This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/xfTxUVFSNt-Wltsx2zyoxkhDthY.roa File: xfTxUVFSNt-Wltsx2zyoxkhDthY.roa (raw, json) Hash identifier: niI0CV+uIpJ0eXK/uwBkGVqHzBzVAOxis1CXovjyjY0= Subject key identifier: C5:F4:F1:51:51:52:36:DF:96:96:DB:31:DB:3C:A8:C6:48:43:B6:16 Certificate issuer: /CN=4b3320e0bb5dbe2ba972691b75d68f48f6e57f88 Certificate serial: 019B797E4E77916B718368947B5B4BE98B1E Authority key identifier: 4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/xfTxUVFSNt-Wltsx2zyoxkhDthY.roa Signing time: Thu 01 Jan 2026 12:17:59 +0000 ROA not before: Thu 01 Jan 2026 12:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 193.3.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:4e:77:91:6b:71:83:68:94:7b:5b:4b:e9:8b:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3320e0bb5dbe2ba972691b75d68f48f6e57f88 Validity Not Before: Jan 1 12:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5f4f151515236df9696db31db3ca8c64843b616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a3:e0:af:3b:2e:d1:62:73:f8:79:95:56:4c: f7:54:a5:02:4b:59:13:26:32:2d:47:27:ca:27:03: 6e:25:43:c2:8d:10:e1:8e:30:08:b4:2a:f2:ad:47: 8f:70:6b:45:a5:9d:5c:a9:63:c7:c4:fa:38:ac:c1: fa:30:e3:f8:19:3f:51:12:ea:e9:15:57:12:e0:aa: db:4f:eb:4b:2c:d3:97:46:0b:eb:7a:79:21:20:0e: b4:75:c8:ea:ed:0e:bf:85:79:ff:9d:2a:68:8a:cc: c5:d5:0f:2e:df:6a:16:af:9a:c4:13:f0:06:36:08: ac:ef:7f:a8:c6:bd:37:c9:b2:6c:ee:c4:01:c8:75: 8c:8e:bf:66:28:95:cd:20:d0:64:c0:72:25:38:0d: be:35:28:e7:1a:4b:75:02:9c:53:6b:25:92:2e:72: 25:9a:b6:0c:42:03:4c:86:0f:95:9e:1a:0a:fd:77: 14:ab:f2:d4:7d:25:3e:0b:1f:bd:45:ea:97:88:cf: 5f:9e:d0:e5:64:74:c2:51:08:00:91:db:70:27:47: a9:0b:82:51:1b:5c:1d:68:82:e1:a2:ae:7c:f0:a0: bd:54:8f:13:18:0e:de:f6:fb:92:50:2c:bf:a1:e3: 03:05:92:41:ee:3e:b5:e2:28:96:7c:d6:03:b7:a6: a1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:F4:F1:51:51:52:36:DF:96:96:DB:31:DB:3C:A8:C6:48:43:B6:16 X509v3 Authority Key Identifier: keyid:4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/xfTxUVFSNt-Wltsx2zyoxkhDthY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.3.183.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:48:3f:96:ce:03:a2:6a:34:85:b9:3d:17:65:b3:6f:59:92: a2:cb:a1:1d:57:60:65:d5:4b:d2:9d:56:62:7e:9a:dd:81:22: 79:86:b5:b9:fe:7a:53:0c:eb:1c:a3:05:4a:c9:05:db:e9:6c: b1:21:af:1b:53:87:8f:fb:bb:52:3a:67:91:c6:05:38:46:a3: 4d:e5:3e:a3:79:9f:21:60:38:b0:de:1e:55:20:f6:c2:43:27: 1e:63:ae:2f:50:c9:43:0c:1b:07:27:07:6b:58:87:d6:c4:5d: de:09:88:52:27:56:5d:60:5a:75:16:ff:bb:c9:19:d5:98:84: 1f:14:4d:1d:46:7d:f8:19:5c:5f:59:03:38:46:62:a1:99:44: c1:a8:ba:76:0f:36:69:e3:aa:5e:12:12:1c:58:73:19:2d:35: 2e:81:c5:69:a3:5a:f9:39:a7:7e:fd:9c:0e:01:8c:2b:65:50: 32:63:45:8b:b5:00:81:ef:53:ae:f1:48:e7:15:aa:f6:42:47: 2e:a0:17:51:14:fa:82:45:21:db:14:0e:63:92:f6:5f:8b:c3: 4c:1e:93:32:c2:7b:23:c4:5e:da:a8:9a:23:38:79:94:b2:0a: f5:73:68:6c:ea:b0:e9:9f:94:32:d9:c4:28:c2:ff:b7:ca:1b: 97:97:0e:b9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fk53kWtxg2iUe1tL6YseMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiMzMyMGUwYmI1ZGJlMmJhOTcyNjkxYjc1ZDY4ZjQ4ZjZl NTdmODgwHhcNMjYwMTAxMTIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNWY0ZjE1MTUxNTIzNmRmOTY5NmRiMzFkYjNjYThjNjQ4NDNiNjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6Pgrzsu0WJz+HmVVkz3VKUCS1kT JjItRyfKJwNuJUPCjRDhjjAItCryrUePcGtFpZ1cqWPHxPo4rMH6MOP4GT9REurp FVcS4KrbT+tLLNOXRgvrenkhIA60dcjq7Q6/hXn/nSpoiszF1Q8u32oWr5rEE/AG Ngis73+oxr03ybJs7sQByHWMjr9mKJXNINBkwHIlOA2+NSjnGkt1ApxTayWSLnIl mrYMQgNMhg+VnhoK/XcUq/LUfSU+Cx+9ReqXiM9fntDlZHTCUQgAkdtwJ0epC4JR G1wdaILhoq588KC9VI8TGA7e9vuSUCy/oeMDBZJB7j614iiWfNYDt6ah3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMX08VFRUjbflpbbMds8qMZIQ7YWMB8GA1UdIwQY MBaAFEszIOC7Xb4rqXJpG3XWj0j25X+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3pNZzRMdGR2aXVwY21rYmRkYVBTUGJsZjRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC83ZjA2NmMtOTRhOS00NzhkLTgwN2Ut YTg5NzU5ZDcwNzFjLzEveGZUeFVWRlNOdC1XbHRzeDJ6eW94a2hEdGhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC83ZjA2NmMtOTRhOS00NzhkLTgwN2UtYTg5NzU5ZDcwNzFj LzEvU3pNZzRMdGR2aXVwY21rYmRkYVBTUGJsZjRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQO3MA0G CSqGSIb3DQEBCwUAA4IBAQA+SD+WzgOiajSFuT0XZbNvWZKiy6EdV2Bl1UvSnVZi fprdgSJ5hrW5/npTDOscowVKyQXb6WyxIa8bU4eP+7tSOmeRxgU4RqNN5T6jeZ8h YDiw3h5VIPbCQyceY64vUMlDDBsHJwdrWIfWxF3eCYhSJ1ZdYFp1Fv+7yRnVmIQf FE0dRn34GVxfWQM4RmKhmUTBqLp2DzZp46peEhIcWHMZLTUugcVpo1r5Oad+/ZwO AYwrZVAyY0WLtQCB71Ou8UjnFar2QkcuoBdRFPqCRSHbFA5jkvZfi8NMHpMywnsj xF7aqJojOHmUsgr1c2hs6rDpn5Qy2cQowv+3yhuXlw65 -----END CERTIFICATE-----Generated at Fri Jan 9 06:21:14 2026 by rpki-client