This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/rXih05-yjhK1RRUZMN39mSUsOFU.roa File: rXih05-yjhK1RRUZMN39mSUsOFU.roa (raw, json) Hash identifier: OherWUykDRS3B1u39xufQBOtSXhj9wb49HkAqU/CGvA= Subject key identifier: AD:78:A1:D3:9F:B2:8E:12:B5:45:15:19:30:DD:FD:99:25:2C:38:55 Certificate issuer: /CN=69af70bda77cf858e164d6b7c709e878fd1a6045 Certificate serial: 019B7F831B2382AE16486EA6A81F748E68B6 Authority key identifier: 69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/rXih05-yjhK1RRUZMN39mSUsOFU.roa Signing time: Fri 02 Jan 2026 16:20:57 +0000 ROA not before: Fri 02 Jan 2026 16:20:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49685 IP address blocks: 194.53.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:1b:23:82:ae:16:48:6e:a6:a8:1f:74:8e:68:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69af70bda77cf858e164d6b7c709e878fd1a6045 Validity Not Before: Jan 2 16:20:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad78a1d39fb28e12b545151930ddfd99252c3855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:05:f1:09:a8:2e:9d:99:bd:cb:9c:fc:68:f3: 27:41:72:9a:1f:00:31:3e:73:ca:b6:16:da:87:29: b6:b0:89:c5:3d:8e:1d:08:f0:1a:fa:ec:f7:b0:77: f3:6f:16:4e:3a:16:ee:54:60:49:c9:9c:70:ce:90: ad:bf:ff:fd:10:47:e5:c8:df:9a:65:b5:38:cf:bf: 07:0d:7f:4d:0f:a7:5d:25:7d:43:da:32:12:0c:51: 97:87:21:ac:0c:31:68:27:ef:fc:87:1a:f5:39:c1: 55:c4:4f:1e:30:88:94:37:fe:e4:83:90:90:20:c0: a2:cd:1e:4a:a6:d5:1f:f9:a5:c4:9d:87:19:8d:d7: 5c:24:83:c8:8c:e9:01:5b:f7:09:29:39:00:75:de: a2:ee:c9:d6:ee:dd:9c:05:d0:08:d6:68:ed:67:1e: 36:79:71:c2:de:f3:ea:c5:6a:39:aa:ad:d9:9b:91: 29:2d:99:c7:0b:33:ca:94:78:6e:ac:f3:1a:90:cc: 0b:06:47:de:7c:30:18:e0:29:7f:f5:ac:fd:41:c8: 70:71:38:0b:20:34:38:0e:01:be:48:9b:1d:cb:1b: 86:84:21:11:7e:8f:b7:85:a7:bc:96:e9:7f:83:d7: 09:09:2a:d0:a9:6c:fd:9e:bb:0e:e9:e2:33:e5:6e: bd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:78:A1:D3:9F:B2:8E:12:B5:45:15:19:30:DD:FD:99:25:2C:38:55 X509v3 Authority Key Identifier: keyid:69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/rXih05-yjhK1RRUZMN39mSUsOFU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.53.72.0/22 Signature Algorithm: sha256WithRSAEncryption 21:4c:64:9d:ea:23:d2:3d:94:69:79:c8:e1:fc:46:41:44:0e: 1c:5d:a9:15:c1:41:5a:66:d7:a8:13:59:13:f6:82:c3:1c:13: 77:15:e6:14:05:40:3f:09:d0:1a:c4:e3:02:dd:b5:66:7f:99: 28:53:74:52:56:21:3d:fb:ba:cb:4e:21:fb:6d:1f:c0:a5:80: b0:0f:e0:2d:85:26:20:93:94:cc:8d:7c:72:19:49:0d:42:ca: 12:10:0f:d7:be:08:a0:24:41:1b:d6:49:5c:d3:34:d7:5d:26: 25:28:8b:59:10:04:73:89:94:c1:f8:5e:27:5a:2a:c1:d2:c0: de:70:09:ea:01:83:a0:ac:63:e6:50:eb:84:85:fb:bc:a4:89: 14:21:e6:12:16:67:b1:52:b1:b3:96:a5:08:47:e2:f5:9f:4b: df:f5:bb:bc:90:65:16:0c:f3:60:4f:60:af:57:d6:ff:4a:f7: 27:d8:35:b7:a3:10:9c:a1:f6:17:80:81:c2:5c:28:2b:9f:61: 2d:01:f2:78:c6:c1:79:29:21:d6:dc:b4:7d:6b:fe:6b:4c:a8: 57:28:a1:c2:9a:53:d5:42:17:8b:d9:1f:d0:1c:71:2d:38:93: ce:ce:a1:d2:3f:e9:fe:79:5f:e1:fc:9a:d6:0b:36:80:71:2c: 15:4c:f4:da -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gxsjgq4WSG6mqB90jmi2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5YWY3MGJkYTc3Y2Y4NThlMTY0ZDZiN2M3MDllODc4ZmQx YTYwNDUwHhcNMjYwMTAyMTYyMDU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDc4YTFkMzlmYjI4ZTEyYjU0NTE1MTkzMGRkZmQ5OTI1MmMzODU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQXxCagunZm9y5z8aPMnQXKaHwAx PnPKthbahym2sInFPY4dCPAa+uz3sHfzbxZOOhbuVGBJyZxwzpCtv//9EEflyN+a ZbU4z78HDX9ND6ddJX1D2jISDFGXhyGsDDFoJ+/8hxr1OcFVxE8eMIiUN/7kg5CQ IMCizR5KptUf+aXEnYcZjddcJIPIjOkBW/cJKTkAdd6i7snW7t2cBdAI1mjtZx42 eXHC3vPqxWo5qq3Zm5EpLZnHCzPKlHhurPMakMwLBkfefDAY4Cl/9az9QchwcTgL IDQ4DgG+SJsdyxuGhCERfo+3hae8lul/g9cJCSrQqWz9nrsO6eIz5W69KQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK14odOfso4StUUVGTDd/ZklLDhVMB8GA1UdIwQY MBaAFGmvcL2nfPhY4WTWt8cJ6Hj9GmBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWE5d3ZhZDgtRmpoWk5hM3h3bm9lUDBhWUVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9mYzk5MjctNjNmZS00ZTNiLWJmMjgt NjI4NzdmZTQ4NjE4LzEvclhpaDA1LXlqaEsxUlJVWk1OMzltU1VzT0ZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9mYzk5MjctNjNmZS00ZTNiLWJmMjgtNjI4NzdmZTQ4NjE4 LzEvYWE5d3ZhZDgtRmpoWk5hM3h3bm9lUDBhWUVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwjVIMA0G CSqGSIb3DQEBCwUAA4IBAQAhTGSd6iPSPZRpecjh/EZBRA4cXakVwUFaZteoE1kT 9oLDHBN3FeYUBUA/CdAaxOMC3bVmf5koU3RSViE9+7rLTiH7bR/ApYCwD+AthSYg k5TMjXxyGUkNQsoSEA/XvgigJEEb1klc0zTXXSYlKItZEARziZTB+F4nWirB0sDe cAnqAYOgrGPmUOuEhfu8pIkUIeYSFmexUrGzlqUIR+L1n0vf9bu8kGUWDPNgT2Cv V9b/Svcn2DW3oxCcofYXgIHCXCgrn2EtAfJ4xsF5KSHW3LR9a/5rTKhXKKHCmlPV QheL2R/QHHEtOJPOzqHSP+n+eV/h/JrWCzaAcSwVTPTa -----END CERTIFICATE-----Generated at Mon Jan 26 05:06:08 2026 by rpki-client