This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/xgwdWJ3OwBr9zCt1II-HtOKtb_g.roa File: xgwdWJ3OwBr9zCt1II-HtOKtb_g.roa (raw, json) Hash identifier: LI07T8x4WOMtmCDk/CQyntDelPjiSN5ovqKx6m4pWV0= Subject key identifier: C6:0C:1D:58:9D:CE:C0:1A:FD:CC:2B:75:20:8F:87:B4:E2:AD:6F:F8 Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c Certificate serial: 019B7B355161C867D2E3D40558E0A6EAB0ED Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/xgwdWJ3OwBr9zCt1II-HtOKtb_g.roa Signing time: Thu 01 Jan 2026 20:17:30 +0000 ROA not before: Thu 01 Jan 2026 20:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.74.54.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:51:61:c8:67:d2:e3:d4:05:58:e0:a6:ea:b0:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c Validity Not Before: Jan 1 20:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c60c1d589dcec01afdcc2b75208f87b4e2ad6ff8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:01:d6:d9:65:0e:c4:89:42:73:4a:8d:e6:8c: c8:c5:7a:c6:36:d1:08:99:13:7d:23:0c:96:87:56: 11:c8:6b:cc:60:6f:46:21:35:f4:7e:35:09:f1:82: 8f:ff:0d:ce:88:7d:bc:89:4a:94:7f:c2:8d:3b:b3: 78:0f:8a:44:3c:a8:5b:f6:d3:31:98:d1:e4:3a:28: 90:c2:75:56:7c:d3:03:50:be:99:dd:47:6c:fa:85: 18:e8:23:fb:e1:cd:d7:6b:e5:0c:b5:dc:bb:55:12: bc:53:e8:d9:9f:3b:e2:e8:20:29:a8:02:9b:0d:8c: 8f:e0:85:2a:22:c1:8a:ef:c5:bf:82:b2:57:18:dd: 4b:cc:45:f1:76:c8:31:02:75:38:fc:2b:51:bf:3b: 7c:c8:4c:0b:dd:9e:cb:87:d0:fd:f5:0a:6d:9a:f8: 9a:d0:39:25:cb:f1:91:df:ea:e8:64:20:e4:e5:0d: 2c:fd:a4:72:53:ef:6e:af:40:e2:22:8d:82:d9:73: d4:67:f4:a7:76:20:4d:d5:d9:1b:c1:3e:90:a5:48: 9c:f2:03:1c:cd:7f:cf:fe:0b:84:48:5d:56:c4:36: 00:da:fe:d8:f7:68:4b:9e:c5:a3:d6:6d:fc:61:90: 9f:fe:86:2d:3e:d8:21:dc:80:0b:66:1f:75:a4:8e: d2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:0C:1D:58:9D:CE:C0:1A:FD:CC:2B:75:20:8F:87:B4:E2:AD:6F:F8 X509v3 Authority Key Identifier: keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/xgwdWJ3OwBr9zCt1II-HtOKtb_g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.74.54.0/23 Signature Algorithm: sha256WithRSAEncryption 9e:64:1a:c4:78:78:6f:c4:51:71:60:3c:b2:de:01:02:0f:05: 20:06:f7:f1:56:0c:a0:1e:d9:5b:96:39:d2:2d:f7:b2:c7:2d: dd:ca:38:33:96:67:89:1c:bc:35:6c:e1:d2:8b:dc:f7:6e:f6: 03:77:06:4f:6f:0c:27:29:bc:47:bb:f6:5d:c7:89:44:1d:76: 85:70:6b:ac:fc:b0:ec:bb:e8:c8:78:50:c9:5c:8b:a2:89:db: 71:d7:e7:d8:f3:f8:ef:d5:04:21:6f:bd:3b:49:b9:0d:19:18: 6d:e1:1b:98:59:98:ac:c9:a2:1b:7a:9e:9d:59:3c:5c:1f:c8: a5:45:c2:2f:23:95:36:44:1f:0c:99:bc:9e:5e:32:ae:db:59: 4a:c7:a2:5f:2d:73:e3:61:c2:c5:a2:18:31:de:73:e1:37:4b: 93:a9:44:da:b2:35:0c:9c:5e:0d:d0:ff:3e:84:89:ed:9e:fd: 45:2a:2b:c0:f2:5c:b1:2f:5f:b7:12:be:28:c1:96:63:e5:d1: d9:a1:9b:8c:91:6b:f9:15:02:35:8c:e6:d8:73:e1:ec:a9:60: a8:58:02:c9:66:66:09:35:61:a7:66:d8:3d:5a:ef:ab:bc:d0: b8:76:9e:f0:70:ec:17:84:00:4b:96:24:a4:0c:21:0a:e9:ae: c1:79:20:da -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NVFhyGfS49QFWOCm6rDtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MmY4OTE5ZTZiYzFlZjU2NjM0ODkwMThmYzg3NWJlMzRj MGYyNGMwHhcNMjYwMTAxMjAxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjBjMWQ1ODlkY2VjMDFhZmRjYzJiNzUyMDhmODdiNGUyYWQ2ZmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgHW2WUOxIlCc0qN5ozIxXrGNtEI mRN9IwyWh1YRyGvMYG9GITX0fjUJ8YKP/w3OiH28iUqUf8KNO7N4D4pEPKhb9tMx mNHkOiiQwnVWfNMDUL6Z3Uds+oUY6CP74c3Xa+UMtdy7VRK8U+jZnzvi6CApqAKb DYyP4IUqIsGK78W/grJXGN1LzEXxdsgxAnU4/CtRvzt8yEwL3Z7Lh9D99Qptmvia 0Dkly/GR3+roZCDk5Q0s/aRyU+9ur0DiIo2C2XPUZ/SndiBN1dkbwT6QpUic8gMc zX/P/guESF1WxDYA2v7Y92hLnsWj1m38YZCf/oYtPtgh3IALZh91pI7S7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMYMHVidzsAa/cwrdSCPh7TirW/4MB8GA1UdIwQY MBaAFDUviRnmvB71ZjSJAY/Idb40wPJMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9jZjk0M2QtYzkyMS00ZWY3LTlhYTAt ZTNmY2IyM2UzNDM4LzEveGd3ZFdKM093QnI5ekN0MUlJLUh0T0t0Yl9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9jZjk0M2QtYzkyMS00ZWY3LTlhYTAtZTNmY2IyM2UzNDM4 LzEvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuUo2MA0G CSqGSIb3DQEBCwUAA4IBAQCeZBrEeHhvxFFxYDyy3gECDwUgBvfxVgygHtlbljnS Lfeyxy3dyjgzlmeJHLw1bOHSi9z3bvYDdwZPbwwnKbxHu/Zdx4lEHXaFcGus/LDs u+jIeFDJXIuiidtx1+fY8/jv1QQhb707SbkNGRht4RuYWZisyaIbep6dWTxcH8il RcIvI5U2RB8MmbyeXjKu21lKx6JfLXPjYcLFohgx3nPhN0uTqUTasjUMnF4N0P8+ hIntnv1FKivA8lyxL1+3Er4owZZj5dHZoZuMkWv5FQI1jObYc+HsqWCoWALJZmYJ NWGnZtg9Wu+rvNC4dp7wcOwXhABLliSkDCEK6a7BeSDa -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:16 2026 by rpki-client