This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/xOS746W5Gd1kAC2eYcLX3bKzXyc.roa File: xOS746W5Gd1kAC2eYcLX3bKzXyc.roa (raw, json) Hash identifier: wkc+zSgTtLMBNfp5Oo+8XY68pNCKHaGKsf53/5XAGSw= Subject key identifier: C4:E4:BB:E3:A5:B9:19:DD:64:00:2D:9E:61:C2:D7:DD:B2:B3:5F:27 Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40 Certificate serial: 019B7DC8AB2313978C7A38ADDCAF2951CADD Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/xOS746W5Gd1kAC2eYcLX3bKzXyc.roa Signing time: Fri 02 Jan 2026 08:17:41 +0000 ROA not before: Fri 02 Jan 2026 08:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203859 IP address blocks: 213.137.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:ab:23:13:97:8c:7a:38:ad:dc:af:29:51:ca:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40 Validity Not Before: Jan 2 08:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4e4bbe3a5b919dd64002d9e61c2d7ddb2b35f27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f1:e1:4d:15:cc:23:ce:de:6a:0c:f7:e6:9a: a8:1d:aa:71:37:d7:8b:d4:da:2b:1b:0c:55:80:bf: ac:ac:39:4c:f9:22:cc:06:22:c2:0e:1d:fa:bb:89: 11:67:ba:e5:fa:93:61:64:28:e1:f1:df:e2:84:75: d6:93:70:56:dd:c4:01:65:7f:57:7e:78:26:b8:1b: 5c:1d:69:85:0d:fe:87:5c:db:1a:eb:a1:05:01:3c: cf:f2:2d:4c:5a:59:33:34:18:9b:d2:80:d7:c3:36: 10:bb:d2:99:21:6e:49:26:e4:7a:0d:04:3c:66:26: a8:3b:d2:22:75:5c:9f:08:7a:b9:b8:f2:de:71:cf: a3:5a:07:46:d8:5b:6f:ca:90:3b:a3:c3:68:97:a4: 8b:82:7f:b4:47:76:b3:17:21:e1:d3:89:53:6b:83: ba:39:b8:44:38:0b:8c:9d:23:6a:d6:c3:25:31:c6: d4:24:18:47:5d:52:15:1f:43:7d:c7:0a:24:05:70: ca:ef:e7:dc:93:09:3e:a3:02:3e:dd:be:86:5f:bc: 6c:70:52:85:ce:f2:3e:bb:0a:f1:75:49:2b:53:65: 29:f2:c3:0b:11:b8:13:87:7c:3a:82:46:26:0a:c2: ce:5d:a0:20:ac:45:58:64:be:b3:98:27:68:7c:9b: a7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E4:BB:E3:A5:B9:19:DD:64:00:2D:9E:61:C2:D7:DD:B2:B3:5F:27 X509v3 Authority Key Identifier: keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/xOS746W5Gd1kAC2eYcLX3bKzXyc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.137.93.0/24 Signature Algorithm: sha256WithRSAEncryption 06:c1:a6:09:e4:d7:30:14:0f:f9:17:40:32:db:ca:e4:4b:96: 73:69:3e:e2:50:fe:e8:ec:34:ef:11:ba:b0:cf:97:76:19:a2: 21:e3:5e:76:9e:c2:b0:a6:63:ee:d2:8c:a7:d6:f3:38:f3:93: d9:52:73:81:05:37:24:c2:82:07:c5:1b:bb:37:bc:0d:54:9d: 6d:0e:3c:03:40:8f:0c:12:f6:b5:10:ae:7f:3e:c8:c2:3e:e4: bd:c5:a0:e7:d4:48:bf:42:7b:6d:95:36:2d:14:0d:1e:a2:04: a3:73:6d:8f:c8:c5:2c:cb:52:d8:1b:17:c2:7d:7e:e0:9b:2a: e6:13:6f:f6:4c:76:9e:d2:47:e6:6c:53:61:ad:10:8d:48:e0: 0b:f5:cd:30:99:bc:97:eb:f5:4c:25:e2:eb:33:84:3c:64:02: 9e:bf:e7:2a:13:86:88:12:35:59:83:d9:ab:61:50:f9:59:8c: 49:b8:33:e9:a4:e4:e6:34:d5:1a:bc:64:0a:9e:9b:99:3d:6c: be:fa:24:a3:14:8e:01:a7:d5:28:d4:ad:f5:44:79:94:21:b1: 8c:64:e6:26:54:30:a9:6d:f5:67:7a:d8:b0:9e:99:8f:6a:a5: 2c:4d:c9:46:bd:bf:2d:12:26:e8:25:66:12:98:2e:d7:7c:cf: 9a:5e:4c:bd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yKsjE5eMejit3K8pUcrdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3 ZWVmNDAwHhcNMjYwMTAyMDgxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNGU0YmJlM2E1YjkxOWRkNjQwMDJkOWU2MWMyZDdkZGIyYjM1ZjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPHhTRXMI87eagz35pqoHapxN9eL 1NorGwxVgL+srDlM+SLMBiLCDh36u4kRZ7rl+pNhZCjh8d/ihHXWk3BW3cQBZX9X fngmuBtcHWmFDf6HXNsa66EFATzP8i1MWlkzNBib0oDXwzYQu9KZIW5JJuR6DQQ8 ZiaoO9IidVyfCHq5uPLecc+jWgdG2FtvypA7o8Nol6SLgn+0R3azFyHh04lTa4O6 ObhEOAuMnSNq1sMlMcbUJBhHXVIVH0N9xwokBXDK7+fckwk+owI+3b6GX7xscFKF zvI+uwrxdUkrU2Up8sMLEbgTh3w6gkYmCsLOXaAgrEVYZL6zmCdofJunTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMTku+OluRndZAAtnmHC192ys18nMB8GA1UdIwQY MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt YmM2ZGI3MjQ4YWRkLzEveE9TNzQ2VzVHZDFrQUMyZVljTFgzYkt6WHljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1YldMA0G CSqGSIb3DQEBCwUAA4IBAQAGwaYJ5NcwFA/5F0Ay28rkS5ZzaT7iUP7o7DTvEbqw z5d2GaIh4152nsKwpmPu0oyn1vM485PZUnOBBTckwoIHxRu7N7wNVJ1tDjwDQI8M Eva1EK5/PsjCPuS9xaDn1Ei/QnttlTYtFA0eogSjc22PyMUsy1LYGxfCfX7gmyrm E2/2THae0kfmbFNhrRCNSOAL9c0wmbyX6/VMJeLrM4Q8ZAKev+cqE4aIEjVZg9mr YVD5WYxJuDPppOTmNNUavGQKnpuZPWy++iSjFI4Bp9Uo1K31RHmUIbGMZOYmVDCp bfVnetiwnpmPaqUsTclGvb8tEiboJWYSmC7XfM+aXky9 -----END CERTIFICATE-----Generated at Tue Jan 20 04:28:21 2026 by rpki-client