This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/xjT1qO5EWxpQrrhnqAJVt7vBTz4.roa File: xjT1qO5EWxpQrrhnqAJVt7vBTz4.roa (raw, json) Hash identifier: jjMJpW6iAOXQaad1T6wVanui4hCLnhsX9J2X5epM//8= Subject key identifier: C6:34:F5:A8:EE:44:5B:1A:50:AE:B8:67:A8:02:55:B7:BB:C1:4F:3E Certificate issuer: /CN=d2c1d5fd4e20ade5f11b66afb10a54c8ffe4b040 Certificate serial: 019B7834B616B8A2B47CAF323B0478F72960 Authority key identifier: D2:C1:D5:FD:4E:20:AD:E5:F1:1B:66:AF:B1:0A:54:C8:FF:E4:B0:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/xjT1qO5EWxpQrrhnqAJVt7vBTz4.roa Signing time: Thu 01 Jan 2026 06:17:58 +0000 ROA not before: Thu 01 Jan 2026 06:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 192.118.70.0/24 maxlen: 24 192.118.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 00:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:b6:16:b8:a2:b4:7c:af:32:3b:04:78:f7:29:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2c1d5fd4e20ade5f11b66afb10a54c8ffe4b040 Validity Not Before: Jan 1 06:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c634f5a8ee445b1a50aeb867a80255b7bbc14f3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:86:09:a7:3f:27:93:0f:19:69:a3:e4:d3:cb: 5b:7a:dd:17:92:c4:b5:37:f9:18:50:44:3b:89:43: 8f:a7:dd:8b:40:c0:5d:cb:0c:a6:b2:5a:d5:45:5b: 98:c8:f5:e9:94:b3:6f:1a:be:29:ad:b7:96:49:9a: bb:4c:5c:17:8e:16:f0:04:e8:78:c0:e5:ef:96:a2: 70:da:e7:3b:9b:70:15:d0:fb:13:e3:b9:63:9f:a3: 16:45:13:ba:8f:4f:b8:14:dc:e2:34:4b:bc:0f:3b: bf:dd:61:9e:d6:7a:4e:da:1d:3f:67:6f:69:84:5b: 9d:f5:9c:e4:73:bc:3b:e9:7b:ae:d3:03:b3:50:46: af:6b:9f:15:96:61:0c:97:88:4b:f3:01:4d:8c:00: 55:44:ea:ca:4e:d6:ac:b3:71:5c:a0:e9:41:d2:1e: b3:05:69:8b:36:e9:83:85:6b:f8:1c:91:15:bc:11: b9:78:02:ba:3f:f1:39:10:02:05:53:17:8c:15:18: 0d:74:50:8b:54:40:c8:26:cf:c2:7b:ec:71:93:d2: 5a:6e:e6:11:6a:c0:bb:3e:e5:a1:e3:ea:b8:5f:e4: ea:02:93:cd:a6:cc:dc:3f:69:af:81:58:b0:36:45: e2:00:bd:86:f0:d3:b3:8d:e9:03:be:c7:0d:1d:54: be:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:34:F5:A8:EE:44:5B:1A:50:AE:B8:67:A8:02:55:B7:BB:C1:4F:3E X509v3 Authority Key Identifier: keyid:D2:C1:D5:FD:4E:20:AD:E5:F1:1B:66:AF:B1:0A:54:C8:FF:E4:B0:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/xjT1qO5EWxpQrrhnqAJVt7vBTz4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.118.70.0/23 Signature Algorithm: sha256WithRSAEncryption 74:42:2e:8c:dd:fa:fd:db:d8:0f:db:39:b1:c7:c6:68:4a:77: 42:77:0f:8d:26:a1:ec:76:1f:f5:c3:1a:45:4d:b3:3e:c9:48: 35:9e:cf:46:28:7f:e2:39:34:c6:d3:78:31:a7:77:0d:96:b5: 3a:59:5d:18:a0:ef:3b:a8:d1:f3:f3:85:6d:51:eb:b9:be:99: 95:0c:28:5a:68:b4:e2:a3:e9:f5:88:c3:ea:79:2b:4d:4d:7d: 96:80:f4:59:65:08:a5:50:3d:aa:10:e5:35:bc:f9:1f:97:08: 3d:2a:bd:2c:e7:50:34:b1:f8:98:29:45:ed:ce:31:57:7a:c7: 9f:1a:bd:2e:ee:5f:6f:41:09:b0:69:f6:5d:25:dd:e4:ee:16: 83:bf:8a:c1:ee:fd:f8:7f:d6:8f:9e:fe:e6:6e:cb:5c:1f:2d: 9b:1d:e3:c7:b2:15:c1:c4:4b:3b:ab:3e:4f:39:59:c9:c8:00: eb:75:d6:2e:86:45:09:2e:54:51:b5:e6:aa:e7:ab:d2:69:24: 44:7e:e3:c1:54:04:86:e6:ce:f8:2e:da:39:87:99:5b:e7:08: f9:04:f7:34:9b:00:3b:80:42:af:6c:5e:d5:ee:a8:9d:c9:e5: 2e:65:9d:0f:64:aa:60:85:33:e1:74:68:3a:54:02:93:67:e0: 38:1e:ee:4c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NLYWuKK0fK8yOwR49ylgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyYzFkNWZkNGUyMGFkZTVmMTFiNjZhZmIxMGE1NGM4ZmZl NGIwNDAwHhcNMjYwMTAxMDYxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjM0ZjVhOGVlNDQ1YjFhNTBhZWI4NjdhODAyNTViN2JiYzE0ZjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoYJpz8nkw8ZaaPk08tbet0XksS1 N/kYUEQ7iUOPp92LQMBdywymslrVRVuYyPXplLNvGr4prbeWSZq7TFwXjhbwBOh4 wOXvlqJw2uc7m3AV0PsT47ljn6MWRRO6j0+4FNziNEu8Dzu/3WGe1npO2h0/Z29p hFud9Zzkc7w76Xuu0wOzUEava58VlmEMl4hL8wFNjABVROrKTtass3FcoOlB0h6z BWmLNumDhWv4HJEVvBG5eAK6P/E5EAIFUxeMFRgNdFCLVEDIJs/Ce+xxk9JabuYR asC7PuWh4+q4X+TqApPNpszcP2mvgViwNkXiAL2G8NOzjekDvscNHVS+HQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMY09ajuRFsaUK64Z6gCVbe7wU8+MB8GA1UdIwQY MBaAFNLB1f1OIK3l8Rtmr7EKVMj/5LBAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHNIVl9VNGdyZVh4RzJhdnNRcFV5UF9rc0VBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC84NjEzYWQtNGY1Zi00NWZkLTg3OTkt YTA5YTg3NWY1OTAzLzEveGpUMXFPNUVXeHBRcnJobnFBSlZ0N3ZCVHo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC84NjEzYWQtNGY1Zi00NWZkLTg3OTktYTA5YTg3NWY1OTAz LzEvMHNIVl9VNGdyZVh4RzJhdnNRcFV5UF9rc0VBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwHZGMA0G CSqGSIb3DQEBCwUAA4IBAQB0Qi6M3fr929gP2zmxx8ZoSndCdw+NJqHsdh/1wxpF TbM+yUg1ns9GKH/iOTTG03gxp3cNlrU6WV0YoO87qNHz84VtUeu5vpmVDChaaLTi o+n1iMPqeStNTX2WgPRZZQilUD2qEOU1vPkflwg9Kr0s51A0sfiYKUXtzjFXesef Gr0u7l9vQQmwafZdJd3k7haDv4rB7v34f9aPnv7mbstcHy2bHePHshXBxEs7qz5P OVnJyADrddYuhkUJLlRRteaq56vSaSREfuPBVASG5s74Lto5h5lb5wj5BPc0mwA7 gEKvbF7V7qidyeUuZZ0PZKpghTPhdGg6VAKTZ+A4Hu5M -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:03 2026 by rpki-client