This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/XzuU_V2hpwjk3YRVKYkivpIRg1I.roa File: XzuU_V2hpwjk3YRVKYkivpIRg1I.roa (raw, json) Hash identifier: JD/QCRmzEtm4TJco9uewIL3cN8fR9m44aVcJW2fUhn0= Subject key identifier: 5F:3B:94:FD:5D:A1:A7:08:E4:DD:84:55:29:89:22:BE:92:11:83:52 Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019B7AC84B2FF138C95C8BFB6FB1145A089E Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/XzuU_V2hpwjk3YRVKYkivpIRg1I.roa Signing time: Thu 01 Jan 2026 18:18:25 +0000 ROA not before: Thu 01 Jan 2026 18:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 94.229.212.0/24 maxlen: 24 103.41.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:4b:2f:f1:38:c9:5c:8b:fb:6f:b1:14:5a:08:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Jan 1 18:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f3b94fd5da1a708e4dd8455298922be92118352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f5:10:e5:45:85:39:3a:4d:c7:00:45:ae:4b: 6b:52:6e:90:3a:c0:ff:87:6a:ab:53:ed:0f:64:40: 5f:00:21:fe:4d:c7:69:b3:19:bd:1d:7b:08:06:72: b4:b1:bc:8a:59:36:d8:f7:86:84:a0:3b:0f:fd:b6: bc:58:70:c4:b1:a5:82:d1:4d:78:e0:92:26:68:9f: bc:53:66:98:b2:ad:45:58:9f:81:13:54:08:83:fa: 0a:db:f9:b2:c3:d6:4a:a6:19:3a:e5:8c:b8:f2:21: 64:65:99:0d:81:1c:bc:03:3f:e2:ba:7e:22:c0:c4: 50:69:6c:2e:aa:6d:86:9b:9b:a8:4b:ae:5a:6f:1d: 22:a0:15:94:2e:b8:08:e5:b1:51:c9:9e:5f:6b:c3: 20:97:fe:7d:2f:3c:05:18:1f:18:45:42:99:5a:00: fa:2c:b1:9a:0d:bf:00:06:43:b6:0d:c6:3c:0e:60: dc:53:cc:d0:70:79:c8:a2:e7:5b:00:0b:28:a4:1f: 6a:f5:53:3a:f5:78:c1:3d:81:cd:c5:2e:11:b9:ed: c3:dc:af:2f:65:20:15:cb:14:81:e9:61:4a:80:b0: 85:82:13:ee:98:58:f3:6a:ee:02:1a:50:aa:31:b1: 85:a1:a0:56:0c:2b:34:aa:3d:8a:4e:8a:04:de:7c: 90:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:3B:94:FD:5D:A1:A7:08:E4:DD:84:55:29:89:22:BE:92:11:83:52 X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/XzuU_V2hpwjk3YRVKYkivpIRg1I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.229.212.0/24 103.41.46.0/23 Signature Algorithm: sha256WithRSAEncryption 07:a6:52:fb:8d:e5:f9:8f:76:8a:08:c5:ea:54:3d:dd:c6:b8: 5c:80:87:9c:f0:84:dc:21:3b:bc:f5:79:84:70:67:84:69:20: 83:e4:36:d1:d3:d5:fe:50:d8:c7:4b:c0:c4:ca:9c:45:08:f3: 5f:79:7a:56:a5:33:59:c4:3d:55:3a:ef:a3:e4:22:9c:dc:fa: 64:84:ea:6e:b3:0c:9a:26:35:a4:f0:68:6d:66:d3:67:5e:b0: 30:7e:a6:61:37:14:bd:2e:c0:37:04:d4:13:5f:78:cf:18:d0: 06:6e:a1:b7:31:a8:92:80:05:19:83:1b:4b:48:a2:fa:ce:f0: 9e:b2:05:b4:8e:09:38:70:58:6f:78:c2:06:b9:80:1d:9d:e7: df:b6:bd:52:3f:1d:a9:a0:64:6e:43:7c:05:e4:c7:43:51:6f: 13:f2:28:de:32:fb:c7:a7:84:52:4c:bd:da:d8:b8:ea:dd:49: a9:6e:32:7c:91:d7:d1:6f:74:47:06:f8:8b:63:ae:b5:f5:42: a7:e5:99:92:3c:f2:88:5b:f3:c6:80:a1:94:7e:77:62:a2:9b: 2b:ec:48:db:a2:86:8a:bd:62:d0:72:b5:71:4d:b6:ce:80:a1: f2:9d:24:e1:e3:7c:49:6a:4a:85:32:a0:61:33:99:28:ed:6d: fd:09:e4:4e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6yEsv8TjJXIv7b7EUWgieMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjYwMTAxMTgxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjNiOTRmZDVkYTFhNzA4ZTRkZDg0NTUyOTg5MjJiZTkyMTE4MzUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPUQ5UWFOTpNxwBFrktrUm6QOsD/ h2qrU+0PZEBfACH+Tcdpsxm9HXsIBnK0sbyKWTbY94aEoDsP/ba8WHDEsaWC0U14 4JImaJ+8U2aYsq1FWJ+BE1QIg/oK2/myw9ZKphk65Yy48iFkZZkNgRy8Az/iun4i wMRQaWwuqm2Gm5uoS65abx0ioBWULrgI5bFRyZ5fa8Mgl/59LzwFGB8YRUKZWgD6 LLGaDb8ABkO2DcY8DmDcU8zQcHnIoudbAAsopB9q9VM69XjBPYHNxS4Rue3D3K8v ZSAVyxSB6WFKgLCFghPumFjzau4CGlCqMbGFoaBWDCs0qj2KTooE3nyQbwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFF87lP1doacI5N2EVSmJIr6SEYNSMB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEvWHp1VV9WMmhwd2prM1lSVktZa2l2cElSZzFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXuXUAwQB ZykuMA0GCSqGSIb3DQEBCwUAA4IBAQAHplL7jeX5j3aKCMXqVD3dxrhcgIec8ITc ITu89XmEcGeEaSCD5DbR09X+UNjHS8DEypxFCPNfeXpWpTNZxD1VOu+j5CKc3Ppk hOpuswyaJjWk8GhtZtNnXrAwfqZhNxS9LsA3BNQTX3jPGNAGbqG3MaiSgAUZgxtL SKL6zvCesgW0jgk4cFhveMIGuYAdnefftr1SPx2poGRuQ3wF5MdDUW8T8ijeMvvH p4RSTL3a2Ljq3UmpbjJ8kdfRb3RHBviLY6619UKn5ZmSPPKIW/PGgKGUfndiopsr 7EjbooaKvWLQcrVxTbbOgKHynSTh43xJakqFMqBhM5ko7W39CeRO -----END CERTIFICATE-----Generated at Wed Jan 7 23:51:48 2026 by rpki-client