This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/xvJ1JSPTIpMQJ_Z_PhJXPC59D34.roa File: xvJ1JSPTIpMQJ_Z_PhJXPC59D34.roa (raw, json) Hash identifier: 944aX9Q9tSThrEugzQqJaCWIZrVcCyB9vKNFlU0FXPM= Subject key identifier: C6:F2:75:25:23:D3:22:93:10:27:F6:7F:3E:12:57:3C:2E:7D:0F:7E Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026 Certificate serial: 019B7C11FAEEDAF4352CF15C62FF973ACFB5 Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/xvJ1JSPTIpMQJ_Z_PhJXPC59D34.roa Signing time: Fri 02 Jan 2026 00:18:31 +0000 ROA not before: Fri 02 Jan 2026 00:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 141757 IP address blocks: 193.118.160.0/24 maxlen: 24 193.118.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:fa:ee:da:f4:35:2c:f1:5c:62:ff:97:3a:cf:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026 Validity Not Before: Jan 2 00:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6f2752523d322931027f67f3e12573c2e7d0f7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:79:46:35:8f:98:ac:21:30:0f:4f:30:6a:6a: 4f:67:8a:e2:65:fa:69:e8:19:ca:a8:5f:70:68:23: 52:b8:62:84:5f:6d:eb:12:13:79:78:f4:ff:36:a7: 9e:5b:69:98:b9:2b:64:2c:4b:11:04:8d:f3:41:c9: 52:4d:fd:66:1d:00:b4:d7:7a:db:87:eb:1b:ed:3c: 77:ea:11:76:ae:f4:6e:ae:fd:51:01:0c:09:f7:7d: 6b:c6:bc:a1:cd:54:dd:03:db:7d:0b:6d:96:98:84: c0:77:23:53:11:8e:de:f9:7c:7c:56:72:52:ae:cd: 4d:09:99:65:38:3b:9c:35:9b:98:37:f4:32:39:26: 4a:ad:5b:12:32:51:0a:c3:22:ed:3d:e7:6a:6a:cd: 73:c8:20:0a:6a:1e:f5:df:b6:c6:2d:ce:11:f1:32: 3c:91:2d:e5:61:5a:19:d6:4f:3b:4f:c6:11:06:6e: 9e:b9:91:0f:9f:1c:14:7e:c9:bb:b9:82:01:5a:b2: c6:7b:56:5d:f8:91:9b:ed:a7:11:b3:34:ec:04:29: 35:a5:4b:66:81:79:35:72:43:1c:27:0a:34:f8:05: 3d:a8:08:ff:17:30:d4:9e:ad:bd:53:63:c5:ab:7c: d4:93:5e:68:99:5a:10:61:80:2a:0f:1a:19:4b:2e: 32:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:F2:75:25:23:D3:22:93:10:27:F6:7F:3E:12:57:3C:2E:7D:0F:7E X509v3 Authority Key Identifier: keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/xvJ1JSPTIpMQJ_Z_PhJXPC59D34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.118.160.0/23 Signature Algorithm: sha256WithRSAEncryption 42:cc:a0:77:98:28:67:16:8c:f2:6b:2f:7a:03:f8:79:41:a3: 17:0e:a4:df:d4:d1:57:18:e0:e8:b4:e0:91:d3:81:d7:15:45: 62:d2:28:37:e2:54:2e:a4:ba:7e:a5:e2:48:1d:49:30:f2:f4: d4:d6:34:fb:34:23:34:f5:76:21:fc:e0:ff:67:75:f4:38:85: aa:45:b6:56:dc:bc:6d:f8:ad:02:90:82:c6:9d:9f:96:a8:f8: 63:96:6c:d6:c4:2e:86:22:a3:80:13:ef:cd:67:c0:28:9d:52: 3b:98:cb:29:51:bb:9e:0a:de:f0:ae:8a:79:66:39:36:a2:04: 54:ae:ad:8a:0d:cc:66:54:95:ec:45:fe:c1:1d:e7:71:83:d1: 2c:8e:d0:70:f4:87:89:12:46:bb:ba:db:42:b2:cf:e4:70:08: 93:da:9f:8f:5c:7d:07:1c:ce:94:13:9f:63:eb:1c:96:b3:81: 0b:8c:85:ce:39:2d:71:69:58:b9:d6:e5:71:40:c0:51:d8:8c: 62:99:81:7b:ab:95:78:ca:43:5c:21:76:5e:60:e5:38:3e:d5: db:db:8c:96:f0:8c:6b:e7:fe:4b:93:c3:ec:fd:34:7f:24:2b: 17:f7:39:63:15:56:56:5c:3c:11:17:33:c8:60:1b:81:d0:76: b3:0e:da:54 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Efru2vQ1LPFcYv+XOs+1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZjhmZmMwODg1OTFlNGYyNDNiYWFmYTIxYjQyOThiZmIz NjYwMjYwHhcNMjYwMTAyMDAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmYyNzUyNTIzZDMyMjkzMTAyN2Y2N2YzZTEyNTczYzJlN2QwZjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XlGNY+YrCEwD08wampPZ4riZfpp 6BnKqF9waCNSuGKEX23rEhN5ePT/NqeeW2mYuStkLEsRBI3zQclSTf1mHQC013rb h+sb7Tx36hF2rvRurv1RAQwJ931rxryhzVTdA9t9C22WmITAdyNTEY7e+Xx8VnJS rs1NCZllODucNZuYN/QyOSZKrVsSMlEKwyLtPedqas1zyCAKah7137bGLc4R8TI8 kS3lYVoZ1k87T8YRBm6euZEPnxwUfsm7uYIBWrLGe1Zd+JGb7acRszTsBCk1pUtm gXk1ckMcJwo0+AU9qAj/FzDUnq29U2PFq3zUk15omVoQYYAqDxoZSy4ySwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMbydSUj0yKTECf2fz4SVzwufQ9+MB8GA1UdIwQY MBaAFEz4/8CIWR5PJDuq+iG0KYv7NmAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMt YjNiNzhiMGI2NmVhLzEveHZKMUpTUFRJcE1RSl9aX1BoSlhQQzU5RDM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMtYjNiNzhiMGI2NmVh LzEvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwXagMA0G CSqGSIb3DQEBCwUAA4IBAQBCzKB3mChnFozyay96A/h5QaMXDqTf1NFXGODotOCR 04HXFUVi0ig34lQupLp+peJIHUkw8vTU1jT7NCM09XYh/OD/Z3X0OIWqRbZW3Lxt +K0CkILGnZ+WqPhjlmzWxC6GIqOAE+/NZ8AonVI7mMspUbueCt7wrop5Zjk2ogRU rq2KDcxmVJXsRf7BHedxg9EsjtBw9IeJEka7uttCss/kcAiT2p+PXH0HHM6UE59j 6xyWs4ELjIXOOS1xaVi51uVxQMBR2IximYF7q5V4ykNcIXZeYOU4PtXb24yW8Ixr 5/5Lk8Ps/TR/JCsX9zljFVZWXDwRFzPIYBuB0HazDtpU -----END CERTIFICATE-----Generated at Mon Jan 26 05:02:19 2026 by rpki-client