This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/xwWOpZQmFcKozOAfviwF39yqX24.roa File: xwWOpZQmFcKozOAfviwF39yqX24.roa (raw, json) Hash identifier: eslrEB6HCzo/dx5LwCpkX11aKl51HL92Pc+eMVakmzo= Subject key identifier: C7:05:8E:A5:94:26:15:C2:A8:CC:E0:1F:BE:2C:05:DF:DC:AA:5F:6E Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f Certificate serial: 019B7834A46B464E913CC8B074CB0D7AEB81 Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/xwWOpZQmFcKozOAfviwF39yqX24.roa Signing time: Thu 01 Jan 2026 06:17:54 +0000 ROA not before: Thu 01 Jan 2026 06:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400909 IP address blocks: 93.127.150.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:a4:6b:46:4e:91:3c:c8:b0:74:cb:0d:7a:eb:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f Validity Not Before: Jan 1 06:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7058ea5942615c2a8cce01fbe2c05dfdcaa5f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c3:9a:c4:d2:40:6c:94:f5:08:69:d2:d3:9e: 7e:4b:b4:a6:bd:3a:a3:f5:67:75:55:7d:45:0a:37: da:17:39:e9:ca:6a:b9:0b:ce:c3:9b:ca:2b:4c:a1: 03:72:74:4c:d1:60:c9:2b:5e:70:0c:3a:71:12:2d: 78:e3:b6:d9:ae:55:fd:fe:a5:8c:cd:69:b9:cb:26: f6:9e:58:be:b0:41:b1:b5:19:c3:71:ee:85:ae:1b: b9:c6:95:cf:55:30:d3:3c:3d:73:d7:55:5e:61:a8: bd:36:c9:6c:1c:7e:76:72:f2:95:f4:84:f1:92:3a: a3:ce:ee:2b:27:5d:b3:a9:3f:a8:fe:a9:c7:4d:f8: bf:7c:28:9f:5f:b0:9b:ef:6d:c2:df:7f:a5:49:aa: 7b:e8:12:8c:8f:06:cb:fb:91:bc:f4:dd:15:94:70: 8f:ac:64:68:ea:93:53:70:a6:ac:65:fe:7f:d3:ef: 9b:8d:e1:47:da:70:5f:49:ba:6f:5a:55:ae:46:b9: 12:1e:53:e9:62:08:f7:d2:4b:c2:24:83:e3:3c:de: 66:8b:7f:e1:4d:fc:f5:ce:02:53:4b:22:c5:3d:07: 08:7a:02:e8:52:be:d8:24:80:14:1c:7d:30:03:cd: e5:19:62:8f:da:e8:c5:e1:f7:10:d1:7a:18:91:ef: 27:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:05:8E:A5:94:26:15:C2:A8:CC:E0:1F:BE:2C:05:DF:DC:AA:5F:6E X509v3 Authority Key Identifier: keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/xwWOpZQmFcKozOAfviwF39yqX24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.127.150.0/23 Signature Algorithm: sha256WithRSAEncryption 67:44:bf:78:95:84:6f:64:bc:11:58:0a:fe:22:b4:35:02:96: 14:2c:c5:f0:68:f8:7a:0a:fe:ee:ff:72:0b:1d:79:a3:88:47: b5:63:b8:80:e0:48:8e:61:bc:3d:cc:2b:f6:ac:f4:40:02:3e: 6c:ca:c8:42:c0:e3:42:20:62:1e:ed:fb:59:91:43:ee:e1:0c: 4d:4e:1b:b1:7b:59:7b:71:b5:00:4e:6f:53:1b:5e:71:18:94: d8:4b:81:79:a3:f9:8e:39:16:3d:c4:11:d6:8d:0b:c1:77:3f: f3:19:8b:18:a5:a2:0b:61:84:2d:7a:a9:fe:0f:53:81:af:c7: e9:1c:61:de:e2:c8:3c:97:6a:a1:37:c4:21:b3:96:83:a5:ea: 66:b1:bd:3a:6b:04:35:6e:cb:b9:c3:f6:ae:49:a3:36:c7:fd: c4:1d:35:68:a7:58:71:d5:24:14:aa:8f:c3:8c:5f:2e:60:c8: 15:6e:67:7a:bf:d8:85:7b:13:b9:0d:62:a8:f3:9e:95:92:e1: 29:1d:3f:90:87:98:5d:4a:4a:2d:5f:48:9d:de:b4:5b:25:9b: 09:c3:a5:84:08:72:a7:64:f4:c0:f0:8a:bc:7a:ef:aa:e1:e5: 58:8b:1b:51:c9:77:e2:cd:d2:15:57:69:22:61:5b:5f:78:4b: 31:cb:fc:40 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NKRrRk6RPMiwdMsNeuuBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNzhiYzNiZDM1MGVlZGM0ZjM3N2MyMjQ1NTZiMjUwZGE2 ZGRlNmYwHhcNMjYwMTAxMDYxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzA1OGVhNTk0MjYxNWMyYThjY2UwMWZiZTJjMDVkZmRjYWE1ZjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8OaxNJAbJT1CGnS055+S7SmvTqj 9Wd1VX1FCjfaFznpymq5C87Dm8orTKEDcnRM0WDJK15wDDpxEi1447bZrlX9/qWM zWm5yyb2nli+sEGxtRnDce6Frhu5xpXPVTDTPD1z11VeYai9NslsHH52cvKV9ITx kjqjzu4rJ12zqT+o/qnHTfi/fCifX7Cb723C33+lSap76BKMjwbL+5G89N0VlHCP rGRo6pNTcKasZf5/0++bjeFH2nBfSbpvWlWuRrkSHlPpYgj30kvCJIPjPN5mi3/h Tfz1zgJTSyLFPQcIegLoUr7YJIAUHH0wA83lGWKP2ujF4fcQ0XoYke8nCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMcFjqWUJhXCqMzgH74sBd/cql9uMB8GA1UdIwQY MBaAFMN4vDvTUO7cTzd8IkVWslDabd5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYt NDQxNDU1OGZkY2JiLzEveHdXT3BaUW1GY0tvek9BZnZpd0YzOXlxWDI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYtNDQxNDU1OGZkY2Ji LzEvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXX+WMA0G CSqGSIb3DQEBCwUAA4IBAQBnRL94lYRvZLwRWAr+IrQ1ApYULMXwaPh6Cv7u/3IL HXmjiEe1Y7iA4EiOYbw9zCv2rPRAAj5syshCwONCIGIe7ftZkUPu4QxNThuxe1l7 cbUATm9TG15xGJTYS4F5o/mOORY9xBHWjQvBdz/zGYsYpaILYYQteqn+D1OBr8fp HGHe4sg8l2qhN8Qhs5aDpepmsb06awQ1bsu5w/auSaM2x/3EHTVop1hx1SQUqo/D jF8uYMgVbmd6v9iFexO5DWKo856VkuEpHT+Qh5hdSkotX0id3rRbJZsJw6WECHKn ZPTA8Iq8eu+q4eVYixtRyXfizdIVV2kiYVtfeEsxy/xA -----END CERTIFICATE-----Generated at Mon Jan 19 23:36:32 2026 by rpki-client