This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/XUImnZKdlu7MDc0FxppzhVw4AFU.roa File: XUImnZKdlu7MDc0FxppzhVw4AFU.roa (raw, json) Hash identifier: owXiNqfnKaJDDUXdUHghHE0onKUOIoOQu55R09C97Zg= Subject key identifier: 5D:42:26:9D:92:9D:96:EE:CC:0D:CD:05:C6:9A:73:85:5C:38:00:55 Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1 Certificate serial: 019B7B3623A13061090820BE8292D41B82B5 Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/XUImnZKdlu7MDc0FxppzhVw4AFU.roa Signing time: Thu 01 Jan 2026 20:18:24 +0000 ROA not before: Thu 01 Jan 2026 20:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136050 IP address blocks: 194.147.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:23:a1:30:61:09:08:20:be:82:92:d4:1b:82:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1 Validity Not Before: Jan 1 20:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d42269d929d96eecc0dcd05c69a73855c380055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:7d:f5:80:52:d9:70:1c:29:62:91:36:29:cb: 5b:4f:e5:53:f9:7e:85:32:db:21:4a:07:fb:5e:dc: 56:09:74:d5:25:91:a7:da:cb:63:f0:82:a6:28:c5: f9:c5:2a:3b:65:8d:60:2a:14:d8:33:15:3d:b7:ec: be:1b:8b:c4:6e:26:f0:e4:a0:30:f8:0e:aa:f4:60: e8:0b:74:cf:28:55:f9:dd:a8:b9:cb:24:79:95:fe: 0c:ca:91:2a:f1:6d:ca:b2:3e:82:3d:49:dc:23:aa: 55:9c:67:10:21:ca:ad:44:a5:7e:02:5b:f4:70:10: a1:0a:96:a5:47:61:5b:8a:81:39:e4:f9:f3:bf:cb: 6e:a3:4b:b1:88:a2:50:4b:ab:06:83:05:23:83:a2: dc:66:2b:a6:fd:8f:c3:77:8e:7f:4d:11:83:cd:4e: 33:f4:a6:19:b7:20:57:38:9d:50:e2:55:c0:5b:13: 75:a7:33:7b:4b:10:0d:6d:14:d5:46:ca:f3:62:20: 5f:cb:3b:91:d6:38:79:a1:64:86:9d:1d:cd:77:92: 93:38:ce:0f:b2:df:c6:ea:41:3c:45:13:61:be:12: 63:18:34:b9:c5:ac:0c:71:57:34:36:21:18:bf:df: 22:53:02:21:2b:e1:fe:25:f2:d9:05:25:cd:52:70: 1c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:42:26:9D:92:9D:96:EE:CC:0D:CD:05:C6:9A:73:85:5C:38:00:55 X509v3 Authority Key Identifier: keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/XUImnZKdlu7MDc0FxppzhVw4AFU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.147.170.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:1b:0f:2c:b7:79:67:30:90:38:9a:e8:51:0d:82:7e:34:f2: b9:17:09:ce:02:ab:1f:62:3a:64:67:9c:c6:97:33:74:10:cd: a5:95:61:19:8e:e0:56:92:3c:e0:b6:e7:82:f7:46:54:66:3d: 4f:aa:c4:04:70:91:ae:6f:f5:91:dc:de:64:9e:c4:e7:ea:35: 61:94:61:d0:de:d6:8f:19:12:00:87:93:46:10:d2:23:17:ac: 43:32:f0:b7:ac:6a:b1:e9:26:19:ec:cf:8d:cd:8d:c3:78:34: c7:f3:2b:a3:34:b1:bd:13:37:ed:05:8a:93:67:ef:b5:5b:ea: 20:a4:1b:52:1d:0b:80:af:b0:d9:08:ce:c2:d1:60:7f:44:72: c4:a2:47:ca:0d:40:b6:b8:d8:f9:44:74:91:ca:40:d4:2c:41: 4f:53:ea:8c:c0:b7:49:34:47:dc:a9:b2:b6:d9:f9:2c:f5:ea: c2:2c:53:05:02:7f:b4:89:1b:aa:32:c4:4a:04:48:99:a3:a7: 61:f5:c3:f5:39:de:3a:33:5a:32:48:3b:06:c7:2d:eb:78:26: 22:c9:e9:6d:1b:20:f1:ae:f0:e5:27:d6:7b:bb:54:b7:a4:65: a1:68:5f:58:bb:11:bd:b1:75:b4:65:19:b0:78:2e:df:a3:07: 2f:f6:66:41 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NiOhMGEJCCC+gpLUG4K1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkMzBhMTMxNzE4NTYwYTM0YWIzNDkzODg0ZTg1OGVjNDMx ZjZhZDEwHhcNMjYwMTAxMjAxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDQyMjY5ZDkyOWQ5NmVlY2MwZGNkMDVjNjlhNzM4NTVjMzgwMDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiX31gFLZcBwpYpE2KctbT+VT+X6F MtshSgf7XtxWCXTVJZGn2stj8IKmKMX5xSo7ZY1gKhTYMxU9t+y+G4vEbibw5KAw +A6q9GDoC3TPKFX53ai5yyR5lf4MypEq8W3Ksj6CPUncI6pVnGcQIcqtRKV+Alv0 cBChCpalR2FbioE55Pnzv8tuo0uxiKJQS6sGgwUjg6LcZium/Y/Dd45/TRGDzU4z 9KYZtyBXOJ1Q4lXAWxN1pzN7SxANbRTVRsrzYiBfyzuR1jh5oWSGnR3Nd5KTOM4P st/G6kE8RRNhvhJjGDS5xawMcVc0NiEYv98iUwIhK+H+JfLZBSXNUnAcrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF1CJp2SnZbuzA3NBcaac4VcOABVMB8GA1UdIwQY MBaAFO0woTFxhWCjSrNJOIToWOxDH2rRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTkt NGIzYjFiNjNiNmFiLzEvWFVJbW5aS2RsdTdNRGMwRnhwcHpoVnc0QUZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTktNGIzYjFiNjNiNmFi LzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpOqMA0G CSqGSIb3DQEBCwUAA4IBAQB7Gw8st3lnMJA4muhRDYJ+NPK5FwnOAqsfYjpkZ5zG lzN0EM2llWEZjuBWkjzgtueC90ZUZj1PqsQEcJGub/WR3N5knsTn6jVhlGHQ3taP GRIAh5NGENIjF6xDMvC3rGqx6SYZ7M+NzY3DeDTH8yujNLG9EzftBYqTZ++1W+og pBtSHQuAr7DZCM7C0WB/RHLEokfKDUC2uNj5RHSRykDULEFPU+qMwLdJNEfcqbK2 2fks9erCLFMFAn+0iRuqMsRKBEiZo6dh9cP1Od46M1oySDsGxy3reCYiyeltGyDx rvDlJ9Z7u1S3pGWhaF9YuxG9sXW0ZRmweC7fowcv9mZB -----END CERTIFICATE-----Generated at Sun Jan 25 22:29:01 2026 by rpki-client