This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/XUiE35ZJ3I6RBM2rDx0ESiNgluI.roa File: XUiE35ZJ3I6RBM2rDx0ESiNgluI.roa (raw, json) Hash identifier: k03+qzTCxQ7lrjUzBfLF9RxlBcgnBj56L5MGzoB6xFA= Subject key identifier: 5D:48:84:DF:96:49:DC:8E:91:04:CD:AB:0F:1D:04:4A:23:60:96:E2 Certificate issuer: /CN=fb987244611b5230536744b6a89f044f32f462ea Certificate serial: 019B7C129D595AE447B6446B9C90D0FD52E1 Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/XUiE35ZJ3I6RBM2rDx0ESiNgluI.roa Signing time: Fri 02 Jan 2026 00:19:13 +0000 ROA not before: Fri 02 Jan 2026 00:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24825 IP address blocks: 195.22.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:9d:59:5a:e4:47:b6:44:6b:9c:90:d0:fd:52:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea Validity Not Before: Jan 2 00:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d4884df9649dc8e9104cdab0f1d044a236096e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:2c:fe:c3:95:91:eb:49:99:a5:12:a6:ab:e0: ea:2c:a9:c8:fe:9a:2a:6a:b7:13:65:8e:39:1e:7f: 3f:53:8d:7a:a4:b2:a5:aa:f8:56:7e:e5:f1:22:d0: a0:1d:f4:67:6e:cb:bd:a5:85:1d:ff:88:bd:59:73: 7f:2e:91:da:60:f7:9a:80:98:e4:e2:60:0a:87:0c: 05:ca:a6:6a:2c:42:ac:bd:91:7f:82:6a:04:b2:4f: 86:69:9e:f6:5b:d7:94:32:81:d2:06:a3:d1:98:d8: cf:ed:09:5b:ad:37:dd:cc:7d:d6:6c:fe:22:40:6b: a1:96:40:44:ce:03:2c:f0:1f:c5:64:50:c9:86:ef: 38:65:61:19:85:2f:44:98:3c:02:92:d4:2d:db:38: ed:d8:93:50:65:72:8b:f0:b0:5d:65:62:3b:9d:e8: 3a:35:e6:9b:d8:3a:25:fb:54:48:bf:6a:57:a2:e4: 7a:55:e1:1a:20:b0:d0:8b:73:c3:6b:01:45:4b:43: 61:3d:93:26:45:f6:12:ce:2b:52:e0:cd:8e:ce:69: 59:bb:cf:98:be:89:16:96:a3:0d:14:45:80:a8:39: 60:ae:ba:85:f4:1c:e9:6f:d8:b5:c4:4e:a3:dd:2a: e4:45:68:c1:53:0e:44:25:35:71:d8:05:34:cd:93: db:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:48:84:DF:96:49:DC:8E:91:04:CD:AB:0F:1D:04:4A:23:60:96:E2 X509v3 Authority Key Identifier: keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/XUiE35ZJ3I6RBM2rDx0ESiNgluI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.22.173.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:f7:19:59:74:ec:e5:bb:e9:48:6d:bb:8d:bb:03:17:29:81: 92:0a:71:b0:1f:b7:5f:7e:0d:d8:79:3f:10:01:fb:aa:b3:46: 46:9c:d9:81:ed:f5:35:c5:03:00:55:57:b6:e5:fa:f1:3b:d9: f2:7a:27:db:db:54:07:d5:46:c6:1a:48:13:d6:4e:f2:cb:16: 9f:ef:04:96:fe:09:e2:8a:9f:50:f5:b1:3c:8d:a0:d6:d1:90: 65:a6:d1:31:f9:ef:13:f5:cb:0b:cd:02:da:7e:bf:fa:8e:0e: 75:a4:58:92:43:cd:41:ff:41:3e:7e:bb:d1:aa:80:43:f2:8b: 90:b6:d8:69:c6:8b:0c:bd:c8:e5:6c:9a:c9:80:ea:d4:e4:22: 70:d4:67:db:67:74:1e:82:22:49:4d:65:aa:48:d1:4a:d4:2e: f9:05:e8:1d:ff:1e:9b:5e:fa:bd:0c:f2:11:8c:bd:ef:ba:5f: 9c:b4:e1:a9:dc:37:02:eb:44:62:8a:ad:40:1c:d5:68:25:d8: 93:06:aa:4b:02:48:3a:99:ab:ec:82:36:87:58:dd:7b:c9:85: 77:da:8c:92:3f:88:16:50:34:3a:d6:47:f6:04:d7:03:25:07: f1:b8:fd:5f:d0:08:5b:43:59:1c:5e:dd:ba:7f:1c:bf:25:d4: 56:78:7a:26 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt8Ep1ZWuRHtkRrnJDQ/VLhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiOTg3MjQ0NjExYjUyMzA1MzY3NDRiNmE4OWYwNDRmMzJm NDYyZWEwHhcNMjYwMTAyMDAxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDQ4ODRkZjk2NDlkYzhlOTEwNGNkYWIwZjFkMDQ0YTIzNjA5NmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Sz+w5WR60mZpRKmq+DqLKnI/poq arcTZY45Hn8/U416pLKlqvhWfuXxItCgHfRnbsu9pYUd/4i9WXN/LpHaYPeagJjk 4mAKhwwFyqZqLEKsvZF/gmoEsk+GaZ72W9eUMoHSBqPRmNjP7QlbrTfdzH3WbP4i QGuhlkBEzgMs8B/FZFDJhu84ZWEZhS9EmDwCktQt2zjt2JNQZXKL8LBdZWI7neg6 Neab2Dol+1RIv2pXouR6VeEaILDQi3PDawFFS0NhPZMmRfYSzitS4M2OzmlZu8+Y vokWlqMNFEWAqDlgrrqF9Bzpb9i1xE6j3SrkRWjBUw5EJTVx2AU0zZPb5wIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFF1IhN+WSdyOkQTNqw8dBEojYJbiMB8GA1UdIwQY MBaAFPuYckRhG1IwU2dEtqifBE8y9GLqMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS01aHlSR0ViVWpCVFowUzJxSjhFVHpMMFl1by5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvMzE5ZDdjLTdlNzYtNDMwOC1iYzAw LWJlNTgzMmQ1ZjdhYS8xL1hVaUUzNVpKM0k2UkJNMnJEeDBFU2lOZ2x1SS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNDQvMzE5ZDdjLTdlNzYtNDMwOC1iYzAwLWJlNTgzMmQ1Zjdh YS8xLzEtNWh5UkdFYlVqQlRaMFMycUo4RVR6TDBZdW8uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADDFq0w DQYJKoZIhvcNAQELBQADggEBAJ/3GVl07OW76Uhtu427AxcpgZIKcbAft19+Ddh5 PxAB+6qzRkac2YHt9TXFAwBVV7bl+vE72fJ6J9vbVAfVRsYaSBPWTvLLFp/vBJb+ CeKKn1D1sTyNoNbRkGWm0TH57xP1ywvNAtp+v/qODnWkWJJDzUH/QT5+u9GqgEPy i5C22GnGiwy9yOVsmsmA6tTkInDUZ9tndB6CIklNZapI0UrULvkF6B3/Hpte+r0M 8hGMve+6X5y04ancNwLrRGKKrUAc1Wgl2JMGqksCSDqZq+yCNodY3XvJhXfajJI/ iBZQNDrWR/YE1wMlB/G4/V/QCFtDWRxe3bp/HL8l1FZ4eiY= -----END CERTIFICATE-----Generated at Sun Jan 25 19:37:36 2026 by rpki-client