509v3 Authority Key Identifier: keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/xJUfKNZ1xwiWMdelR8iN_NauVcs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.191.108.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:46:45:a1:1a:75:11:c0:be:d3:21:f9:af:26:cd:2d:af:42: 43:17:3b:70:e5:fb:66:a4:1c:85:0b:c1:30:d3:74:87:6b:72: 07:2c:c1:d2:c2:25:80:8e:be:85:b5:78:de:b7:58:41:4a:ef: 34:4d:ca:fd:98:14:c2:a6:1d:97:dd:73:c4:2b:51:08:4a:63: d6:27:d1:d1:21:3f:a5:27:a4:10:c8:49:6a:e1:52:c6:48:32: 19:26:1b:83:e6:55:35:0a:ee:63:3d:24:8b:6c:03:48:5b:3f: f3:f8:13:08:16:e7:48:03:41:8f:8e:61:33:37:cd:94:a8:a7: d6:fa:de:f6:17:b1:9a:a3:97:84:9b:3b:8c:6f:15:40:56:1f: 6c:f8:87:3b:9d:f8:41:ba:88:5d:4a:4a:ba:39:1d:4c:23:bb: 92:e7:ff:0f:2f:71:86:71:fc:0c:a1:a5:80:7b:b1:ae:d5:db: cc:90:e2:31:dc:bb:3e:f6:68:10:7f:7d:fd:80:7c:26:40:8f: fb:95:bf:b4:f4:17:8b:2b:6c:a0:1f:c3:7f:b0:68:fe:47:cf: f6:08:ff:bc:db:b7:51:d2:48:aa:71:9c:55:95:b3:3e:a0:17: 13:9d:24:a1:82:78:3a:d8:45:be:10:38:a5:7b:0c:5e:68:05: b8:31:39:eb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EF3RdRwI+AHPnpbBBr/3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMWFjODNlZTNhM2Y5NjhkNjZhZDJmZGY0NjE2ZTdiYjFl NGQxZDcwHhcNMjYwMTAxMTAxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDk1MWYyOGQ2NzVjNzA4OTYzMWQ3YTU0N2M4OGRmY2Q2YWU1NWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4De8Q3xVoqyy5UZ2zgWif7zSAmz0 6+o7C29rAT9aGbmbsPFEzj1uGsADc+Ya9geiu0CpJZMuvFiacMG02rf85JbtnHBi wEzAgwq47bmNn/EXy2JgtTnALSDBIoi+Ab7EuoCcoZ5LYqXaJb9NGT9ZrN3esTxK WBC73C8VZI5z3DmgUfwYERbm7LzteAsKkJHWb7w5gj/ETA5ZTq1EGyY1ffTmV1U9 4EZfmuEN71IRkmaZJeZg4CwsUWmddxRDSsx0rHAjjAe8/1zNIIJSWa2vyGEejeFG 80ERts/z5hb3wIsZXHcHMnSoSYkeEGCUbvYC94eNwisjiFBXzcysk+bCvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMSVHyjWdccIljHXpUfIjfzWrlXLMB8GA1UdIwQY MBaAFI0ayD7jo/lo1mrS/fRhbnux5NHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWIt ZGRmNTY3ZWRlZDAzLzEveEpVZktOWjF4d2lXTWRlbFI4aU5fTmF1VmNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWItZGRmNTY3ZWRlZDAz LzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvL9sMA0G CSqGSIb3DQEBCwUAA4IBAQBeRkWhGnURwL7TIfmvJs0tr0JDFztw5ftmpByFC8Ew 03SHa3IHLMHSwiWAjr6FtXjet1hBSu80Tcr9mBTCph2X3XPEK1EISmPWJ9HRIT+l J6QQyElq4VLGSDIZJhuD5lU1Cu5jPSSLbANIWz/z+BMIFudIA0GPjmEzN82UqKfW +t72F7Gao5eEmzuMbxVAVh9s+Ic7nfhBuohdSkq6OR1MI7uS5/8PL3GGcfwMoaWA e7Gu1dvMkOIx3Ls+9mgQf339gHwmQI/7lb+09BeLK2ygH8N/sGj+R8/2CP+827dR 0kiqcZxVlbM+oBcTnSShgng62EW+EDilewxeaAW4MTnr -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:05 2026 by rpki-client