This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/XCW-xDXsF601ESY9TZp_fyTaJnw.roa File: XCW-xDXsF601ESY9TZp_fyTaJnw.roa (raw, json) Hash identifier: +6CKCfe4xEWnYwPUH24hrBZ1Be9NFYUB4pofzwVgM4w= Subject key identifier: 5C:25:BE:C4:35:EC:17:AD:35:11:26:3D:4D:9A:7F:7F:24:DA:26:7C Certificate issuer: /CN=20b5100e798fab7577bf725ac9569ea80e6c2a04 Certificate serial: 019B7B35E354BFC6AE01F2AAAF86FB4B7AC6 Authority key identifier: 20:B5:10:0E:79:8F:AB:75:77:BF:72:5A:C9:56:9E:A8:0E:6C:2A:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/XCW-xDXsF601ESY9TZp_fyTaJnw.roa Signing time: Thu 01 Jan 2026 20:18:07 +0000 ROA not before: Thu 01 Jan 2026 20:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205019 IP address blocks: 185.70.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:e3:54:bf:c6:ae:01:f2:aa:af:86:fb:4b:7a:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20b5100e798fab7577bf725ac9569ea80e6c2a04 Validity Not Before: Jan 1 20:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c25bec435ec17ad3511263d4d9a7f7f24da267c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:09:50:34:d8:96:cb:6f:fd:b1:77:fa:e6:b0: 88:e9:d1:14:74:cf:8a:f5:b5:2f:08:c3:e7:d3:3a: 6d:89:06:00:6a:7a:5f:9a:2d:5b:7b:ba:4c:a6:34: 4a:38:b5:fa:92:bb:e4:ef:d9:9a:d4:21:29:cb:ab: e2:45:91:f4:41:18:20:51:06:5a:af:ef:04:f2:0f: 04:87:de:65:0f:89:76:66:93:b3:db:d1:0e:44:13: 2f:ba:8f:8a:f7:b9:95:3e:b4:56:d1:13:3f:25:22: 9c:5f:24:e4:a3:ef:79:5d:e5:a8:e9:06:69:92:bc: 21:3b:98:85:dc:29:ac:ef:8d:4f:f8:5c:e9:d2:8d: 31:8a:29:84:4b:96:55:65:c1:b7:84:ec:6d:7e:2e: 8d:50:2f:7a:a3:9e:30:ec:fe:cc:43:86:06:72:1c: 1f:2c:1e:75:f7:55:77:53:d7:ab:fd:3b:81:d3:80: ba:92:22:e8:24:cc:9f:e0:fb:68:ea:a7:2b:fb:d3: e0:2c:f3:9b:0d:7a:95:71:54:ad:2a:91:15:48:fc: f1:b0:95:05:3d:6a:84:6d:9f:d8:14:fe:2b:b1:1f: b2:62:e6:f5:b5:56:68:a4:18:53:68:94:a6:ed:8f: 07:5c:f0:20:a1:cb:22:78:f5:e2:61:1a:4c:88:87: d5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:25:BE:C4:35:EC:17:AD:35:11:26:3D:4D:9A:7F:7F:24:DA:26:7C X509v3 Authority Key Identifier: keyid:20:B5:10:0E:79:8F:AB:75:77:BF:72:5A:C9:56:9E:A8:0E:6C:2A:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/XCW-xDXsF601ESY9TZp_fyTaJnw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.70.100.0/24 Signature Algorithm: sha256WithRSAEncryption 51:4a:25:18:ef:18:e8:90:b5:b6:4f:7b:6a:0e:17:c2:1f:11: 37:e7:bc:1d:c6:5a:8e:4d:19:33:29:c6:aa:40:28:94:0a:34: 52:38:33:1a:1d:82:01:28:1a:61:9f:39:87:79:13:fc:da:03: bb:50:0f:b2:7e:4b:61:9a:b5:c1:4e:31:b5:cc:c3:1d:44:0b: 23:09:eb:23:9d:f5:20:95:9b:66:2a:10:eb:cd:df:3e:92:23: 9b:2d:30:cb:c0:04:e4:a0:bb:9f:f2:51:c8:9f:94:46:36:76: f6:75:99:06:8a:e6:14:a5:84:81:1d:22:89:65:61:50:35:17: dd:29:87:30:c8:c4:98:18:71:b0:63:03:60:33:9b:82:b8:85: 16:f3:e6:8f:35:a4:48:9a:eb:16:e8:2e:6d:42:25:88:ef:77: d4:61:de:ee:1b:fe:ce:17:a6:8b:da:8b:26:6d:1a:42:85:67: 44:9f:d7:e9:3b:92:6e:a0:c4:ce:5f:7f:15:53:54:eb:7e:d7: 13:7e:72:14:78:79:14:ed:18:25:61:9f:d8:4f:3f:c7:6f:10: 4f:aa:49:09:61:1d:bf:ea:fd:d4:c2:6e:6a:c1:53:e6:d3:d2: 4b:d0:11:42:73:b0:2a:4e:ee:c3:be:7b:48:97:a7:37:32:bb: 09:9c:99:e4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NeNUv8auAfKqr4b7S3rGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwYjUxMDBlNzk4ZmFiNzU3N2JmNzI1YWM5NTY5ZWE4MGU2 YzJhMDQwHhcNMjYwMTAxMjAxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzI1YmVjNDM1ZWMxN2FkMzUxMTI2M2Q0ZDlhN2Y3ZjI0ZGEyNjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzglQNNiWy2/9sXf65rCI6dEUdM+K 9bUvCMPn0zptiQYAanpfmi1be7pMpjRKOLX6krvk79ma1CEpy6viRZH0QRggUQZa r+8E8g8Eh95lD4l2ZpOz29EORBMvuo+K97mVPrRW0RM/JSKcXyTko+95XeWo6QZp krwhO5iF3Cms741P+Fzp0o0xiimES5ZVZcG3hOxtfi6NUC96o54w7P7MQ4YGchwf LB5191V3U9er/TuB04C6kiLoJMyf4Pto6qcr+9PgLPObDXqVcVStKpEVSPzxsJUF PWqEbZ/YFP4rsR+yYub1tVZopBhTaJSm7Y8HXPAgocsiePXiYRpMiIfVmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFwlvsQ17BetNREmPU2af38k2iZ8MB8GA1UdIwQY MBaAFCC1EA55j6t1d79yWslWnqgObCoEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUxVUURubVBxM1YzdjNKYXlWYWVxQTVzS2dRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS85ZTQ5ZmYtNDI2NC00NjQ3LTk1YTQt ODAzNzk2NTY5M2EyLzEvWENXLXhEWHNGNjAxRVNZOVRacF9meVRhSm53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS85ZTQ5ZmYtNDI2NC00NjQ3LTk1YTQtODAzNzk2NTY5M2Ey LzEvSUxVUURubVBxM1YzdjNKYXlWYWVxQTVzS2dRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUZkMA0G CSqGSIb3DQEBCwUAA4IBAQBRSiUY7xjokLW2T3tqDhfCHxE357wdxlqOTRkzKcaq QCiUCjRSODMaHYIBKBphnzmHeRP82gO7UA+yfkthmrXBTjG1zMMdRAsjCesjnfUg lZtmKhDrzd8+kiObLTDLwATkoLuf8lHIn5RGNnb2dZkGiuYUpYSBHSKJZWFQNRfd KYcwyMSYGHGwYwNgM5uCuIUW8+aPNaRImusW6C5tQiWI73fUYd7uG/7OF6aL2osm bRpChWdEn9fpO5JuoMTOX38VU1TrftcTfnIUeHkU7RglYZ/YTz/HbxBPqkkJYR2/ 6v3Uwm5qwVPm09JL0BFCc7AqTu7DvntIl6c3MrsJnJnk -----END CERTIFICATE-----Generated at Fri Jan 2 11:34:20 2026 by rpki-client