This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/86eb81-f362-4f76-83a5-0e2df9695592/1/XPSkKS-lqutBiSm76IGfvu06VnY.roa File: XPSkKS-lqutBiSm76IGfvu06VnY.roa (raw, json) Hash identifier: jR886XO/lphZoxfRGLoituOknWx3rcueeUB5SkluLiY= Subject key identifier: 5C:F4:A4:29:2F:A5:AA:EB:41:89:29:BB:E8:81:9F:BE:ED:3A:56:76 Certificate issuer: /CN=7db8248601e33b83c01405f9be14793614859bd6 Certificate serial: 019B7C124225F9834F7EC5DD1FE0BB2E3C6C Authority key identifier: 7D:B8:24:86:01:E3:3B:83:C0:14:05:F9:BE:14:79:36:14:85:9B:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/86eb81-f362-4f76-83a5-0e2df9695592/1/XPSkKS-lqutBiSm76IGfvu06VnY.roa Signing time: Fri 02 Jan 2026 00:18:49 +0000 ROA not before: Fri 02 Jan 2026 00:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209892 IP address blocks: 193.28.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/86eb81-f362-4f76-83a5-0e2df9695592/1/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/86eb81-f362-4f76-83a5-0e2df9695592/1/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:42:25:f9:83:4f:7e:c5:dd:1f:e0:bb:2e:3c:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7db8248601e33b83c01405f9be14793614859bd6 Validity Not Before: Jan 2 00:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5cf4a4292fa5aaeb418929bbe8819fbeed3a5676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2f:60:18:5a:17:26:f6:44:10:22:4f:67:d7: cb:8c:41:48:7f:6f:54:64:f6:37:d7:31:b8:ba:70: 93:79:1b:55:09:ca:82:0a:5c:ad:9f:7f:45:79:48: 53:64:50:78:c7:6e:98:b1:1e:bd:b3:ff:d1:a0:eb: 66:78:ff:e4:4c:30:c1:c2:d7:b6:63:eb:cd:fc:dc: e2:45:cd:c0:f3:af:c2:fe:3e:dd:d5:56:f8:e3:21: df:d5:b0:43:68:8d:de:3e:48:42:fc:16:08:63:d0: b2:db:9d:29:59:a7:09:fe:b5:cd:dd:ec:b1:72:25: a4:fe:8e:3c:91:bb:c6:33:2a:4d:3e:74:b6:f1:2e: 38:11:a4:52:6f:f2:0a:93:47:66:5f:88:f0:b1:2e: 9f:5c:26:ba:31:c6:72:4a:05:d7:64:2f:ef:90:e0: 22:92:37:ff:39:5d:97:b8:df:c1:56:2d:9b:4c:1b: 20:71:be:71:17:75:a6:59:b3:77:98:0d:aa:fe:e3: c4:71:82:74:c3:a8:b8:0d:c3:39:28:bd:22:80:7a: d4:48:da:f5:4d:f6:14:54:42:8b:77:c8:ec:ab:52: 4e:54:68:78:c0:ff:b3:c2:93:48:c4:57:8a:be:92: 23:9b:16:d8:68:16:fc:08:74:05:62:63:37:3d:4c: ab:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F4:A4:29:2F:A5:AA:EB:41:89:29:BB:E8:81:9F:BE:ED:3A:56:76 X509v3 Authority Key Identifier: keyid:7D:B8:24:86:01:E3:3B:83:C0:14:05:F9:BE:14:79:36:14:85:9B:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/86eb81-f362-4f76-83a5-0e2df9695592/1/XPSkKS-lqutBiSm76IGfvu06VnY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/86eb81-f362-4f76-83a5-0e2df9695592/1/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.28.158.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:c5:ee:5a:d7:87:d5:82:79:8d:c9:3e:f0:9d:4f:7a:e8:db: 07:b8:5d:94:89:e5:13:11:f2:da:0b:9d:62:ac:f3:70:06:f0: af:2d:8c:34:de:ce:2e:6e:32:6b:88:89:a5:2f:7f:f6:57:e1: e9:34:8c:05:7e:97:86:6f:0b:08:68:e2:54:e3:13:64:69:e9: 52:fe:a4:07:a5:6c:17:c6:8e:b8:bf:92:a7:cf:11:30:ec:2a: 6f:1b:33:86:f5:43:b5:81:73:de:1a:ec:30:89:ae:18:b7:1b: 55:27:77:b6:0b:5f:1f:7f:54:c4:9c:18:74:a6:c2:60:22:17: 9c:d1:aa:b1:fa:a5:9d:0c:88:3a:41:d9:3b:54:4c:10:4f:ca: 13:48:e2:61:6b:4c:47:21:a6:9f:14:6f:d2:47:a3:89:41:32: 1e:77:55:82:eb:c2:30:86:3d:4d:50:e4:c2:e4:41:16:d9:82: 21:a2:64:ad:e6:9e:da:1a:1b:a0:c5:b6:a7:d8:99:25:ae:ea: b0:94:a9:a4:25:73:35:56:7c:75:d6:c6:b5:b2:6b:c0:82:9b: dc:96:fd:a7:d3:b5:ba:9e:de:e1:29:8a:62:85:49:3f:69:c0: 63:2f:4c:1c:d7:be:75:39:4f:ef:be:a1:75:c1:ed:d1:79:80: 30:bf:16:5a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EkIl+YNPfsXdH+C7LjxsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYjgyNDg2MDFlMzNiODNjMDE0MDVmOWJlMTQ3OTM2MTQ4 NTliZDYwHhcNMjYwMTAyMDAxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2Y0YTQyOTJmYTVhYWViNDE4OTI5YmJlODgxOWZiZWVkM2E1Njc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtS9gGFoXJvZEECJPZ9fLjEFIf29U ZPY31zG4unCTeRtVCcqCClytn39FeUhTZFB4x26YsR69s//RoOtmeP/kTDDBwte2 Y+vN/NziRc3A86/C/j7d1Vb44yHf1bBDaI3ePkhC/BYIY9Cy250pWacJ/rXN3eyx ciWk/o48kbvGMypNPnS28S44EaRSb/IKk0dmX4jwsS6fXCa6McZySgXXZC/vkOAi kjf/OV2XuN/BVi2bTBsgcb5xF3WmWbN3mA2q/uPEcYJ0w6i4DcM5KL0igHrUSNr1 TfYUVEKLd8jsq1JOVGh4wP+zwpNIxFeKvpIjmxbYaBb8CHQFYmM3PUyrfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFz0pCkvparrQYkpu+iBn77tOlZ2MB8GA1UdIwQY MBaAFH24JIYB4zuDwBQF+b4UeTYUhZvWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmJna2hnSGpPNFBBRkFYNXZoUjVOaFNGbTlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS84NmViODEtZjM2Mi00Zjc2LTgzYTUt MGUyZGY5Njk1NTkyLzEvWFBTa0tTLWxxdXRCaVNtNzZJR2Z2dTA2Vm5ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS84NmViODEtZjM2Mi00Zjc2LTgzYTUtMGUyZGY5Njk1NTky LzEvZmJna2hnSGpPNFBBRkFYNXZoUjVOaFNGbTlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRyeMA0G CSqGSIb3DQEBCwUAA4IBAQAdxe5a14fVgnmNyT7wnU966NsHuF2UieUTEfLaC51i rPNwBvCvLYw03s4ubjJriImlL3/2V+HpNIwFfpeGbwsIaOJU4xNkaelS/qQHpWwX xo64v5KnzxEw7CpvGzOG9UO1gXPeGuwwia4YtxtVJ3e2C18ff1TEnBh0psJgIhec 0aqx+qWdDIg6Qdk7VEwQT8oTSOJha0xHIaafFG/SR6OJQTIed1WC68Iwhj1NUOTC 5EEW2YIhomSt5p7aGhugxban2JklruqwlKmkJXM1Vnx11sa1smvAgpvclv2n07W6 nt7hKYpihUk/acBjL0wc1751OU/vvqF1we3ReYAwvxZa -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:59 2026 by rpki-client