This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/XnNn0ZboDqC7nQkkoSRPAnOsr_g.roa File: XnNn0ZboDqC7nQkkoSRPAnOsr_g.roa (raw, json) Hash identifier: BkiQua5G5WRN29UOmW7CvWeU9t4SPn1yhkMIQBqVtF8= Subject key identifier: 5E:73:67:D1:96:E8:0E:A0:BB:9D:09:24:A1:24:4F:02:73:AC:AF:F8 Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Certificate serial: 019B7759021E64E3E005567127B62F2CB4EA Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/XnNn0ZboDqC7nQkkoSRPAnOsr_g.roa Signing time: Thu 01 Jan 2026 02:18:00 +0000 ROA not before: Thu 01 Jan 2026 02:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201132 IP address blocks: 188.114.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:02:1e:64:e3:e0:05:56:71:27:b6:2f:2c:b4:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Validity Not Before: Jan 1 02:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e7367d196e80ea0bb9d0924a1244f0273acaff8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e8:8c:2d:7f:a9:53:ca:a4:66:ee:ce:e3:ef: 96:ad:ca:d9:b1:93:6b:a7:2b:6b:eb:fc:e2:51:e6: 9b:32:15:83:fd:9a:24:d5:1d:48:13:0d:76:97:07: 20:bc:4c:d7:cb:d0:61:56:4e:5f:a9:43:92:16:0e: 82:17:e9:92:71:54:0c:2e:c9:c7:83:0e:b5:cf:72: 88:bd:3c:7b:a2:f7:d7:a7:8a:6d:3b:ae:fa:14:a1: 32:b5:29:d2:03:83:48:dd:44:d4:ca:1a:55:ef:38: 75:10:c4:c1:eb:6b:a7:de:8b:7b:79:24:f2:6c:ac: cc:96:c2:bf:02:a6:c1:b6:b2:78:34:ff:4d:78:c9: e1:d5:2c:a1:3f:53:3b:a0:3e:2d:7f:a4:94:15:16: 62:28:0f:b4:10:6d:fa:d7:6e:b5:a5:8b:fd:cc:76: 14:aa:28:19:3f:4b:20:c7:61:a4:1e:e0:19:ed:73: 3c:b5:9f:f0:f7:0f:53:01:b9:a3:3d:42:95:b5:c7: 4b:a2:ba:7f:2a:a1:52:eb:a4:b3:6f:40:18:76:a4: eb:93:04:fb:46:28:ad:bd:6b:97:e7:91:39:03:1f: 80:39:a2:e9:49:15:7b:c9:8d:c0:0e:3b:e8:83:a2: 2b:19:63:da:79:9b:97:69:44:81:29:38:fe:d2:2c: 8c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:73:67:D1:96:E8:0E:A0:BB:9D:09:24:A1:24:4F:02:73:AC:AF:F8 X509v3 Authority Key Identifier: keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/XnNn0ZboDqC7nQkkoSRPAnOsr_g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.114.94.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:78:1f:b4:66:f0:61:15:99:33:ba:a6:b4:d9:df:8b:c2:30: 14:1f:bc:e1:81:13:c2:6e:77:11:62:93:d6:98:76:84:d1:3b: 1f:b4:6d:e8:bc:ad:8f:47:44:d2:5c:ae:37:ba:d1:13:80:3d: ac:a7:ce:68:e1:c5:f0:a5:2d:e6:dc:aa:21:77:07:8e:a8:60: 14:81:6d:57:00:9a:14:9b:e8:ba:76:6f:5d:0e:4d:fd:df:df: f3:6c:ae:79:24:bc:2e:b3:7d:75:e2:e6:b0:e1:a8:58:83:8d: b1:95:f2:20:81:0b:ba:3e:6d:42:12:ef:38:91:d5:4e:bf:19: 34:52:9c:94:12:71:19:11:35:ec:28:a5:82:0f:0c:50:51:61: 1b:c5:4e:f6:14:0d:a9:dd:4d:9c:92:1d:6a:90:55:55:ff:66: b9:84:30:0a:d6:70:04:47:16:1a:ee:d6:f9:77:4d:22:39:28: 62:22:da:ea:d9:e5:8f:f9:06:b8:d6:03:04:02:83:1f:0e:ae: 8e:c9:d8:66:a5:ec:e4:06:45:97:7c:3c:3c:fb:89:6a:39:07: fb:63:7a:c3:65:71:bd:c2:e0:b1:63:e1:63:af:34:c9:54:b2: e2:9b:21:75:26:71:38:35:5f:a4:67:30:4b:12:2b:37:aa:48: cf:09:bf:a4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WQIeZOPgBVZxJ7YvLLTqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx YjM2ZTgwHhcNMjYwMTAxMDIxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTczNjdkMTk2ZTgwZWEwYmI5ZDA5MjRhMTI0NGYwMjczYWNhZmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeiMLX+pU8qkZu7O4++WrcrZsZNr pytr6/ziUeabMhWD/Zok1R1IEw12lwcgvEzXy9BhVk5fqUOSFg6CF+mScVQMLsnH gw61z3KIvTx7ovfXp4ptO676FKEytSnSA4NI3UTUyhpV7zh1EMTB62un3ot7eSTy bKzMlsK/AqbBtrJ4NP9NeMnh1SyhP1M7oD4tf6SUFRZiKA+0EG361261pYv9zHYU qigZP0sgx2GkHuAZ7XM8tZ/w9w9TAbmjPUKVtcdLorp/KqFS66Szb0AYdqTrkwT7 RiitvWuX55E5Ax+AOaLpSRV7yY3ADjvog6IrGWPaeZuXaUSBKTj+0iyMMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF5zZ9GW6A6gu50JJKEkTwJzrK/4MB8GA1UdIwQY MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt MDI0YjE2NTVjMjQ3LzEvWG5ObjBaYm9EcUM3blFra29TUlBBbk9zcl9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3 LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvHJeMA0G CSqGSIb3DQEBCwUAA4IBAQCNeB+0ZvBhFZkzuqa02d+LwjAUH7zhgRPCbncRYpPW mHaE0TsftG3ovK2PR0TSXK43utETgD2sp85o4cXwpS3m3KohdweOqGAUgW1XAJoU m+i6dm9dDk3939/zbK55JLwus3114uaw4ahYg42xlfIggQu6Pm1CEu84kdVOvxk0 UpyUEnEZETXsKKWCDwxQUWEbxU72FA2p3U2ckh1qkFVV/2a5hDAK1nAERxYa7tb5 d00iOShiItrq2eWP+Qa41gMEAoMfDq6OydhmpezkBkWXfDw8+4lqOQf7Y3rDZXG9 wuCxY+FjrzTJVLLimyF1JnE4NV+kZzBLEis3qkjPCb+k -----END CERTIFICATE-----Generated at Sun Jan 25 20:31:39 2026 by rpki-client