This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/xTy14ClaR4Rvu9WN2hIEK42ff6w.roa File: xTy14ClaR4Rvu9WN2hIEK42ff6w.roa (raw, json) Hash identifier: MWs9WTWsQLed5Ou31CqMyRYBYZdgWbH79vbLFld2S5c= Subject key identifier: C5:3C:B5:E0:29:5A:47:84:6F:BB:D5:8D:DA:12:04:2B:8D:9F:7F:AC Certificate issuer: /CN=1aeac0f63257b224ec17106e1bcdefd32c24778b Certificate serial: 019B7F83739307A676FCCEE7521522FD7346 Authority key identifier: 1A:EA:C0:F6:32:57:B2:24:EC:17:10:6E:1B:CD:EF:D3:2C:24:77:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/xTy14ClaR4Rvu9WN2hIEK42ff6w.roa Signing time: Fri 02 Jan 2026 16:21:19 +0000 ROA not before: Fri 02 Jan 2026 16:21:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29037 IP address blocks: 194.126.195.0/24 maxlen: 24 2001:67c:1950::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.crl rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:73:93:07:a6:76:fc:ce:e7:52:15:22:fd:73:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aeac0f63257b224ec17106e1bcdefd32c24778b Validity Not Before: Jan 2 16:21:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c53cb5e0295a47846fbbd58dda12042b8d9f7fac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:27:58:d2:78:ca:a8:bb:e1:94:be:d5:4b:06: e8:1c:6b:eb:75:86:e3:62:6f:47:6d:d4:1a:c6:e1: 0f:6f:69:4e:e1:84:88:27:99:00:84:ea:b9:cd:cb: 3d:ab:a2:f6:e7:9b:be:56:b7:4e:15:5a:3f:cc:25: bf:55:c9:3a:2e:5a:01:5e:45:17:24:c1:75:c9:8e: ea:50:18:83:5c:36:b0:61:48:06:f9:7f:57:1c:fa: 0e:81:4e:60:bd:9e:af:5e:da:92:9f:98:15:0e:5d: 62:dc:d7:28:0c:2a:62:ff:c6:f2:ec:b8:4f:8c:a4: df:8b:e8:a0:be:b9:cf:ff:04:ff:e6:2a:0a:f5:51: 40:92:a4:31:93:99:4f:f7:c0:f4:0b:35:8a:af:57: b3:12:9d:8e:d7:71:e1:0c:83:3f:7d:9f:3d:66:f1: 0c:27:a9:d7:6c:ed:f0:8f:f9:5d:a6:a7:cf:63:34: 5e:df:54:33:ad:69:eb:cd:b4:e2:ac:89:5b:ed:8b: 4b:e3:56:36:84:80:68:78:26:28:06:3f:42:93:53: ce:f8:d4:71:07:b7:d0:fd:b7:98:e6:ad:13:5d:99: f6:cc:b6:e6:6f:ac:7a:58:88:48:d2:23:6a:a7:8b: 2b:d9:32:ff:f8:64:5c:d8:fe:55:d6:10:68:a0:19: 7f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:3C:B5:E0:29:5A:47:84:6F:BB:D5:8D:DA:12:04:2B:8D:9F:7F:AC X509v3 Authority Key Identifier: keyid:1A:EA:C0:F6:32:57:B2:24:EC:17:10:6E:1B:CD:EF:D3:2C:24:77:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/xTy14ClaR4Rvu9WN2hIEK42ff6w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.126.195.0/24 IPv6: 2001:67c:1950::/48 Signature Algorithm: sha256WithRSAEncryption 6d:43:23:80:92:cc:25:8c:71:d8:47:0c:35:39:5d:ec:64:14: 7f:e4:82:3f:0c:38:e0:7e:fc:39:34:33:57:16:d6:bb:ad:72: 28:cb:6c:68:9b:c3:44:6f:32:f2:01:14:0e:cc:ea:12:5a:06: 02:f0:f5:c6:de:02:71:64:1d:fb:4f:4e:5c:f9:6d:da:3b:c7: 75:5b:b9:f1:da:2f:72:9c:5e:4a:51:75:af:a3:04:bd:5b:20: a7:70:5c:39:6a:46:01:b6:12:19:04:41:2c:31:a7:33:cf:45: ad:cf:a5:bb:b6:c4:d6:55:ad:02:37:ec:b8:ef:3b:7e:b4:23: 42:42:74:40:7a:87:be:c2:b0:80:f4:ad:62:30:96:bc:60:b3: 9d:55:af:67:ed:34:c2:7c:a4:63:1f:fe:65:89:95:d9:3f:01: e2:70:c0:86:92:fc:3f:3d:c6:26:93:05:af:f8:d1:8d:cf:f6: 1f:93:90:45:d7:78:3b:e9:35:ec:66:62:47:91:68:2c:db:a4: 19:b4:7e:03:b9:2f:b5:b6:d7:2c:e4:98:3a:bd:52:37:62:07: da:4a:13:ba:7e:17:7a:95:df:b8:11:e8:62:48:02:3d:a6:c6: c3:2c:d6:2a:17:75:b5:95:e1:93:88:07:46:2d:c9:39:6c:d8: 4a:bb:02:fa -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/g3OTB6Z2/M7nUhUi/XNGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhZWFjMGY2MzI1N2IyMjRlYzE3MTA2ZTFiY2RlZmQzMmMy NDc3OGIwHhcNMjYwMTAyMTYyMTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTNjYjVlMDI5NWE0Nzg0NmZiYmQ1OGRkYTEyMDQyYjhkOWY3ZmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSdY0njKqLvhlL7VSwboHGvrdYbj Ym9HbdQaxuEPb2lO4YSIJ5kAhOq5zcs9q6L255u+VrdOFVo/zCW/Vck6LloBXkUX JMF1yY7qUBiDXDawYUgG+X9XHPoOgU5gvZ6vXtqSn5gVDl1i3NcoDCpi/8by7LhP jKTfi+igvrnP/wT/5ioK9VFAkqQxk5lP98D0CzWKr1ezEp2O13HhDIM/fZ89ZvEM J6nXbO3wj/ldpqfPYzRe31QzrWnrzbTirIlb7YtL41Y2hIBoeCYoBj9Ck1PO+NRx B7fQ/beY5q0TXZn2zLbmb6x6WIhI0iNqp4sr2TL/+GRc2P5V1hBooBl/PQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFMU8teApWkeEb7vVjdoSBCuNn3+sMB8GA1UdIwQY MBaAFBrqwPYyV7Ik7BcQbhvN79MsJHeLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3VyQTlqSlhzaVRzRnhCdUc4M3YweXdrZDRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni82YzA2ODAtN2M4ZC00ZGVjLWIyYTgt Mjk4YjU1OTY5NzZhLzEveFR5MTRDbGFSNFJ2dTlXTjJoSUVLNDJmZjZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni82YzA2ODAtN2M4ZC00ZGVjLWIyYTgtMjk4YjU1OTY5NzZh LzEvR3VyQTlqSlhzaVRzRnhCdUc4M3YweXdrZDRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwn7DMA8E AgACMAkDBwAgAQZ8GVAwDQYJKoZIhvcNAQELBQADggEBAG1DI4CSzCWMcdhHDDU5 XexkFH/kgj8MOOB+/Dk0M1cW1rutcijLbGibw0RvMvIBFA7M6hJaBgLw9cbeAnFk HftPTlz5bdo7x3VbufHaL3KcXkpRda+jBL1bIKdwXDlqRgG2EhkEQSwxpzPPRa3P pbu2xNZVrQI37LjvO360I0JCdEB6h77CsID0rWIwlrxgs51Vr2ftNMJ8pGMf/mWJ ldk/AeJwwIaS/D89xiaTBa/40Y3P9h+TkEXXeDvpNexmYkeRaCzbpBm0fgO5L7W2 1yzkmDq9UjdiB9pKE7p+F3qV37gR6GJIAj2mxsMs1ioXdbWV4ZOIB0YtyTls2Eq7 Avo= -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:25 2026 by rpki-client