This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/XsMxuHOfiEUiVVVJZ-9IVTfRkI8.roa File: XsMxuHOfiEUiVVVJZ-9IVTfRkI8.roa (raw, json) Hash identifier: MI5i70iv8hR3tp0G9HofUgRHsD3DM2McJiWabGFnihI= Subject key identifier: 5E:C3:31:B8:73:9F:88:45:22:55:55:49:67:EF:48:55:37:D1:90:8F Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e Certificate serial: 019B7910042A6AB2D6D3CFE040BE69285A0A Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/XsMxuHOfiEUiVVVJZ-9IVTfRkI8.roa Signing time: Thu 01 Jan 2026 10:17:31 +0000 ROA not before: Thu 01 Jan 2026 10:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205358 IP address blocks: 152.89.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:04:2a:6a:b2:d6:d3:cf:e0:40:be:69:28:5a:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e Validity Not Before: Jan 1 10:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ec331b8739f88452255554967ef485537d1908f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:bc:00:31:b5:4c:3f:64:29:bb:1b:9c:31:84: 5a:e3:96:c5:d8:fc:bc:65:17:98:01:a7:8a:d4:6a: 34:f9:58:d8:89:d1:53:87:36:97:0d:57:f2:6e:9d: 4b:cb:1d:20:7a:90:ce:4c:1b:88:5c:cd:a3:d8:9e: 32:44:38:a3:b3:2a:e9:3c:a4:7d:fb:05:eb:56:66: 9a:91:df:4b:f3:a7:5d:22:5d:25:f2:c0:16:10:29: 4d:fe:cb:23:1b:ad:86:bf:6a:88:82:ce:ec:d4:c3: 60:e7:23:56:17:33:6c:18:dd:68:9e:d3:44:14:58: 4f:a9:ae:f9:d5:92:a2:e8:ef:2f:67:64:83:12:da: 93:a4:82:07:0b:e4:33:57:09:8e:81:c2:a0:68:30: df:e1:b2:34:55:39:2b:66:22:60:ed:71:03:25:15: 4b:33:61:66:e2:84:77:8d:25:0f:24:96:23:6b:c1: 75:e7:ca:93:70:3c:72:6f:7d:e9:79:38:45:79:a2: c8:56:79:87:cf:ac:62:ae:9d:14:a3:11:17:15:cd: 0a:70:c7:e9:5a:7f:7d:89:3c:f1:3d:e4:00:25:eb: 84:c2:02:99:8e:e7:95:9b:01:0a:c5:9e:94:53:91: 55:8c:e9:80:6f:79:55:ff:05:fb:55:13:83:81:db: d6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C3:31:B8:73:9F:88:45:22:55:55:49:67:EF:48:55:37:D1:90:8F X509v3 Authority Key Identifier: keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/XsMxuHOfiEUiVVVJZ-9IVTfRkI8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.89.171.0/24 Signature Algorithm: sha256WithRSAEncryption 82:55:0d:13:8e:c3:ac:97:c2:ff:b9:c2:dc:eb:36:f5:d6:eb: 8c:bb:1a:61:78:3f:7f:46:89:4d:20:43:7b:cc:4f:e2:24:dd: 4d:03:f0:1a:1e:7e:5e:63:e1:35:b2:1d:38:5b:06:fb:f8:14: 57:75:3a:7e:db:85:73:d0:e9:7f:43:36:39:09:46:de:92:58: 48:bc:26:16:fc:36:7d:f1:e5:35:1b:93:22:7a:02:19:31:41: b0:e8:12:0b:0c:2f:07:fe:e4:60:b5:a4:23:e1:f6:86:55:94: e7:5a:3b:0d:a9:ba:fa:89:93:7b:df:48:05:79:dc:2f:4c:20: 8d:14:54:0a:4f:53:b8:0e:20:b9:1a:bd:1e:19:ed:b4:84:ed: 4a:98:d6:a3:22:be:f8:44:15:a9:6e:59:5c:17:9a:ae:39:35: 91:85:94:f6:9f:51:2a:90:67:fd:44:43:64:b8:d6:32:80:ef: 0b:41:05:6b:62:5b:9b:03:38:74:75:d3:1f:d7:a2:93:06:00: ba:f8:be:be:ff:c8:0b:ad:d8:63:bb:51:a9:2c:d1:39:92:6d: 73:68:da:94:fe:1a:15:80:17:a9:82:58:eb:54:64:27:a2:9f: 23:8c:84:62:f4:10:a0:61:b7:d4:b4:d4:09:2f:1b:81:ea:65: a9:c6:5a:17 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EAQqarLW08/gQL5pKFoKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmOTNkM2JhMTk3ZjVjZTMwOThiZmE3NzAwYjQzODU0ZWFh ODBlOWUwHhcNMjYwMTAxMTAxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZWMzMzFiODczOWY4ODQ1MjI1NTU1NDk2N2VmNDg1NTM3ZDE5MDhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA87wAMbVMP2QpuxucMYRa45bF2Py8 ZReYAaeK1Go0+VjYidFThzaXDVfybp1Lyx0gepDOTBuIXM2j2J4yRDijsyrpPKR9 +wXrVmaakd9L86ddIl0l8sAWEClN/ssjG62Gv2qIgs7s1MNg5yNWFzNsGN1ontNE FFhPqa751ZKi6O8vZ2SDEtqTpIIHC+QzVwmOgcKgaDDf4bI0VTkrZiJg7XEDJRVL M2Fm4oR3jSUPJJYja8F158qTcDxyb33peThFeaLIVnmHz6xirp0UoxEXFc0KcMfp Wn99iTzxPeQAJeuEwgKZjueVmwEKxZ6UU5FVjOmAb3lV/wX7VRODgdvWBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF7DMbhzn4hFIlVVSWfvSFU30ZCPMB8GA1UdIwQY MBaAFC+T07oZf1zjCYv6dwC0OFTqqA6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUt OWU3MWRjMjRhNjgzLzEvWHNNeHVIT2ZpRVVpVlZWSlotOUlWVGZSa0k4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUtOWU3MWRjMjRhNjgz LzEvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmFmrMA0G CSqGSIb3DQEBCwUAA4IBAQCCVQ0TjsOsl8L/ucLc6zb11uuMuxpheD9/RolNIEN7 zE/iJN1NA/AaHn5eY+E1sh04Wwb7+BRXdTp+24Vz0Ol/QzY5CUbeklhIvCYW/DZ9 8eU1G5MiegIZMUGw6BILDC8H/uRgtaQj4faGVZTnWjsNqbr6iZN730gFedwvTCCN FFQKT1O4DiC5Gr0eGe20hO1KmNajIr74RBWpbllcF5quOTWRhZT2n1EqkGf9RENk uNYygO8LQQVrYlubAzh0ddMf16KTBgC6+L6+/8gLrdhju1GpLNE5km1zaNqU/hoV gBepgljrVGQnop8jjIRi9BCgYbfUtNQJLxuB6mWpxloX -----END CERTIFICATE-----Generated at Sun Jan 25 15:02:35 2026 by rpki-client