This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/Xe_49qP_RwifxY8lxqIdGWlN9Yo.roa File: Xe_49qP_RwifxY8lxqIdGWlN9Yo.roa (raw, json) Hash identifier: 0p7ZxsSara0zAMrBMjKosv4Q0grMmOgXjOvvhV5ruz8= Subject key identifier: 5D:EF:F8:F6:A3:FF:47:08:9F:C5:8F:25:C6:A2:1D:19:69:4D:F5:8A Certificate issuer: /CN=d674c4e1b00ce5bfb0d96d4c21efd058d3b5ca79 Certificate serial: 019B77591A534794AA082657A44693B61FAB Authority key identifier: D6:74:C4:E1:B0:0C:E5:BF:B0:D9:6D:4C:21:EF:D0:58:D3:B5:CA:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/Xe_49qP_RwifxY8lxqIdGWlN9Yo.roa Signing time: Thu 01 Jan 2026 02:18:06 +0000 ROA not before: Thu 01 Jan 2026 02:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60855 IP address blocks: 193.17.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:1a:53:47:94:aa:08:26:57:a4:46:93:b6:1f:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d674c4e1b00ce5bfb0d96d4c21efd058d3b5ca79 Validity Not Before: Jan 1 02:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5deff8f6a3ff47089fc58f25c6a21d19694df58a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:12:34:58:d2:73:ce:f5:f6:d9:9a:93:f2:c4: 60:79:53:51:9a:80:ff:a4:31:73:dd:ba:90:24:df: f5:d4:78:a7:6e:b6:f9:56:f7:80:6b:e9:ba:93:1a: 4b:35:f8:de:bc:78:c9:66:1d:11:36:16:e2:ac:11: ad:4e:c6:e9:b4:94:f3:21:d9:41:7a:e0:5e:55:7c: dd:7d:69:f5:24:f4:e3:52:b9:41:fc:f1:e3:b5:a1: 55:a6:7b:4f:42:80:fd:91:c5:d3:96:b0:a7:65:4a: 30:ca:47:87:8f:70:91:68:4c:e7:ad:99:30:ab:5b: 36:5b:83:a0:7b:7a:c4:9b:ba:c2:cd:31:09:50:df: 49:fe:68:dd:e8:1a:2e:a7:93:17:b1:af:0e:d5:b0: 74:21:10:af:d3:76:c8:fb:4c:e5:a3:4f:b8:a2:dd: 6e:91:cd:c4:22:a6:3b:98:ff:99:df:49:b7:11:22: 08:79:b0:01:08:97:72:41:1c:c3:ed:12:e8:83:9f: 5f:bf:00:c0:4b:1d:ab:61:9e:8c:51:26:9f:6b:1c: 80:a9:6d:e2:55:a8:bd:30:e1:be:07:9b:55:2c:be: 65:c0:14:c3:83:e3:bb:8d:32:ed:57:74:cb:bc:69: 21:dd:a9:85:11:95:57:40:5a:a9:07:d3:e0:e0:8e: 75:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:EF:F8:F6:A3:FF:47:08:9F:C5:8F:25:C6:A2:1D:19:69:4D:F5:8A X509v3 Authority Key Identifier: keyid:D6:74:C4:E1:B0:0C:E5:BF:B0:D9:6D:4C:21:EF:D0:58:D3:B5:CA:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/Xe_49qP_RwifxY8lxqIdGWlN9Yo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.17.19.0/24 Signature Algorithm: sha256WithRSAEncryption a1:97:84:35:fb:d2:79:ed:8b:68:8c:ae:16:47:27:67:80:fb: ac:a0:31:87:b5:e3:96:a3:57:b7:0f:11:39:89:e6:30:80:8f: 4e:db:97:26:9c:0b:4b:73:51:20:32:9d:95:13:2a:a5:b0:93: b0:cc:dc:41:0c:5c:e7:f1:a4:68:0a:14:87:46:d1:e7:ed:4f: e0:ef:2f:c5:e5:f5:99:db:d6:c9:93:ee:3a:b7:75:76:c7:9e: ec:e3:55:0a:a7:47:dc:4c:f7:7b:d0:bc:5d:9b:e7:c8:7f:52: 17:6e:0a:aa:c5:4b:92:bc:ac:38:95:92:72:f4:8a:f9:f3:80: 9a:d9:9d:de:d4:0e:29:7a:2c:f4:de:94:65:c8:6f:30:b4:b2: 64:d3:ca:9c:c1:af:ee:10:c1:6f:b5:3c:e9:9b:3e:e3:da:a0: f2:d6:6d:71:33:a6:4b:99:1b:2f:9e:d5:f9:b7:df:35:7a:91: b5:82:8b:11:52:a8:cf:82:a2:be:92:5b:2e:37:69:37:1f:78: d4:45:82:cf:88:46:95:c3:c4:ac:a4:24:f8:4e:6f:25:ab:c5: 49:8d:a3:70:64:a5:14:0c:c2:e1:23:ab:87:29:00:dd:94:bc: f4:21:3b:16:41:3c:3a:d1:cb:41:d4:97:18:a1:86:0f:1b:86: 81:8e:96:9e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WRpTR5SqCCZXpEaTth+rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NzRjNGUxYjAwY2U1YmZiMGQ5NmQ0YzIxZWZkMDU4ZDNi NWNhNzkwHhcNMjYwMTAxMDIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZGVmZjhmNmEzZmY0NzA4OWZjNThmMjVjNmEyMWQxOTY5NGRmNThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxI0WNJzzvX22ZqT8sRgeVNRmoD/ pDFz3bqQJN/11Hinbrb5VveAa+m6kxpLNfjevHjJZh0RNhbirBGtTsbptJTzIdlB euBeVXzdfWn1JPTjUrlB/PHjtaFVpntPQoD9kcXTlrCnZUowykeHj3CRaEznrZkw q1s2W4Oge3rEm7rCzTEJUN9J/mjd6Boup5MXsa8O1bB0IRCv03bI+0zlo0+4ot1u kc3EIqY7mP+Z30m3ESIIebABCJdyQRzD7RLog59fvwDASx2rYZ6MUSafaxyAqW3i Vai9MOG+B5tVLL5lwBTDg+O7jTLtV3TLvGkh3amFEZVXQFqpB9Pg4I51OQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF3v+Paj/0cIn8WPJcaiHRlpTfWKMB8GA1UdIwQY MBaAFNZ0xOGwDOW/sNltTCHv0FjTtcp5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW5URTRiQU01Yi13MlcxTUllX1FXTk8xeW5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iYjIxZmMtYjI1Mi00YWIyLTk4Nzgt YmE1NTcyZTc3NGVkLzEvWGVfNDlxUF9Sd2lmeFk4bHhxSWRHV2xOOVlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9iYjIxZmMtYjI1Mi00YWIyLTk4NzgtYmE1NTcyZTc3NGVk LzEvMW5URTRiQU01Yi13MlcxTUllX1FXTk8xeW5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRETMA0G CSqGSIb3DQEBCwUAA4IBAQChl4Q1+9J57YtojK4WRydngPusoDGHteOWo1e3DxE5 ieYwgI9O25cmnAtLc1EgMp2VEyqlsJOwzNxBDFzn8aRoChSHRtHn7U/g7y/F5fWZ 29bJk+46t3V2x57s41UKp0fcTPd70Lxdm+fIf1IXbgqqxUuSvKw4lZJy9Ir584Ca 2Z3e1A4peiz03pRlyG8wtLJk08qcwa/uEMFvtTzpmz7j2qDy1m1xM6ZLmRsvntX5 t981epG1gosRUqjPgqK+klsuN2k3H3jURYLPiEaVw8SspCT4Tm8lq8VJjaNwZKUU DMLhI6uHKQDdlLz0ITsWQTw60ctB1JcYoYYPG4aBjpae -----END CERTIFICATE-----Generated at Mon Jan 26 03:07:20 2026 by rpki-client