This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/XxJvVHyVyNVlWKJ8yOghwV4J34c.roa File: XxJvVHyVyNVlWKJ8yOghwV4J34c.roa (raw, json) Hash identifier: V+qJ9fQgut9NafTDw26E/iwTZPqrHnQr/6KuyJ7ucM0= Subject key identifier: 5F:12:6F:54:7C:95:C8:D5:65:58:A2:7C:C8:E8:21:C1:5E:09:DF:87 Certificate issuer: /CN=398f7106bed10fe7ffc65bbd64adbedc9dbd525e Certificate serial: 019B78A2FB1E1DCA3A7367EB06217F74725F Authority key identifier: 39:8F:71:06:BE:D1:0F:E7:FF:C6:5B:BD:64:AD:BE:DC:9D:BD:52:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/XxJvVHyVyNVlWKJ8yOghwV4J34c.roa Signing time: Thu 01 Jan 2026 08:18:25 +0000 ROA not before: Thu 01 Jan 2026 08:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57715 IP address blocks: 194.31.48.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft rsync://rpki.ripe.net/repository/DEFAULT/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:fb:1e:1d:ca:3a:73:67:eb:06:21:7f:74:72:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=398f7106bed10fe7ffc65bbd64adbedc9dbd525e Validity Not Before: Jan 1 08:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f126f547c95c8d56558a27cc8e821c15e09df87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5e:89:fa:2f:d8:f5:bb:e1:5d:29:56:e9:d8: 6d:c7:cd:fa:b5:7b:82:89:98:20:bc:04:e7:df:5c: aa:65:f8:9d:93:a9:08:0c:b0:5b:41:1c:fd:04:4b: 6b:9e:f5:24:d7:5a:19:0c:a9:77:bb:8d:48:05:02: ee:23:e4:c7:8a:c7:19:c8:74:8d:da:34:73:46:8e: 09:a8:73:4c:2f:cc:79:74:47:93:9d:fa:65:a8:0e: 18:58:a6:1e:41:19:f9:3b:a2:e1:21:31:cb:27:f1: 84:7f:41:63:72:75:15:46:88:1c:eb:57:3f:a6:c1: 60:7b:a4:e4:93:41:78:64:91:4a:f5:2f:db:24:c1: 32:65:00:f8:ad:ae:7b:3a:5b:17:b6:e3:c6:b3:65: f8:f4:b8:b8:cd:b9:db:d1:7c:67:a1:fc:0d:83:72: 4e:94:da:b2:e9:cc:ff:62:35:29:8d:e8:9e:8b:fa: 10:3d:c4:10:2f:e1:23:27:95:b9:90:68:b9:e5:54: 07:35:31:5e:e8:60:30:f0:db:b0:ee:4e:4e:82:d4: e0:e7:d2:4f:0c:70:52:43:0a:e8:40:31:94:0c:38: 45:69:a0:a6:cf:2d:76:4c:01:16:c4:e5:f9:3b:cf: 26:bf:ab:05:78:7b:26:c6:0e:fd:62:d5:02:5d:14: 90:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:12:6F:54:7C:95:C8:D5:65:58:A2:7C:C8:E8:21:C1:5E:09:DF:87 X509v3 Authority Key Identifier: keyid:39:8F:71:06:BE:D1:0F:E7:FF:C6:5B:BD:64:AD:BE:DC:9D:BD:52:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/XxJvVHyVyNVlWKJ8yOghwV4J34c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.31.48.0/23 Signature Algorithm: sha256WithRSAEncryption 28:70:1b:b6:6a:5e:5b:14:be:67:11:e4:ff:5a:80:a0:34:47: 9c:e5:6a:66:6b:92:fc:1f:9e:bb:ff:e5:79:9d:08:e5:3c:70: 43:53:68:ea:49:e9:24:19:f3:17:2a:72:b9:e8:0f:49:e5:21: 85:a0:91:f7:78:cb:52:d9:0e:e1:9e:ec:25:74:d3:23:53:ae: 3e:9f:3d:f5:5f:91:40:89:86:91:cf:7d:5e:40:26:34:14:67: 1b:2f:b5:58:fa:74:c6:b3:49:e1:9d:b7:0e:45:c3:d9:e8:cb: c7:90:57:97:8f:82:fd:9b:59:32:c6:ba:b9:7f:6c:2e:8c:4c: 1f:da:b8:53:65:5f:f2:aa:d2:a6:01:7b:9c:c5:86:d7:8b:8e: 04:70:56:13:90:1b:f3:0d:be:fa:78:5a:f2:e4:7a:7b:f4:09: 57:12:a1:38:b0:4a:c3:7d:63:c3:8b:da:cb:63:bf:41:6e:19: ef:14:48:7f:bb:5e:5e:9f:06:4d:e6:bc:57:ad:c4:a2:06:0d: c4:97:7b:70:b3:d8:4c:8c:e8:63:37:2f:01:e4:c7:9c:a2:68: 17:4a:e0:21:0b:98:d3:fd:5d:e6:e1:5c:e9:e9:21:81:eb:17: b5:f4:cb:d6:2e:a6:28:f4:a0:cf:47:23:11:6d:d0:99:63:98: b4:f6:d5:81 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ovseHco6c2frBiF/dHJfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5OGY3MTA2YmVkMTBmZTdmZmM2NWJiZDY0YWRiZWRjOWRi ZDUyNWUwHhcNMjYwMTAxMDgxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjEyNmY1NDdjOTVjOGQ1NjU1OGEyN2NjOGU4MjFjMTVlMDlkZjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArV6J+i/Y9bvhXSlW6dhtx836tXuC iZggvATn31yqZfidk6kIDLBbQRz9BEtrnvUk11oZDKl3u41IBQLuI+THiscZyHSN 2jRzRo4JqHNML8x5dEeTnfplqA4YWKYeQRn5O6LhITHLJ/GEf0FjcnUVRogc61c/ psFge6Tkk0F4ZJFK9S/bJMEyZQD4ra57OlsXtuPGs2X49Li4zbnb0XxnofwNg3JO lNqy6cz/YjUpjeiei/oQPcQQL+EjJ5W5kGi55VQHNTFe6GAw8Nuw7k5OgtTg59JP DHBSQwroQDGUDDhFaaCmzy12TAEWxOX5O88mv6sFeHsmxg79YtUCXRSQDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF8Sb1R8lcjVZViifMjoIcFeCd+HMB8GA1UdIwQY MBaAFDmPcQa+0Q/n/8ZbvWStvtydvVJeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1k5eEJyN1JELWZfeGx1OVpLMi0zSjI5VWw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9mM2QyZjQtOTI2My00ZWNlLTlkYjMt ZTA4MWE1YjQxNDMyLzEvWHhKdlZIeVZ5TlZsV0tKOHlPZ2h3VjRKMzRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9mM2QyZjQtOTI2My00ZWNlLTlkYjMtZTA4MWE1YjQxNDMy LzEvT1k5eEJyN1JELWZfeGx1OVpLMi0zSjI5VWw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwh8wMA0G CSqGSIb3DQEBCwUAA4IBAQAocBu2al5bFL5nEeT/WoCgNEec5Wpma5L8H567/+V5 nQjlPHBDU2jqSekkGfMXKnK56A9J5SGFoJH3eMtS2Q7hnuwldNMjU64+nz31X5FA iYaRz31eQCY0FGcbL7VY+nTGs0nhnbcORcPZ6MvHkFeXj4L9m1kyxrq5f2wujEwf 2rhTZV/yqtKmAXucxYbXi44EcFYTkBvzDb76eFry5Hp79AlXEqE4sErDfWPDi9rL Y79BbhnvFEh/u15enwZN5rxXrcSiBg3El3tws9hMjOhjNy8B5MecomgXSuAhC5jT /V3m4Vzp6SGB6xe19MvWLqYo9KDPRyMRbdCZY5i09tWB -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:22 2026 by rpki-client