This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/xgLWD5Den1Vtir_enPdc8NWaykY.roa File: xgLWD5Den1Vtir_enPdc8NWaykY.roa (raw, json) Hash identifier: 4jXsKVFiJh5GbUk/Fg7oyDg5JPS53CqBKNMj2FoIAHg= Subject key identifier: C6:02:D6:0F:90:DE:9F:55:6D:8A:BF:DE:9C:F7:5C:F0:D5:9A:CA:46 Certificate issuer: /CN=47cf2714f29db80352e9f309ea2e8c528c946bd9 Certificate serial: 019B7D5CE41BD157E83598282E9AC49E55A8 Authority key identifier: 47:CF:27:14:F2:9D:B8:03:52:E9:F3:09:EA:2E:8C:52:8C:94:6B:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/xgLWD5Den1Vtir_enPdc8NWaykY.roa Signing time: Fri 02 Jan 2026 06:19:58 +0000 ROA not before: Fri 02 Jan 2026 06:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212186 IP address blocks: 194.169.190.0/24 maxlen: 24 194.169.193.0/24 maxlen: 24 194.169.196.0/24 maxlen: 24 194.169.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:e4:1b:d1:57:e8:35:98:28:2e:9a:c4:9e:55:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47cf2714f29db80352e9f309ea2e8c528c946bd9 Validity Not Before: Jan 2 06:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c602d60f90de9f556d8abfde9cf75cf0d59aca46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4a:55:37:ff:04:94:72:89:2c:09:62:d0:1e: 67:1e:dc:eb:52:a9:fc:94:d9:b7:3a:ac:02:7f:0c: 06:1e:9f:76:ac:63:55:3f:31:ea:65:27:f9:1d:9d: f2:20:65:36:d0:f1:e9:76:71:6a:f4:4b:27:85:d3: 62:ec:d2:fd:1a:e0:8e:86:80:6a:73:2c:05:29:3d: cc:4c:2c:68:89:d3:79:86:c8:b1:2f:5c:31:cd:1d: 8e:41:47:62:e2:ca:27:10:97:66:d7:46:f2:e2:02: e5:d1:10:44:7a:37:e1:7e:28:51:2f:ba:de:48:bb: f0:69:f9:6e:14:ed:42:df:00:a3:ca:5a:ed:44:2e: 0a:7f:36:95:e5:b6:c1:8a:9e:97:f7:2a:a9:4f:2f: 8a:5f:23:2a:d3:e8:12:96:0a:fe:22:9d:e7:47:7e: ad:e8:6e:5d:56:29:65:93:da:10:c5:43:32:41:4a: 63:a5:de:9c:a3:da:58:cd:1a:03:b8:1e:88:5c:62: b9:93:82:ed:75:99:ba:f2:0c:84:ac:88:b8:89:6a: 6c:f5:47:93:ee:c1:65:2a:c3:6d:6c:d1:c7:f2:54: 86:46:76:ba:c8:78:49:9c:67:43:30:92:87:ea:bc: e3:ad:e9:a0:c7:7e:9c:ac:f6:12:3a:4f:a7:a7:f9: 52:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:02:D6:0F:90:DE:9F:55:6D:8A:BF:DE:9C:F7:5C:F0:D5:9A:CA:46 X509v3 Authority Key Identifier: keyid:47:CF:27:14:F2:9D:B8:03:52:E9:F3:09:EA:2E:8C:52:8C:94:6B:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/xgLWD5Den1Vtir_enPdc8NWaykY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.169.190.0/24 194.169.193.0/24 194.169.196.0/24 194.169.213.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:31:30:9a:4b:a4:22:9f:c9:db:99:1b:fb:83:c8:96:81:f1: 7b:34:31:bd:d3:66:ae:11:5f:39:d2:bb:87:1b:34:0b:a7:4d: b6:74:61:98:b9:5c:69:0f:74:ec:e1:5c:f3:cf:10:c6:56:f9: 27:9f:0b:a6:41:da:07:f8:b5:a9:98:05:10:40:a3:19:e3:16: 76:e5:cb:a9:b5:17:b3:cd:8b:48:6a:ef:03:b7:81:39:fc:11: 2b:a7:23:53:95:9d:9a:9e:2b:8f:85:7e:42:d2:11:71:bc:e5: f5:a3:07:90:ee:67:08:06:e0:b1:ed:91:2d:56:c3:ad:95:42: e5:01:33:6e:cf:85:0a:b1:3f:05:f1:8e:c2:b2:7b:3f:19:39: 74:a5:e9:b0:ce:07:4d:c2:9a:7a:e1:9d:f3:67:3c:10:c9:90: ad:0d:f5:fa:2e:17:cb:39:8b:4e:36:0e:5c:eb:17:e5:f3:20: 10:49:f2:ac:6a:4d:65:86:14:a2:84:2d:09:2e:db:74:40:eb: 7c:aa:1a:d4:1c:9e:90:85:77:93:d4:43:ee:9c:a1:4e:b8:55: db:dc:41:36:9a:8c:ec:7b:20:65:ec:de:f3:11:5e:5b:ba:c1: bf:66:bb:03:07:a8:81:1b:b9:71:26:d0:51:5e:3d:f4:12:62: 42:ab:36:0f -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt9XOQb0VfoNZgoLprEnlWoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3Y2YyNzE0ZjI5ZGI4MDM1MmU5ZjMwOWVhMmU4YzUyOGM5 NDZiZDkwHhcNMjYwMTAyMDYxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjAyZDYwZjkwZGU5ZjU1NmQ4YWJmZGU5Y2Y3NWNmMGQ1OWFjYTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0pVN/8ElHKJLAli0B5nHtzrUqn8 lNm3OqwCfwwGHp92rGNVPzHqZSf5HZ3yIGU20PHpdnFq9EsnhdNi7NL9GuCOhoBq cywFKT3MTCxoidN5hsixL1wxzR2OQUdi4sonEJdm10by4gLl0RBEejfhfihRL7re SLvwafluFO1C3wCjylrtRC4KfzaV5bbBip6X9yqpTy+KXyMq0+gSlgr+Ip3nR36t 6G5dVillk9oQxUMyQUpjpd6co9pYzRoDuB6IXGK5k4LtdZm68gyErIi4iWps9UeT 7sFlKsNtbNHH8lSGRna6yHhJnGdDMJKH6rzjremgx36crPYSOk+np/lSTQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFMYC1g+Q3p9VbYq/3pz3XPDVmspGMB8GA1UdIwQY MBaAFEfPJxTynbgDUunzCeoujFKMlGvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjg4bkZQS2R1QU5TNmZNSjZpNk1Vb3lVYTlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yYjE5MmYtNmNlZS00N2ZhLTgzOTUt NThhZGY3OGQ4Mjc4LzEveGdMV0Q1RGVuMVZ0aXJfZW5QZGM4TldheWtZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8yYjE5MmYtNmNlZS00N2ZhLTgzOTUtNThhZGY3OGQ4Mjc4 LzEvUjg4bkZQS2R1QU5TNmZNSjZpNk1Vb3lVYTlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwqm+AwQA wqnBAwQAwqnEAwQAwqnVMA0GCSqGSIb3DQEBCwUAA4IBAQA8MTCaS6Qin8nbmRv7 g8iWgfF7NDG902auEV850ruHGzQLp022dGGYuVxpD3Ts4VzzzxDGVvknnwumQdoH +LWpmAUQQKMZ4xZ25cuptRezzYtIau8Dt4E5/BErpyNTlZ2aniuPhX5C0hFxvOX1 oweQ7mcIBuCx7ZEtVsOtlULlATNuz4UKsT8F8Y7Csns/GTl0pemwzgdNwpp64Z3z ZzwQyZCtDfX6LhfLOYtONg5c6xfl8yAQSfKsak1lhhSihC0JLtt0QOt8qhrUHJ6Q hXeT1EPunKFOuFXb3EE2mozseyBl7N7zEV5busG/ZrsDB6iBG7lxJtBRXj30EmJC qzYP -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:04 2026 by rpki-client