This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/xBTFrNqE5n1a31XsQMAD6sbQOYM.roa File: xBTFrNqE5n1a31XsQMAD6sbQOYM.roa (raw, json) Hash identifier: zRWJGHJjyWJeaAgeQYSPsfHjC7tcss/AD8IKE1T7RF4= Subject key identifier: C4:14:C5:AC:DA:84:E6:7D:5A:DF:55:EC:40:C0:03:EA:C6:D0:39:83 Certificate issuer: /CN=3c1247624a3005c6fcf6612bac99cab04c60126a Certificate serial: 019B79ECDC9588AA04A1CEA5D2712D3F5277 Authority key identifier: 3C:12:47:62:4A:30:05:C6:FC:F6:61:2B:AC:99:CA:B0:4C:60:12:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBJHYkowBcb89mErrJnKsExgEmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/xBTFrNqE5n1a31XsQMAD6sbQOYM.roa Signing time: Thu 01 Jan 2026 14:18:44 +0000 ROA not before: Thu 01 Jan 2026 14:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35819 IP address blocks: 195.242.196.0/24 maxlen: 24 195.242.197.0/24 maxlen: 24 195.242.198.0/24 maxlen: 24 195.242.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft rsync://rpki.ripe.net/repository/DEFAULT/PBJHYkowBcb89mErrJnKsExgEmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 11:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:dc:95:88:aa:04:a1:ce:a5:d2:71:2d:3f:52:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c1247624a3005c6fcf6612bac99cab04c60126a Validity Not Before: Jan 1 14:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c414c5acda84e67d5adf55ec40c003eac6d03983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8f:25:e5:00:6e:b7:82:01:a4:d3:d8:87:41: fb:38:00:a8:23:a7:6e:f0:da:aa:62:fb:30:40:f4: 1b:95:c3:4c:30:97:49:b2:fe:7b:dc:2e:ec:a0:a1: f0:a8:74:c4:5b:8e:ae:e5:3e:fd:9c:70:1f:ed:58: 11:13:aa:4e:75:69:d4:de:5c:06:4f:69:5c:46:8e: b3:7d:0f:54:79:d3:9e:9a:db:5c:04:0e:8a:74:36: 43:bb:ff:32:85:d7:2f:2e:ac:80:a5:b7:b7:c5:df: cb:7f:5b:5e:96:91:fa:06:e0:22:d2:75:f9:02:da: f4:89:10:ba:d1:1b:1f:d4:b8:32:cb:0d:b8:ea:fd: 07:65:5f:fc:00:07:ce:27:d2:c6:83:b6:3f:a9:28: 68:96:39:38:26:e6:5c:36:b1:f1:9b:3e:ce:56:c1: cf:65:f0:44:4f:16:9e:62:e5:d8:c9:d9:6e:ea:15: 33:97:5c:0e:b3:fc:1f:1d:3b:7e:95:91:b1:c2:74: 35:16:3a:e4:ba:5a:73:c9:e5:6f:94:40:3c:a3:dc: 0d:ee:cb:3d:b3:8b:a4:a2:ba:8a:72:05:82:fd:aa: 86:53:1f:a4:bd:f7:7d:e9:ce:a5:f5:41:a1:ad:12: b8:62:48:dc:de:e9:b2:db:46:f1:8b:5d:72:20:3c: 05:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:14:C5:AC:DA:84:E6:7D:5A:DF:55:EC:40:C0:03:EA:C6:D0:39:83 X509v3 Authority Key Identifier: keyid:3C:12:47:62:4A:30:05:C6:FC:F6:61:2B:AC:99:CA:B0:4C:60:12:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBJHYkowBcb89mErrJnKsExgEmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/xBTFrNqE5n1a31XsQMAD6sbQOYM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.242.196.0/22 Signature Algorithm: sha256WithRSAEncryption 29:6b:cd:79:6d:03:9c:68:2a:a6:91:bb:08:81:e6:c8:8f:67: 3f:1a:9a:c4:f0:ee:1c:61:e6:43:55:44:63:c2:64:e5:80:f2: 81:30:1e:66:4e:c2:81:81:d4:8a:a8:bd:a6:f8:3b:4e:41:58: 4b:c5:79:fb:78:f0:bc:e2:e8:09:c0:3c:b1:06:d2:91:27:ab: 45:78:fd:02:4e:a7:77:ee:fa:8d:84:e3:0e:6d:a5:fc:c9:b8: a5:aa:45:a7:b0:b1:87:3a:3a:0f:e9:02:50:a7:6b:0d:b0:3a: af:89:1d:b8:7e:11:35:34:5a:06:58:89:7f:00:e2:f1:5e:8c: 73:f6:a7:a5:28:44:05:27:73:7e:80:56:bc:2b:ce:99:a5:1d: c3:77:7a:1a:9f:82:11:42:77:ea:4c:f9:b8:11:61:45:dc:b9: 32:b1:af:ff:20:ec:58:a0:92:3a:b0:c4:4f:fe:1a:29:54:2f: 71:93:c8:0d:1c:49:d4:f8:c3:8c:95:7d:ab:85:01:5d:19:ef: ae:ed:46:f2:0f:12:34:c1:8c:3f:b6:cc:aa:7d:87:2d:15:b4: ac:92:88:b5:1b:39:61:d7:5c:55:fa:01:d4:71:e7:50:c1:14: c1:55:6b:fd:0f:36:92:06:d5:c2:5a:5a:1a:5a:22:25:43:ac: 95:7c:e5:28 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57NyViKoEoc6l0nEtP1J3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMTI0NzYyNGEzMDA1YzZmY2Y2NjEyYmFjOTljYWIwNGM2 MDEyNmEwHhcNMjYwMTAxMTQxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDE0YzVhY2RhODRlNjdkNWFkZjU1ZWM0MGMwMDNlYWM2ZDAzOTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqY8l5QBut4IBpNPYh0H7OACoI6du 8NqqYvswQPQblcNMMJdJsv573C7soKHwqHTEW46u5T79nHAf7VgRE6pOdWnU3lwG T2lcRo6zfQ9UedOemttcBA6KdDZDu/8yhdcvLqyApbe3xd/Lf1telpH6BuAi0nX5 Atr0iRC60Rsf1Lgyyw246v0HZV/8AAfOJ9LGg7Y/qSholjk4JuZcNrHxmz7OVsHP ZfBETxaeYuXYydlu6hUzl1wOs/wfHTt+lZGxwnQ1FjrkulpzyeVvlEA8o9wN7ss9 s4ukorqKcgWC/aqGUx+kvfd96c6l9UGhrRK4Ykjc3umy20bxi11yIDwFRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMQUxazahOZ9Wt9V7EDAA+rG0DmDMB8GA1UdIwQY MBaAFDwSR2JKMAXG/PZhK6yZyrBMYBJqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEJKSFlrb3dCY2I4OW1FcnJKbktzRXhnRW1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8wMzYzZjAtZWMwZC00OGE2LTljZWIt ZThiZDJkYmE5N2FiLzEveEJURnJOcUU1bjFhMzFYc1FNQUQ2c2JRT1lNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8wMzYzZjAtZWMwZC00OGE2LTljZWItZThiZDJkYmE5N2Fi LzEvUEJKSFlrb3dCY2I4OW1FcnJKbktzRXhnRW1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw/LEMA0G CSqGSIb3DQEBCwUAA4IBAQApa815bQOcaCqmkbsIgebIj2c/GprE8O4cYeZDVURj wmTlgPKBMB5mTsKBgdSKqL2m+DtOQVhLxXn7ePC84ugJwDyxBtKRJ6tFeP0CTqd3 7vqNhOMObaX8ybilqkWnsLGHOjoP6QJQp2sNsDqviR24fhE1NFoGWIl/AOLxXoxz 9qelKEQFJ3N+gFa8K86ZpR3Dd3oan4IRQnfqTPm4EWFF3Lkysa//IOxYoJI6sMRP /hopVC9xk8gNHEnU+MOMlX2rhQFdGe+u7UbyDxI0wYw/tsyqfYctFbSskoi1Gzlh 11xV+gHUcedQwRTBVWv9DzaSBtXCWloaWiIlQ6yVfOUo -----END CERTIFICATE-----Generated at Fri Jan 30 18:25:32 2026 by rpki-client