This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/XZtXXBflmY3np62tX4_yWpDop2Y.roa File: XZtXXBflmY3np62tX4_yWpDop2Y.roa (raw, json) Hash identifier: thfxFFslD8MwVS58mjvBbbGagIhFVXywfILuPq1lA5M= Subject key identifier: 5D:9B:57:5C:17:E5:99:8D:E7:A7:AD:AD:5F:8F:F2:5A:90:E8:A7:66 Certificate issuer: /CN=9aac0da35100668060d30f173d6102e182d1b9ea Certificate serial: 019B7F82F0D7D740D3A672EB6DC28A64DAEA Authority key identifier: 9A:AC:0D:A3:51:00:66:80:60:D3:0F:17:3D:61:02:E1:82:D1:B9:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mqwNo1EAZoBg0w8XPWEC4YLRueo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/XZtXXBflmY3np62tX4_yWpDop2Y.roa Signing time: Fri 02 Jan 2026 16:20:46 +0000 ROA not before: Fri 02 Jan 2026 16:20:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43430 IP address blocks: 193.46.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft rsync://rpki.ripe.net/repository/DEFAULT/mqwNo1EAZoBg0w8XPWEC4YLRueo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:f0:d7:d7:40:d3:a6:72:eb:6d:c2:8a:64:da:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9aac0da35100668060d30f173d6102e182d1b9ea Validity Not Before: Jan 2 16:20:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d9b575c17e5998de7a7adad5f8ff25a90e8a766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6e:a4:c8:7d:b9:3f:f5:ee:ab:bc:a3:d4:db: 9e:70:e9:e3:dc:8d:20:c9:d8:74:e3:9f:38:c7:98: 34:a9:46:92:82:bb:13:8f:4a:01:a2:c5:14:c7:48: 83:d5:4c:ab:c5:0d:e7:cd:5c:dd:37:2c:7f:e7:a5: bb:58:e9:84:d0:e5:72:0a:0e:01:ab:27:d9:97:f1: e0:91:89:36:ef:09:39:ab:3e:56:f5:e5:ed:11:f7: 44:c8:46:64:c6:0c:26:fc:0a:8d:de:5f:41:6c:c1: dc:cd:6e:77:6e:1d:30:a9:9a:5d:9d:21:63:09:19: 94:ad:10:6b:13:da:98:a9:61:42:7d:6d:5f:8e:a2: c4:50:8e:76:a1:22:89:ae:e7:68:f2:56:0a:a5:43: ec:bf:a6:3c:42:02:08:c0:6e:e3:1e:bc:73:75:cf: 81:3c:19:aa:17:f0:66:f3:32:1a:76:33:69:50:2a: 18:51:04:c4:d5:29:1d:0c:ba:51:60:f9:1f:bd:ac: 06:b7:87:95:9b:38:84:41:c3:46:b6:11:ed:a2:d3: b1:2d:19:5c:7a:67:5a:68:70:9f:cf:f8:67:83:3b: c2:a7:2b:ca:76:a2:55:bd:3b:1c:33:07:0b:87:cf: 09:24:f9:53:e4:16:fc:e5:6b:ab:34:4b:f3:bb:23: 73:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:9B:57:5C:17:E5:99:8D:E7:A7:AD:AD:5F:8F:F2:5A:90:E8:A7:66 X509v3 Authority Key Identifier: keyid:9A:AC:0D:A3:51:00:66:80:60:D3:0F:17:3D:61:02:E1:82:D1:B9:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mqwNo1EAZoBg0w8XPWEC4YLRueo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/XZtXXBflmY3np62tX4_yWpDop2Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.46.71.0/24 Signature Algorithm: sha256WithRSAEncryption 41:29:4b:bb:59:e5:57:55:56:37:2d:3d:d0:6f:7e:d8:6d:a0: ce:c2:c6:60:46:74:a8:9e:8a:30:f6:20:cb:40:20:9b:e4:c4: a8:76:f0:4c:d4:61:04:ba:4b:11:bf:a6:38:8d:38:c0:82:a7: 74:30:77:22:5c:d0:60:b1:3a:c2:ef:e4:5c:d8:3d:df:18:37: d8:78:73:53:9e:c1:72:c5:b1:d5:3b:3f:b2:ce:2f:c8:9e:31: 3c:24:85:56:fa:ea:c4:a4:f3:a5:0c:26:b1:9e:94:6e:d9:f0: 8d:b3:da:48:25:f7:42:e1:d4:a2:b5:0f:6d:f7:6e:d2:40:fd: 1a:4e:b1:c9:14:4e:e2:a1:38:ce:02:da:3b:0e:bc:e0:99:5a: c0:55:0d:b2:60:b7:4d:8e:28:27:68:53:be:10:cb:14:a9:a7: 7f:1d:2b:73:e8:7b:75:62:79:35:b1:f3:fa:54:0a:71:6c:3d: 13:60:9f:eb:ed:12:44:26:6a:2c:32:89:a9:17:6b:c1:98:2a: 1c:27:a8:63:c4:8c:96:6f:4e:f4:46:50:9f:d5:e5:01:83:35: 3e:a9:74:9e:c3:73:b2:4c:19:8a:c9:e9:73:6b:64:be:93:93: 98:de:d7:40:0e:35:8e:6e:8c:a1:4a:a4:4e:02:97:6d:23:94: 0e:5e:0a:14 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gvDX10DTpnLrbcKKZNrqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhYWMwZGEzNTEwMDY2ODA2MGQzMGYxNzNkNjEwMmUxODJk MWI5ZWEwHhcNMjYwMTAyMTYyMDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDliNTc1YzE3ZTU5OThkZTdhN2FkYWQ1ZjhmZjI1YTkwZThhNzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt26kyH25P/Xuq7yj1NuecOnj3I0g ydh04584x5g0qUaSgrsTj0oBosUUx0iD1UyrxQ3nzVzdNyx/56W7WOmE0OVyCg4B qyfZl/HgkYk27wk5qz5W9eXtEfdEyEZkxgwm/AqN3l9BbMHczW53bh0wqZpdnSFj CRmUrRBrE9qYqWFCfW1fjqLEUI52oSKJrudo8lYKpUPsv6Y8QgIIwG7jHrxzdc+B PBmqF/Bm8zIadjNpUCoYUQTE1SkdDLpRYPkfvawGt4eVmziEQcNGthHtotOxLRlc emdaaHCfz/hngzvCpyvKdqJVvTscMwcLh88JJPlT5Bb85WurNEvzuyNz8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF2bV1wX5ZmN56etrV+P8lqQ6KdmMB8GA1UdIwQY MBaAFJqsDaNRAGaAYNMPFz1hAuGC0bnqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXF3Tm8xRUFab0JnMHc4WFBXRUM0WUxSdWVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8zMjgyOGItMDI3MS00NjJjLWE3YWUt NTFiMTA3ZGM5ZjM5LzEvWFp0WFhCZmxtWTNucDYydFg0X3lXcERvcDJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS8zMjgyOGItMDI3MS00NjJjLWE3YWUtNTFiMTA3ZGM5ZjM5 LzEvbXF3Tm8xRUFab0JnMHc4WFBXRUM0WUxSdWVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwS5HMA0G CSqGSIb3DQEBCwUAA4IBAQBBKUu7WeVXVVY3LT3Qb37YbaDOwsZgRnSonoow9iDL QCCb5MSodvBM1GEEuksRv6Y4jTjAgqd0MHciXNBgsTrC7+Rc2D3fGDfYeHNTnsFy xbHVOz+yzi/InjE8JIVW+urEpPOlDCaxnpRu2fCNs9pIJfdC4dSitQ9t927SQP0a TrHJFE7ioTjOAto7DrzgmVrAVQ2yYLdNjignaFO+EMsUqad/HStz6Ht1Ynk1sfP6 VApxbD0TYJ/r7RJEJmosMompF2vBmCocJ6hjxIyWb070RlCf1eUBgzU+qXSew3Oy TBmKyelza2S+k5OY3tdADjWOboyhSqROApdtI5QOXgoU -----END CERTIFICATE-----Generated at Mon Feb 9 21:26:13 2026 by rpki-client