This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/X1aZ2xaC6FGv74kOCQwL0xxoOZA.roa File: X1aZ2xaC6FGv74kOCQwL0xxoOZA.roa (raw, json) Hash identifier: 6AsU1KzAtb8yktF/NBT5ZyVg0dsVVnFJnmDhHSx+xJw= Subject key identifier: 5F:56:99:DB:16:82:E8:51:AF:EF:89:0E:09:0C:0B:D3:1C:68:39:90 Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f Certificate serial: 019B7A5AA7FD84275FF316ECDC637E123CAD Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/X1aZ2xaC6FGv74kOCQwL0xxoOZA.roa Signing time: Thu 01 Jan 2026 16:18:40 +0000 ROA not before: Thu 01 Jan 2026 16:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 399486 IP address blocks: 83.147.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:a7:fd:84:27:5f:f3:16:ec:dc:63:7e:12:3c:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f Validity Not Before: Jan 1 16:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f5699db1682e851afef890e090c0bd31c683990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0b:d8:a5:c1:ca:56:0c:fe:e2:5b:c1:fe:10: c8:a5:2c:86:21:f3:a4:49:cb:51:7c:43:2c:91:7b: 7e:db:f5:92:19:8b:92:74:92:e4:20:bc:0f:c6:14: c7:d6:ed:a8:38:88:d6:c0:30:6e:94:7a:e7:c9:d2: ff:df:59:e8:56:2f:74:a0:e2:79:06:d9:7b:17:bc: fe:09:ab:e7:bf:33:d7:fb:b0:dc:79:e0:a4:4b:6d: 4d:01:b0:de:8b:7d:e1:38:89:cc:9c:e1:68:f0:5a: 61:5a:a0:50:c4:7c:50:75:3b:4d:ef:d6:19:96:57: 79:d4:e5:4a:62:1f:69:e4:98:b7:6f:36:b1:2c:43: 31:70:c8:5f:c6:e5:35:9e:80:27:56:69:3c:8a:9e: 51:22:8f:24:6c:36:9e:bb:40:12:fc:a3:de:02:4c: 3a:f9:74:a4:ec:5b:d8:b9:e5:3b:c1:9f:7c:73:35: 2f:72:e9:ea:15:1f:17:e1:2f:22:8e:ac:ae:4f:c7: 62:d0:aa:66:d0:27:89:ac:25:9b:ec:8c:e8:7e:55: 4e:56:fd:81:d5:58:7f:37:17:68:b8:c0:5b:24:07: d0:34:92:7f:6f:f0:7a:bc:58:4e:71:5d:3a:b8:66: fd:51:6e:6e:b8:78:55:5f:04:c0:61:71:04:14:b4: de:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:56:99:DB:16:82:E8:51:AF:EF:89:0E:09:0C:0B:D3:1C:68:39:90 X509v3 Authority Key Identifier: keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/X1aZ2xaC6FGv74kOCQwL0xxoOZA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.147.52.0/22 Signature Algorithm: sha256WithRSAEncryption a0:7a:78:61:67:e9:a0:09:bd:09:2b:85:94:11:4e:15:3b:8e: 2e:01:5d:8c:bb:79:ef:95:05:d6:8d:bb:7a:d5:fa:bf:91:e1: e6:05:5d:fb:6a:81:00:b1:0f:82:d5:6c:25:53:11:08:ae:1f: 8f:18:d4:de:7a:e3:08:fe:51:b9:15:70:99:f6:67:44:4b:3c: db:3c:c7:c4:91:40:ee:dc:00:b1:1c:98:da:67:b0:5c:9a:09: 20:00:aa:91:64:b9:ae:81:63:ed:ae:81:de:20:9a:c7:a0:57: 7b:02:6f:a8:25:56:30:85:0a:03:21:36:08:71:f0:bb:2c:18: 78:52:42:10:d2:4e:cd:08:fd:fd:e9:e4:f0:64:c4:fa:dc:e0: ee:ee:1c:2f:fa:02:ab:98:a4:d6:5f:84:1f:2f:dd:41:73:54: 8c:34:c7:f0:cc:44:be:ae:98:53:20:19:ab:13:e9:ae:02:45: 12:56:bd:6d:39:f0:c6:1f:6b:fb:5a:f5:94:66:8e:48:0c:2e: 46:92:cc:96:68:79:9e:ac:e8:b7:eb:7a:90:d7:86:8e:ba:2e: ea:6c:ca:b3:9c:0a:76:59:92:45:0b:3a:dd:3a:03:69:18:b7: f2:25:42:b0:d1:42:65:9d:e0:21:4b:2b:04:2e:1e:85:05:6c: cf:69:7d:c0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wqf9hCdf8xbs3GN+EjytMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm MzBjOWYwHhcNMjYwMTAxMTYxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjU2OTlkYjE2ODJlODUxYWZlZjg5MGUwOTBjMGJkMzFjNjgzOTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAvYpcHKVgz+4lvB/hDIpSyGIfOk SctRfEMskXt+2/WSGYuSdJLkILwPxhTH1u2oOIjWwDBulHrnydL/31noVi90oOJ5 Btl7F7z+CavnvzPX+7DceeCkS21NAbDei33hOInMnOFo8FphWqBQxHxQdTtN79YZ lld51OVKYh9p5Ji3bzaxLEMxcMhfxuU1noAnVmk8ip5RIo8kbDaeu0AS/KPeAkw6 +XSk7FvYueU7wZ98czUvcunqFR8X4S8ijqyuT8di0Kpm0CeJrCWb7IzoflVOVv2B 1Vh/NxdouMBbJAfQNJJ/b/B6vFhOcV06uGb9UW5uuHhVXwTAYXEEFLTeHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF9WmdsWguhRr++JDgkMC9McaDmQMB8GA1UdIwQY MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt MDhkMTI3MGMyZTcxLzEvWDFhWjJ4YUM2Rkd2NzRrT0NRd0wweHhvT1pBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCU5M0MA0G CSqGSIb3DQEBCwUAA4IBAQCgenhhZ+mgCb0JK4WUEU4VO44uAV2Mu3nvlQXWjbt6 1fq/keHmBV37aoEAsQ+C1WwlUxEIrh+PGNTeeuMI/lG5FXCZ9mdESzzbPMfEkUDu 3ACxHJjaZ7BcmgkgAKqRZLmugWPtroHeIJrHoFd7Am+oJVYwhQoDITYIcfC7LBh4 UkIQ0k7NCP396eTwZMT63ODu7hwv+gKrmKTWX4QfL91Bc1SMNMfwzES+rphTIBmr E+muAkUSVr1tOfDGH2v7WvWUZo5IDC5GksyWaHmerOi363qQ14aOui7qbMqznAp2 WZJFCzrdOgNpGLfyJUKw0UJlneAhSysELh6FBWzPaX3A -----END CERTIFICATE-----Generated at Mon Jan 19 23:20:51 2026 by rpki-client