This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/Xp1_bdYXI9U3hQygHMzTkT43K1Q.roa File: Xp1_bdYXI9U3hQygHMzTkT43K1Q.roa (raw, json) Hash identifier: lsd6lPp/ulgto4+3u4nnsXd9a7lg4D4o9xZaATfNY4Y= Subject key identifier: 5E:9D:7F:6D:D6:17:23:D5:37:85:0C:A0:1C:CC:D3:91:3E:37:2B:54 Certificate issuer: /CN=cdf62cbd6cf7e808224f6cf8725e36e2a965352c Certificate serial: 019B7AC8AC123A41A69102B2EA82C3C7926E Authority key identifier: CD:F6:2C:BD:6C:F7:E8:08:22:4F:6C:F8:72:5E:36:E2:A9:65:35:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/Xp1_bdYXI9U3hQygHMzTkT43K1Q.roa Signing time: Thu 01 Jan 2026 18:18:50 +0000 ROA not before: Thu 01 Jan 2026 18:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8298 IP address blocks: 194.1.163.0/24 maxlen: 24 2001:678:d78::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:ac:12:3a:41:a6:91:02:b2:ea:82:c3:c7:92:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdf62cbd6cf7e808224f6cf8725e36e2a965352c Validity Not Before: Jan 1 18:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e9d7f6dd61723d537850ca01cccd3913e372b54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f2:f7:b4:57:f5:58:65:e1:c1:cd:b2:84:38: 16:8b:94:d8:14:10:35:f2:20:de:49:de:f0:49:25: 2a:46:bf:9b:30:85:5a:ff:9a:5e:d8:32:be:62:03: 4e:05:c3:9a:aa:6b:e0:ea:db:95:c2:e5:fa:7c:2c: 5e:c1:64:26:e2:6f:e3:a4:95:52:4f:1e:bc:f6:6e: 06:0e:d3:99:c2:15:15:60:b1:81:41:7f:c6:9d:87: 91:1d:30:62:d3:b1:ff:bb:2d:6b:16:05:24:d2:a6: 3a:fb:d3:55:e0:87:57:f8:68:e6:89:58:9e:e8:cb: 14:38:e2:aa:05:86:a1:46:a0:9b:f4:40:04:e9:4b: ea:6a:06:dd:5e:0a:75:52:17:62:e7:15:d3:48:c8: 02:83:ff:e4:bd:fc:dd:da:b6:be:5e:68:2f:5a:38: a6:19:64:1c:0e:d4:7f:39:c9:91:06:55:cf:23:1a: 7c:c7:ae:16:1b:3c:cd:de:cd:cf:5e:33:ad:d6:eb: c2:04:77:d1:da:fc:b8:a1:99:2b:ba:9c:9a:78:6f: 76:1d:87:65:11:f2:7a:44:5b:fa:c6:77:be:35:b2: d4:ba:91:79:6b:38:28:29:bb:36:15:0f:38:09:15: 42:63:f2:cf:22:ce:d0:03:05:5d:a2:ec:a7:72:77: 11:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:9D:7F:6D:D6:17:23:D5:37:85:0C:A0:1C:CC:D3:91:3E:37:2B:54 X509v3 Authority Key Identifier: keyid:CD:F6:2C:BD:6C:F7:E8:08:22:4F:6C:F8:72:5E:36:E2:A9:65:35:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/Xp1_bdYXI9U3hQygHMzTkT43K1Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.1.163.0/24 IPv6: 2001:678:d78::/48 Signature Algorithm: sha256WithRSAEncryption 6d:b5:4b:da:0d:dc:82:16:71:5a:04:b3:87:bb:43:d9:1c:34: 52:62:92:81:17:24:94:3b:04:13:cd:be:8e:b7:55:3f:d9:85: ef:e6:a2:58:1b:9b:50:bd:f5:97:bc:69:21:8f:21:80:7f:1c: d7:ee:19:a8:6e:5a:65:3a:38:c2:68:11:c4:9c:4a:c8:cf:03: f2:fd:1c:f6:76:e7:e5:68:7b:e3:01:d7:16:6f:c7:ee:1d:f4: 96:57:8d:d8:ba:b2:73:69:db:e4:aa:a5:b3:d7:8c:ee:2d:07: 3a:fa:51:c3:79:ea:90:6d:db:f1:44:4b:b3:8e:64:85:2e:31: a0:d7:d6:8d:37:f5:27:78:b0:c5:c5:40:a9:47:3f:34:17:9b: b8:74:3b:ff:38:fe:06:0f:8b:79:c7:ce:b8:1e:36:4d:0b:1d: 6f:0c:6b:97:33:e1:50:31:f2:a7:f2:7f:be:24:7d:7b:5c:52: 94:d4:d4:a5:9d:18:ae:92:de:49:49:6a:46:46:29:0b:8f:be: 07:e4:a5:13:a2:9a:23:18:fa:6f:be:63:63:a1:a4:74:4e:ed: bc:67:02:d2:e7:fc:7e:d2:b2:79:48:19:6f:46:1c:a5:69:d9: 6d:5a:e7:22:4e:6e:0e:35:e7:c9:17:e5:19:8d:aa:0d:1e:3b: 2d:d3:bf:11 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6yKwSOkGmkQKy6oLDx5JuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkZjYyY2JkNmNmN2U4MDgyMjRmNmNmODcyNWUzNmUyYTk2 NTM1MmMwHhcNMjYwMTAxMTgxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTlkN2Y2ZGQ2MTcyM2Q1Mzc4NTBjYTAxY2NjZDM5MTNlMzcyYjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/L3tFf1WGXhwc2yhDgWi5TYFBA1 8iDeSd7wSSUqRr+bMIVa/5pe2DK+YgNOBcOaqmvg6tuVwuX6fCxewWQm4m/jpJVS Tx689m4GDtOZwhUVYLGBQX/GnYeRHTBi07H/uy1rFgUk0qY6+9NV4IdX+GjmiVie 6MsUOOKqBYahRqCb9EAE6UvqagbdXgp1Uhdi5xXTSMgCg//kvfzd2ra+XmgvWjim GWQcDtR/OcmRBlXPIxp8x64WGzzN3s3PXjOt1uvCBHfR2vy4oZkrupyaeG92HYdl EfJ6RFv6xne+NbLUupF5azgoKbs2FQ84CRVCY/LPIs7QAwVdouyncncR7wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFF6df23WFyPVN4UMoBzM05E+NytUMB8GA1UdIwQY MBaAFM32LL1s9+gIIk9s+HJeNuKpZTUsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemZZc3ZXejM2QWdpVDJ6NGNsNDI0cWxsTlN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9lOTE2OWEtZWUwNi00ZTRhLWIyMWUt ODQ5NDE3YWU2MzRkLzEvWHAxX2JkWVhJOVUzaFF5Z0hNelRrVDQzSzFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9lOTE2OWEtZWUwNi00ZTRhLWIyMWUtODQ5NDE3YWU2MzRk LzEvemZZc3ZXejM2QWdpVDJ6NGNsNDI0cWxsTlN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwgGjMA8E AgACMAkDBwAgAQZ4DXgwDQYJKoZIhvcNAQELBQADggEBAG21S9oN3IIWcVoEs4e7 Q9kcNFJikoEXJJQ7BBPNvo63VT/Zhe/molgbm1C99Ze8aSGPIYB/HNfuGahuWmU6 OMJoEcScSsjPA/L9HPZ25+Voe+MB1xZvx+4d9JZXjdi6snNp2+SqpbPXjO4tBzr6 UcN56pBt2/FES7OOZIUuMaDX1o039Sd4sMXFQKlHPzQXm7h0O/84/gYPi3nHzrge Nk0LHW8Ma5cz4VAx8qfyf74kfXtcUpTU1KWdGK6S3klJakZGKQuPvgfkpROimiMY +m++Y2OhpHRO7bxnAtLn/H7SsnlIGW9GHKVp2W1a5yJObg4158kX5RmNqg0eOy3T vxE= -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:00 2026 by rpki-client