This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/XZ_A9oOFh615-GWf-jG9mLRl_BA.roa File: XZ_A9oOFh615-GWf-jG9mLRl_BA.roa (raw, json) Hash identifier: IjFd4KfJkkTKhVMOqjReLPHCLFxiAiN7OyTxurp0L6k= Subject key identifier: 5D:9F:C0:F6:83:85:87:AD:79:F8:65:9F:FA:31:BD:98:B4:65:FC:10 Certificate issuer: /CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731 Certificate serial: 019B7D5D180B4B4854AD93E497E7D30D1FB9 Authority key identifier: 9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/XZ_A9oOFh615-GWf-jG9mLRl_BA.roa Signing time: Fri 02 Jan 2026 06:20:11 +0000 ROA not before: Fri 02 Jan 2026 06:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3320 IP address blocks: 193.103.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 03:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:18:0b:4b:48:54:ad:93:e4:97:e7:d3:0d:1f:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731 Validity Not Before: Jan 2 06:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d9fc0f6838587ad79f8659ffa31bd98b465fc10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ef:a1:ab:b7:4c:db:1b:19:39:d0:0f:a1:fd: 3b:de:de:2e:5b:e2:69:a6:b4:80:c0:9b:39:9e:1b: a7:99:ea:f6:93:2b:43:fc:6d:58:54:23:03:46:76: 22:b0:aa:5b:32:bf:b7:db:09:65:4d:3b:34:36:4b: 26:7c:ef:0d:6e:c9:84:44:02:45:c0:64:5d:7d:2d: 41:04:c9:03:69:12:2c:c7:2d:5b:21:11:59:11:bb: 33:a9:fa:03:8f:e5:52:31:78:aa:94:83:2f:cc:e1: c0:5c:04:86:21:75:03:b7:37:7b:85:eb:ec:65:0b: 01:ce:f0:25:26:17:d1:7c:5a:a0:69:47:ba:fb:a4: e9:d3:ab:47:94:1a:bd:1a:a3:58:71:07:c8:9b:2e: 26:75:2c:28:ec:ba:58:8e:49:af:f9:4e:b9:e0:ab: b5:7b:53:0d:6b:f7:21:46:6b:0d:d4:39:92:dd:e7: 91:e4:01:2b:3f:c8:00:11:44:5b:7a:7b:23:35:46: 9e:b0:a8:87:8c:69:b1:35:4a:14:73:4a:d1:7c:bb: 5e:25:95:d7:59:e5:59:85:1e:33:e0:1a:1a:a7:de: 4b:28:9d:3a:50:89:15:27:9a:84:b8:33:ef:84:4a: bf:85:55:3a:79:54:3a:1b:71:fd:ff:fc:8c:41:50: c4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:9F:C0:F6:83:85:87:AD:79:F8:65:9F:FA:31:BD:98:B4:65:FC:10 X509v3 Authority Key Identifier: keyid:9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/XZ_A9oOFh615-GWf-jG9mLRl_BA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.103.165.0/24 Signature Algorithm: sha256WithRSAEncryption 25:5d:5d:94:40:8b:6f:ea:59:45:1a:9f:0d:77:09:c3:b9:87: c4:e4:1c:85:22:74:6b:c1:91:f5:d9:5c:09:c3:af:ac:9a:ff: fb:6e:0d:38:9e:9d:ad:78:04:91:28:7a:87:37:e5:a7:d1:d5: 7f:5e:80:ee:a7:8e:15:64:4c:38:5e:07:62:97:90:c7:45:d6: 6e:75:97:e4:d7:1b:32:9e:0b:db:4e:33:80:98:6a:0c:7e:02: dd:73:d7:79:61:b7:a4:c8:69:a7:70:e2:1b:1b:38:90:35:9d: 83:be:70:23:c4:2d:a6:ca:47:3d:a6:c1:b7:d9:e1:e7:00:ce: 6e:c4:d9:93:ec:0d:c5:e5:57:3c:5e:a8:da:b6:a9:cf:05:0e: de:4a:e5:3e:4d:c3:84:e9:fe:c7:e2:ba:a0:43:63:ef:79:a7: d2:dd:0c:db:7b:6b:9d:5a:ce:7c:ea:19:6a:86:54:21:1f:e1: b8:42:2f:73:d2:6b:0b:44:ef:e3:b8:44:43:27:03:c0:35:3c: d5:47:f8:80:29:1b:7f:fb:51:f4:b8:8e:77:5a:20:a1:6b:b7: 5e:d4:f9:e4:0b:92:f8:12:27:49:61:b4:01:b4:a3:d8:e7:2f: 50:62:4c:e2:34:f0:35:61:e3:88:0a:34:58:ad:41:05:4d:b8: 74:06:24:72 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XRgLS0hUrZPkl+fTDR+5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNWRlNDkwZmY4NzRlOTY4OWNlY2Y3MjZjYmI0ZTJmNTFm NmM3MzEwHhcNMjYwMTAyMDYyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDlmYzBmNjgzODU4N2FkNzlmODY1OWZmYTMxYmQ5OGI0NjVmYzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAre+hq7dM2xsZOdAPof073t4uW+Jp prSAwJs5nhunmer2kytD/G1YVCMDRnYisKpbMr+32wllTTs0NksmfO8NbsmERAJF wGRdfS1BBMkDaRIsxy1bIRFZEbszqfoDj+VSMXiqlIMvzOHAXASGIXUDtzd7hevs ZQsBzvAlJhfRfFqgaUe6+6Tp06tHlBq9GqNYcQfImy4mdSwo7LpYjkmv+U654Ku1 e1MNa/chRmsN1DmS3eeR5AErP8gAEURbensjNUaesKiHjGmxNUoUc0rRfLteJZXX WeVZhR4z4Boap95LKJ06UIkVJ5qEuDPvhEq/hVU6eVQ6G3H9//yMQVDEtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF2fwPaDhYetefhln/oxvZi0ZfwQMB8GA1UdIwQY MBaAFJ1d5JD/h06Wic7Pcmy7Ti9R9scxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUt Y2VjMzNiYTFiZGY1LzEvWFpfQTlvT0ZoNjE1LUdXZi1qRzltTFJsX0JBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUtY2VjMzNiYTFiZGY1 LzEvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWelMA0G CSqGSIb3DQEBCwUAA4IBAQAlXV2UQItv6llFGp8NdwnDuYfE5ByFInRrwZH12VwJ w6+smv/7bg04np2teASRKHqHN+Wn0dV/XoDup44VZEw4Xgdil5DHRdZudZfk1xsy ngvbTjOAmGoMfgLdc9d5YbekyGmncOIbGziQNZ2DvnAjxC2mykc9psG32eHnAM5u xNmT7A3F5Vc8XqjatqnPBQ7eSuU+TcOE6f7H4rqgQ2PveafS3Qzbe2udWs586hlq hlQhH+G4Qi9z0msLRO/juERDJwPANTzVR/iAKRt/+1H0uI53WiCha7de1PnkC5L4 EidJYbQBtKPY5y9QYkziNPA1YeOICjRYrUEFTbh0BiRy -----END CERTIFICATE-----Generated at Mon Jan 19 11:47:27 2026 by rpki-client