This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/33970f-fa9a-4d11-9766-a844aab0511c/1/xbWf_g-s7HjkxL7IiKbMz-iaHG4.roa File: xbWf_g-s7HjkxL7IiKbMz-iaHG4.roa (raw, json) Hash identifier: SFaniO5YvRE/Q1MmXdLYQfC7ZkWwnx783aQKjO9iPwk= Subject key identifier: C5:B5:9F:FE:0F:AC:EC:78:E4:C4:BE:C8:88:A6:CC:CF:E8:9A:1C:6E Certificate issuer: /CN=09188e23537170fb2e457f312d545f94bd9dd7ee Certificate serial: 019B7C12B4895217EEBC3AE938FCFA211257 Authority key identifier: 09:18:8E:23:53:71:70:FB:2E:45:7F:31:2D:54:5F:94:BD:9D:D7:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRiOI1NxcPsuRX8xLVRflL2d1-4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/33970f-fa9a-4d11-9766-a844aab0511c/1/xbWf_g-s7HjkxL7IiKbMz-iaHG4.roa Signing time: Fri 02 Jan 2026 00:19:19 +0000 ROA not before: Fri 02 Jan 2026 00:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199480 IP address blocks: 212.66.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/33970f-fa9a-4d11-9766-a844aab0511c/1/CRiOI1NxcPsuRX8xLVRflL2d1-4.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/33970f-fa9a-4d11-9766-a844aab0511c/1/CRiOI1NxcPsuRX8xLVRflL2d1-4.mft rsync://rpki.ripe.net/repository/DEFAULT/CRiOI1NxcPsuRX8xLVRflL2d1-4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:b4:89:52:17:ee:bc:3a:e9:38:fc:fa:21:12:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09188e23537170fb2e457f312d545f94bd9dd7ee Validity Not Before: Jan 2 00:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5b59ffe0facec78e4c4bec888a6cccfe89a1c6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:04:b9:34:45:50:5a:f5:bd:bf:fa:75:0f:d6: f8:05:41:02:a1:a4:9f:3c:dc:be:37:2e:99:e0:3b: 07:fc:36:21:c1:49:3b:76:1a:94:3b:72:02:b4:62: 2b:eb:0b:c5:33:6f:9a:43:14:db:a3:f1:dd:6f:74: e3:eb:ef:21:0e:fd:6d:89:9c:02:31:ed:ca:35:30: 6b:f9:62:7b:1b:6e:f5:56:8f:55:57:78:7b:bc:32: fc:c7:3f:cb:d0:f1:0c:d5:4b:25:bc:be:38:96:98: 43:89:26:90:83:de:35:f1:84:de:53:b7:9c:68:2c: f1:57:6c:87:b1:a3:85:68:c4:35:df:4f:6c:f8:c0: 66:fd:47:fc:79:fd:8c:8d:b2:40:fd:07:1c:21:69: 32:be:9e:b7:97:98:1c:39:3e:20:f0:75:d5:c3:da: 91:1a:a2:06:63:b1:57:be:7a:e0:92:65:3a:f8:ed: 50:68:eb:c0:2a:c6:7b:cd:6f:24:23:7f:0f:7c:6a: f4:48:d4:a8:8b:35:7d:25:ec:16:b4:40:85:6f:5f: ab:7d:88:13:34:5e:f5:b4:73:3f:75:d1:0c:b1:67: 3b:59:ab:22:e4:63:31:7c:46:0d:ec:3e:01:8f:6c: cc:1d:e6:72:3a:32:7b:63:d8:55:df:a0:80:8b:97: 60:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:B5:9F:FE:0F:AC:EC:78:E4:C4:BE:C8:88:A6:CC:CF:E8:9A:1C:6E X509v3 Authority Key Identifier: keyid:09:18:8E:23:53:71:70:FB:2E:45:7F:31:2D:54:5F:94:BD:9D:D7:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRiOI1NxcPsuRX8xLVRflL2d1-4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/33970f-fa9a-4d11-9766-a844aab0511c/1/xbWf_g-s7HjkxL7IiKbMz-iaHG4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/33970f-fa9a-4d11-9766-a844aab0511c/1/CRiOI1NxcPsuRX8xLVRflL2d1-4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.66.192.0/19 Signature Algorithm: sha256WithRSAEncryption af:44:a3:46:d4:93:0c:99:ff:e3:1e:17:bf:1b:de:53:2b:be: 8d:e5:a6:3c:92:4e:0b:08:89:9a:6f:8b:98:83:56:be:9c:e4: 52:14:12:1c:bf:bd:3d:44:42:a1:aa:c3:f0:74:0c:76:aa:8e: 93:2b:f5:31:71:21:27:ac:5c:53:34:46:86:63:7b:11:54:90: 99:04:ac:58:4b:cd:5f:93:27:e9:83:a1:33:8d:3b:da:26:4c: 90:74:ef:d0:5b:79:8a:1d:09:e5:07:18:61:2a:4e:23:39:5e: 2f:4e:98:6e:11:1f:3a:07:15:37:3d:96:8f:59:f4:0d:d2:db: b7:f2:31:87:5c:79:d8:db:fc:69:84:7c:65:99:e0:72:88:a0: 55:7f:50:ab:ac:66:29:63:c4:07:22:18:7a:76:aa:a3:ec:94: 18:01:39:45:bd:24:92:98:2e:2a:15:e2:a3:1a:1b:cc:a4:32: 4e:55:4e:f7:7b:fa:c9:91:70:25:f6:fd:2e:e1:95:bc:9a:de: 99:ed:0d:4a:6c:5c:aa:5b:a4:a2:92:e7:a7:24:d2:43:75:ca: 0e:a9:66:ac:43:f1:7a:86:b9:6a:de:28:2b:97:06:4d:39:de: 00:85:bb:8c:77:8f:16:78:34:62:33:16:7e:30:0d:89:94:93: eb:57:2a:17 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8ErSJUhfuvDrpOPz6IRJXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MTg4ZTIzNTM3MTcwZmIyZTQ1N2YzMTJkNTQ1Zjk0YmQ5 ZGQ3ZWUwHhcNMjYwMTAyMDAxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNWI1OWZmZTBmYWNlYzc4ZTRjNGJlYzg4OGE2Y2NjZmU4OWExYzZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4gS5NEVQWvW9v/p1D9b4BUECoaSf PNy+Ny6Z4DsH/DYhwUk7dhqUO3ICtGIr6wvFM2+aQxTbo/Hdb3Tj6+8hDv1tiZwC Me3KNTBr+WJ7G271Vo9VV3h7vDL8xz/L0PEM1UslvL44lphDiSaQg9418YTeU7ec aCzxV2yHsaOFaMQ1309s+MBm/Uf8ef2MjbJA/QccIWkyvp63l5gcOT4g8HXVw9qR GqIGY7FXvnrgkmU6+O1QaOvAKsZ7zW8kI38PfGr0SNSoizV9JewWtECFb1+rfYgT NF71tHM/ddEMsWc7Wasi5GMxfEYN7D4Bj2zMHeZyOjJ7Y9hV36CAi5dgfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMW1n/4PrOx45MS+yIimzM/omhxuMB8GA1UdIwQY MBaAFAkYjiNTcXD7LkV/MS1UX5S9ndfuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1JpT0kxTnhjUHN1Ulg4eExWUmZsTDJkMS00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8zMzk3MGYtZmE5YS00ZDExLTk3NjYt YTg0NGFhYjA1MTFjLzEveGJXZl9nLXM3SGpreEw3SWlLYk16LWlhSEc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8zMzk3MGYtZmE5YS00ZDExLTk3NjYtYTg0NGFhYjA1MTFj LzEvQ1JpT0kxTnhjUHN1Ulg4eExWUmZsTDJkMS00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF1ELAMA0G CSqGSIb3DQEBCwUAA4IBAQCvRKNG1JMMmf/jHhe/G95TK76N5aY8kk4LCImab4uY g1a+nORSFBIcv709REKhqsPwdAx2qo6TK/UxcSEnrFxTNEaGY3sRVJCZBKxYS81f kyfpg6EzjTvaJkyQdO/QW3mKHQnlBxhhKk4jOV4vTphuER86BxU3PZaPWfQN0tu3 8jGHXHnY2/xphHxlmeByiKBVf1CrrGYpY8QHIhh6dqqj7JQYATlFvSSSmC4qFeKj GhvMpDJOVU73e/rJkXAl9v0u4ZW8mt6Z7Q1KbFyqW6SikuenJNJDdcoOqWasQ/F6 hrlq3igrlwZNOd4AhbuMd48WeDRiMxZ+MA2JlJPrVyoX -----END CERTIFICATE-----Generated at Mon Feb 9 22:24:17 2026 by rpki-client