This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/1XzbCZ6yY8fKoxvI53eQ_YxAoE8.roa File: 1XzbCZ6yY8fKoxvI53eQ_YxAoE8.roa (raw, json) Hash identifier: 2cHGvx3rw1zFTiwFmSKRPxp+Yh74QRl9au/Y2339KsI= Subject key identifier: D5:7C:DB:09:9E:B2:63:C7:CA:A3:1B:C8:E7:77:90:FD:8C:40:A0:4F Certificate issuer: /CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34 Certificate serial: 019B7EA71E9655792959427D829C46438942 Authority key identifier: 1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/1XzbCZ6yY8fKoxvI53eQ_YxAoE8.roa Signing time: Fri 02 Jan 2026 12:20:40 +0000 ROA not before: Fri 02 Jan 2026 12:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49488 IP address blocks: 194.0.10.0/24 maxlen: 24 2001:678:d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 21:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:1e:96:55:79:29:59:42:7d:82:9c:46:43:89:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34 Validity Not Before: Jan 2 12:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d57cdb099eb263c7caa31bc8e77790fd8c40a04f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:32:09:60:dd:00:c2:00:2a:bf:f8:f9:a2:bb: 49:ff:6a:cc:71:2d:74:e2:8d:e7:18:51:06:1e:b7: 56:d6:00:ee:c4:ea:23:27:11:c5:f4:86:6e:72:60: 7a:2c:96:94:62:17:06:6b:7d:35:e9:2b:82:0e:f2: 65:ae:27:64:91:31:d1:e6:ec:10:99:df:f5:89:41: 9b:fe:87:d6:7c:b2:1d:96:70:23:f6:22:51:04:3d: 41:0f:9c:8c:f6:05:cb:94:88:1e:73:39:a9:b7:12: 6b:2d:0e:ef:af:8a:0c:3f:1f:f8:47:03:8c:0f:ad: ce:41:7d:1c:10:ca:7b:dc:36:74:18:f9:bc:e4:fa: 29:c9:d6:82:92:9c:ff:8d:ac:50:8c:64:7b:45:eb: a7:f7:9f:78:7f:b4:22:08:84:d2:39:7f:3d:d1:fc: bf:95:2f:4e:6a:27:99:ab:89:a7:70:7b:7f:04:01: 38:4b:80:14:6a:27:dd:47:f4:01:f8:b1:ae:0a:63: a5:c8:00:2c:a8:dd:fe:d2:76:f0:b7:90:65:94:33: dd:df:c1:65:a0:d7:1b:29:16:59:61:bc:45:91:81: 85:d4:e6:7a:59:31:b9:e7:97:fe:b7:94:e1:75:fc: 38:3f:16:07:a2:44:c1:c9:31:98:6a:68:d1:cb:88: 1e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:7C:DB:09:9E:B2:63:C7:CA:A3:1B:C8:E7:77:90:FD:8C:40:A0:4F X509v3 Authority Key Identifier: keyid:1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/1XzbCZ6yY8fKoxvI53eQ_YxAoE8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.0.10.0/24 IPv6: 2001:678:d::/48 Signature Algorithm: sha256WithRSAEncryption 29:25:f3:bf:2b:4d:bd:86:10:28:95:2e:09:19:a9:d8:64:5a: 3e:78:ad:0b:ed:94:6d:ec:af:16:f9:b7:60:b9:b3:ec:58:8f: cc:56:63:6d:e3:6d:35:f4:a2:9d:a3:47:18:f0:05:e8:27:97: 4d:f6:99:e2:f9:b1:5a:06:54:fa:46:24:6f:e8:61:07:f6:29: 4c:23:65:ac:83:f1:48:4d:c5:fb:b9:36:d8:7f:c4:04:48:a1: 83:c0:23:ea:b4:ac:13:45:1a:87:05:d4:63:85:76:63:a9:99: c7:2c:c0:f2:97:7d:25:b8:da:65:5d:66:21:a1:21:9a:53:b3: 3b:c1:80:3c:c8:25:8c:c2:c9:bc:be:d1:6a:df:bf:da:7c:ce: 81:09:98:30:60:10:1b:22:af:25:4d:59:2c:c3:2d:18:58:ea: 41:19:6a:2d:2c:78:ec:e4:52:0b:75:7f:39:5c:c7:42:71:9d: 55:57:85:b3:af:99:c7:78:bc:38:10:bd:5e:a3:4a:ac:bb:ab: d8:d1:ec:a1:06:9f:82:f5:5c:28:5c:9d:b8:41:5f:01:42:f0: 02:e1:e8:24:50:c6:f6:e9:ef:75:d0:1d:1d:1e:9f:7a:49:58: a2:d1:50:66:c0:2d:0f:68:09:67:92:45:d9:e4:1c:60:ae:1c: 98:4f:73:35 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+px6WVXkpWUJ9gpxGQ4lCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMzkwYmZmNjVkY2VkY2E4MTNkN2ExMGQ3ZWMzMjhjMmY2 ZWFjMzQwHhcNMjYwMTAyMTIyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTdjZGIwOTllYjI2M2M3Y2FhMzFiYzhlNzc3OTBmZDhjNDBhMDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDIJYN0AwgAqv/j5ortJ/2rMcS10 4o3nGFEGHrdW1gDuxOojJxHF9IZucmB6LJaUYhcGa3016SuCDvJlridkkTHR5uwQ md/1iUGb/ofWfLIdlnAj9iJRBD1BD5yM9gXLlIgeczmptxJrLQ7vr4oMPx/4RwOM D63OQX0cEMp73DZ0GPm85PopydaCkpz/jaxQjGR7Reun9594f7QiCITSOX890fy/ lS9OaieZq4mncHt/BAE4S4AUaifdR/QB+LGuCmOlyAAsqN3+0nbwt5BllDPd38Fl oNcbKRZZYbxFkYGF1OZ6WTG555f+t5Thdfw4PxYHokTByTGYamjRy4geSQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNV82wmesmPHyqMbyOd3kP2MQKBPMB8GA1UdIwQY MBaAFBw5C/9l3O3KgT16ENfsMowvbqw0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSERrTF8yWGM3Y3FCUFhvUTEtd3lqQzl1ckRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zNDgxMDQtOGE0MS00OTQ5LTg1NTIt YTk3NjVlZGM3OTVjLzEvMVh6YkNaNnlZOGZLb3h2STUzZVFfWXhBb0U4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8zNDgxMDQtOGE0MS00OTQ5LTg1NTItYTk3NjVlZGM3OTVj LzEvSERrTF8yWGM3Y3FCUFhvUTEtd3lqQzl1ckRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwgAKMA8E AgACMAkDBwAgAQZ4AA0wDQYJKoZIhvcNAQELBQADggEBACkl878rTb2GECiVLgkZ qdhkWj54rQvtlG3srxb5t2C5s+xYj8xWY23jbTX0op2jRxjwBegnl032meL5sVoG VPpGJG/oYQf2KUwjZayD8UhNxfu5Nth/xARIoYPAI+q0rBNFGocF1GOFdmOpmccs wPKXfSW42mVdZiGhIZpTszvBgDzIJYzCyby+0Wrfv9p8zoEJmDBgEBsiryVNWSzD LRhY6kEZai0seOzkUgt1fzlcx0JxnVVXhbOvmcd4vDgQvV6jSqy7q9jR7KEGn4L1 XChcnbhBXwFC8ALh6CRQxvbp73XQHR0en3pJWKLRUGbALQ9oCWeSRdnkHGCuHJhP czU= -----END CERTIFICATE-----Generated at Tue Jan 27 07:13:44 2026 by rpki-client