This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/xgVgpw4XtUpimdfPBGzbbCtU1Z8.roa File: xgVgpw4XtUpimdfPBGzbbCtU1Z8.roa (raw, json) Hash identifier: n/FpmazjblwI/DOGbFxfAt6xbYD4J5uzhPRONKeYoOM= Subject key identifier: C6:05:60:A7:0E:17:B5:4A:62:99:D7:CF:04:6C:DB:6C:2B:54:D5:9F Certificate issuer: /CN=02339402c42b3f84995c4d58ef670e8d16c2afe2 Certificate serial: 019B7D5CF5463F6FDBB58C03C4463CD9F952 Authority key identifier: 02:33:94:02:C4:2B:3F:84:99:5C:4D:58:EF:67:0E:8D:16:C2:AF:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/xgVgpw4XtUpimdfPBGzbbCtU1Z8.roa Signing time: Fri 02 Jan 2026 06:20:02 +0000 ROA not before: Fri 02 Jan 2026 06:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5406 IP address blocks: 194.53.172.0/24 maxlen: 24 2001:7f8:26::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:f5:46:3f:6f:db:b5:8c:03:c4:46:3c:d9:f9:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02339402c42b3f84995c4d58ef670e8d16c2afe2 Validity Not Before: Jan 2 06:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c60560a70e17b54a6299d7cf046cdb6c2b54d59f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:80:44:0a:32:de:e6:dc:6f:71:36:59:d5:b1: 9e:04:c3:27:d8:d1:88:34:d7:7d:6e:ae:72:13:ef: 17:3b:92:38:58:34:d2:fa:f7:dc:33:b5:6d:5b:08: a1:b6:47:4b:26:b8:d3:87:31:73:4b:72:a8:9b:cc: 40:72:79:32:9b:ae:f4:b4:6c:ce:54:6e:16:82:86: cc:61:20:c2:39:77:70:06:bb:08:3c:1e:60:3a:65: 22:5a:02:ea:3c:d4:0c:ba:cf:e8:7d:9d:e0:54:b2: f3:24:cf:9a:55:08:68:ad:1c:70:81:5d:46:57:d1: 8c:97:0a:c4:cd:f7:e4:38:3c:fc:07:69:6a:e6:5c: e1:8e:29:dc:00:a1:05:21:5f:ed:ca:cb:db:0a:bf: 3f:aa:71:c1:41:10:54:4e:fb:10:ae:9e:56:c5:14: b8:32:fc:4e:85:23:61:2e:25:2e:d5:6d:5c:91:3b: 6c:7c:7b:66:f3:de:83:2a:ea:91:07:49:e5:46:98: 3f:8e:7b:40:a1:4e:dd:29:0c:56:f6:2a:ff:8a:ff: f0:07:f6:ef:5a:1f:a8:8d:9b:ae:1a:f4:ea:35:7b: c9:28:3d:0e:d6:29:89:40:30:5b:04:b4:8b:97:0c: 1a:34:58:41:f4:4e:c4:0f:96:34:71:c6:b9:d8:f3: 18:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:05:60:A7:0E:17:B5:4A:62:99:D7:CF:04:6C:DB:6C:2B:54:D5:9F X509v3 Authority Key Identifier: keyid:02:33:94:02:C4:2B:3F:84:99:5C:4D:58:EF:67:0E:8D:16:C2:AF:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/xgVgpw4XtUpimdfPBGzbbCtU1Z8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.53.172.0/24 IPv6: 2001:7f8:26::/48 Signature Algorithm: sha256WithRSAEncryption 96:03:f1:ad:f2:f4:cd:fb:0c:71:ec:79:cf:ba:48:e0:45:c6: 6a:52:df:26:e5:cb:23:f6:d6:2e:8b:b7:1a:77:9f:67:1c:fb: c5:b7:9a:c9:c4:81:5a:6e:74:63:c0:6a:7d:48:83:8d:f9:3f: d7:68:66:e6:de:6c:d5:7d:15:f6:34:f8:f8:7d:ac:72:67:0f: 82:94:8c:4b:f6:6a:3c:1d:e7:96:52:31:65:4e:b5:1f:8a:dc: 75:65:04:54:d7:5d:fe:67:62:73:72:08:74:3b:94:a9:20:47: 88:b0:77:5a:d7:1d:95:d9:57:b7:f9:cd:7d:da:7c:b7:5a:0b: 44:d5:0b:2e:56:fc:a6:54:da:b4:10:7d:c0:24:32:55:a1:43: 34:89:d4:b6:8c:07:4a:de:14:07:62:2d:ca:15:74:1f:ac:4d: d4:e8:9b:a4:5f:46:43:d2:02:c0:9e:bf:b0:38:07:aa:e3:e2: 6f:1e:ce:92:64:80:f0:f2:12:65:67:81:a3:37:26:d7:c9:1a: 82:0d:81:08:0f:75:8b:f8:e0:c9:17:94:d2:e1:e5:e7:e4:79: 3a:89:17:36:b9:07:ea:28:f0:eb:d7:9c:c4:a5:5c:3f:e6:1d: 45:97:5a:a4:da:51:cd:ea:f9:59:91:9d:d3:9c:d3:d8:e0:36: b2:56:9e:f2 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9XPVGP2/btYwDxEY82flSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMzM5NDAyYzQyYjNmODQ5OTVjNGQ1OGVmNjcwZThkMTZj MmFmZTIwHhcNMjYwMTAyMDYyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjA1NjBhNzBlMTdiNTRhNjI5OWQ3Y2YwNDZjZGI2YzJiNTRkNTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooBECjLe5txvcTZZ1bGeBMMn2NGI NNd9bq5yE+8XO5I4WDTS+vfcM7VtWwihtkdLJrjThzFzS3Kom8xAcnkym670tGzO VG4WgobMYSDCOXdwBrsIPB5gOmUiWgLqPNQMus/ofZ3gVLLzJM+aVQhorRxwgV1G V9GMlwrEzffkODz8B2lq5lzhjincAKEFIV/tysvbCr8/qnHBQRBUTvsQrp5WxRS4 MvxOhSNhLiUu1W1ckTtsfHtm896DKuqRB0nlRpg/jntAoU7dKQxW9ir/iv/wB/bv Wh+ojZuuGvTqNXvJKD0O1imJQDBbBLSLlwwaNFhB9E7ED5Y0cca52PMYNwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFMYFYKcOF7VKYpnXzwRs22wrVNWfMB8GA1UdIwQY MBaAFAIzlALEKz+EmVxNWO9nDo0Wwq/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWpPVUFzUXJQNFNaWEUxWTcyY09qUmJDci1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9lYjg3N2MtOTI5ZS00MWI2LWI5Y2It ZmM2NGJmYzNkMmY5LzEveGdWZ3B3NFh0VXBpbWRmUEJHemJiQ3RVMVo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9lYjg3N2MtOTI5ZS00MWI2LWI5Y2ItZmM2NGJmYzNkMmY5 LzEvQWpPVUFzUXJQNFNaWEUxWTcyY09qUmJDci1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwjWsMA8E AgACMAkDBwAgAQf4ACYwDQYJKoZIhvcNAQELBQADggEBAJYD8a3y9M37DHHsec+6 SOBFxmpS3yblyyP21i6Ltxp3n2cc+8W3msnEgVpudGPAan1Ig435P9doZubebNV9 FfY0+Ph9rHJnD4KUjEv2ajwd55ZSMWVOtR+K3HVlBFTXXf5nYnNyCHQ7lKkgR4iw d1rXHZXZV7f5zX3afLdaC0TVCy5W/KZU2rQQfcAkMlWhQzSJ1LaMB0reFAdiLcoV dB+sTdTom6RfRkPSAsCev7A4B6rj4m8ezpJkgPDyEmVngaM3JtfJGoINgQgPdYv4 4MkXlNLh5efkeTqJFza5B+oo8OvXnMSlXD/mHUWXWqTaUc3q+VmRndOc09jgNrJW nvI= -----END CERTIFICATE-----Generated at Mon Jan 26 09:24:23 2026 by rpki-client