This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/XtdRW9uOUOWL2VRPxdvIXCbZuU4.roa File: XtdRW9uOUOWL2VRPxdvIXCbZuU4.roa (raw, json) Hash identifier: 1KqmvUcnTSbm1Oo7dR1c0rflO3uNn0UJ1qsD+8uSvj8= Subject key identifier: 5E:D7:51:5B:DB:8E:50:E5:8B:D9:54:4F:C5:DB:C8:5C:26:D9:B9:4E Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84923A2AA06105164251DD9201A43B Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/XtdRW9uOUOWL2VRPxdvIXCbZuU4.roa Signing time: Fri 02 Jan 2026 16:22:33 +0000 ROA not before: Fri 02 Jan 2026 16:22:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29035 IP address blocks: 93.170.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:92:3a:2a:a0:61:05:16:42:51:dd:92:01:a4:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ed7515bdb8e50e58bd9544fc5dbc85c26d9b94e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:07:b2:f0:f3:c0:57:65:7b:a3:48:f2:88:3b: d3:e1:48:50:b7:5d:8a:8f:70:06:40:07:98:57:51: 36:68:75:7c:26:f3:78:91:f6:9f:5d:82:53:78:73: 70:b7:66:16:b5:30:c9:40:54:24:4e:49:ee:04:27: 9d:e0:d1:13:09:e0:15:62:d5:48:20:dd:eb:e1:cb: 33:3b:d3:d2:67:a5:1c:e3:00:ab:dd:05:14:1a:de: e2:93:b0:3d:71:35:cf:46:d1:c4:38:e3:8a:8d:b1: 42:17:83:b4:da:8b:61:f5:24:5d:5d:46:40:4e:36: 7a:1f:fb:f4:cc:99:fb:95:7e:51:b1:a9:af:0b:55: f4:ea:44:8c:54:ef:9c:ea:34:f7:4e:08:4a:33:67: 74:f4:3c:7b:bd:58:6d:c6:21:8c:52:94:63:df:11: 7f:40:0a:47:9a:a2:37:56:b7:01:90:4a:34:b2:d6: e6:40:79:e5:73:98:3b:7c:b6:9f:a9:af:c0:4f:36: c4:4a:91:72:fe:20:00:8a:3c:3f:0e:fa:49:ef:7c: 8c:22:17:47:3a:78:11:8a:67:b9:74:33:b2:f7:42: 5e:97:55:ba:50:f8:7f:0c:9e:37:6d:4c:29:32:c5: 3c:4e:80:ba:f0:9f:74:a5:f7:06:dd:90:56:ef:62: f2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:D7:51:5B:DB:8E:50:E5:8B:D9:54:4F:C5:DB:C8:5C:26:D9:B9:4E X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/XtdRW9uOUOWL2VRPxdvIXCbZuU4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.170.4.0/24 Signature Algorithm: sha256WithRSAEncryption 26:9c:99:97:58:7a:2d:5a:ff:5c:f1:55:f9:e9:13:cc:90:bf: 2c:a5:98:51:94:5b:ce:9f:e3:1d:5a:10:da:45:d6:26:ec:c2: 99:14:9b:1b:2d:31:91:22:e7:8f:21:4e:32:8d:e0:49:72:dc: 12:b2:29:29:f5:5e:c9:64:0a:5d:64:4c:36:2f:d5:24:14:9b: 69:4d:cb:73:57:60:b7:b7:0d:78:8b:ae:6c:99:34:32:37:08: 8a:21:dc:be:15:94:ef:fb:45:0d:9c:a9:dd:6b:00:0d:76:28: a1:ba:41:9e:a5:73:1e:22:71:3e:bd:a7:b8:0a:a1:d3:a7:18: be:8e:79:55:51:66:6c:ad:7d:a5:1c:f3:48:53:2d:08:8b:3f: e6:96:dd:67:1f:27:9a:c7:78:c4:a2:6e:25:64:d0:23:b3:d0: c0:22:2f:a1:1a:7b:59:52:a3:cd:f9:d5:85:0f:a1:be:40:25: c2:c8:21:5c:55:a6:17:02:23:bc:e9:e0:43:64:e6:9c:94:06: 34:d8:f3:5d:5c:60:2e:dd:3f:98:f3:03:80:5e:b2:e7:bb:d2: 4e:77:46:fd:6f:1c:d7:ff:07:dd:cb:59:1f:5b:39:a3:d6:c2: 06:1f:f2:42:ca:2b:09:be:cc:df:9a:f7:4a:65:d3:61:51:8e: 8b:32:ff:4e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hJI6KqBhBRZCUd2SAaQ7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZWQ3NTE1YmRiOGU1MGU1OGJkOTU0NGZjNWRiYzg1YzI2ZDliOTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgey8PPAV2V7o0jyiDvT4UhQt12K j3AGQAeYV1E2aHV8JvN4kfafXYJTeHNwt2YWtTDJQFQkTknuBCed4NETCeAVYtVI IN3r4cszO9PSZ6Uc4wCr3QUUGt7ik7A9cTXPRtHEOOOKjbFCF4O02oth9SRdXUZA TjZ6H/v0zJn7lX5RsamvC1X06kSMVO+c6jT3TghKM2d09Dx7vVhtxiGMUpRj3xF/ QApHmqI3VrcBkEo0stbmQHnlc5g7fLafqa/ATzbESpFy/iAAijw/DvpJ73yMIhdH OngRime5dDOy90Jel1W6UPh/DJ43bUwpMsU8ToC68J90pfcG3ZBW72LyFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF7XUVvbjlDli9lUT8XbyFwm2blOMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvWHRkUlc5dU9VT1dMMlZSUHhkdklYQ2JadVU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXaoEMA0G CSqGSIb3DQEBCwUAA4IBAQAmnJmXWHotWv9c8VX56RPMkL8spZhRlFvOn+MdWhDa RdYm7MKZFJsbLTGRIuePIU4yjeBJctwSsikp9V7JZApdZEw2L9UkFJtpTctzV2C3 tw14i65smTQyNwiKIdy+FZTv+0UNnKndawANdiihukGepXMeInE+vae4CqHTpxi+ jnlVUWZsrX2lHPNIUy0Iiz/mlt1nHyeax3jEom4lZNAjs9DAIi+hGntZUqPN+dWF D6G+QCXCyCFcVaYXAiO86eBDZOaclAY02PNdXGAu3T+Y8wOAXrLnu9JOd0b9bxzX /wfdy1kfWzmj1sIGH/JCyisJvszfmvdKZdNhUY6LMv9O -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:21 2026 by rpki-client