This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/XAa8rNtFRtX3GiVVDcn6J0a9FGs.roa File: XAa8rNtFRtX3GiVVDcn6J0a9FGs.roa (raw, json) Hash identifier: eFP013kJGfHimtzPEafcRV+juINjqd1rvgWrdN1Zbhs= Subject key identifier: 5C:06:BC:AC:DB:45:46:D5:F7:1A:25:55:0D:C9:FA:27:46:BD:14:6B Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Certificate serial: 019B7D5AF02CAFBB3336C925346111FD0F35 Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/XAa8rNtFRtX3GiVVDcn6J0a9FGs.roa Signing time: Fri 02 Jan 2026 06:17:50 +0000 ROA not before: Fri 02 Jan 2026 06:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 812 IP address blocks: 93.113.183.0/24 maxlen: 24 93.119.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 03:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:f0:2c:af:bb:33:36:c9:25:34:61:11:fd:0f:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Validity Not Before: Jan 2 06:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c06bcacdb4546d5f71a25550dc9fa2746bd146b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8f:83:ad:31:0d:80:28:9c:80:ad:90:16:f3: 50:c8:62:a6:c1:9a:1b:db:31:12:83:14:c0:a3:b8: d8:77:df:1a:f6:f7:2a:fd:6d:9c:97:27:fc:66:72: c0:6f:7b:3a:8b:95:7a:4c:a5:c8:4c:2e:81:2a:82: 3b:4a:78:ba:3a:45:7f:0e:77:b7:78:0b:48:68:b3: 5d:4b:ad:09:16:f8:ac:e5:ef:82:01:c0:5d:0a:c3: ab:b2:19:9e:ca:42:b2:8d:6e:db:7d:f1:a0:ea:7e: 93:18:03:03:eb:27:3d:ba:16:75:7b:40:e6:26:e8: 85:09:b5:d5:4f:5b:6a:73:66:11:ed:b8:ec:c3:53: 52:88:5b:ea:09:d4:d8:c7:dc:f6:8c:77:63:10:8d: 4b:b0:1b:fa:ae:40:f5:df:db:77:0f:d0:dc:37:6a: 0f:cc:e9:2a:fd:f2:79:7b:a6:aa:de:a4:10:e4:8c: 31:8d:dc:81:3c:49:13:99:b1:02:ae:90:39:19:97: b5:1e:e9:09:d8:44:87:92:df:8b:31:cb:b9:77:4e: 0e:f8:87:2f:c6:d8:6d:11:d3:73:a7:15:5b:17:d2: 91:99:b0:a2:82:ec:f4:f7:83:79:40:36:91:ef:9e: ac:56:06:5a:b6:4f:09:aa:94:7b:63:fb:aa:64:28: 89:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:06:BC:AC:DB:45:46:D5:F7:1A:25:55:0D:C9:FA:27:46:BD:14:6B X509v3 Authority Key Identifier: keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/XAa8rNtFRtX3GiVVDcn6J0a9FGs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.113.183.0/24 93.119.106.0/24 Signature Algorithm: sha256WithRSAEncryption 65:5d:b0:63:0d:cf:4d:fa:6e:e6:0b:ce:d7:ce:8c:a5:0e:05: b5:03:58:ff:ed:52:f3:b7:3b:56:76:34:18:d5:e9:8e:64:73: 79:ef:65:a2:4a:74:f0:54:ac:cf:f3:6c:81:d5:97:c7:0a:8f: 01:36:0d:e2:ab:61:2b:7b:9f:94:68:e4:24:65:67:c1:a9:54: 84:0d:98:7e:63:2a:9b:ce:e4:33:e9:e7:da:cd:e5:b0:c3:71: ec:15:68:0e:f3:c6:77:f9:6e:e8:0a:e5:d1:60:2e:39:b3:40: ba:c4:49:67:bb:7a:71:87:88:8e:31:13:fe:be:dc:57:62:ce: bc:9a:c4:36:a2:3d:4b:bc:91:1c:1e:91:86:b7:81:7f:33:d1: 0f:07:67:5b:f4:a1:f6:75:06:b7:d0:c2:8e:dd:02:31:e2:e8: 75:89:28:9d:93:13:81:98:cc:a1:0c:89:3a:81:a0:af:64:c0: 41:62:67:96:8a:44:62:5c:80:00:13:0e:cd:bd:27:b0:f2:ac: 8a:df:fc:ea:bf:e7:3c:6c:26:75:c5:83:2a:55:93:70:77:40: 96:77:1c:cb:eb:7c:0b:95:1d:84:0c:b9:1f:b5:0e:74:37:8c: 0c:e6:40:8c:6c:a4:8e:ad:da:09:d4:4f:c8:f7:59:87:09:bd: 9e:dd:ba:db -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9WvAsr7szNsklNGER/Q81MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm MDFjMWQwHhcNMjYwMTAyMDYxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzA2YmNhY2RiNDU0NmQ1ZjcxYTI1NTUwZGM5ZmEyNzQ2YmQxNDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0I+DrTENgCicgK2QFvNQyGKmwZob 2zESgxTAo7jYd98a9vcq/W2clyf8ZnLAb3s6i5V6TKXITC6BKoI7Sni6OkV/Dne3 eAtIaLNdS60JFvis5e+CAcBdCsOrshmeykKyjW7bffGg6n6TGAMD6yc9uhZ1e0Dm JuiFCbXVT1tqc2YR7bjsw1NSiFvqCdTYx9z2jHdjEI1LsBv6rkD139t3D9DcN2oP zOkq/fJ5e6aq3qQQ5IwxjdyBPEkTmbECrpA5GZe1HukJ2ESHkt+LMcu5d04O+Icv xthtEdNzpxVbF9KRmbCiguz094N5QDaR756sVgZatk8JqpR7Y/uqZCiJ1QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFwGvKzbRUbV9xolVQ3J+idGvRRrMB8GA1UdIwQY MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt YjQyZjIzZDgyOGMzLzEvWEFhOHJOdEZSdFgzR2lWVkRjbjZKMGE5RkdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXXG3AwQA XXdqMA0GCSqGSIb3DQEBCwUAA4IBAQBlXbBjDc9N+m7mC87XzoylDgW1A1j/7VLz tztWdjQY1emOZHN572WiSnTwVKzP82yB1ZfHCo8BNg3iq2Ere5+UaOQkZWfBqVSE DZh+YyqbzuQz6efazeWww3HsFWgO88Z3+W7oCuXRYC45s0C6xElnu3pxh4iOMRP+ vtxXYs68msQ2oj1LvJEcHpGGt4F/M9EPB2db9KH2dQa30MKO3QIx4uh1iSidkxOB mMyhDIk6gaCvZMBBYmeWikRiXIAAEw7NvSew8qyK3/zqv+c8bCZ1xYMqVZNwd0CW dxzL63wLlR2EDLkftQ50N4wM5kCMbKSOrdoJ1E/I91mHCb2e3brb -----END CERTIFICATE-----Generated at Mon Jan 19 11:24:44 2026 by rpki-client