This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/xSDhChXyrgpPczPrq9N_lmr5FEw.roa File: xSDhChXyrgpPczPrq9N_lmr5FEw.roa (raw, json) Hash identifier: f8x2Ffld+Joqpjyz5VMQ9d3wfsE4pU4+FNaMK65q5CE= Subject key identifier: C5:20:E1:0A:15:F2:AE:0A:4F:73:33:EB:AB:D3:7F:96:6A:F9:14:4C Certificate issuer: /CN=dca2f30e4e69692b1b4fecebae91fd5604bdec93 Certificate serial: 019B7DCAA5DAFBB0FEE6EA089E0935F981BC Authority key identifier: DC:A2:F3:0E:4E:69:69:2B:1B:4F:EC:EB:AE:91:FD:56:04:BD:EC:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KLzDk5paSsbT-zrrpH9VgS97JM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/xSDhChXyrgpPczPrq9N_lmr5FEw.roa Signing time: Fri 02 Jan 2026 08:19:51 +0000 ROA not before: Fri 02 Jan 2026 08:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42156 IP address blocks: 193.107.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.crl rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.mft rsync://rpki.ripe.net/repository/DEFAULT/3KLzDk5paSsbT-zrrpH9VgS97JM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:a5:da:fb:b0:fe:e6:ea:08:9e:09:35:f9:81:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dca2f30e4e69692b1b4fecebae91fd5604bdec93 Validity Not Before: Jan 2 08:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c520e10a15f2ae0a4f7333ebabd37f966af9144c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:92:a6:e7:f2:3a:46:84:1d:00:ee:8c:4c:99: 84:23:00:9a:ae:9d:94:76:b8:03:4f:31:b2:cc:45: eb:b5:91:65:d2:75:07:5e:ff:25:12:14:72:45:4f: 4e:42:a2:2d:0d:47:73:e2:88:d1:78:85:35:13:98: 69:02:84:f3:2e:a0:64:54:bb:68:01:07:c4:be:84: 14:83:cd:d8:9d:be:35:6e:39:7d:db:47:20:1a:49: 08:c9:8a:1c:71:2e:7c:28:f2:f8:96:b3:dd:b9:26: 6a:a6:19:f5:13:13:51:08:a9:4b:1d:7d:a0:21:86: e8:13:91:3a:b6:4c:0f:ca:93:75:01:69:36:f0:fb: 12:1e:17:ed:16:a6:b8:23:f5:db:86:ba:c4:1a:30: cc:95:2f:83:26:a0:7f:87:2c:5d:b0:be:b0:b6:ff: 25:37:84:3a:f3:70:df:95:cd:37:62:0a:c0:20:48: 97:a3:a0:14:cf:84:51:63:b5:07:7f:4e:45:80:6a: 22:29:14:4d:fc:f8:79:16:c7:be:5c:7d:06:af:66: cf:fe:b6:57:24:c9:79:e8:24:f8:a2:d0:96:48:0a: 8d:8f:f7:d3:70:f5:dd:2c:3a:a7:62:45:6b:f6:1b: 26:30:6a:06:94:fe:59:55:85:61:ec:83:d1:a7:a9: 37:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:20:E1:0A:15:F2:AE:0A:4F:73:33:EB:AB:D3:7F:96:6A:F9:14:4C X509v3 Authority Key Identifier: keyid:DC:A2:F3:0E:4E:69:69:2B:1B:4F:EC:EB:AE:91:FD:56:04:BD:EC:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KLzDk5paSsbT-zrrpH9VgS97JM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/xSDhChXyrgpPczPrq9N_lmr5FEw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.107.247.0/24 Signature Algorithm: sha256WithRSAEncryption 41:55:0c:46:4b:90:7b:9f:4f:da:48:d0:89:57:de:3d:60:04: d6:e2:55:ee:0e:6f:52:af:60:8e:a9:41:64:d8:8d:39:ab:d2: 5e:21:31:de:25:34:c4:0b:b8:a3:1d:47:4e:b8:fa:60:f9:5a: 8b:8f:e9:2b:34:75:90:f8:b5:d8:65:44:97:1e:e7:29:80:a2: 8e:db:94:06:e9:c6:1a:c4:68:7c:74:3f:9b:57:bb:8b:e1:13: b3:af:b7:86:00:5a:a8:20:56:89:a8:26:15:5b:d8:3b:02:31: b0:c8:33:a5:b2:0e:d5:35:05:84:4b:93:d6:1a:18:e3:fc:ad: 38:cd:e2:ae:6d:5f:c1:b3:bc:dd:76:30:b0:fd:9e:5a:a0:46: fd:d7:ba:82:12:dc:05:9e:30:3f:0e:29:ed:a3:cb:9b:15:e4: e4:d1:98:4f:3d:60:97:b0:00:2a:f5:d5:5f:dd:73:72:31:46: a0:f6:6a:a9:ab:ec:dc:df:a8:ff:57:4c:55:e0:18:ad:40:0d: 65:21:66:c6:77:23:13:1c:42:15:f3:3e:aa:e2:9b:2a:bd:0c: 73:1b:c2:bd:29:b0:ce:5b:65:e6:19:7f:51:f8:95:86:85:37: 83:4b:59:ed:b6:a6:17:8d:62:07:c3:a8:9c:4f:91:a2:d5:f3: c5:cf:25:4c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yqXa+7D+5uoIngk1+YG8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjYTJmMzBlNGU2OTY5MmIxYjRmZWNlYmFlOTFmZDU2MDRi ZGVjOTMwHhcNMjYwMTAyMDgxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTIwZTEwYTE1ZjJhZTBhNGY3MzMzZWJhYmQzN2Y5NjZhZjkxNDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJKm5/I6RoQdAO6MTJmEIwCarp2U drgDTzGyzEXrtZFl0nUHXv8lEhRyRU9OQqItDUdz4ojReIU1E5hpAoTzLqBkVLto AQfEvoQUg83Ynb41bjl920cgGkkIyYoccS58KPL4lrPduSZqphn1ExNRCKlLHX2g IYboE5E6tkwPypN1AWk28PsSHhftFqa4I/XbhrrEGjDMlS+DJqB/hyxdsL6wtv8l N4Q683Dflc03YgrAIEiXo6AUz4RRY7UHf05FgGoiKRRN/Ph5Fse+XH0Gr2bP/rZX JMl56CT4otCWSAqNj/fTcPXdLDqnYkVr9hsmMGoGlP5ZVYVh7IPRp6k3GQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMUg4QoV8q4KT3Mz66vTf5Zq+RRMMB8GA1UdIwQY MBaAFNyi8w5OaWkrG0/s666R/VYEveyTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0tMekRrNXBhU3NiVC16cnJwSDlWZ1M5N0pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8wMzY1NDktNDVkMC00NTY1LTgyOGYt ZWIzZTc4NWQ5MDk3LzEveFNEaENoWHlyZ3BQY3pQcnE5Tl9sbXI1RkV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8wMzY1NDktNDVkMC00NTY1LTgyOGYtZWIzZTc4NWQ5MDk3 LzEvM0tMekRrNXBhU3NiVC16cnJwSDlWZ1M5N0pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWv3MA0G CSqGSIb3DQEBCwUAA4IBAQBBVQxGS5B7n0/aSNCJV949YATW4lXuDm9Sr2COqUFk 2I05q9JeITHeJTTEC7ijHUdOuPpg+VqLj+krNHWQ+LXYZUSXHucpgKKO25QG6cYa xGh8dD+bV7uL4ROzr7eGAFqoIFaJqCYVW9g7AjGwyDOlsg7VNQWES5PWGhjj/K04 zeKubV/Bs7zddjCw/Z5aoEb917qCEtwFnjA/Dinto8ubFeTk0ZhPPWCXsAAq9dVf 3XNyMUag9mqpq+zc36j/V0xV4BitQA1lIWbGdyMTHEIV8z6q4psqvQxzG8K9KbDO W2XmGX9R+JWGhTeDS1nttqYXjWIHw6icT5Gi1fPFzyVM -----END CERTIFICATE-----Generated at Tue Jan 27 11:21:57 2026 by rpki-client