This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/x-cXbdNXg6CBnodia6aUDxUJZas.roa File: x-cXbdNXg6CBnodia6aUDxUJZas.roa (raw, json) Hash identifier: jfl+nhSLGqOL1lAOJyC8wvY/62ojmN9UTLGAHHP5b/A= Subject key identifier: C7:E7:17:6D:D3:57:83:A0:81:9E:87:62:6B:A6:94:0F:15:09:65:AB Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Certificate serial: 019B7834502200A22AE8AB4EED9FF6F171E2 Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/x-cXbdNXg6CBnodia6aUDxUJZas.roa Signing time: Thu 01 Jan 2026 06:17:32 +0000 ROA not before: Thu 01 Jan 2026 06:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51087 IP address blocks: 193.32.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:50:22:00:a2:2a:e8:ab:4e:ed:9f:f6:f1:71:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Validity Not Before: Jan 1 06:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7e7176dd35783a0819e87626ba6940f150965ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:53:ce:39:f4:0b:b8:51:51:cd:a5:4f:25:f0: 96:cd:e9:9f:94:36:85:b3:a7:20:98:b9:1b:03:e8: c5:5e:23:59:03:e4:b5:e7:ef:3b:7f:c0:89:43:c2: 7f:06:45:e5:9a:9e:cf:2d:26:a3:2f:83:17:d1:ec: ac:9b:43:c4:98:96:84:ea:4e:e4:9e:7c:5f:f7:f4: 21:cd:65:01:7a:4f:be:5f:c1:bf:c0:7f:fc:a6:b0: 4f:40:9f:ce:86:9b:d9:ed:1c:a6:c2:d6:14:49:ad: 7a:22:fc:c2:36:85:a8:19:24:05:32:6b:b4:b7:f6: 30:a8:63:aa:21:eb:f0:d1:35:32:36:ae:89:f9:1d: 7a:a5:18:b6:50:b7:9b:67:86:41:da:a0:be:7f:4b: d6:e0:97:ce:27:81:7c:b0:1e:3b:54:2f:99:13:68: cd:a4:55:d8:0e:30:94:df:35:b1:1c:9f:04:f4:45: 9a:10:0b:63:80:10:34:f6:ec:b9:e5:38:39:8e:66: fb:83:49:ef:b5:7e:04:8a:71:60:49:13:18:0e:6b: 2a:a2:8b:01:57:63:a2:2c:1a:e2:47:48:c5:d5:ae: da:35:89:b6:f0:39:2f:6e:24:84:61:7a:ec:8a:bc: cb:8e:fc:30:c0:0e:d1:d9:08:74:6d:d1:dc:c8:96: 07:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E7:17:6D:D3:57:83:A0:81:9E:87:62:6B:A6:94:0F:15:09:65:AB X509v3 Authority Key Identifier: keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/x-cXbdNXg6CBnodia6aUDxUJZas.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.32.86.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:80:f4:01:0e:cb:2b:be:31:d1:e5:1b:f7:e3:b9:2f:ee:de: dc:b9:a2:b3:e7:f3:be:eb:4c:64:31:d2:45:4f:14:fd:8c:de: 00:f1:e7:0c:27:ed:43:60:48:88:dc:f4:d0:09:eb:69:46:63: a8:a8:2d:fb:ce:fa:59:e5:9c:d0:25:9f:70:10:b4:eb:79:77: e6:9d:dd:9e:7e:ca:e5:77:13:bc:fe:0c:e5:3a:47:10:b4:00: 63:30:f7:bc:3f:78:85:e7:d4:1b:5c:c9:ca:ad:fd:8e:b2:39: b2:4a:9a:02:7a:fa:bb:27:5d:74:27:27:ee:f6:0b:51:a7:d5: 38:95:fc:5c:29:8a:2b:8b:fc:f3:5d:31:63:95:3c:b1:3f:6a: fb:e8:1a:96:98:52:de:97:ed:61:72:e8:5e:54:75:2a:19:84: 0a:87:13:f7:4a:68:28:71:f7:20:ef:58:00:a9:de:5e:b2:d6: bc:18:60:d1:b2:2a:b3:08:36:b5:1d:17:e0:4a:05:d8:05:50: 48:98:5d:44:bc:e1:13:09:7d:1b:7b:2b:e6:ee:2d:06:00:ca: d3:c1:83:eb:76:8c:8e:0c:cc:67:ff:1b:1e:27:a6:50:f9:69: cc:39:fb:bc:ee:10:2a:2d:43:f0:e6:51:42:48:28:2e:ed:d5: a0:52:39:f5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NFAiAKIq6KtO7Z/28XHiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi YmFhZTIwHhcNMjYwMTAxMDYxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjN2U3MTc2ZGQzNTc4M2EwODE5ZTg3NjI2YmE2OTQwZjE1MDk2NWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFPOOfQLuFFRzaVPJfCWzemflDaF s6cgmLkbA+jFXiNZA+S15+87f8CJQ8J/BkXlmp7PLSajL4MX0eysm0PEmJaE6k7k nnxf9/QhzWUBek++X8G/wH/8prBPQJ/OhpvZ7RymwtYUSa16IvzCNoWoGSQFMmu0 t/YwqGOqIevw0TUyNq6J+R16pRi2ULebZ4ZB2qC+f0vW4JfOJ4F8sB47VC+ZE2jN pFXYDjCU3zWxHJ8E9EWaEAtjgBA09uy55Tg5jmb7g0nvtX4EinFgSRMYDmsqoosB V2OiLBriR0jF1a7aNYm28DkvbiSEYXrsirzLjvwwwA7R2Qh0bdHcyJYHrQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMfnF23TV4OggZ6HYmumlA8VCWWrMB8GA1UdIwQY MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt MjU0YWNkOTJiNGUxLzEveC1jWGJkTlhnNkNCbm9kaWE2YVVEeFVKWmFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSBWMA0G CSqGSIb3DQEBCwUAA4IBAQBLgPQBDssrvjHR5Rv347kv7t7cuaKz5/O+60xkMdJF TxT9jN4A8ecMJ+1DYEiI3PTQCetpRmOoqC37zvpZ5ZzQJZ9wELTreXfmnd2efsrl dxO8/gzlOkcQtABjMPe8P3iF59QbXMnKrf2OsjmySpoCevq7J110Jyfu9gtRp9U4 lfxcKYori/zzXTFjlTyxP2r76BqWmFLel+1hcuheVHUqGYQKhxP3Smgocfcg71gA qd5esta8GGDRsiqzCDa1HRfgSgXYBVBImF1EvOETCX0beyvm7i0GAMrTwYPrdoyO DMxn/xseJ6ZQ+WnMOfu87hAqLUPw5lFCSCgu7dWgUjn1 -----END CERTIFICATE-----Generated at Sun Jan 25 18:08:21 2026 by rpki-client