This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/xhe1ftuP4eIHL857T_L-xO3GLdU.roa File: xhe1ftuP4eIHL857T_L-xO3GLdU.roa (raw, json) Hash identifier: jxlOSVGh50KvsEL1junXJzFdVjHdQEvGO3d67LIevSg= Subject key identifier: C6:17:B5:7E:DB:8F:E1:E2:07:2F:CE:7B:4F:F2:FE:C4:ED:C6:2D:D5 Certificate issuer: /CN=24a918f1b10ec1d660b1cfcb1bfe196c2feb06bf Certificate serial: 019B77C756B62BA6291D2F8590D682DD2609 Authority key identifier: 24:A9:18:F1:B1:0E:C1:D6:60:B1:CF:CB:1B:FE:19:6C:2F:EB:06:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/xhe1ftuP4eIHL857T_L-xO3GLdU.roa Signing time: Thu 01 Jan 2026 04:18:31 +0000 ROA not before: Thu 01 Jan 2026 04:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 193.16.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 16:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:56:b6:2b:a6:29:1d:2f:85:90:d6:82:dd:26:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24a918f1b10ec1d660b1cfcb1bfe196c2feb06bf Validity Not Before: Jan 1 04:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c617b57edb8fe1e2072fce7b4ff2fec4edc62dd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a6:94:2f:07:44:e2:b4:05:54:13:03:e3:1d: 64:44:5e:25:ae:69:3a:0a:bb:2c:44:3f:11:b0:45: 74:74:d4:ea:ba:ed:26:06:64:de:c9:05:df:49:c4: 17:30:e5:00:18:a2:d7:86:68:de:e3:2a:9d:d2:3c: 1a:7d:28:35:53:83:f7:8f:ce:d7:19:26:98:25:11: 55:77:c1:75:aa:fc:1b:73:e8:e3:f0:8f:e0:b9:65: cd:d4:38:63:10:e3:50:32:10:a9:b2:eb:12:71:d9: db:5b:4c:8c:0f:40:a1:b2:48:81:05:0a:18:3c:56: 1b:2f:62:6a:d6:d3:b8:46:2e:02:f7:89:f5:7d:dc: bd:57:7e:0b:47:c5:19:06:25:d8:f1:39:53:ad:74: a4:f7:9c:7b:11:4f:cf:96:da:19:f8:bd:ba:f9:a1: 80:e8:bb:16:16:03:6d:82:1f:47:3d:6f:b3:16:c0: 16:f6:78:80:20:b6:31:51:a0:cc:60:a7:f4:d0:a5: 40:44:28:f6:bc:4a:bd:86:26:e4:c6:92:d3:5d:ca: 08:3d:70:3a:fc:41:27:4d:c2:95:a8:62:d5:c0:15: 05:76:a6:cd:7d:cf:16:0b:e1:37:73:2d:89:c3:9f: e4:1b:17:a8:3e:ee:8d:9c:41:d5:8f:ea:2e:fb:56: f5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:17:B5:7E:DB:8F:E1:E2:07:2F:CE:7B:4F:F2:FE:C4:ED:C6:2D:D5 X509v3 Authority Key Identifier: keyid:24:A9:18:F1:B1:0E:C1:D6:60:B1:CF:CB:1B:FE:19:6C:2F:EB:06:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/xhe1ftuP4eIHL857T_L-xO3GLdU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.16.22.0/24 Signature Algorithm: sha256WithRSAEncryption 92:6c:e1:fe:1f:e1:7b:53:02:21:5d:f1:f0:f5:12:42:27:00: ba:cf:b8:70:2e:91:48:d3:b3:50:98:53:7b:d2:1a:49:92:10: bb:29:d8:cc:ca:60:12:9c:30:9c:5b:ad:fe:c6:49:0d:e4:0b: 2e:c8:ec:bf:88:ce:ad:d6:14:e2:10:e8:e2:3e:b4:ad:c0:e7: 51:c7:2a:e4:23:fa:0b:91:ee:8c:23:76:b6:8d:bf:d8:7f:72: fd:b1:e4:12:b0:8c:45:04:ec:54:43:d0:c6:53:8a:08:a3:4d: 72:41:4f:e5:2a:5c:f6:43:32:ba:98:f9:56:7e:b0:4f:97:bb: af:6f:f7:4b:e7:5a:03:95:8c:36:fe:09:2c:42:75:61:ac:f9: 8a:3f:5a:cc:67:bd:34:e7:9a:e2:48:14:72:6d:53:2e:05:45: fc:2b:e1:54:46:f5:ea:bd:b7:4b:2c:05:55:c0:23:38:19:1b: bc:bf:fb:c2:34:f2:ab:d2:cd:36:e3:3c:87:5c:11:6d:0f:8a: a8:cb:e3:2d:b4:8a:d4:34:70:d9:f6:8f:df:ac:b8:0a:63:13: c1:e9:25:15:77:3e:4e:6c:bc:5a:d8:05:5d:0b:f5:b7:cd:5e: c7:81:96:3a:71:bd:f2:dc:10:4e:b7:9d:fa:cf:92:b7:43:5b: ef:71:be:32 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x1a2K6YpHS+FkNaC3SYJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0YTkxOGYxYjEwZWMxZDY2MGIxY2ZjYjFiZmUxOTZjMmZl YjA2YmYwHhcNMjYwMTAxMDQxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjE3YjU3ZWRiOGZlMWUyMDcyZmNlN2I0ZmYyZmVjNGVkYzYyZGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06aULwdE4rQFVBMD4x1kRF4lrmk6 CrssRD8RsEV0dNTquu0mBmTeyQXfScQXMOUAGKLXhmje4yqd0jwafSg1U4P3j87X GSaYJRFVd8F1qvwbc+jj8I/guWXN1DhjEONQMhCpsusScdnbW0yMD0ChskiBBQoY PFYbL2Jq1tO4Ri4C94n1fdy9V34LR8UZBiXY8TlTrXSk95x7EU/PltoZ+L26+aGA 6LsWFgNtgh9HPW+zFsAW9niAILYxUaDMYKf00KVARCj2vEq9hibkxpLTXcoIPXA6 /EEnTcKVqGLVwBUFdqbNfc8WC+E3cy2Jw5/kGxeoPu6NnEHVj+ou+1b1WwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMYXtX7bj+HiBy/Oe0/y/sTtxi3VMB8GA1UdIwQY MBaAFCSpGPGxDsHWYLHPyxv+GWwv6wa/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSktrWThiRU93ZFpnc2NfTEdfNFpiQ19yQnI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xZjVmZWItN2FjZi00YzFkLThlOWYt MWYyNjJkOWM5YjA3LzEveGhlMWZ0dVA0ZUlITDg1N1RfTC14TzNHTGRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8xZjVmZWItN2FjZi00YzFkLThlOWYtMWYyNjJkOWM5YjA3 LzEvSktrWThiRU93ZFpnc2NfTEdfNFpiQ19yQnI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRAWMA0G CSqGSIb3DQEBCwUAA4IBAQCSbOH+H+F7UwIhXfHw9RJCJwC6z7hwLpFI07NQmFN7 0hpJkhC7KdjMymASnDCcW63+xkkN5AsuyOy/iM6t1hTiEOjiPrStwOdRxyrkI/oL ke6MI3a2jb/Yf3L9seQSsIxFBOxUQ9DGU4oIo01yQU/lKlz2QzK6mPlWfrBPl7uv b/dL51oDlYw2/gksQnVhrPmKP1rMZ70055riSBRybVMuBUX8K+FURvXqvbdLLAVV wCM4GRu8v/vCNPKr0s024zyHXBFtD4qoy+MttIrUNHDZ9o/frLgKYxPB6SUVdz5O bLxa2AVdC/W3zV7HgZY6cb3y3BBOt536z5K3Q1vvcb4y -----END CERTIFICATE-----Generated at Fri Jan 9 00:58:29 2026 by rpki-client