This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/xVkKNJRba2SGRn985sBZidqpu8Y.roa File: xVkKNJRba2SGRn985sBZidqpu8Y.roa (raw, json) Hash identifier: V0oEel9d63PmLfURQhNtv6FLYVRm7Iz09fE77eJwwQM= Subject key identifier: C5:59:0A:34:94:5B:6B:64:86:46:7F:7C:E6:C0:59:89:DA:A9:BB:C6 Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674 Certificate serial: 019B7758EE4D635A76CB8F6505606A3ED790 Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/xVkKNJRba2SGRn985sBZidqpu8Y.roa Signing time: Thu 01 Jan 2026 02:17:55 +0000 ROA not before: Thu 01 Jan 2026 02:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42991 IP address blocks: 195.28.188.0/24 maxlen: 24 217.113.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:ee:4d:63:5a:76:cb:8f:65:05:60:6a:3e:d7:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674 Validity Not Before: Jan 1 02:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5590a34945b6b6486467f7ce6c05989daa9bbc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:30:ef:ac:54:e1:c9:f8:1b:bf:be:8d:b2:5c: be:56:9f:65:d3:7c:78:37:50:aa:16:49:31:44:d0: 05:a8:dd:08:e8:ce:89:d8:48:12:e1:0e:a6:15:af: e4:8f:c2:fb:a7:c5:61:1a:10:14:dc:64:58:14:b1: ff:06:73:a8:3f:53:22:8e:2e:aa:fa:1e:9d:12:36: 62:dc:6c:13:f6:3d:b2:4e:38:53:fd:36:00:4b:9b: 3c:76:4a:ad:28:40:05:b0:78:a5:33:e9:55:09:58: 0d:39:a0:d3:62:21:a9:b7:c5:06:05:50:62:c1:99: 91:20:d6:94:fb:e8:28:61:01:2b:76:61:a6:ee:5e: 58:6f:44:e4:11:42:3a:1f:25:fa:31:3a:56:7a:9f: bf:c2:37:0a:4c:35:5e:51:f7:0b:a5:7d:51:73:06: 57:c7:f8:06:73:84:b7:1c:98:13:98:2c:76:90:85: aa:3f:cf:fb:35:33:90:31:a7:77:6a:1a:03:a0:e3: d4:d6:7f:4f:de:aa:89:2e:3e:2b:35:f8:d4:9f:a2: 5f:1b:58:aa:07:b4:5e:9c:c0:4e:97:d4:42:1d:9c: 32:a3:40:14:98:53:38:f2:ba:7e:a8:2a:71:cf:ac: 10:54:93:0f:c8:3c:86:7d:ec:e0:e3:9d:e4:33:44: db:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:59:0A:34:94:5B:6B:64:86:46:7F:7C:E6:C0:59:89:DA:A9:BB:C6 X509v3 Authority Key Identifier: keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/xVkKNJRba2SGRn985sBZidqpu8Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.28.188.0/24 217.113.30.0/24 Signature Algorithm: sha256WithRSAEncryption 07:8e:cf:91:02:58:19:d7:b3:5f:b1:9c:c6:50:2e:99:e2:63: ee:4c:c5:57:89:37:69:d9:54:03:1c:95:3a:37:91:18:2a:82: 92:52:a4:30:4b:18:9f:9a:e3:29:62:1d:63:e9:16:de:37:dd: af:e8:dd:86:f1:fe:57:6d:22:0f:1f:b7:5b:c0:4a:8d:c1:5c: cc:7e:da:60:16:d2:ab:2b:c5:db:33:db:9b:65:79:8a:ae:a6: d5:38:08:0f:bb:a9:37:71:60:5d:b5:c3:46:97:72:9d:19:0a: 2e:50:97:3e:95:19:98:8e:49:ca:ef:27:4a:9e:99:66:56:2b: 21:ee:8d:c6:02:4d:55:08:22:0f:e3:6f:3f:d3:c1:b2:68:52: fb:62:45:b6:2c:19:b0:a1:08:60:9e:e9:ef:b8:14:77:08:3f: ef:26:c0:a3:1c:64:e3:97:6d:ef:4f:4e:99:5c:cf:9a:ce:4f: d8:bd:77:b0:db:6d:fd:af:e2:90:7a:2d:54:5a:19:c1:f1:8e: ef:ed:cf:8b:00:aa:5d:d3:2d:f8:d8:22:8c:e0:1a:cd:97:3d: f5:9f:1f:23:80:dd:f4:e5:06:71:49:b7:f4:67:fd:b1:73:3b: 9c:c0:68:5f:4c:d3:f4:cd:68:a3:93:cc:70:76:2c:26:d3:cc: 54:a4:00:f8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WO5NY1p2y49lBWBqPteQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZThmNGVkNWRkMDYzMDFjNDIzOTg4ZTc4NmRhYmY1MWM1 ZjU2NzQwHhcNMjYwMTAxMDIxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTU5MGEzNDk0NWI2YjY0ODY0NjdmN2NlNmMwNTk4OWRhYTliYmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzDvrFThyfgbv76Nsly+Vp9l03x4 N1CqFkkxRNAFqN0I6M6J2EgS4Q6mFa/kj8L7p8VhGhAU3GRYFLH/BnOoP1Miji6q +h6dEjZi3GwT9j2yTjhT/TYAS5s8dkqtKEAFsHilM+lVCVgNOaDTYiGpt8UGBVBi wZmRINaU++goYQErdmGm7l5Yb0TkEUI6HyX6MTpWep+/wjcKTDVeUfcLpX1RcwZX x/gGc4S3HJgTmCx2kIWqP8/7NTOQMad3ahoDoOPU1n9P3qqJLj4rNfjUn6JfG1iq B7RenMBOl9RCHZwyo0AUmFM48rp+qCpxz6wQVJMPyDyGfezg453kM0TbVQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMVZCjSUW2tkhkZ/fObAWYnaqbvGMB8GA1UdIwQY MBaAFJPo9O1d0GMBxCOYjnhtq/UcX1Z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQt MWZjMTllYTczYTJhLzEveFZrS05KUmJhMlNHUm45ODVzQlppZHFwdThZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQtMWZjMTllYTczYTJh LzEvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwxy8AwQA 2XEeMA0GCSqGSIb3DQEBCwUAA4IBAQAHjs+RAlgZ17NfsZzGUC6Z4mPuTMVXiTdp 2VQDHJU6N5EYKoKSUqQwSxifmuMpYh1j6RbeN92v6N2G8f5XbSIPH7dbwEqNwVzM ftpgFtKrK8XbM9ubZXmKrqbVOAgPu6k3cWBdtcNGl3KdGQouUJc+lRmYjknK7ydK nplmVish7o3GAk1VCCIP428/08GyaFL7YkW2LBmwoQhgnunvuBR3CD/vJsCjHGTj l23vT06ZXM+azk/YvXew2239r+KQei1UWhnB8Y7v7c+LAKpd0y342CKM4BrNlz31 nx8jgN305QZxSbf0Z/2xczucwGhfTNP0zWijk8xwdiwm08xUpAD4 -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:43 2026 by rpki-client