This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/xb6xFdizKg83UpWTs6O9IzIE0x4.roa File: xb6xFdizKg83UpWTs6O9IzIE0x4.roa (raw, json) Hash identifier: 9WlZEi/4plVHygYQD8tYe4ThNR/Fd3krNDoyWiRXrD4= Subject key identifier: C5:BE:B1:15:D8:B3:2A:0F:37:52:95:93:B3:A3:BD:23:32:04:D3:1E Certificate issuer: /CN=94306f68aea4bae124fac85f2c9aa3f5ae850113 Certificate serial: 019B7DCA95BBBE41171067483A66AF9C0F6D Authority key identifier: 94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/xb6xFdizKg83UpWTs6O9IzIE0x4.roa Signing time: Fri 02 Jan 2026 08:19:47 +0000 ROA not before: Fri 02 Jan 2026 08:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213541 IP address blocks: 194.76.192.0/24 maxlen: 24 194.76.218.0/24 maxlen: 24 194.76.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:95:bb:be:41:17:10:67:48:3a:66:af:9c:0f:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94306f68aea4bae124fac85f2c9aa3f5ae850113 Validity Not Before: Jan 2 08:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5beb115d8b32a0f37529593b3a3bd233204d31e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f3:ab:5c:86:86:ff:db:dc:4d:31:dc:e0:e2: fd:87:cc:c3:d8:5d:ec:c4:85:b4:f4:d0:7f:a8:ac: eb:a3:f5:64:6c:39:48:ec:9d:68:66:38:09:73:0d: 99:8e:ec:1d:d9:1a:97:d5:9f:b3:45:34:58:5f:53: a1:06:b9:0a:ce:b9:62:1e:bc:bb:1d:e2:9e:42:25: 9f:b7:42:4f:23:0a:a9:d5:15:53:67:69:34:f1:78: b1:0c:c3:46:c8:db:46:ac:fe:16:78:43:7d:4f:1c: ef:44:32:74:4f:48:18:1c:1c:91:74:6b:c6:21:04: 6a:d4:79:03:24:a5:57:7f:69:e0:67:ec:1c:e2:0d: d6:aa:09:71:2d:c1:f0:5e:9a:b6:f0:c6:87:fe:fd: b1:e4:da:c2:49:05:09:9c:12:cf:2e:ec:89:ca:4a: a9:7a:44:8c:09:c4:72:11:9d:2b:ef:d9:ca:f8:80: 29:54:f1:0d:e6:34:89:9e:46:f5:17:d1:2a:e4:00: dd:52:9b:66:6b:81:27:14:fd:83:0f:74:33:21:46: 66:ec:dd:ce:fc:ee:c5:20:52:8e:5b:48:00:52:f1: ce:41:f3:ef:7c:47:11:3c:49:83:4d:26:fc:6d:c3: b3:3c:58:eb:61:49:dc:73:6c:10:13:46:60:26:94: 6c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:BE:B1:15:D8:B3:2A:0F:37:52:95:93:B3:A3:BD:23:32:04:D3:1E X509v3 Authority Key Identifier: keyid:94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/xb6xFdizKg83UpWTs6O9IzIE0x4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.76.192.0/24 194.76.218.0/24 194.76.238.0/24 Signature Algorithm: sha256WithRSAEncryption 90:ac:b8:c8:39:4e:12:bb:7f:d3:5f:a1:33:5e:33:7e:95:92: 40:90:95:46:4f:61:3e:4b:a0:ff:ca:e9:51:14:fd:5a:67:5c: 46:dc:38:7d:36:83:84:c8:6a:eb:b5:07:f4:e6:c1:b6:8c:e6: 0c:50:c9:0f:b0:f7:5e:e7:a8:6b:ca:c9:b4:e4:12:7f:3f:47: 14:ff:2b:03:d5:d1:24:4e:5e:c3:88:1b:50:d1:13:c5:83:f6: d3:c8:a2:61:78:94:3c:d2:ac:b6:f8:2d:9b:62:97:fd:eb:b4: e3:e5:9b:38:45:08:b7:2a:18:8b:dc:bb:a8:a5:47:47:06:35: 44:80:f7:1f:5f:34:cf:80:4f:1b:13:29:da:cc:e9:5f:0e:10: 55:e1:95:5f:7f:81:99:72:0f:59:35:57:22:e4:ed:ab:9c:46: 2e:24:31:35:58:9c:4b:06:40:c4:63:6b:35:17:50:dd:7c:40: 10:dd:cf:66:3a:2f:4a:63:cb:a1:1f:9a:c6:f1:ee:7f:0a:51: 4c:e4:66:ef:7f:fa:4d:3f:c4:8b:c8:06:16:9b:07:da:5a:ab: a9:39:fc:69:56:0a:1b:a6:d1:6a:97:42:30:ed:77:1c:f7:79: 86:da:72:13:1e:ea:94:81:5e:e2:a7:9e:79:90:57:9e:4b:8d: a2:37:03:fa -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9ypW7vkEXEGdIOmavnA9tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MzA2ZjY4YWVhNGJhZTEyNGZhYzg1ZjJjOWFhM2Y1YWU4 NTAxMTMwHhcNMjYwMTAyMDgxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNWJlYjExNWQ4YjMyYTBmMzc1Mjk1OTNiM2EzYmQyMzMyMDRkMzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvOrXIaG/9vcTTHc4OL9h8zD2F3s xIW09NB/qKzro/VkbDlI7J1oZjgJcw2Zjuwd2RqX1Z+zRTRYX1OhBrkKzrliHry7 HeKeQiWft0JPIwqp1RVTZ2k08XixDMNGyNtGrP4WeEN9TxzvRDJ0T0gYHByRdGvG IQRq1HkDJKVXf2ngZ+wc4g3WqglxLcHwXpq28MaH/v2x5NrCSQUJnBLPLuyJykqp ekSMCcRyEZ0r79nK+IApVPEN5jSJnkb1F9Eq5ADdUptma4EnFP2DD3QzIUZm7N3O /O7FIFKOW0gAUvHOQfPvfEcRPEmDTSb8bcOzPFjrYUncc2wQE0ZgJpRsNwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMW+sRXYsyoPN1KVk7OjvSMyBNMeMB8GA1UdIwQY MBaAFJQwb2iupLrhJPrIXyyao/WuhQETMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbERCdmFLNmt1dUVrLXNoZkxKcWo5YTZGQVJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC81ZmQ4OGUtZmZiNi00NjUyLWE5OTAt M2Q4YmM4OWI0NDI3LzEveGI2eEZkaXpLZzgzVXBXVHM2TzlJeklFMHg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC81ZmQ4OGUtZmZiNi00NjUyLWE5OTAtM2Q4YmM4OWI0NDI3 LzEvbERCdmFLNmt1dUVrLXNoZkxKcWo5YTZGQVJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwkzAAwQA wkzaAwQAwkzuMA0GCSqGSIb3DQEBCwUAA4IBAQCQrLjIOU4Su3/TX6EzXjN+lZJA kJVGT2E+S6D/yulRFP1aZ1xG3Dh9NoOEyGrrtQf05sG2jOYMUMkPsPde56hrysm0 5BJ/P0cU/ysD1dEkTl7DiBtQ0RPFg/bTyKJheJQ80qy2+C2bYpf967Tj5Zs4RQi3 KhiL3LuopUdHBjVEgPcfXzTPgE8bEynazOlfDhBV4ZVff4GZcg9ZNVci5O2rnEYu JDE1WJxLBkDEY2s1F1DdfEAQ3c9mOi9KY8uhH5rG8e5/ClFM5Gbvf/pNP8SLyAYW mwfaWqupOfxpVgobptFql0Iw7Xcc93mG2nITHuqUgV7ip555kFeeS42iNwP6 -----END CERTIFICATE-----Generated at Sat Jan 10 20:49:47 2026 by rpki-client