This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/xywW8VsvtWulmUgX-o54Ju69bE8.roa File: xywW8VsvtWulmUgX-o54Ju69bE8.roa (raw, json) Hash identifier: 4C5SlKS6xYjsyyHEt/gap8Ho2+t7PTtjb6goXCdrV64= Subject key identifier: C7:2C:16:F1:5B:2F:B5:6B:A5:99:48:17:FA:8E:78:26:EE:BD:6C:4F Certificate issuer: /CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab Certificate serial: 019B8DA76A26A13895A46DECC45E9A429523 Authority key identifier: 97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/xywW8VsvtWulmUgX-o54Ju69bE8.roa Signing time: Mon 05 Jan 2026 10:15:17 +0000 ROA not before: Mon 05 Jan 2026 10:15:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 4492 IP address blocks: 193.5.19.0/24 maxlen: 24 2a0d:3dc0:4492::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8d:a7:6a:26:a1:38:95:a4:6d:ec:c4:5e:9a:42:95:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab Validity Not Before: Jan 5 10:15:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c72c16f15b2fb56ba5994817fa8e7826eebd6c4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:93:05:4c:ae:67:c5:bf:53:98:5d:54:41:58: fb:14:0a:21:a9:44:73:d2:ba:3f:96:72:2d:2c:2a: 3e:df:79:d5:cf:c0:16:68:72:07:fb:48:a8:aa:77: 66:09:ea:6c:80:f0:ee:72:56:36:16:73:2e:0c:8b: d9:51:1a:17:07:8b:5b:a3:53:05:89:d4:c0:28:f4: 85:38:94:3d:3f:10:fd:17:79:a7:7a:69:0e:9f:fa: 15:66:c7:9e:e5:8a:fd:b3:86:02:78:a1:90:9d:03: b7:d9:53:ec:33:a1:36:a5:75:4d:83:18:c2:93:ea: 4b:ed:78:79:c9:8a:6a:74:f2:32:13:12:75:ea:59: f4:87:f3:3c:7c:5b:30:31:f1:6e:9e:43:92:6b:7f: b9:91:0b:58:1f:51:3d:dc:1c:c6:2e:86:fb:54:9e: 4b:40:b8:7b:c3:e3:d1:fa:ed:b0:c9:bb:01:b1:8d: 89:25:e9:4a:c0:5f:ba:19:09:80:39:2c:3d:60:5d: c7:1d:2e:88:10:8b:89:b3:4e:16:e4:7e:e0:64:68: b4:d5:1e:d8:c2:61:66:45:2e:e2:66:06:a6:6b:95: e6:7b:16:18:0d:b1:7a:7a:ce:73:3a:72:1d:1b:05: 8f:24:a0:c6:91:32:46:97:4c:7c:ee:65:9e:b7:40: bb:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:2C:16:F1:5B:2F:B5:6B:A5:99:48:17:FA:8E:78:26:EE:BD:6C:4F X509v3 Authority Key Identifier: keyid:97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/xywW8VsvtWulmUgX-o54Ju69bE8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.5.19.0/24 IPv6: 2a0d:3dc0:4492::/48 Signature Algorithm: sha256WithRSAEncryption 2b:09:84:36:52:ec:d1:69:c7:a0:2b:47:eb:e3:ef:26:8b:ec: 67:5b:38:5e:e1:07:5a:f4:46:b2:27:b6:99:07:44:59:a4:72: 03:66:86:13:ef:44:62:c3:9c:f3:c5:43:f8:b5:50:50:3d:94: 2c:eb:a8:51:45:87:bd:24:b4:78:d6:af:0e:1b:c8:6d:af:6e: e4:5e:6d:91:b1:8d:0d:bc:3d:ba:7e:c8:42:fc:f4:7c:56:2e: 90:60:14:23:68:e9:dc:11:ec:3e:a5:f0:98:ea:e8:49:94:4b: 91:db:fa:a3:c7:a4:50:0c:bd:8a:1f:2c:43:a2:df:93:03:c0: 60:c6:cb:ca:b7:96:50:ac:c6:0e:28:b5:38:d8:3f:e7:64:dd: b9:5d:9e:11:2b:b4:81:a2:9f:3a:11:ea:96:3c:fb:69:57:b3: 8b:ea:bf:d1:3f:17:1a:e2:6b:3e:3b:9b:77:7b:c6:b3:af:43: 26:0f:2f:3e:5a:03:0f:d6:f3:ea:32:0f:58:38:be:7b:fc:50: fd:ae:1a:67:ba:f1:09:f5:08:2a:e7:20:c0:9f:8b:93:15:71: bc:bd:f5:d5:ad:93:2f:64:8e:ba:e2:c4:17:03:3e:53:1c:e6: cd:0d:ff:15:f6:4c:92:d8:cc:03:68:9e:1b:89:68:29:9f:86: 55:7b:57:b7 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZuNp2omoTiVpG3sxF6aQpUjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ODNhNTQ4N2IzNWMxZDFlMWYxNTdjMTkxMzEyYjNkZjRi YzE3YWIwHhcNMjYwMTA1MTAxNTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzJjMTZmMTViMmZiNTZiYTU5OTQ4MTdmYThlNzgyNmVlYmQ2YzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5MFTK5nxb9TmF1UQVj7FAohqURz 0ro/lnItLCo+33nVz8AWaHIH+0ioqndmCepsgPDuclY2FnMuDIvZURoXB4tbo1MF idTAKPSFOJQ9PxD9F3mnemkOn/oVZsee5Yr9s4YCeKGQnQO32VPsM6E2pXVNgxjC k+pL7Xh5yYpqdPIyExJ16ln0h/M8fFswMfFunkOSa3+5kQtYH1E93BzGLob7VJ5L QLh7w+PR+u2wybsBsY2JJelKwF+6GQmAOSw9YF3HHS6IEIuJs04W5H7gZGi01R7Y wmFmRS7iZgama5XmexYYDbF6es5zOnIdGwWPJKDGkTJGl0x87mWet0C7jQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFMcsFvFbL7VrpZlIF/qOeCbuvWxPMB8GA1UdIwQY MBaAFJeDpUh7NcHR4fFXwZExKz30vBerMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mMjIxMzEtYTBmZi00ZjI3LThkZmEt NjkxNTJlOWEwOGMzLzEveHl3VzhWc3Z0V3VsbVVnWC1vNTRKdTY5YkU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mMjIxMzEtYTBmZi00ZjI3LThkZmEtNjkxNTJlOWEwOGMz LzEvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwQUTMA8E AgACMAkDBwAqDT3ARJIwDQYJKoZIhvcNAQELBQADggEBACsJhDZS7NFpx6ArR+vj 7yaL7GdbOF7hB1r0RrIntpkHRFmkcgNmhhPvRGLDnPPFQ/i1UFA9lCzrqFFFh70k tHjWrw4byG2vbuRebZGxjQ28Pbp+yEL89HxWLpBgFCNo6dwR7D6l8Jjq6EmUS5Hb +qPHpFAMvYofLEOi35MDwGDGy8q3llCsxg4otTjYP+dk3bldnhErtIGinzoR6pY8 +2lXs4vqv9E/Fxriaz47m3d7xrOvQyYPLz5aAw/W8+oyD1g4vnv8UP2uGme68Qn1 CCrnIMCfi5MVcby99dWtky9kjrrixBcDPlMc5s0N/xX2TJLYzANonhuJaCmfhlV7 V7c= -----END CERTIFICATE-----Generated at Sat Jan 10 22:32:56 2026 by rpki-client