This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/762e75-4821-466e-a94e-769bdd172a2b/1/xXO4hAuj6CV2n-3NGJk-DbRFOdI.roa File: xXO4hAuj6CV2n-3NGJk-DbRFOdI.roa (raw, json) Hash identifier: dzRHmEV436bNSbP8ukf6XV97axT5lZpoDEiJJC7vBXw= Subject key identifier: C5:73:B8:84:0B:A3:E8:25:76:9F:ED:CD:18:99:3E:0D:B4:45:39:D2 Certificate issuer: /CN=9f9a958e3c204a6d4e5536ec43765d04d1b0c96a Certificate serial: 019BFA5B717A89584986BCB23572A59C0C41 Authority key identifier: 9F:9A:95:8E:3C:20:4A:6D:4E:55:36:EC:43:76:5D:04:D1:B0:C9:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/762e75-4821-466e-a94e-769bdd172a2b/1/xXO4hAuj6CV2n-3NGJk-DbRFOdI.roa Signing time: Mon 26 Jan 2026 12:50:55 +0000 ROA not before: Mon 26 Jan 2026 12:50:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3209 IP address blocks: 194.113.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/762e75-4821-466e-a94e-769bdd172a2b/1/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/762e75-4821-466e-a94e-769bdd172a2b/1/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.mft rsync://rpki.ripe.net/repository/DEFAULT/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:50:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:5b:71:7a:89:58:49:86:bc:b2:35:72:a5:9c:0c:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f9a958e3c204a6d4e5536ec43765d04d1b0c96a Validity Not Before: Jan 26 12:50:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c573b8840ba3e825769fedcd18993e0db44539d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:aa:63:2d:5c:82:4c:a4:eb:94:57:db:c8:14: b7:a7:7b:e7:5b:62:68:3d:6e:89:d6:ef:81:36:31: 0d:18:df:74:5d:d1:e0:eb:e5:20:21:d8:fc:52:ce: 2c:90:b4:b5:df:cf:9a:7a:b9:de:54:6f:99:61:8e: de:ee:e9:ba:41:b9:6b:e5:23:a0:22:f9:40:66:a3: ce:22:fc:61:4b:34:e6:38:e4:83:68:58:59:9c:e2: 7e:5c:1a:26:a6:30:72:29:54:b7:06:c0:ff:0c:f6: 1c:86:5a:10:48:76:a4:a8:26:09:b2:18:6a:b5:87: 26:e1:87:fc:d8:cc:14:35:2e:ab:15:3f:c5:44:60: 67:44:1b:d2:bf:6c:2c:92:98:c1:5c:51:01:fb:fa: ae:19:3a:b1:fa:a3:a6:1f:cd:f0:f6:2e:dd:1b:14: 21:6f:32:8b:56:66:8a:bb:08:a2:2c:b4:8e:eb:b4: ea:84:e9:94:3b:80:2c:6e:ba:8c:60:ad:bd:30:a5: 91:a8:35:52:05:d8:9e:6c:14:ba:e0:f0:8a:37:ce: 34:12:66:6a:0d:f1:05:43:70:95:27:6e:fc:b8:e2: 20:dc:20:a3:2c:27:8f:df:16:e1:b7:d2:ec:32:a7: 96:9e:cb:a0:7d:14:fe:eb:94:1d:fb:07:2b:64:ec: cc:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:73:B8:84:0B:A3:E8:25:76:9F:ED:CD:18:99:3E:0D:B4:45:39:D2 X509v3 Authority Key Identifier: keyid:9F:9A:95:8E:3C:20:4A:6D:4E:55:36:EC:43:76:5D:04:D1:B0:C9:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/762e75-4821-466e-a94e-769bdd172a2b/1/xXO4hAuj6CV2n-3NGJk-DbRFOdI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/762e75-4821-466e-a94e-769bdd172a2b/1/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.113.247.0/24 Signature Algorithm: sha256WithRSAEncryption 89:5a:f6:18:d2:3d:9b:20:92:55:c1:62:b2:86:83:90:2e:33: 26:fe:5c:14:51:2a:e2:82:df:cc:78:ec:71:7e:a7:55:34:7f: b6:99:3a:12:49:3a:78:ec:7e:ac:b6:bc:c4:8e:20:2b:ec:ac: 2e:4b:a9:64:75:ea:2d:a9:72:9b:f6:4c:85:c0:3a:2d:32:8f: b7:88:77:35:ec:16:55:24:df:6d:56:f0:f7:a9:01:4c:66:99: fd:45:12:cc:cf:8f:71:56:3d:27:2b:55:56:6f:82:d9:ff:52: 1e:a0:86:f4:6b:3f:ca:b7:6d:9e:25:aa:5e:e2:b4:12:e4:8a: 11:dc:1c:f1:cb:d9:40:b0:05:e7:3d:ce:95:4e:8c:57:d3:1b: 61:63:b7:c4:38:58:48:cf:ec:01:15:2b:6a:eb:9c:4b:3c:2c: 0f:3f:a9:3e:72:a8:78:82:ca:57:b1:5c:c6:95:c7:2a:6e:9f: 38:7a:7c:c4:d0:c2:80:d7:3b:2b:de:1d:73:2c:c1:e3:47:53: 31:df:ca:c6:00:cd:e3:42:0b:39:bf:d1:79:ae:ac:0f:a1:a8: bc:a2:36:bb:90:2b:30:27:60:31:91:bc:13:48:ce:d7:ae:58: ed:cc:74:22:95:e3:dd:ef:71:59:aa:76:2c:3a:2d:9f:34:5e: 74:d9:e8:92 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZv6W3F6iVhJhryyNXKlnAxBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmOWE5NThlM2MyMDRhNmQ0ZTU1MzZlYzQzNzY1ZDA0ZDFi MGM5NmEwHhcNMjYwMTI2MTI1MDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTczYjg4NDBiYTNlODI1NzY5ZmVkY2QxODk5M2UwZGI0NDUzOWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKpjLVyCTKTrlFfbyBS3p3vnW2Jo PW6J1u+BNjENGN90XdHg6+UgIdj8Us4skLS138+aerneVG+ZYY7e7um6Qblr5SOg IvlAZqPOIvxhSzTmOOSDaFhZnOJ+XBompjByKVS3BsD/DPYchloQSHakqCYJshhq tYcm4Yf82MwUNS6rFT/FRGBnRBvSv2wskpjBXFEB+/quGTqx+qOmH83w9i7dGxQh bzKLVmaKuwiiLLSO67TqhOmUO4AsbrqMYK29MKWRqDVSBdiebBS64PCKN840EmZq DfEFQ3CVJ278uOIg3CCjLCeP3xbht9LsMqeWnsugfRT+65Qd+wcrZOzMHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMVzuIQLo+gldp/tzRiZPg20RTnSMB8GA1UdIwQY MBaAFJ+alY48IEptTlU27EN2XQTRsMlqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjVxVmpqd2dTbTFPVlRic1EzWmRCTkd3eVdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS83NjJlNzUtNDgyMS00NjZlLWE5NGUt NzY5YmRkMTcyYTJiLzEveFhPNGhBdWo2Q1Yybi0zTkdKay1EYlJGT2RJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS83NjJlNzUtNDgyMS00NjZlLWE5NGUtNzY5YmRkMTcyYTJi LzEvbjVxVmpqd2dTbTFPVlRic1EzWmRCTkd3eVdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwnH3MA0G CSqGSIb3DQEBCwUAA4IBAQCJWvYY0j2bIJJVwWKyhoOQLjMm/lwUUSrigt/MeOxx fqdVNH+2mToSSTp47H6strzEjiAr7KwuS6lkdeotqXKb9kyFwDotMo+3iHc17BZV JN9tVvD3qQFMZpn9RRLMz49xVj0nK1VWb4LZ/1IeoIb0az/Kt22eJape4rQS5IoR 3Bzxy9lAsAXnPc6VToxX0xthY7fEOFhIz+wBFStq65xLPCwPP6k+cqh4gspXsVzG lccqbp84enzE0MKA1zsr3h1zLMHjR1Mx38rGAM3jQgs5v9F5rqwPoai8oja7kCsw J2AxkbwTSM7XrljtzHQilePd73FZqnYsOi2fNF502eiS -----END CERTIFICATE-----Generated at Mon Jan 26 21:32:15 2026 by rpki-client