This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/XZmCghwXS5uO6-nI0o-431gsq24.roa File: XZmCghwXS5uO6-nI0o-431gsq24.roa (raw, json) Hash identifier: GdgInPSubyNcuUo9FhLcvzIGt3WuqRSexXnkp42MAmI= Subject key identifier: 5D:99:82:82:1C:17:4B:9B:8E:EB:E9:C8:D2:8F:B8:DF:58:2C:AB:6E Certificate issuer: /CN=94848162892831add5a07d4302e7fcfff52f02fd Certificate serial: 019B7AC8742FA634096A77FD3458AE3F1C68 Authority key identifier: 94:84:81:62:89:28:31:AD:D5:A0:7D:43:02:E7:FC:FF:F5:2F:02:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lISBYokoMa3VoH1DAuf8__UvAv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/XZmCghwXS5uO6-nI0o-431gsq24.roa Signing time: Thu 01 Jan 2026 18:18:35 +0000 ROA not before: Thu 01 Jan 2026 18:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210463 IP address blocks: 146.19.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.mft rsync://rpki.ripe.net/repository/DEFAULT/lISBYokoMa3VoH1DAuf8__UvAv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:74:2f:a6:34:09:6a:77:fd:34:58:ae:3f:1c:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94848162892831add5a07d4302e7fcfff52f02fd Validity Not Before: Jan 1 18:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d9982821c174b9b8eebe9c8d28fb8df582cab6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:1d:2c:b2:7d:15:8e:b8:fe:ba:5b:06:c4:bf: 3f:2c:7c:b8:f5:7e:c7:f7:8a:01:d9:e9:50:88:03: c5:ff:9f:6c:80:8e:e8:3b:29:5a:f7:0d:4c:a5:24: 48:9c:a1:ec:2a:82:3a:46:10:cb:9b:d6:b6:a8:a1: e1:61:2b:8b:2c:f4:83:43:89:ba:f4:c6:83:41:58: 06:90:64:c9:c0:e8:45:84:53:5e:ef:97:e4:21:26: ec:29:d9:78:15:63:82:c3:58:ac:51:62:a4:c0:8a: dc:43:27:df:0f:a8:20:e1:18:76:e7:5b:08:85:5e: 04:ca:24:0f:6d:d8:fa:4d:14:30:47:1f:cf:c0:09: bc:b1:aa:d4:75:7f:7d:f3:42:27:f0:ef:19:f3:c7: dc:d9:c4:6c:0c:10:ec:d6:40:ef:02:17:31:a9:c3: 3e:20:ca:d9:9b:79:0f:16:cb:2d:05:90:3b:09:ed: 66:24:a4:51:d4:3b:36:cd:9e:4c:dc:3a:fb:52:3b: aa:aa:c3:a3:19:e0:45:82:c4:9f:ee:07:c7:c7:60: ec:c8:34:96:f8:bf:48:89:27:24:b9:25:ed:7b:27: d3:29:37:0e:60:bc:8a:bd:07:3c:51:d5:73:9f:b1: cb:26:46:93:6d:28:82:ce:cc:61:d0:a8:3f:37:82: 12:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:99:82:82:1C:17:4B:9B:8E:EB:E9:C8:D2:8F:B8:DF:58:2C:AB:6E X509v3 Authority Key Identifier: keyid:94:84:81:62:89:28:31:AD:D5:A0:7D:43:02:E7:FC:FF:F5:2F:02:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lISBYokoMa3VoH1DAuf8__UvAv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/XZmCghwXS5uO6-nI0o-431gsq24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.77.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:97:36:e7:a9:b4:ee:01:e9:bb:ef:f7:44:02:b8:2e:57:31: dd:31:60:f1:f8:f5:67:da:ae:70:19:47:74:44:1d:83:58:08: 0e:5b:66:13:de:5c:28:ca:d2:d9:dd:79:d5:ac:de:8c:ed:09: 39:c6:6b:cc:b5:bc:1f:68:13:a4:af:a3:86:26:3a:39:eb:8c: 5a:09:ad:df:fb:87:87:3d:20:ad:48:cd:d1:0a:63:21:26:ce: 64:53:5a:3b:43:bf:3b:79:d7:d7:b8:17:b8:1f:6e:92:0b:16: e3:77:43:6f:b2:ab:8d:79:ce:20:bc:7c:35:33:1d:15:29:35: b2:87:aa:c2:93:4f:4b:65:b3:67:8a:81:e2:8c:85:fa:74:5e: 2d:c9:a3:0e:83:d9:70:63:30:c3:de:10:f2:bd:af:07:5d:d6: c9:a5:e6:9b:59:37:5e:df:6b:c3:e4:c1:55:d1:83:55:27:6d: 12:9a:19:6b:99:49:b6:c7:62:3b:51:d1:1b:94:98:52:d2:a1: 9e:9c:52:a9:0d:02:c9:0a:e8:62:3e:3d:3d:4c:c4:70:3a:67: 45:d6:d2:2e:86:96:99:8c:11:b1:69:d2:36:42:e5:b9:0b:f1: d8:47:33:1f:a6:14:4b:6c:ac:31:7f:64:3c:95:91:96:d5:08: c0:ed:73:da -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yHQvpjQJanf9NFiuPxxoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0ODQ4MTYyODkyODMxYWRkNWEwN2Q0MzAyZTdmY2ZmZjUy ZjAyZmQwHhcNMjYwMTAxMTgxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDk5ODI4MjFjMTc0YjliOGVlYmU5YzhkMjhmYjhkZjU4MmNhYjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkR0ssn0Vjrj+ulsGxL8/LHy49X7H 94oB2elQiAPF/59sgI7oOyla9w1MpSRInKHsKoI6RhDLm9a2qKHhYSuLLPSDQ4m6 9MaDQVgGkGTJwOhFhFNe75fkISbsKdl4FWOCw1isUWKkwIrcQyffD6gg4Rh251sI hV4EyiQPbdj6TRQwRx/PwAm8sarUdX9980In8O8Z88fc2cRsDBDs1kDvAhcxqcM+ IMrZm3kPFsstBZA7Ce1mJKRR1Ds2zZ5M3Dr7UjuqqsOjGeBFgsSf7gfHx2DsyDSW +L9IiSckuSXteyfTKTcOYLyKvQc8UdVzn7HLJkaTbSiCzsxh0Kg/N4IS2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF2ZgoIcF0ubjuvpyNKPuN9YLKtuMB8GA1UdIwQY MBaAFJSEgWKJKDGt1aB9QwLn/P/1LwL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbElTQllva29NYTNWb0gxREF1ZjhfX1V2QXYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8wODczNTMtNzZhMC00MDY4LTk2ZGYt MTE5YzNlNzQ3OWQ5LzEvWFptQ2dod1hTNXVPNi1uSTBvLTQzMWdzcTI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC8wODczNTMtNzZhMC00MDY4LTk2ZGYtMTE5YzNlNzQ3OWQ5 LzEvbElTQllva29NYTNWb0gxREF1ZjhfX1V2QXYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhNNMA0G CSqGSIb3DQEBCwUAA4IBAQBNlzbnqbTuAem77/dEArguVzHdMWDx+PVn2q5wGUd0 RB2DWAgOW2YT3lwoytLZ3XnVrN6M7Qk5xmvMtbwfaBOkr6OGJjo564xaCa3f+4eH PSCtSM3RCmMhJs5kU1o7Q787edfXuBe4H26SCxbjd0NvsquNec4gvHw1Mx0VKTWy h6rCk09LZbNnioHijIX6dF4tyaMOg9lwYzDD3hDyva8HXdbJpeabWTde32vD5MFV 0YNVJ20SmhlrmUm2x2I7UdEblJhS0qGenFKpDQLJCuhiPj09TMRwOmdF1tIuhpaZ jBGxadI2QuW5C/HYRzMfphRLbKwxf2Q8lZGW1QjA7XPa -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:20 2026 by rpki-client