This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/xYO3tyyPxHta_UjYp7pYCPsRfo8.roa File: xYO3tyyPxHta_UjYp7pYCPsRfo8.roa (raw, json) Hash identifier: sws8cWbHWQhZdTJrDoM6VzTyVp0PMivb8c57UClyZ64= Subject key identifier: C5:83:B7:B7:2C:8F:C4:7B:5A:FD:48:D8:A7:BA:58:08:FB:11:7E:8F Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Certificate serial: 019B7C7EF71B88D3DBEE30958B5416D8055A Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/xYO3tyyPxHta_UjYp7pYCPsRfo8.roa Signing time: Fri 02 Jan 2026 02:17:34 +0000 ROA not before: Fri 02 Jan 2026 02:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 54600 IP address blocks: 193.160.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7e:f7:1b:88:d3:db:ee:30:95:8b:54:16:d8:05:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Validity Not Before: Jan 2 02:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c583b7b72c8fc47b5afd48d8a7ba5808fb117e8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:56:65:77:99:01:ed:4a:46:a4:b8:38:18:50: 78:82:53:6c:83:ad:87:41:78:3a:df:da:51:c8:94: 36:dd:b9:fe:47:14:aa:a8:91:c0:05:96:ea:c5:fb: dc:ce:f6:9c:26:37:c9:18:80:3d:8d:e4:2f:01:0c: 73:90:28:ef:65:38:87:06:b6:90:54:70:b0:bf:f8: a9:8d:a2:5e:95:f9:8b:87:7d:02:cd:63:58:bf:fa: d4:28:86:78:c6:f7:49:f8:0e:fa:52:a2:f9:8d:7b: 7d:b7:d1:c6:78:3e:32:fb:92:5b:ff:44:83:df:79: a2:9f:07:5b:e0:8b:2f:a9:12:6e:11:ae:cb:a4:20: a1:08:1a:07:bd:9e:ef:35:39:96:52:1a:cf:37:ea: 04:51:c6:e4:15:37:6d:22:42:40:36:15:20:7f:1a: 3f:d5:c0:5e:54:ad:78:f1:ef:fc:1c:da:ed:dd:19: 15:89:0f:79:0f:f5:52:60:94:8a:a5:64:b9:24:67: df:74:fd:84:34:a5:84:04:5e:81:2f:74:90:77:64: f7:de:b8:6c:b7:86:ca:81:23:bd:41:b0:b3:09:52: 47:e5:5b:e7:99:a4:90:f3:28:66:93:9e:a7:fe:53: ba:db:19:aa:bc:e1:50:f9:08:d7:43:4a:88:71:7d: ea:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:83:B7:B7:2C:8F:C4:7B:5A:FD:48:D8:A7:BA:58:08:FB:11:7E:8F X509v3 Authority Key Identifier: keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/xYO3tyyPxHta_UjYp7pYCPsRfo8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.160.32.0/24 Signature Algorithm: sha256WithRSAEncryption ad:4e:93:0d:25:55:d1:96:61:e2:37:61:70:0e:49:5f:d5:4d: 6f:c7:43:5f:1b:62:28:de:d2:a0:a2:af:5a:da:ab:a0:b6:66: cd:59:e0:f7:14:70:ef:f7:f8:85:8b:6d:9a:11:86:54:96:84: ae:14:61:c4:14:67:57:11:e1:cc:6b:8d:9d:34:07:08:b9:18: ea:28:b4:74:85:37:6a:cc:b9:e2:e5:82:4c:31:88:1d:4c:dc: 4a:fa:19:16:09:2d:13:b2:1f:c7:8b:89:ce:b3:79:c2:20:5b: 89:ad:0c:39:f3:96:9f:c1:76:69:36:a7:43:3d:ff:13:f8:67: e1:0a:ab:d6:b8:38:d4:16:1f:a2:25:0f:41:aa:86:c7:bd:c4: a2:09:9c:39:8a:d3:18:16:ab:12:28:fe:be:be:d9:a1:e6:79: de:44:73:73:ef:0e:1d:7e:a2:b9:f5:81:bb:17:06:ad:bb:9e: e4:06:44:72:e7:bb:0d:55:b8:38:cf:36:b5:9a:a0:a3:6f:ff: e4:c2:47:57:ea:74:85:88:ea:75:53:6c:9f:7b:17:b3:e7:74: 98:70:62:52:74:96:fc:9a:3f:73:81:5a:e9:4a:93:5b:31:66: 9c:8a:36:5e:41:f3:b1:83:3a:d7:41:df:c0:ea:0b:48:8d:e4: da:5a:a5:2b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8fvcbiNPb7jCVi1QW2AVaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2 OGIxZTEwHhcNMjYwMTAyMDIxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTgzYjdiNzJjOGZjNDdiNWFmZDQ4ZDhhN2JhNTgwOGZiMTE3ZThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlZld5kB7UpGpLg4GFB4glNsg62H QXg639pRyJQ23bn+RxSqqJHABZbqxfvczvacJjfJGIA9jeQvAQxzkCjvZTiHBraQ VHCwv/ipjaJelfmLh30CzWNYv/rUKIZ4xvdJ+A76UqL5jXt9t9HGeD4y+5Jb/0SD 33minwdb4IsvqRJuEa7LpCChCBoHvZ7vNTmWUhrPN+oEUcbkFTdtIkJANhUgfxo/ 1cBeVK148e/8HNrt3RkViQ95D/VSYJSKpWS5JGffdP2ENKWEBF6BL3SQd2T33rhs t4bKgSO9QbCzCVJH5VvnmaSQ8yhmk56n/lO62xmqvOFQ+QjXQ0qIcX3qKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMWDt7csj8R7Wv1I2Ke6WAj7EX6PMB8GA1UdIwQY MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut ZGNlOTQ3ZTI5NGI2LzEveFlPM3R5eVB4SHRhX1VqWXA3cFlDUHNSZm84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2 LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaAgMA0G CSqGSIb3DQEBCwUAA4IBAQCtTpMNJVXRlmHiN2FwDklf1U1vx0NfG2Io3tKgoq9a 2qugtmbNWeD3FHDv9/iFi22aEYZUloSuFGHEFGdXEeHMa42dNAcIuRjqKLR0hTdq zLni5YJMMYgdTNxK+hkWCS0Tsh/Hi4nOs3nCIFuJrQw585afwXZpNqdDPf8T+Gfh CqvWuDjUFh+iJQ9BqobHvcSiCZw5itMYFqsSKP6+vtmh5nneRHNz7w4dfqK59YG7 Fwatu57kBkRy57sNVbg4zza1mqCjb//kwkdX6nSFiOp1U2yfexez53SYcGJSdJb8 mj9zgVrpSpNbMWacijZeQfOxgzrXQd/A6gtIjeTaWqUr -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:50 2026 by rpki-client