This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/XUSo3Kod1tZHWF61VODjOx3wrpM.roa File: XUSo3Kod1tZHWF61VODjOx3wrpM.roa (raw, json) Hash identifier: QhGQD15vAX85W4GYn0mpZU7ZappGzzCqkYs2qWxrAto= Subject key identifier: 5D:44:A8:DC:AA:1D:D6:D6:47:58:5E:B5:54:E0:E3:3B:1D:F0:AE:93 Certificate issuer: /CN=68c5f09b3a903950f3fcd1b255086ede4876eb11 Certificate serial: 019B7DCA48824AEED313BC8FDDD4103EE6BD Authority key identifier: 68:C5:F0:9B:3A:90:39:50:F3:FC:D1:B2:55:08:6E:DE:48:76:EB:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMXwmzqQOVDz_NGyVQhu3kh26xE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/XUSo3Kod1tZHWF61VODjOx3wrpM.roa Signing time: Fri 02 Jan 2026 08:19:27 +0000 ROA not before: Fri 02 Jan 2026 08:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21108 IP address blocks: 193.221.84.0/24 maxlen: 24 193.221.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.mft rsync://rpki.ripe.net/repository/DEFAULT/aMXwmzqQOVDz_NGyVQhu3kh26xE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:48:82:4a:ee:d3:13:bc:8f:dd:d4:10:3e:e6:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68c5f09b3a903950f3fcd1b255086ede4876eb11 Validity Not Before: Jan 2 08:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d44a8dcaa1dd6d647585eb554e0e33b1df0ae93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:df:6e:96:37:07:b1:06:d4:75:81:5d:bb:b6: 82:c5:7e:a5:93:a9:ef:a9:49:e5:29:86:0c:42:bc: 11:bd:d1:fe:0c:e5:54:3a:e6:0b:10:e2:ed:4e:ab: f5:74:a3:20:be:b6:f3:54:47:c5:2d:3d:6f:06:50: fd:b8:53:8a:40:62:d6:8c:fb:c4:8c:8a:bc:94:da: b5:8c:72:05:95:24:09:5c:94:8c:8c:4f:5c:85:8f: b3:80:53:d5:fd:2c:a3:e2:cc:41:c5:9b:f2:6e:37: 4b:b9:4b:41:5a:52:24:1e:d6:f8:06:2f:41:a1:87: 9a:80:32:f7:f1:12:94:38:39:78:70:cf:9d:5b:9c: 62:43:bc:93:f9:9e:18:53:05:ce:8d:8d:c9:9c:90: 6a:53:a4:25:e6:8b:d0:d7:bc:9e:b9:2a:7f:81:68: e3:8f:f4:01:03:62:6d:53:69:40:ad:7d:bd:2a:71: c2:88:f9:b0:b4:dd:5f:ae:93:cd:4e:08:9d:95:7a: 4f:b3:86:bd:42:ed:73:8a:32:7c:0b:c4:f7:89:e7: f8:0e:37:ca:f8:29:fd:cc:7a:e9:21:10:20:32:42: e7:62:04:75:69:eb:3a:7c:7e:76:d8:c9:66:49:c3: 59:45:61:cd:cb:ce:0c:a1:98:5d:c0:de:8e:ea:22: 92:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:44:A8:DC:AA:1D:D6:D6:47:58:5E:B5:54:E0:E3:3B:1D:F0:AE:93 X509v3 Authority Key Identifier: keyid:68:C5:F0:9B:3A:90:39:50:F3:FC:D1:B2:55:08:6E:DE:48:76:EB:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMXwmzqQOVDz_NGyVQhu3kh26xE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/XUSo3Kod1tZHWF61VODjOx3wrpM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.221.84.0/23 Signature Algorithm: sha256WithRSAEncryption 77:10:ec:3a:53:11:9a:7b:b1:e2:ee:1b:63:62:dd:98:cf:b2: 37:89:6a:15:a2:7f:61:30:1c:71:67:99:43:b6:86:34:4d:b0: 10:dc:1b:24:4e:29:09:8c:1e:d7:19:dd:7e:c5:aa:8c:9d:05: 7a:dd:a7:68:c5:7b:7c:72:df:aa:e8:e4:b7:af:f3:ea:cf:46: 4c:4f:0f:5c:26:90:06:4c:e4:c1:d3:1d:3d:a7:5c:36:30:94: af:12:77:93:6e:b5:f3:50:11:f0:91:26:3e:38:8c:72:e0:2c: 29:7a:26:8a:13:6c:2c:30:16:fb:00:2f:3b:52:12:ae:e5:2f: 8e:66:71:84:af:b8:bd:26:25:43:4f:d1:c6:d9:96:fa:ab:e3: 49:58:11:6e:b2:4b:53:5c:cc:17:a4:63:38:41:d1:fe:ac:89: d5:6a:3f:ee:9c:16:90:be:63:12:86:9d:2f:18:8d:89:9b:b1: c9:8b:be:a9:f0:d2:ab:a6:3d:02:ff:83:16:50:ed:1f:d0:64: e4:ba:25:af:47:5a:73:d7:75:87:46:93:25:43:57:b7:81:9a: 32:9e:2f:61:1f:70:a9:d3:45:23:34:58:9b:93:91:84:27:ee: 18:b8:a7:55:5a:e6:b0:6f:52:8d:12:ef:64:35:56:b5:f0:84: 26:b4:24:b4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ykiCSu7TE7yP3dQQPua9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YzVmMDliM2E5MDM5NTBmM2ZjZDFiMjU1MDg2ZWRlNDg3 NmViMTEwHhcNMjYwMTAyMDgxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDQ0YThkY2FhMWRkNmQ2NDc1ODVlYjU1NGUwZTMzYjFkZjBhZTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhN9uljcHsQbUdYFdu7aCxX6lk6nv qUnlKYYMQrwRvdH+DOVUOuYLEOLtTqv1dKMgvrbzVEfFLT1vBlD9uFOKQGLWjPvE jIq8lNq1jHIFlSQJXJSMjE9chY+zgFPV/Syj4sxBxZvybjdLuUtBWlIkHtb4Bi9B oYeagDL38RKUODl4cM+dW5xiQ7yT+Z4YUwXOjY3JnJBqU6Ql5ovQ17yeuSp/gWjj j/QBA2JtU2lArX29KnHCiPmwtN1frpPNTgidlXpPs4a9Qu1zijJ8C8T3ief4DjfK +Cn9zHrpIRAgMkLnYgR1aes6fH522MlmScNZRWHNy84MoZhdwN6O6iKSgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF1EqNyqHdbWR1hetVTg4zsd8K6TMB8GA1UdIwQY MBaAFGjF8Js6kDlQ8/zRslUIbt5IdusRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU1Yd216cVFPVkR6X05HeVZRaHUza2gyNnhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9lZmExOGQtMDkwNy00NTkzLWFiYjgt OTQ4MDI2MzZiYWQ5LzEvWFVTbzNLb2QxdFpIV0Y2MVZPRGpPeDN3cnBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9lZmExOGQtMDkwNy00NTkzLWFiYjgtOTQ4MDI2MzZiYWQ5 LzEvYU1Yd216cVFPVkR6X05HeVZRaHUza2gyNnhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwd1UMA0G CSqGSIb3DQEBCwUAA4IBAQB3EOw6UxGae7Hi7htjYt2Yz7I3iWoVon9hMBxxZ5lD toY0TbAQ3BskTikJjB7XGd1+xaqMnQV63adoxXt8ct+q6OS3r/Pqz0ZMTw9cJpAG TOTB0x09p1w2MJSvEneTbrXzUBHwkSY+OIxy4CwpeiaKE2wsMBb7AC87UhKu5S+O ZnGEr7i9JiVDT9HG2Zb6q+NJWBFusktTXMwXpGM4QdH+rInVaj/unBaQvmMShp0v GI2Jm7HJi76p8NKrpj0C/4MWUO0f0GTkuiWvR1pz13WHRpMlQ1e3gZoyni9hH3Cp 00UjNFibk5GEJ+4YuKdVWuawb1KNEu9kNVa18IQmtCS0 -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:37 2026 by rpki-client