This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/XSSPfODDElNAi7HHbT39Dq_G2W8.roa File: XSSPfODDElNAi7HHbT39Dq_G2W8.roa (raw, json) Hash identifier: XAO7DayjW29BbqYUQasCT3PGXv6XygmyC7EFfkszTjo= Subject key identifier: 5D:24:8F:7C:E0:C3:12:53:40:8B:B1:C7:6D:3D:FD:0E:AF:C6:D9:6F Certificate issuer: /CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9 Certificate serial: 019B78A37947917DDECF1F9A61AE9D38BE33 Authority key identifier: 19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/XSSPfODDElNAi7HHbT39Dq_G2W8.roa Signing time: Thu 01 Jan 2026 08:18:57 +0000 ROA not before: Thu 01 Jan 2026 08:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57163 IP address blocks: 195.229.145.0/24 maxlen: 24 195.229.146.0/24 maxlen: 24 195.229.147.0/24 maxlen: 24 195.229.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:79:47:91:7d:de:cf:1f:9a:61:ae:9d:38:be:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9 Validity Not Before: Jan 1 08:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d248f7ce0c31253408bb1c76d3dfd0eafc6d96f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ec:f2:60:ff:9f:2b:d9:54:cb:0b:d3:b2:ea: 4c:01:3e:e7:55:ae:8d:e0:0a:bb:07:76:3e:e2:5d: b8:1f:38:b2:44:07:db:bc:aa:a6:16:75:cf:78:1a: d6:de:25:a2:16:af:4d:de:df:cb:bc:e8:fd:39:b5: 12:fe:e3:9b:23:8b:71:33:db:6b:fd:5b:60:fb:12: 86:5b:74:d1:b0:e3:53:84:19:09:d5:09:c6:58:27: 43:bb:84:e5:e0:f6:5a:3a:be:08:cb:d8:bf:72:79: 7d:3f:f6:a3:76:85:0d:c6:65:8e:00:c5:7c:84:7f: 6b:26:de:6c:16:3a:21:6b:06:57:fb:86:e2:a5:5c: 6e:16:9b:18:d1:82:3f:7a:1d:3b:41:1f:35:9b:ad: 47:8f:36:ad:f7:fb:de:87:40:4d:89:52:9e:54:c9: 4f:f2:d8:bc:b4:b5:32:5f:d2:af:d0:e8:d3:72:93: b8:da:96:16:d3:45:05:83:f3:45:a3:73:8b:7d:d1: 09:d1:11:31:b1:57:7c:09:99:2f:4b:9e:8a:74:29: 46:da:d4:48:72:aa:a4:10:6e:39:fe:4c:9d:7e:94: 74:70:45:e3:f9:73:f8:bf:80:67:42:47:f9:41:19: 5a:b5:1b:65:d2:a4:38:fd:b2:92:3c:62:e6:1a:c9: bb:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:24:8F:7C:E0:C3:12:53:40:8B:B1:C7:6D:3D:FD:0E:AF:C6:D9:6F X509v3 Authority Key Identifier: keyid:19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/XSSPfODDElNAi7HHbT39Dq_G2W8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.229.145.0-195.229.148.255 Signature Algorithm: sha256WithRSAEncryption 81:0f:73:a4:96:b0:6b:eb:54:f0:63:3c:af:6a:e6:62:77:81: d1:2f:7f:55:0e:13:0c:5b:66:c1:43:02:cc:9a:5a:57:ff:e4: ff:0a:2a:e5:18:34:93:ad:75:42:5f:e2:8e:05:ad:7d:e6:ce: bb:a2:bc:c2:51:92:52:57:e0:0d:63:ef:af:74:49:e4:73:4b: 18:22:99:e1:88:55:d6:aa:f3:cb:50:86:18:eb:bb:0e:e8:92: 56:c1:c9:ce:1e:19:f8:7e:4c:6d:f4:6c:89:2b:b5:4b:20:8f: 10:a3:88:45:c3:33:6d:77:01:c1:08:28:13:b1:f2:c2:67:43: f6:06:66:a4:b1:cb:0b:88:f6:13:96:bd:9a:3f:ba:e8:d8:c9: 18:18:bc:dc:d9:c1:4e:c0:80:5c:95:f0:78:9d:53:73:41:b4: e8:09:fb:c1:41:e0:77:6b:f5:34:36:af:3f:ee:8f:52:28:eb: 1a:25:cc:e6:7a:c3:7f:c6:84:7c:4e:5f:4f:ab:64:7d:1f:f5: 9c:d7:8f:b5:17:4c:85:af:54:15:62:d5:e3:04:ed:81:9d:e7: 45:57:18:bd:dc:d3:6a:41:dd:f8:a1:d2:ac:8d:7b:47:13:e5: 4c:f4:9f:70:df:8e:ff:fa:68:24:8b:5e:3d:69:23:3f:d8:8c: 46:7d:cd:b3 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt4o3lHkX3ezx+aYa6dOL4zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZWU1ZjE2ZmMxNDRhY2I5ODk3NzQ0OWZhYTBhYjc3ZGUx YmRjYzkwHhcNMjYwMTAxMDgxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDI0OGY3Y2UwYzMxMjUzNDA4YmIxYzc2ZDNkZmQwZWFmYzZkOTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOzyYP+fK9lUywvTsupMAT7nVa6N 4Aq7B3Y+4l24HziyRAfbvKqmFnXPeBrW3iWiFq9N3t/LvOj9ObUS/uObI4txM9tr /Vtg+xKGW3TRsONThBkJ1QnGWCdDu4Tl4PZaOr4Iy9i/cnl9P/ajdoUNxmWOAMV8 hH9rJt5sFjohawZX+4bipVxuFpsY0YI/eh07QR81m61Hjzat9/veh0BNiVKeVMlP 8ti8tLUyX9Kv0OjTcpO42pYW00UFg/NFo3OLfdEJ0RExsVd8CZkvS56KdClG2tRI cqqkEG45/kydfpR0cEXj+XP4v4BnQkf5QRlatRtl0qQ4/bKSPGLmGsm7vwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFF0kj3zgwxJTQIuxx209/Q6vxtlvMB8GA1UdIwQY MBaAFBnuXxb8FErLmJd0Sfqgq3feG9zJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMt NjFhZmI2NmQxZThjLzEvWFNTUGZPRERFbE5BaTdISGJUMzlEcV9HMlc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMtNjFhZmI2NmQxZThj LzEvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADD5ZED BADD5ZQwDQYJKoZIhvcNAQELBQADggEBAIEPc6SWsGvrVPBjPK9q5mJ3gdEvf1UO EwxbZsFDAsyaWlf/5P8KKuUYNJOtdUJf4o4FrX3mzruivMJRklJX4A1j7690SeRz SxgimeGIVdaq88tQhhjruw7oklbByc4eGfh+TG30bIkrtUsgjxCjiEXDM213AcEI KBOx8sJnQ/YGZqSxywuI9hOWvZo/uujYyRgYvNzZwU7AgFyV8HidU3NBtOgJ+8FB 4Hdr9TQ2rz/uj1Io6xolzOZ6w3/GhHxOX0+rZH0f9ZzXj7UXTIWvVBVi1eME7YGd 50VXGL3c02pB3fih0qyNe0cT5Uz0n3Dfjv/6aCSLXj1pIz/YjEZ9zbM= -----END CERTIFICATE-----Generated at Mon Feb 9 23:43:59 2026 by rpki-client