This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/XVbyZDeAu74wqWgE4Lug0IJ0xJ4.roa File: XVbyZDeAu74wqWgE4Lug0IJ0xJ4.roa (raw, json) Hash identifier: G5/qOs1gotpqFOvbgNgnzqAQEWPvAJWudCVSYuYf4PQ= Subject key identifier: 5D:56:F2:64:37:80:BB:BE:30:A9:68:04:E0:BB:A0:D0:82:74:C4:9E Certificate issuer: /CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d Certificate serial: 019B77592611209C3AD6DC0D4E25EB52018F Authority key identifier: 24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/XVbyZDeAu74wqWgE4Lug0IJ0xJ4.roa Signing time: Thu 01 Jan 2026 02:18:09 +0000 ROA not before: Thu 01 Jan 2026 02:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20922 IP address blocks: 193.188.192.0/23 maxlen: 23 193.188.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:26:11:20:9c:3a:d6:dc:0d:4e:25:eb:52:01:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d Validity Not Before: Jan 1 02:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d56f2643780bbbe30a96804e0bba0d08274c49e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:dd:b0:ca:b0:db:d5:c7:0b:7e:57:31:74:99: 55:cf:ee:0c:91:1a:b8:85:cb:40:3d:cb:e4:c0:83: 1e:05:a9:98:1f:d8:3b:49:4b:c0:6d:2b:45:50:05: a6:54:b7:73:9d:d7:1a:a8:d3:af:25:32:d3:26:b4: d1:f6:09:6b:47:d7:5d:37:a7:24:bf:5e:73:6d:64: 78:6d:e1:a2:5e:5d:29:53:7e:dc:8e:8f:bc:3d:57: c1:9a:55:fc:39:87:60:5b:61:54:a9:3a:08:7d:97: 54:32:ac:dc:48:1b:5d:cb:e6:56:d3:b8:96:d3:e2: f0:be:df:39:ab:4b:a2:c7:e1:0c:bb:a3:70:95:08: 34:44:be:26:e2:cc:83:81:ee:13:b6:76:90:77:22: 7f:e0:2e:9a:7e:ff:cf:af:69:c7:b5:4c:92:74:4f: e5:bb:4b:9b:fb:90:ce:0f:92:cb:c1:2e:a4:ff:dc: f6:d4:08:96:8b:54:b4:28:83:1d:5f:c8:c8:a8:18: 75:58:9a:b6:0c:94:18:46:a6:8b:c8:c2:6d:22:71: 9e:79:dd:e4:69:0d:9a:d7:db:d0:62:a6:4e:de:93: 5b:2b:d0:9b:72:f1:d0:c2:28:16:23:c9:53:79:0d: d2:d6:8f:f4:30:0d:bb:3a:63:52:88:f1:e2:27:96: 8e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:56:F2:64:37:80:BB:BE:30:A9:68:04:E0:BB:A0:D0:82:74:C4:9E X509v3 Authority Key Identifier: keyid:24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/XVbyZDeAu74wqWgE4Lug0IJ0xJ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.188.192.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:a6:7a:7f:a4:c2:4f:ed:50:2a:17:36:12:27:fb:93:cc:0d: fc:bf:5b:98:14:7f:7b:8e:75:ae:6d:4a:ca:0d:f4:34:2c:49: bf:70:91:7f:d9:61:5e:f2:fb:f3:4e:34:01:de:e3:6a:0f:d9: 63:06:b0:62:7b:6b:61:5d:cd:0f:95:8a:ce:b0:26:4a:fe:52: 77:6b:02:db:e1:b4:f8:aa:70:b1:3f:7b:49:f6:10:6b:c3:d3: ae:67:2b:ba:c0:6d:cf:6e:8f:85:b6:c6:4b:fd:f6:a5:7e:63: 09:a2:0d:12:e1:04:49:35:dd:50:54:14:4f:75:8d:89:12:cf: a4:30:5b:37:13:2d:8f:86:fe:f4:fa:47:b3:7a:de:af:30:13: a5:5f:e8:37:c5:ba:95:ac:d4:29:09:30:8d:31:a1:da:a1:54: 7f:ae:94:11:9e:aa:eb:fe:f6:b2:a5:4e:fe:bf:7a:34:5e:a8: 8e:3a:f6:7d:2b:3d:e3:b4:d0:b6:e6:11:22:ce:00:b5:d4:16: 3e:88:f8:e7:4a:b7:37:ef:24:d7:b7:15:18:63:68:8a:e3:27: a3:89:e2:84:aa:a3:5d:8f:53:e0:e4:63:cc:73:12:b9:23:14: f0:3d:75:96:50:92:30:d0:bb:38:c3:55:df:b4:38:91:a2:1a: 21:c8:bb:d9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WSYRIJw61twNTiXrUgGPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0OGY1ZTI2ZjFjMDhmNDQ4NmM5OTExYzhiNjA5ZWFlOGI2 Y2I3NGQwHhcNMjYwMTAxMDIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDU2ZjI2NDM3ODBiYmJlMzBhOTY4MDRlMGJiYTBkMDgyNzRjNDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3N2wyrDb1ccLflcxdJlVz+4MkRq4 hctAPcvkwIMeBamYH9g7SUvAbStFUAWmVLdzndcaqNOvJTLTJrTR9glrR9ddN6ck v15zbWR4beGiXl0pU37cjo+8PVfBmlX8OYdgW2FUqToIfZdUMqzcSBtdy+ZW07iW 0+Lwvt85q0uix+EMu6NwlQg0RL4m4syDge4TtnaQdyJ/4C6afv/Pr2nHtUySdE/l u0ub+5DOD5LLwS6k/9z21AiWi1S0KIMdX8jIqBh1WJq2DJQYRqaLyMJtInGeed3k aQ2a19vQYqZO3pNbK9CbcvHQwigWI8lTeQ3S1o/0MA27OmNSiPHiJ5aOOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF1W8mQ3gLu+MKloBOC7oNCCdMSeMB8GA1UdIwQY MBaAFCSPXibxwI9EhsmRHItgnq6LbLdNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkk5ZUp2SEFqMFNHeVpFY2kyQ2Vyb3RzdDAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9kYWU4YjAtOTdkMC00OGQ0LTliMjYt MDEzN2IxZjc1ZDAyLzEvWFZieVpEZUF1NzR3cVdnRTRMdWcwSUoweEo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9kYWU4YjAtOTdkMC00OGQ0LTliMjYtMDEzN2IxZjc1ZDAy LzEvSkk5ZUp2SEFqMFNHeVpFY2kyQ2Vyb3RzdDAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwbzAMA0G CSqGSIb3DQEBCwUAA4IBAQBdpnp/pMJP7VAqFzYSJ/uTzA38v1uYFH97jnWubUrK DfQ0LEm/cJF/2WFe8vvzTjQB3uNqD9ljBrBie2thXc0PlYrOsCZK/lJ3awLb4bT4 qnCxP3tJ9hBrw9OuZyu6wG3Pbo+FtsZL/falfmMJog0S4QRJNd1QVBRPdY2JEs+k MFs3Ey2Phv70+kezet6vMBOlX+g3xbqVrNQpCTCNMaHaoVR/rpQRnqrr/vaypU7+ v3o0XqiOOvZ9Kz3jtNC25hEizgC11BY+iPjnSrc37yTXtxUYY2iK4yejieKEqqNd j1Pg5GPMcxK5IxTwPXWWUJIw0Ls4w1XftDiRohohyLvZ -----END CERTIFICATE-----Generated at Sun Jan 25 22:30:44 2026 by rpki-client