This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/X_8Np37khTcPCEtRXHbNQfqvQNE.roa File: X_8Np37khTcPCEtRXHbNQfqvQNE.roa (raw, json) Hash identifier: XNLBBBK7IAMNXci8RcPDaNEkuHX48HSzOY+bMxN50u4= Subject key identifier: 5F:FF:0D:A7:7E:E4:85:37:0F:08:4B:51:5C:76:CD:41:FA:AF:40:D1 Certificate issuer: /CN=d2dd4ddd536f18a872cbac15e589542aedcd0737 Certificate serial: 019B7AC871BA236B1CDF6E644558DB4EA467 Authority key identifier: D2:DD:4D:DD:53:6F:18:A8:72:CB:AC:15:E5:89:54:2A:ED:CD:07:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/X_8Np37khTcPCEtRXHbNQfqvQNE.roa Signing time: Thu 01 Jan 2026 18:18:35 +0000 ROA not before: Thu 01 Jan 2026 18:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206388 IP address blocks: 193.176.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:71:ba:23:6b:1c:df:6e:64:45:58:db:4e:a4:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2dd4ddd536f18a872cbac15e589542aedcd0737 Validity Not Before: Jan 1 18:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5fff0da77ee485370f084b515c76cd41faaf40d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:74:63:d6:f3:fc:6c:d8:cd:64:4f:4f:bf:4b: 21:96:9e:ae:c8:0a:9c:b8:b2:03:f3:66:89:e0:ea: 6a:11:93:88:25:d5:7c:a2:c0:5a:16:b9:61:be:0f: 3f:25:3c:cb:a9:85:00:0c:5b:fc:c9:8e:44:be:d2: 7d:93:5e:c3:43:48:d6:db:8d:48:44:cd:0c:be:60: be:20:d4:95:90:5d:c3:2e:97:e5:a3:6c:e5:62:b6: 6d:9f:e0:f2:7f:08:d3:61:c9:44:1c:39:1e:80:6a: 08:8e:f0:49:ad:26:2f:2f:e5:3c:98:a9:49:07:87: 2f:62:9e:e5:42:b1:19:2f:d9:8c:48:65:9e:2f:0d: 8a:8e:d2:c0:c3:47:45:e1:f8:a0:21:3c:dd:0f:ad: 10:17:9f:c8:13:b2:65:14:79:3b:d9:04:91:84:65: d3:c6:55:4e:9f:8f:6d:4c:44:43:2a:bd:a7:6d:90: f8:8e:ec:1d:41:9b:42:cf:9e:64:4b:1d:54:12:0d: 88:18:1b:45:71:10:f0:03:b0:7a:3d:2c:d2:8e:90: 86:b9:89:c2:29:d6:95:95:eb:55:65:45:db:e3:91: 5e:32:7d:ae:d1:d1:8e:6c:08:45:4a:e6:e5:5f:19: b9:43:7e:ee:5d:49:49:f5:3b:ac:10:78:b2:1a:cf: 40:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:FF:0D:A7:7E:E4:85:37:0F:08:4B:51:5C:76:CD:41:FA:AF:40:D1 X509v3 Authority Key Identifier: keyid:D2:DD:4D:DD:53:6F:18:A8:72:CB:AC:15:E5:89:54:2A:ED:CD:07:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/X_8Np37khTcPCEtRXHbNQfqvQNE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.176.97.0/24 Signature Algorithm: sha256WithRSAEncryption 77:b6:d3:a1:85:85:f6:60:6e:f0:c5:62:e4:cb:d6:69:7c:3a: 16:cc:73:bf:90:47:f4:ce:74:ec:4a:20:ea:ba:30:86:4e:06: 7c:25:5f:7f:da:3a:1c:82:f3:66:15:7c:64:f0:cf:70:a9:83: 11:cc:98:19:2b:5b:6d:9d:f1:c0:bf:cb:cb:bf:f9:1b:9c:b8: 3e:c4:76:e1:43:f0:0d:3b:f9:ab:75:82:8a:99:27:cf:8b:35: f4:76:a8:57:28:61:b7:3f:47:d8:a1:55:8a:25:bb:ce:01:69: 31:95:77:7a:50:d3:67:a5:ec:20:1f:74:04:f2:42:06:6e:0f: bb:a4:20:de:c4:5e:9a:a3:81:92:05:00:f8:b6:64:ec:4b:ed: d0:ce:8e:ca:72:f7:22:b2:d8:60:c6:c1:55:a9:3a:00:34:7b: f7:da:14:11:98:51:ca:41:65:fe:97:fc:09:da:cc:a1:79:0c: ea:6b:a5:35:57:75:74:c3:f3:11:7e:99:5b:be:61:f6:20:38: 7e:28:31:40:34:e8:c3:c0:71:50:21:57:49:21:7e:1a:fb:3a: 34:a7:f9:a1:b6:ca:a5:47:c8:ba:e2:9e:75:b5:cf:cc:67:03: 46:c7:73:a8:99:a1:94:1f:03:b7:44:ef:fa:00:35:c3:8a:18: 58:5b:52:fa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yHG6I2sc325kRVjbTqRnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyZGQ0ZGRkNTM2ZjE4YTg3MmNiYWMxNWU1ODk1NDJhZWRj ZDA3MzcwHhcNMjYwMTAxMTgxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmZmMGRhNzdlZTQ4NTM3MGYwODRiNTE1Yzc2Y2Q0MWZhYWY0MGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHRj1vP8bNjNZE9Pv0shlp6uyAqc uLID82aJ4OpqEZOIJdV8osBaFrlhvg8/JTzLqYUADFv8yY5EvtJ9k17DQ0jW241I RM0MvmC+INSVkF3DLpflo2zlYrZtn+DyfwjTYclEHDkegGoIjvBJrSYvL+U8mKlJ B4cvYp7lQrEZL9mMSGWeLw2KjtLAw0dF4figITzdD60QF5/IE7JlFHk72QSRhGXT xlVOn49tTERDKr2nbZD4juwdQZtCz55kSx1UEg2IGBtFcRDwA7B6PSzSjpCGuYnC KdaVletVZUXb45FeMn2u0dGObAhFSublXxm5Q37uXUlJ9TusEHiyGs9AuwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF//Dad+5IU3DwhLUVx2zUH6r0DRMB8GA1UdIwQY MBaAFNLdTd1TbxiocsusFeWJVCrtzQc3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHQxTjNWTnZHS2h5eTZ3VjVZbFVLdTNOQnpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9lY2EwMWMtNTIzMi00N2M1LWIwMTQt NWIxMzJmN2QzYjQ5LzEvWF84TnAzN2toVGNQQ0V0UlhIYk5RZnF2UU5FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9lY2EwMWMtNTIzMi00N2M1LWIwMTQtNWIxMzJmN2QzYjQ5 LzEvMHQxTjNWTnZHS2h5eTZ3VjVZbFVLdTNOQnpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbBhMA0G CSqGSIb3DQEBCwUAA4IBAQB3ttOhhYX2YG7wxWLky9ZpfDoWzHO/kEf0znTsSiDq ujCGTgZ8JV9/2jocgvNmFXxk8M9wqYMRzJgZK1ttnfHAv8vLv/kbnLg+xHbhQ/AN O/mrdYKKmSfPizX0dqhXKGG3P0fYoVWKJbvOAWkxlXd6UNNnpewgH3QE8kIGbg+7 pCDexF6ao4GSBQD4tmTsS+3Qzo7KcvcisthgxsFVqToANHv32hQRmFHKQWX+l/wJ 2syheQzqa6U1V3V0w/MRfplbvmH2IDh+KDFANOjDwHFQIVdJIX4a+zo0p/mhtsql R8i64p51tc/MZwNGx3OomaGUHwO3RO/6ADXDihhYW1L6 -----END CERTIFICATE-----Generated at Tue Jan 27 05:42:00 2026 by rpki-client