This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/XGgIS2kdMhFLyP-i-D0W3B8JW7A.roa File: XGgIS2kdMhFLyP-i-D0W3B8JW7A.roa (raw, json) Hash identifier: eJBUNPOd5UiGzU5DENLhYsoGYS/OErO6pyZfCeZ9+DI= Subject key identifier: 5C:68:08:4B:69:1D:32:11:4B:C8:FF:A2:F8:3D:16:DC:1F:09:5B:B0 Certificate issuer: /CN=15ffa042114301368b4069abd68a1efbac47fdce Certificate serial: 019B7F13959D63546C82E33687B43182E525 Authority key identifier: 15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/XGgIS2kdMhFLyP-i-D0W3B8JW7A.roa Signing time: Fri 02 Jan 2026 14:19:08 +0000 ROA not before: Fri 02 Jan 2026 14:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29357 IP address blocks: 83.96.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:95:9d:63:54:6c:82:e3:36:87:b4:31:82:e5:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15ffa042114301368b4069abd68a1efbac47fdce Validity Not Before: Jan 2 14:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c68084b691d32114bc8ffa2f83d16dc1f095bb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:45:a1:af:9a:bf:2d:ca:0a:6d:14:49:e9:43: 78:19:23:4a:1a:45:90:97:73:1a:43:4c:19:3f:11: ed:ae:17:03:4b:bc:eb:76:a3:a3:bf:1f:2f:e9:83: f0:10:60:4f:a0:e1:ec:4a:b5:f5:b1:f5:fa:7e:15: d3:a2:ac:4f:8c:00:59:e8:f6:f9:24:3d:3a:d7:ca: 70:8b:08:38:21:79:70:52:29:44:78:c1:fd:0c:5d: e5:c3:14:79:c7:fe:8c:d8:fd:90:80:fc:9a:3a:0e: 36:c7:27:9f:7d:70:bc:00:b4:3f:36:69:42:7c:c6: e1:04:46:22:0f:f5:17:98:fe:4f:0a:c6:ad:4e:f4: 24:5e:74:36:8c:be:b5:6d:03:32:57:dd:1c:8d:7f: 6b:d1:23:06:dc:9f:7c:01:88:3e:4c:c1:1c:8f:3e: 1b:50:3f:7a:e2:d8:33:2e:37:ba:8c:8e:90:f0:81: e6:ec:08:65:cd:f3:66:6a:0d:1d:05:2b:98:df:56: e9:d2:3d:36:0e:38:c9:65:2c:74:de:f3:17:46:da: 9e:f7:84:f4:36:7b:aa:9d:1c:2a:46:2d:87:c2:7a: 44:12:06:15:b7:e6:68:8e:60:e8:b1:f1:14:08:16: 5e:82:ba:52:39:7d:e3:6f:ab:2b:63:d1:77:96:e9: fa:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:68:08:4B:69:1D:32:11:4B:C8:FF:A2:F8:3D:16:DC:1F:09:5B:B0 X509v3 Authority Key Identifier: keyid:15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/XGgIS2kdMhFLyP-i-D0W3B8JW7A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.96.48.0/24 Signature Algorithm: sha256WithRSAEncryption 06:74:af:21:e7:c5:c2:d2:88:06:e9:fa:1e:ae:80:28:60:1b: 0b:af:e1:99:dd:8f:86:4b:84:2f:51:5b:5b:b6:0a:00:d6:78: 11:80:7b:59:2f:3b:c3:88:13:3a:d8:26:f0:a7:3e:75:2e:a7: 9a:8b:33:47:cd:9d:5b:47:00:d1:9e:05:a9:90:d4:e2:6c:b1: bf:a2:45:ac:26:ee:03:d0:1f:21:60:6a:f7:21:4f:1c:f1:7a: a9:c2:29:2f:f1:14:d9:99:00:d7:7f:2d:2a:d6:48:6d:a4:9e: 35:19:65:3f:5e:1c:b7:88:79:61:5d:e4:71:9c:b0:50:1f:71: c6:6e:b9:c5:78:0e:db:65:c2:51:47:35:df:27:f5:0a:24:dc: e3:ae:8c:14:fb:01:7d:73:a9:8c:5a:66:c6:18:ab:9d:6d:1f: 54:4a:2c:68:15:fc:6e:79:cc:99:1c:f6:93:d3:7a:13:2c:e4: d8:c9:fe:6b:27:bf:af:7f:7c:92:12:5d:68:7a:d9:1c:d9:7d: cc:0f:9c:aa:15:a3:fa:59:3d:8f:bd:a6:99:c8:89:1d:92:35: b5:33:b0:b8:0b:a4:72:a0:b6:f5:4a:b3:a6:09:9f:61:e3:8b: 18:02:b0:b0:b1:1c:65:d0:47:ee:7c:ce:5f:66:16:9e:dc:40: 1a:fb:99:d9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E5WdY1RsguM2h7QxguUlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZmZhMDQyMTE0MzAxMzY4YjQwNjlhYmQ2OGExZWZiYWM0 N2ZkY2UwHhcNMjYwMTAyMTQxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzY4MDg0YjY5MWQzMjExNGJjOGZmYTJmODNkMTZkYzFmMDk1YmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokWhr5q/LcoKbRRJ6UN4GSNKGkWQ l3MaQ0wZPxHtrhcDS7zrdqOjvx8v6YPwEGBPoOHsSrX1sfX6fhXToqxPjABZ6Pb5 JD0618pwiwg4IXlwUilEeMH9DF3lwxR5x/6M2P2QgPyaOg42xyeffXC8ALQ/NmlC fMbhBEYiD/UXmP5PCsatTvQkXnQ2jL61bQMyV90cjX9r0SMG3J98AYg+TMEcjz4b UD964tgzLje6jI6Q8IHm7AhlzfNmag0dBSuY31bp0j02DjjJZSx03vMXRtqe94T0 NnuqnRwqRi2HwnpEEgYVt+ZojmDosfEUCBZegrpSOX3jb6srY9F3lun6zQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFxoCEtpHTIRS8j/ovg9FtwfCVuwMB8GA1UdIwQY MBaAFBX/oEIRQwE2i0Bpq9aKHvusR/3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmYtZ1FoRkRBVGFMUUdtcjFvb2UtNnhIX2M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8xNDliYzUtNTFhYS00ZTdiLThmMDMt YjczYTM2ZDkzOWIyLzEvWEdnSVMya2RNaEZMeVAtaS1EMFczQjhKVzdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi8xNDliYzUtNTFhYS00ZTdiLThmMDMtYjczYTM2ZDkzOWIy LzEvRmYtZ1FoRkRBVGFMUUdtcjFvb2UtNnhIX2M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU2AwMA0G CSqGSIb3DQEBCwUAA4IBAQAGdK8h58XC0ogG6foeroAoYBsLr+GZ3Y+GS4QvUVtb tgoA1ngRgHtZLzvDiBM62Cbwpz51LqeaizNHzZ1bRwDRngWpkNTibLG/okWsJu4D 0B8hYGr3IU8c8Xqpwikv8RTZmQDXfy0q1khtpJ41GWU/Xhy3iHlhXeRxnLBQH3HG brnFeA7bZcJRRzXfJ/UKJNzjrowU+wF9c6mMWmbGGKudbR9USixoFfxuecyZHPaT 03oTLOTYyf5rJ7+vf3ySEl1oetkc2X3MD5yqFaP6WT2PvaaZyIkdkjW1M7C4C6Ry oLb1SrOmCZ9h44sYArCwsRxl0EfufM5fZhae3EAa+5nZ -----END CERTIFICATE-----Generated at Mon Jan 26 05:03:10 2026 by rpki-client