This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/XGuSPhl5LGW7Z3BmBjxjBXpLSd4.roa File: XGuSPhl5LGW7Z3BmBjxjBXpLSd4.roa (raw, json) Hash identifier: xpu2LcbUiEWGNuth3F7JqXUhPdB9UW9MvNo8pgrt41c= Subject key identifier: 5C:6B:92:3E:19:79:2C:65:BB:67:70:66:06:3C:63:05:7A:4B:49:DE Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d Certificate serial: 019B77C6F240B6B24121407B0E0BAD860AF5 Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/XGuSPhl5LGW7Z3BmBjxjBXpLSd4.roa Signing time: Thu 01 Jan 2026 04:18:05 +0000 ROA not before: Thu 01 Jan 2026 04:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33659 IP address blocks: 95.164.193.0/24 maxlen: 24 95.164.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:f2:40:b6:b2:41:21:40:7b:0e:0b:ad:86:0a:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6991c56f11a7171c6153239769f557beba10182d Validity Not Before: Jan 1 04:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c6b923e19792c65bb677066063c63057a4b49de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:65:eb:48:86:39:32:34:41:cc:93:63:b4:0c: f1:f7:01:a3:e9:57:b9:55:d9:24:bd:a4:a2:3e:56: 48:ac:ea:9d:02:cc:ff:a3:54:d7:50:e4:45:b3:32: 87:2b:23:8e:a6:d2:c8:5d:aa:55:cf:9b:c6:2c:d8: 12:15:86:43:e1:bf:40:8c:0b:da:99:ac:21:9c:6c: ed:4f:41:ad:cc:93:ea:14:10:0b:20:79:55:49:d4: df:e8:68:cf:5a:2a:e5:97:f4:91:f3:dd:3f:e5:1a: 7b:12:f4:3d:ac:7c:91:47:33:dd:53:23:15:d9:f9: 72:fb:bc:69:d2:2d:21:fb:b5:27:af:18:1b:cd:47: 75:b5:07:93:b2:31:67:88:82:5e:bc:00:d5:3b:b2: 4d:54:80:d5:3f:3a:16:18:0f:fd:26:d3:dd:19:34: 74:53:0b:9b:cb:e3:4d:b5:b0:b4:bc:e5:02:fa:ca: 2b:50:a4:66:82:44:12:41:16:67:56:f8:fc:1d:61: 83:7b:13:ec:aa:58:cd:40:ac:c9:0f:11:d9:31:7e: 38:82:0f:9b:98:54:16:54:81:4c:db:f6:77:fb:6e: 63:6e:ae:18:18:19:f0:f2:2b:d2:b7:2f:24:8f:80: 0f:ee:fd:bb:f0:21:59:ea:ae:ef:b5:d2:71:44:e8: b5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:6B:92:3E:19:79:2C:65:BB:67:70:66:06:3C:63:05:7A:4B:49:DE X509v3 Authority Key Identifier: keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/XGuSPhl5LGW7Z3BmBjxjBXpLSd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.164.193.0/24 95.164.224.0/22 Signature Algorithm: sha256WithRSAEncryption 66:0b:86:76:a4:89:63:65:e5:33:72:24:be:65:7f:33:a0:67: a9:0d:e1:65:ac:29:c1:55:0a:97:bc:a7:72:3c:fc:77:88:96: 20:b6:21:7c:90:36:f0:ec:5f:de:6a:6a:d6:60:ce:fb:fb:cb: 7e:f5:68:55:d4:fd:42:a2:c2:92:62:3c:5d:6c:9a:98:86:ba: 2a:d1:69:9f:cd:76:24:e4:92:4d:51:8d:08:cf:c2:15:e9:08: 3e:70:5d:84:2d:0f:a9:7b:49:64:0f:8b:30:c9:79:d9:39:42: 68:1a:8f:ca:16:f2:cb:cc:45:0f:1d:96:1a:99:dd:3c:a2:91: c8:e1:99:44:aa:25:a2:b6:25:5e:cd:13:b0:31:6f:fa:f9:c0: 99:ba:ea:44:71:cb:0f:bc:f3:1d:38:ed:62:9d:10:4c:37:d8: 83:da:f5:bb:c7:55:88:af:71:d5:a5:97:a2:1b:c6:a2:5f:ac: 3e:73:39:d5:6c:b1:e4:0c:aa:81:f9:7e:70:33:84:72:23:38: ed:2a:0d:8d:5d:fe:0e:36:00:25:65:cb:d7:c1:44:c1:59:07: dc:29:7a:e9:c2:25:16:25:57:ac:5b:a8:f6:37:9f:38:23:43: af:58:a4:df:97:08:db:24:c0:e5:15:39:b5:fd:dd:8d:45:9f: 8f:7f:bb:f6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xvJAtrJBIUB7Dguthgr1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OTFjNTZmMTFhNzE3MWM2MTUzMjM5NzY5ZjU1N2JlYmEx MDE4MmQwHhcNMjYwMTAxMDQxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzZiOTIzZTE5NzkyYzY1YmI2NzcwNjYwNjNjNjMwNTdhNGI0OWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWXrSIY5MjRBzJNjtAzx9wGj6Ve5 VdkkvaSiPlZIrOqdAsz/o1TXUORFszKHKyOOptLIXapVz5vGLNgSFYZD4b9AjAva mawhnGztT0GtzJPqFBALIHlVSdTf6GjPWirll/SR890/5Rp7EvQ9rHyRRzPdUyMV 2fly+7xp0i0h+7UnrxgbzUd1tQeTsjFniIJevADVO7JNVIDVPzoWGA/9JtPdGTR0 Uwuby+NNtbC0vOUC+sorUKRmgkQSQRZnVvj8HWGDexPsqljNQKzJDxHZMX44gg+b mFQWVIFM2/Z3+25jbq4YGBnw8ivSty8kj4AP7v278CFZ6q7vtdJxROi14wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFxrkj4ZeSxlu2dwZgY8YwV6S0neMB8GA1UdIwQY MBaAFGmRxW8RpxccYVMjl2n1V766EBgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYt NjVkMTU2NzM0MGZkLzEvWEd1U1BobDVMR1c3WjNCbUJqeGpCWHBMU2Q0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYtNjVkMTU2NzM0MGZk LzEvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAX6TBAwQC X6TgMA0GCSqGSIb3DQEBCwUAA4IBAQBmC4Z2pIljZeUzciS+ZX8zoGepDeFlrCnB VQqXvKdyPPx3iJYgtiF8kDbw7F/eamrWYM77+8t+9WhV1P1CosKSYjxdbJqYhroq 0WmfzXYk5JJNUY0Iz8IV6Qg+cF2ELQ+pe0lkD4swyXnZOUJoGo/KFvLLzEUPHZYa md08opHI4ZlEqiWitiVezROwMW/6+cCZuupEccsPvPMdOO1inRBMN9iD2vW7x1WI r3HVpZeiG8aiX6w+cznVbLHkDKqB+X5wM4RyIzjtKg2NXf4ONgAlZcvXwUTBWQfc KXrpwiUWJVesW6j2N584I0OvWKTflwjbJMDlFTm1/d2NRZ+Pf7v2 -----END CERTIFICATE-----Generated at Tue Jan 20 21:17:15 2026 by rpki-client