This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/xeXCbVKY1aKRd_SKGWbXuWly3_c.roa File: xeXCbVKY1aKRd_SKGWbXuWly3_c.roa (raw, json) Hash identifier: J4/1RyC+BzOI0zgjFlq8W2+RGutyBb0pM27EguLaw5g= Subject key identifier: C5:E5:C2:6D:52:98:D5:A2:91:77:F4:8A:19:66:D7:B9:69:72:DF:F7 Certificate issuer: /CN=bf5ebfe458c8990700f04c01b1132e3a37623de5 Certificate serial: 019B7911156A9D04715F938EEF02B07978DE Authority key identifier: BF:5E:BF:E4:58:C8:99:07:00:F0:4C:01:B1:13:2E:3A:37:62:3D:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v16_5FjImQcA8EwBsRMuOjdiPeU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/xeXCbVKY1aKRd_SKGWbXuWly3_c.roa Signing time: Thu 01 Jan 2026 10:18:41 +0000 ROA not before: Thu 01 Jan 2026 10:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1103 IP address blocks: 131.224.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.crl rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.mft rsync://rpki.ripe.net/repository/DEFAULT/v16_5FjImQcA8EwBsRMuOjdiPeU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:15:6a:9d:04:71:5f:93:8e:ef:02:b0:79:78:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf5ebfe458c8990700f04c01b1132e3a37623de5 Validity Not Before: Jan 1 10:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5e5c26d5298d5a29177f48a1966d7b96972dff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1b:4f:19:44:a2:44:ba:2c:8d:47:cb:9f:24: 04:c8:13:af:f3:42:42:a3:32:91:d8:f3:c0:c2:4d: 1b:06:c5:2c:b8:91:76:b5:fa:af:92:97:4a:e2:59: 77:a2:32:ae:c0:48:98:79:5d:e8:e6:82:4f:dd:4f: 06:d0:8a:32:bd:48:d1:68:b1:1b:b4:48:28:53:e2: 9d:d8:48:b8:19:ee:0d:16:65:7b:b9:54:ee:09:87: b0:db:e4:34:31:5b:a7:dd:cf:34:ed:eb:20:41:a4: 3f:29:d7:43:a9:d9:3b:25:25:c7:da:63:cb:fe:41: 15:fa:b7:34:31:3d:8e:64:48:e4:df:6a:cd:92:d8: 33:94:b7:4c:50:df:b6:59:b6:96:c2:44:9d:cd:eb: 16:47:5d:92:35:37:80:2b:db:d6:ab:02:ee:40:fd: 9f:a2:22:db:a4:5b:48:ee:7e:ea:c8:4b:56:ed:13: 4b:8a:10:e6:29:9d:1a:db:0b:95:9c:f7:fd:29:eb: 17:3e:60:b5:d2:68:ab:45:3f:d2:f4:87:d1:6d:ed: 66:30:58:0c:58:f0:87:27:82:87:ad:c7:dc:1a:dd: 1f:5b:cf:bc:b0:8d:84:cc:72:be:14:12:2b:1e:8a: 4f:4c:3a:86:0a:24:43:c3:fa:57:8f:cd:83:e0:d8: 55:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E5:C2:6D:52:98:D5:A2:91:77:F4:8A:19:66:D7:B9:69:72:DF:F7 X509v3 Authority Key Identifier: keyid:BF:5E:BF:E4:58:C8:99:07:00:F0:4C:01:B1:13:2E:3A:37:62:3D:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v16_5FjImQcA8EwBsRMuOjdiPeU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/xeXCbVKY1aKRd_SKGWbXuWly3_c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.224.0.0/16 Signature Algorithm: sha256WithRSAEncryption 2c:77:8f:17:59:07:fa:4b:a1:4e:16:7e:da:02:90:48:cb:f0: 44:86:21:d0:bf:b2:70:fc:33:c8:90:c6:92:03:5a:94:f9:98: 1f:07:73:6b:9c:b9:eb:5b:6a:3e:7e:f6:21:95:d6:e9:29:6b: 0f:a9:ff:86:da:2f:bd:83:a5:65:5c:30:db:91:65:2f:e5:25: f9:db:97:11:b4:21:86:6b:45:be:8a:4b:88:d6:25:ce:43:14: 6d:3e:61:1b:68:0b:cd:56:5a:85:bc:1a:56:39:df:e3:e1:4d: c9:10:f8:c0:7f:9d:1a:d3:63:b6:0d:c9:8b:6b:56:31:02:b9: c7:95:44:f9:54:39:6b:f4:88:3d:cc:90:b7:02:ed:a6:65:cd: 54:56:5e:42:3b:1b:b2:a3:9d:24:ef:50:c9:35:ad:d7:3a:84: 6f:02:83:b5:65:8a:19:c6:16:29:ef:c1:c6:c0:e0:59:94:a0: df:e0:74:79:7c:4b:66:87:75:f8:2a:92:04:e6:29:3b:6e:18: 78:cb:fa:7c:74:10:9a:98:ab:17:9c:a2:1e:4d:b0:05:ff:1b: 8a:29:34:49:d6:94:3f:52:ef:48:1c:8a:78:25:78:bd:77:4e: e4:e5:7d:de:94:cd:4a:f7:80:32:09:ea:4a:a1:4b:6b:d7:0e: 5e:c8:1e:f3 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt5ERVqnQRxX5OO7wKweXjeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNWViZmU0NThjODk5MDcwMGYwNGMwMWIxMTMyZTNhMzc2 MjNkZTUwHhcNMjYwMTAxMTAxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNWU1YzI2ZDUyOThkNWEyOTE3N2Y0OGExOTY2ZDdiOTY5NzJkZmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRtPGUSiRLosjUfLnyQEyBOv80JC ozKR2PPAwk0bBsUsuJF2tfqvkpdK4ll3ojKuwEiYeV3o5oJP3U8G0IoyvUjRaLEb tEgoU+Kd2Ei4Ge4NFmV7uVTuCYew2+Q0MVun3c807esgQaQ/KddDqdk7JSXH2mPL /kEV+rc0MT2OZEjk32rNktgzlLdMUN+2WbaWwkSdzesWR12SNTeAK9vWqwLuQP2f oiLbpFtI7n7qyEtW7RNLihDmKZ0a2wuVnPf9KesXPmC10mirRT/S9IfRbe1mMFgM WPCHJ4KHrcfcGt0fW8+8sI2EzHK+FBIrHopPTDqGCiRDw/pXj82D4NhViQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFMXlwm1SmNWikXf0ihlm17lpct/3MB8GA1UdIwQY MBaAFL9ev+RYyJkHAPBMAbETLjo3Yj3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjE2XzVGakltUWNBOEV3QnNSTXVPamRpUGVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny80MDQwZWUtMDdiZC00M2M0LTg1MDgt MDU4Mzk0MWVlYTcxLzEveGVYQ2JWS1kxYUtSZF9TS0dXYlh1V2x5M19jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny80MDQwZWUtMDdiZC00M2M0LTg1MDgtMDU4Mzk0MWVlYTcx LzEvdjE2XzVGakltUWNBOEV3QnNSTXVPamRpUGVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAg+AwDQYJ KoZIhvcNAQELBQADggEBACx3jxdZB/pLoU4WftoCkEjL8ESGIdC/snD8M8iQxpID WpT5mB8Hc2ucuetbaj5+9iGV1ukpaw+p/4baL72DpWVcMNuRZS/lJfnblxG0IYZr Rb6KS4jWJc5DFG0+YRtoC81WWoW8GlY53+PhTckQ+MB/nRrTY7YNyYtrVjECuceV RPlUOWv0iD3MkLcC7aZlzVRWXkI7G7KjnSTvUMk1rdc6hG8Cg7VlihnGFinvwcbA 4FmUoN/gdHl8S2aHdfgqkgTmKTtuGHjL+nx0EJqYqxecoh5NsAX/G4opNEnWlD9S 70gcingleL13TuTlfd6UzUr3gDIJ6kqhS2vXDl7IHvM= -----END CERTIFICATE-----Generated at Sun Jan 25 19:37:21 2026 by rpki-client