This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/xVa6hi9wu8XjSdEwYmXJAx85FhU.roa File: xVa6hi9wu8XjSdEwYmXJAx85FhU.roa (raw, json) Hash identifier: 8J48r7Dcw/u08bxZJven18+8CJuosinNuC5v6bFRP4U= Subject key identifier: C5:56:BA:86:2F:70:BB:C5:E3:49:D1:30:62:65:C9:03:1F:39:16:15 Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46 Certificate serial: 019B79109793B651BC7C917105E540B4FD2C Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/xVa6hi9wu8XjSdEwYmXJAx85FhU.roa Signing time: Thu 01 Jan 2026 10:18:09 +0000 ROA not before: Thu 01 Jan 2026 10:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29601 IP address blocks: 192.130.31.0/24 maxlen: 24 192.130.157.0/24 maxlen: 24 192.194.132.0/22 maxlen: 22 192.194.136.0/21 maxlen: 21 192.194.144.0/20 maxlen: 24 192.194.160.0/24 maxlen: 24 194.252.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:97:93:b6:51:bc:7c:91:71:05:e5:40:b4:fd:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46 Validity Not Before: Jan 1 10:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c556ba862f70bbc5e349d1306265c9031f391615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c8:a8:4f:1c:fc:9c:11:8c:f2:06:34:02:08: 27:15:84:31:02:cc:a7:f7:a2:de:4e:c8:71:ea:a9: 3a:36:f7:67:97:5a:de:7f:0e:24:db:61:16:8a:ef: f7:7e:3a:0a:c4:36:43:d1:36:93:11:70:72:20:1d: 8f:6b:b0:82:e9:d9:eb:81:29:c8:43:4d:0a:e5:cb: 59:0d:e5:17:8b:ec:34:06:25:8b:69:61:a6:9d:df: 7f:2e:0b:81:32:9f:d4:c9:36:db:4a:b3:f8:a3:4b: 2a:3f:c0:b8:7c:36:ad:b0:9e:fd:ad:cc:08:cc:e1: 26:55:ef:dc:fe:d9:6e:d5:e1:99:59:11:4d:41:c0: b2:6d:42:1e:a1:af:7d:7a:81:36:4c:b5:15:ad:b0: 95:88:eb:b4:38:ed:1a:51:7e:03:06:0b:f7:cc:e9: f4:d5:a3:ad:8a:7b:f8:76:ed:7b:f0:bb:ae:62:97: 05:69:31:d6:f9:b1:e2:4b:d8:d7:18:7a:f8:46:d6: cd:9d:90:19:59:78:5e:eb:46:98:80:9b:b7:6b:4a: 23:89:5a:0f:57:21:34:d8:a0:ab:b5:2a:aa:63:ee: 70:93:c9:21:0c:ac:36:a5:76:38:7b:4f:2d:f9:07: 3a:a9:f8:11:8b:88:74:17:14:ca:a2:b5:8c:82:76: d2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:56:BA:86:2F:70:BB:C5:E3:49:D1:30:62:65:C9:03:1F:39:16:15 X509v3 Authority Key Identifier: keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/xVa6hi9wu8XjSdEwYmXJAx85FhU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.130.31.0/24 192.130.157.0/24 192.194.132.0-192.194.160.255 194.252.225.0/24 Signature Algorithm: sha256WithRSAEncryption ab:57:14:b2:46:b2:68:af:30:52:15:a3:4f:fb:e1:35:ad:58: 9a:8b:eb:82:f9:21:46:36:45:63:9b:11:ec:9d:22:23:84:e3: b3:e9:d9:4b:c5:a7:74:32:f5:b8:6e:61:f2:22:f7:ff:0b:23: 2d:89:db:b0:1d:de:21:cf:09:62:0f:40:28:e6:90:71:94:0b: fb:e7:02:57:95:5f:24:07:c7:ad:3d:38:96:be:27:8f:08:fa: ef:02:3c:94:e0:fb:59:c2:f3:77:87:dd:05:4b:a1:f3:c1:b9: 8b:af:e8:ea:3a:6c:54:17:37:e7:86:8f:3d:f7:ad:32:7a:e8: ee:7b:b6:df:07:c5:a7:d1:e7:ab:15:38:fa:b2:8f:48:f7:83: c9:ce:16:fb:d0:55:e5:b2:54:2f:46:65:e2:f8:79:2a:d4:e3: 2f:4e:80:c6:27:b6:18:77:76:a5:67:b9:ae:a1:da:4e:af:5e: 73:18:b2:06:30:1d:62:1a:42:1c:58:5d:26:13:5b:3f:f4:71: 04:1d:66:e3:94:86:f9:6a:70:51:27:7d:2c:1f:ec:a6:e6:51: 72:d9:97:7f:02:ae:30:76:a9:c7:c5:87:82:1b:08:71:b2:7d: 5d:a1:41:32:9d:97:74:2f:ff:6f:3c:f7:3f:05:cc:79:ae:32: c5:44:cc:28 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt5EJeTtlG8fJFxBeVAtP0sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYTE0MGU4MDI4ZTZkNTM3NjAwZTA4ODhhOWFmNWE5NzFj NWRiNDYwHhcNMjYwMTAxMTAxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTU2YmE4NjJmNzBiYmM1ZTM0OWQxMzA2MjY1YzkwMzFmMzkxNjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicioTxz8nBGM8gY0AggnFYQxAsyn 96LeTshx6qk6Nvdnl1refw4k22EWiu/3fjoKxDZD0TaTEXByIB2Pa7CC6dnrgSnI Q00K5ctZDeUXi+w0BiWLaWGmnd9/LguBMp/UyTbbSrP4o0sqP8C4fDatsJ79rcwI zOEmVe/c/tlu1eGZWRFNQcCybUIeoa99eoE2TLUVrbCViOu0OO0aUX4DBgv3zOn0 1aOtinv4du178LuuYpcFaTHW+bHiS9jXGHr4RtbNnZAZWXhe60aYgJu3a0ojiVoP VyE02KCrtSqqY+5wk8khDKw2pXY4e08t+Qc6qfgRi4h0FxTKorWMgnbS6QIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFMVWuoYvcLvF40nRMGJlyQMfORYVMB8GA1UdIwQY MBaAFJ2hQOgCjm1TdgDgiIqa9alxxdtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgt YTRjYThiOWMyMDViLzEveFZhNmhpOXd1OFhqU2RFd1ltWEpBeDg1RmhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgtYTRjYThiOWMyMDVi LzEvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAwIIfAwQA wIKdMAwDBALAwoQDBADAwqADBADC/OEwDQYJKoZIhvcNAQELBQADggEBAKtXFLJG smivMFIVo0/74TWtWJqL64L5IUY2RWObEeydIiOE47Pp2UvFp3Qy9bhuYfIi9/8L Iy2J27Ad3iHPCWIPQCjmkHGUC/vnAleVXyQHx609OJa+J48I+u8CPJTg+1nC83eH 3QVLofPBuYuv6Oo6bFQXN+eGjz33rTJ66O57tt8HxafR56sVOPqyj0j3g8nOFvvQ VeWyVC9GZeL4eSrU4y9OgMYnthh3dqVnua6h2k6vXnMYsgYwHWIaQhxYXSYTWz/0 cQQdZuOUhvlqcFEnfSwf7KbmUXLZl38CrjB2qcfFh4IbCHGyfV2hQTKdl3Qv/288 9z8FzHmuMsVEzCg= -----END CERTIFICATE-----Generated at Sun Jan 25 17:47:53 2026 by rpki-client