This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/xks2n5Kx6d8ZaVpYHBQ2NPGXK3k.roa File: xks2n5Kx6d8ZaVpYHBQ2NPGXK3k.roa (raw, json) Hash identifier: rww+81/SW0ndwpHTHVsuT/JrOFux1abaoYGEanDzrqY= Subject key identifier: C6:4B:36:9F:92:B1:E9:DF:19:69:5A:58:1C:14:36:34:F1:97:2B:79 Certificate issuer: /CN=a0937525577cb2af1b285c96431dbd600f57cbe8 Certificate serial: 019B7EA74BDCD25348ADC97D204117E1C2B5 Authority key identifier: A0:93:75:25:57:7C:B2:AF:1B:28:5C:96:43:1D:BD:60:0F:57:CB:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJN1JVd8sq8bKFyWQx29YA9Xy-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/xks2n5Kx6d8ZaVpYHBQ2NPGXK3k.roa Signing time: Fri 02 Jan 2026 12:20:51 +0000 ROA not before: Fri 02 Jan 2026 12:20:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24944 IP address blocks: 194.50.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.mft rsync://rpki.ripe.net/repository/DEFAULT/oJN1JVd8sq8bKFyWQx29YA9Xy-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:4b:dc:d2:53:48:ad:c9:7d:20:41:17:e1:c2:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0937525577cb2af1b285c96431dbd600f57cbe8 Validity Not Before: Jan 2 12:20:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c64b369f92b1e9df19695a581c143634f1972b79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a0:9b:0c:c8:42:d7:8f:ba:d5:91:8d:e7:47: d3:4f:ef:03:f0:b8:fd:49:56:87:54:43:92:e1:30: f3:62:20:d1:6a:a3:bc:df:cc:1f:7b:e9:b9:77:06: 47:a3:84:32:d2:2b:b9:70:97:c3:95:ab:cd:33:a3: 6d:ce:68:a0:d9:53:c3:95:15:27:b0:88:11:91:10: 31:1a:ec:91:53:cb:36:c1:dc:8c:95:b7:a2:0c:5f: 6a:c5:7f:19:8e:3f:eb:28:21:d9:e8:a5:b2:e7:79: ad:6a:f2:67:9b:f8:12:2f:fc:f4:cf:ae:50:d5:26: da:c9:5d:51:2f:b3:5c:95:23:6d:b9:a7:26:3f:11: 7a:d6:c3:37:a7:44:96:db:90:cc:37:df:50:a0:85: 95:d6:47:3f:30:76:82:e5:6b:be:c6:a1:6f:a6:16: 61:11:20:72:2b:5d:82:0d:cf:89:81:af:61:48:a5: 91:89:db:0b:8b:53:3e:6e:38:5d:ab:f8:c7:67:ef: 48:6a:00:65:12:70:1f:06:0a:9c:cf:c1:4a:dc:a1: 2a:0b:d5:63:90:d9:e2:ed:70:1e:dd:39:d8:e7:e0: 1e:a8:b7:79:5c:7a:5a:3e:50:8a:90:2c:c6:81:f6: 76:bb:f1:49:ce:db:5a:5c:89:08:b3:d6:0d:e5:2d: 83:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:4B:36:9F:92:B1:E9:DF:19:69:5A:58:1C:14:36:34:F1:97:2B:79 X509v3 Authority Key Identifier: keyid:A0:93:75:25:57:7C:B2:AF:1B:28:5C:96:43:1D:BD:60:0F:57:CB:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJN1JVd8sq8bKFyWQx29YA9Xy-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/xks2n5Kx6d8ZaVpYHBQ2NPGXK3k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.50.84.0/24 Signature Algorithm: sha256WithRSAEncryption 53:fa:cd:da:2d:71:52:0a:3d:f1:18:c9:53:64:3a:4c:97:a1: 8c:b6:e3:75:89:41:3c:85:8a:5f:dc:9e:9c:d2:a3:ce:02:7b: d4:a1:4a:2e:db:65:97:90:5a:41:42:ec:74:44:23:6c:f7:e1: 40:a9:c4:92:77:00:69:44:b1:82:de:85:cd:36:77:26:26:3c: 0c:13:60:3f:67:ec:84:44:bf:29:a7:1c:d2:f0:fb:4e:36:af: ed:06:fd:ca:cb:c0:b2:84:49:57:a1:9b:b8:e5:1b:70:05:66: 30:9e:ea:f7:cb:a6:7c:17:e4:8e:23:13:04:39:83:2d:f1:95: ad:5f:15:82:35:00:dd:c7:f7:9a:da:df:4d:af:ad:11:94:27: 25:1f:31:2a:06:ea:5d:16:58:57:78:87:d1:65:3b:1a:cf:f4: f8:b3:ad:c1:31:9a:2e:59:53:ca:01:a2:0c:2d:0f:d9:d6:a7: 46:f9:a6:59:aa:b3:cc:1a:8c:c6:db:33:5c:3d:37:da:63:57: 2d:5d:d3:6c:d8:98:47:49:ac:da:c0:d9:53:0b:5f:f0:6d:4b: e0:43:82:c9:1f:36:76:80:c0:6d:87:5c:37:b2:3c:0c:71:a5: 24:82:4e:9d:62:92:fd:f6:38:38:55:aa:ba:02:06:cb:e0:96: 9b:32:dd:ae -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p0vc0lNIrcl9IEEX4cK1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwOTM3NTI1NTc3Y2IyYWYxYjI4NWM5NjQzMWRiZDYwMGY1 N2NiZTgwHhcNMjYwMTAyMTIyMDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjRiMzY5ZjkyYjFlOWRmMTk2OTVhNTgxYzE0MzYzNGYxOTcyYjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26CbDMhC14+61ZGN50fTT+8D8Lj9 SVaHVEOS4TDzYiDRaqO838wfe+m5dwZHo4Qy0iu5cJfDlavNM6Ntzmig2VPDlRUn sIgRkRAxGuyRU8s2wdyMlbeiDF9qxX8Zjj/rKCHZ6KWy53mtavJnm/gSL/z0z65Q 1SbayV1RL7NclSNtuacmPxF61sM3p0SW25DMN99QoIWV1kc/MHaC5Wu+xqFvphZh ESByK12CDc+Jga9hSKWRidsLi1M+bjhdq/jHZ+9IagBlEnAfBgqcz8FK3KEqC9Vj kNni7XAe3TnY5+AeqLd5XHpaPlCKkCzGgfZ2u/FJzttaXIkIs9YN5S2DNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMZLNp+SsenfGWlaWBwUNjTxlyt5MB8GA1UdIwQY MBaAFKCTdSVXfLKvGyhclkMdvWAPV8voMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0pOMUpWZDhzcThiS0Z5V1F4MjlZQTlYeS1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9kMjdkYTItMjc1NC00ZDdiLWFmOTAt NmUwMmFmMGE0OTk0LzEveGtzMm41S3g2ZDhaYVZwWUhCUTJOUEdYSzNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9kMjdkYTItMjc1NC00ZDdiLWFmOTAtNmUwMmFmMGE0OTk0 LzEvb0pOMUpWZDhzcThiS0Z5V1F4MjlZQTlYeS1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjJUMA0G CSqGSIb3DQEBCwUAA4IBAQBT+s3aLXFSCj3xGMlTZDpMl6GMtuN1iUE8hYpf3J6c 0qPOAnvUoUou22WXkFpBQux0RCNs9+FAqcSSdwBpRLGC3oXNNncmJjwME2A/Z+yE RL8ppxzS8PtONq/tBv3Ky8CyhElXoZu45RtwBWYwnur3y6Z8F+SOIxMEOYMt8ZWt XxWCNQDdx/ea2t9Nr60RlCclHzEqBupdFlhXeIfRZTsaz/T4s63BMZouWVPKAaIM LQ/Z1qdG+aZZqrPMGozG2zNcPTfaY1ctXdNs2JhHSazawNlTC1/wbUvgQ4LJHzZ2 gMBth1w3sjwMcaUkgk6dYpL99jg4Vaq6AgbL4JabMt2u -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:38 2026 by rpki-client