This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/xwyt0wXVsqA4eESlSVJR3Jxbi3E.roa File: xwyt0wXVsqA4eESlSVJR3Jxbi3E.roa (raw, json) Hash identifier: RH1WTDRs/8Vp6UylYLIYMotB4x6HLaJVltA1rEKfSrA= Subject key identifier: C7:0C:AD:D3:05:D5:B2:A0:38:78:44:A5:49:52:51:DC:9C:5B:8B:71 Certificate issuer: /CN=249b558c48550e06234c5ddffcaa1fcf2e9ac6ff Certificate serial: 019B7F808A3E13CD69D99B2EBE6C0F094F8E Authority key identifier: 24:9B:55:8C:48:55:0E:06:23:4C:5D:DF:FC:AA:1F:CF:2E:9A:C6:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JJtVjEhVDgYjTF3f_Kofzy6axv8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/xwyt0wXVsqA4eESlSVJR3Jxbi3E.roa Signing time: Fri 02 Jan 2026 16:18:09 +0000 ROA not before: Fri 02 Jan 2026 16:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13157 IP address blocks: 62.112.32.0/19 maxlen: 19 185.244.56.0/22 maxlen: 22 185.244.56.0/24 maxlen: 24 193.29.250.0/24 maxlen: 24 2a04:ce40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.mft rsync://rpki.ripe.net/repository/DEFAULT/JJtVjEhVDgYjTF3f_Kofzy6axv8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:8a:3e:13:cd:69:d9:9b:2e:be:6c:0f:09:4f:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249b558c48550e06234c5ddffcaa1fcf2e9ac6ff Validity Not Before: Jan 2 16:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c70cadd305d5b2a0387844a5495251dc9c5b8b71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d0:01:0e:90:f8:34:c5:78:99:41:0a:b0:97: 1a:44:7b:01:04:ea:f5:7c:d2:54:fe:87:75:0b:19: 96:54:dd:59:27:f2:3d:6c:98:39:55:84:20:06:0e: 4b:61:99:d1:ae:cb:21:95:29:0c:06:4f:bb:79:52: d3:36:70:82:bd:9d:a8:d0:4e:a5:00:af:0e:89:2b: 5a:41:f0:c5:0f:a4:a3:01:66:8a:03:c3:c6:49:80: 28:0f:11:88:0b:6a:6c:72:f7:40:cb:2f:66:5a:f9: ea:38:c0:38:a8:34:d0:3f:9b:17:cf:b4:ae:1e:56: 92:f5:b2:54:89:ef:c3:76:fa:2e:1d:d8:52:46:c9: 91:44:1a:5f:47:64:d2:d9:b3:6a:61:5e:65:d1:4d: 21:c3:e7:46:03:dd:24:6a:1b:a5:2f:6e:fd:fb:b1: 63:a2:19:ee:db:ee:7e:de:b3:ab:3f:8d:c7:ae:44: 80:2d:29:f8:7b:c9:95:bf:16:74:29:02:a8:10:b1: 38:ed:36:35:1b:8c:b7:1c:23:9e:6d:c9:08:28:18: 54:0c:2b:84:d1:5e:7d:93:e6:cd:03:cd:76:4c:c5: c4:e1:26:6f:28:4f:21:98:2f:13:e4:05:fa:b3:2a: e5:a7:d0:9e:4d:6b:72:ed:dd:ef:ac:fc:df:5a:1c: 35:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:0C:AD:D3:05:D5:B2:A0:38:78:44:A5:49:52:51:DC:9C:5B:8B:71 X509v3 Authority Key Identifier: keyid:24:9B:55:8C:48:55:0E:06:23:4C:5D:DF:FC:AA:1F:CF:2E:9A:C6:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JJtVjEhVDgYjTF3f_Kofzy6axv8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/xwyt0wXVsqA4eESlSVJR3Jxbi3E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.112.32.0/19 185.244.56.0/22 193.29.250.0/24 IPv6: 2a04:ce40::/29 Signature Algorithm: sha256WithRSAEncryption 02:57:01:9b:81:c7:d5:c8:72:8d:23:33:4c:93:c3:0a:11:6a: 8d:3a:3d:ab:4a:e2:08:e7:34:68:a9:c5:92:37:1f:d2:57:6f: 6f:ba:86:0d:df:68:cd:02:3a:d0:2f:2c:61:ee:1d:fc:a0:ba: b7:62:9c:37:8d:7d:14:0a:86:4e:31:a5:67:be:d7:c5:24:46: 70:aa:39:71:7c:a7:0f:9a:d6:57:64:06:17:7d:1e:6a:cf:0f: 86:ab:63:2f:42:f6:08:29:60:0d:c3:c3:40:bf:7e:89:96:73: e7:65:00:d5:bd:fa:f5:b4:45:31:a8:f0:97:4b:26:60:b1:a3: 49:3e:31:bb:16:1f:6c:68:ac:92:b8:7d:cb:8c:36:84:85:11: cd:85:52:03:ab:dc:87:ca:c0:8d:a8:2b:c2:96:b1:be:83:d6: f1:ce:06:28:37:07:12:68:a9:52:7f:84:23:fa:1d:52:a7:d6: 14:19:81:67:e1:46:32:a6:f1:0d:0c:f1:3e:ed:0b:4a:17:55: e5:4c:34:95:6a:9d:f9:55:b6:5a:cd:8c:78:8f:dd:a0:93:ac: 22:f3:ea:64:d5:ca:9b:93:68:16:be:f6:c8:e9:97:3b:26:c7: b2:36:65:36:62:bd:43:fc:06:a1:eb:e6:bd:98:b2:2b:f3:b5: 7b:6c:af:41 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt/gIo+E81p2ZsuvmwPCU+OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0OWI1NThjNDg1NTBlMDYyMzRjNWRkZmZjYWExZmNmMmU5 YWM2ZmYwHhcNMjYwMTAyMTYxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzBjYWRkMzA1ZDViMmEwMzg3ODQ0YTU0OTUyNTFkYzljNWI4YjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9ABDpD4NMV4mUEKsJcaRHsBBOr1 fNJU/od1CxmWVN1ZJ/I9bJg5VYQgBg5LYZnRrsshlSkMBk+7eVLTNnCCvZ2o0E6l AK8OiStaQfDFD6SjAWaKA8PGSYAoDxGIC2pscvdAyy9mWvnqOMA4qDTQP5sXz7Su HlaS9bJUie/DdvouHdhSRsmRRBpfR2TS2bNqYV5l0U0hw+dGA90kahulL279+7Fj ohnu2+5+3rOrP43HrkSALSn4e8mVvxZ0KQKoELE47TY1G4y3HCOebckIKBhUDCuE 0V59k+bNA812TMXE4SZvKE8hmC8T5AX6syrlp9CeTWty7d3vrPzfWhw1GQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFMcMrdMF1bKgOHhEpUlSUdycW4txMB8GA1UdIwQY MBaAFCSbVYxIVQ4GI0xd3/yqH88umsb/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkp0VmpFaFZEZ1lqVEYzZl9Lb2Z6eTZheHY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8zMWQyNzUtYWNmYy00ODc4LThmNTct MTIxZDUzNTA4NWQ2LzEveHd5dDB3WFZzcUE0ZUVTbFNWSlIzSnhiaTNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8zMWQyNzUtYWNmYy00ODc4LThmNTctMTIxZDUzNTA4NWQ2 LzEvSkp0VmpFaFZEZ1lqVEYzZl9Lb2Z6eTZheHY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQFPnAgAwQC ufQ4AwQAwR36MA0EAgACMAcDBQMqBM5AMA0GCSqGSIb3DQEBCwUAA4IBAQACVwGb gcfVyHKNIzNMk8MKEWqNOj2rSuII5zRoqcWSNx/SV29vuoYN32jNAjrQLyxh7h38 oLq3Ypw3jX0UCoZOMaVnvtfFJEZwqjlxfKcPmtZXZAYXfR5qzw+Gq2MvQvYIKWAN w8NAv36JlnPnZQDVvfr1tEUxqPCXSyZgsaNJPjG7Fh9saKySuH3LjDaEhRHNhVID q9yHysCNqCvClrG+g9bxzgYoNwcSaKlSf4Qj+h1Sp9YUGYFn4UYypvENDPE+7QtK F1XlTDSVap35VbZazYx4j92gk6wi8+pk1cqbk2gWvvbI6Zc7JseyNmU2Yr1D/Aah 6+a9mLIr87V7bK9B -----END CERTIFICATE-----Generated at Mon Feb 9 18:21:30 2026 by rpki-client