This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/XxyuXCWjuPPSCu3ADpAZtpYhnRU.roa File: XxyuXCWjuPPSCu3ADpAZtpYhnRU.roa (raw, json) Hash identifier: N26WxpMxuSY1X7ferWSIE68ltT0/mKKRNWk5uvKz1yQ= Subject key identifier: 5F:1C:AE:5C:25:A3:B8:F3:D2:0A:ED:C0:0E:90:19:B6:96:21:9D:15 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F8515942254FB54EDF139C7BADD262B Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/XxyuXCWjuPPSCu3ADpAZtpYhnRU.roa Signing time: Fri 02 Jan 2026 16:23:06 +0000 ROA not before: Fri 02 Jan 2026 16:23:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212913 IP address blocks: 31.148.99.0/24 maxlen: 24 93.170.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:15:94:22:54:fb:54:ed:f1:39:c7:ba:dd:26:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:23:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f1cae5c25a3b8f3d20aedc00e9019b696219d15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6c:77:b4:75:50:34:c7:25:c8:1f:ba:c6:c1: ff:4f:69:43:c2:46:42:e7:54:c0:80:ce:28:cc:97: e5:49:07:a5:1a:48:8a:c1:9c:ec:13:c9:a9:84:e6: 67:fe:1c:31:fb:a4:0a:ab:52:be:05:be:16:d6:06: 6f:c5:22:e2:31:83:36:b9:55:9a:ec:ed:66:42:f1: 7e:0b:72:d3:a9:49:ff:59:64:49:e2:7a:01:e1:60: 4e:06:de:40:bb:c2:db:43:ee:09:57:33:4d:9d:46: 66:a5:bb:a5:3e:92:ff:41:68:a8:d1:55:5a:8d:ac: ae:25:5f:6e:0d:9f:6f:27:dc:4e:b6:e3:98:7a:5d: 6c:75:94:c3:c3:c3:a8:24:f1:b7:4f:f3:ca:d5:68: 00:92:94:b9:95:fe:11:80:c2:9b:28:18:53:6e:92: 43:d6:f4:09:8c:16:52:2c:e3:b0:b3:64:b1:37:81: 38:e4:f8:26:ea:f7:ab:75:1f:f8:f5:bc:7a:e1:1e: b8:db:dd:08:76:0f:6b:c9:a7:72:a1:fa:c4:19:8b: 04:5b:6f:90:06:29:ad:ee:1e:bc:2a:05:77:d6:57: 13:4e:ec:34:86:80:19:e2:d3:c9:6a:ee:76:b3:4e: 25:30:e8:c8:f6:9d:15:ba:ae:30:89:05:95:73:a3: 10:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:1C:AE:5C:25:A3:B8:F3:D2:0A:ED:C0:0E:90:19:B6:96:21:9D:15 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/XxyuXCWjuPPSCu3ADpAZtpYhnRU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.148.99.0/24 93.170.123.0/24 Signature Algorithm: sha256WithRSAEncryption 36:70:16:43:0b:2f:94:7d:0e:a6:6f:f3:9b:77:35:c9:7e:d4: 70:6f:47:91:ce:26:0a:d2:ba:90:d1:00:1b:88:57:5d:b3:88: 23:06:54:a4:38:cb:83:68:3a:e9:ec:78:97:dd:cc:f9:87:85: 78:2a:e8:8b:2d:16:49:6b:42:a8:20:4f:1b:32:d6:c5:22:47: c2:74:7d:67:2e:ab:23:5b:0e:eb:2a:5d:19:41:b7:03:9e:0d: b0:8f:41:7e:cb:d8:e9:97:22:33:57:f4:43:dd:e0:29:c4:d5: 62:c5:cd:c2:c4:2c:f2:02:f4:c8:47:53:39:47:bc:b5:44:03: 0e:5d:29:78:2d:25:05:cb:a9:fd:db:22:0d:3c:1b:b1:60:bb: 0a:d1:ec:39:d4:fb:48:2b:3c:8a:d4:9a:fe:6d:ac:12:5c:69: 22:e2:76:73:3a:6c:e5:aa:b0:2e:23:0d:e0:90:28:7d:b5:b0: 8c:ef:66:10:78:09:0d:b3:19:21:6d:42:3f:84:89:7d:1d:fb: c6:03:3b:de:84:ff:e0:c8:7f:c6:7a:d9:8e:3a:29:77:18:e0: a2:81:84:58:b1:4c:e5:d7:66:81:b5:a8:4f:7f:92:40:ab:22: 5c:f9:4e:dc:8a:90:20:3e:4f:e1:45:01:89:ae:df:2a:4e:1c: 03:ed:dc:c2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hRWUIlT7VO3xOce63SYrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMzA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjFjYWU1YzI1YTNiOGYzZDIwYWVkYzAwZTkwMTliNjk2MjE5ZDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGx3tHVQNMclyB+6xsH/T2lDwkZC 51TAgM4ozJflSQelGkiKwZzsE8mphOZn/hwx+6QKq1K+Bb4W1gZvxSLiMYM2uVWa 7O1mQvF+C3LTqUn/WWRJ4noB4WBOBt5Au8LbQ+4JVzNNnUZmpbulPpL/QWio0VVa jayuJV9uDZ9vJ9xOtuOYel1sdZTDw8OoJPG3T/PK1WgAkpS5lf4RgMKbKBhTbpJD 1vQJjBZSLOOws2SxN4E45Pgm6verdR/49bx64R64290Idg9ryadyofrEGYsEW2+Q Bimt7h68KgV31lcTTuw0hoAZ4tPJau52s04lMOjI9p0Vuq4wiQWVc6MQIwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFF8crlwlo7jz0grtwA6QGbaWIZ0VMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvWHh5dVhDV2p1UFBTQ3UzQURwQVp0cFloblJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAH5RjAwQA Xap7MA0GCSqGSIb3DQEBCwUAA4IBAQA2cBZDCy+UfQ6mb/ObdzXJftRwb0eRziYK 0rqQ0QAbiFdds4gjBlSkOMuDaDrp7HiX3cz5h4V4KuiLLRZJa0KoIE8bMtbFIkfC dH1nLqsjWw7rKl0ZQbcDng2wj0F+y9jplyIzV/RD3eApxNVixc3CxCzyAvTIR1M5 R7y1RAMOXSl4LSUFy6n92yINPBuxYLsK0ew51PtIKzyK1Jr+bawSXGki4nZzOmzl qrAuIw3gkCh9tbCM72YQeAkNsxkhbUI/hIl9HfvGAzvehP/gyH/GetmOOil3GOCi gYRYsUzl12aBtahPf5JAqyJc+U7cipAgPk/hRQGJrt8qThwD7dzC -----END CERTIFICATE-----Generated at Sun Jan 25 16:13:44 2026 by rpki-client