This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/xTwRZ6Mz0DZziLxUVhlhyoH_Gr4.roa File: xTwRZ6Mz0DZziLxUVhlhyoH_Gr4.roa (raw, json) Hash identifier: 87G44kYU+NhJk4PPN1w3dfZMV/JFeh7+LhgClnnb7tg= Subject key identifier: C5:3C:11:67:A3:33:D0:36:73:88:BC:54:56:19:61:CA:81:FF:1A:BE Certificate issuer: /CN=52dc49fe93a3f62add4ce9891d9033ead83d988c Certificate serial: 019B78A30C131C6D74C3BB769CE2D941CCB4 Authority key identifier: 52:DC:49:FE:93:A3:F6:2A:DD:4C:E9:89:1D:90:33:EA:D8:3D:98:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/xTwRZ6Mz0DZziLxUVhlhyoH_Gr4.roa Signing time: Thu 01 Jan 2026 08:18:29 +0000 ROA not before: Thu 01 Jan 2026 08:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 559 IP address blocks: 147.88.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 17:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:0c:13:1c:6d:74:c3:bb:76:9c:e2:d9:41:cc:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52dc49fe93a3f62add4ce9891d9033ead83d988c Validity Not Before: Jan 1 08:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c53c1167a333d0367388bc54561961ca81ff1abe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d8:be:d1:ca:61:45:56:d1:30:81:31:f2:85: 0e:0c:70:ce:d8:e5:67:82:23:b9:0d:cc:c0:39:70: 8c:64:65:d5:b6:d4:7a:ff:b8:9a:a2:f8:1c:72:1d: 21:04:39:95:d1:1b:cd:02:42:47:6d:fc:30:bf:c4: e3:b4:39:25:bf:60:08:48:94:75:9c:85:13:21:ff: cb:5f:7d:0b:5c:d7:b9:ac:15:b9:67:51:ae:87:5c: 24:5a:be:78:32:99:40:06:55:48:21:6c:7c:2d:fd: b8:84:61:b5:5c:0f:8a:e8:63:34:ec:5a:17:3a:d2: cb:04:0a:07:46:a3:41:41:bf:72:67:1f:8f:d2:12: 68:df:53:99:7b:72:8c:95:4f:d4:41:42:3b:db:94: ef:ae:85:0d:4d:6c:b3:b3:0b:84:f9:f5:e6:57:1d: 81:89:a7:d4:08:6e:60:bd:d3:3a:4a:44:c9:bf:88: ba:b2:1c:e1:d4:1b:3f:84:ce:8f:ab:15:c1:76:f5: b0:39:3a:db:7e:f1:47:11:a2:ba:df:41:9c:f3:b4: 72:05:ae:a8:0b:1e:05:f7:a1:34:7c:28:a3:55:14: 8f:4a:ac:d5:ab:09:e6:b4:e9:2c:35:68:08:b0:09: c2:f2:b5:c4:f5:44:f9:36:1b:ed:fe:a8:4a:36:d7: e5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:3C:11:67:A3:33:D0:36:73:88:BC:54:56:19:61:CA:81:FF:1A:BE X509v3 Authority Key Identifier: keyid:52:DC:49:FE:93:A3:F6:2A:DD:4C:E9:89:1D:90:33:EA:D8:3D:98:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/xTwRZ6Mz0DZziLxUVhlhyoH_Gr4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.88.0.0/16 Signature Algorithm: sha256WithRSAEncryption 26:9e:ea:06:00:b8:57:b0:a0:5a:ab:0e:59:e2:08:35:27:46: dd:ea:53:c9:0b:36:d3:79:00:8d:d0:3a:d4:96:06:98:55:50: ec:fb:a9:98:75:ab:7b:88:8e:01:53:a2:20:ac:e0:16:81:e0: ca:45:0a:69:1d:1c:6a:0a:70:44:20:e6:4b:12:03:bd:ae:1d: f0:42:8c:24:68:42:5e:22:37:f1:4d:dc:c6:af:d4:2b:60:6b: 9e:84:c4:8f:4c:2e:70:a5:27:d6:d4:36:67:9f:5e:9d:e3:45: 17:05:37:b4:da:f4:62:7b:7d:0d:a0:ef:49:e2:9b:0b:20:0f: 24:8d:d7:33:23:c1:b2:46:ab:c2:ac:fd:3c:e2:d6:e4:0f:ff: c4:c5:41:1d:09:8f:42:60:23:02:bf:32:3c:06:45:4a:fc:20: 69:80:41:f4:85:d5:9f:02:a1:35:86:46:78:4e:3c:4a:81:c4: 23:66:8e:d4:9a:1c:a1:79:b5:61:92:0c:5c:08:54:fb:95:ff: 73:fa:39:03:b2:85:b9:27:75:bf:65:16:cc:08:9f:b6:23:48: 28:bf:7e:a8:3a:f2:12:b1:f5:34:70:84:23:5e:91:87:e6:19: 5c:b8:0d:18:ad:d7:fe:60:cf:0a:9f:02:3e:a4:d3:3f:81:71: 08:8c:27:55 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt4owwTHG10w7t2nOLZQcy0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZGM0OWZlOTNhM2Y2MmFkZDRjZTk4OTFkOTAzM2VhZDgz ZDk4OGMwHhcNMjYwMTAxMDgxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTNjMTE2N2EzMzNkMDM2NzM4OGJjNTQ1NjE5NjFjYTgxZmYxYWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19i+0cphRVbRMIEx8oUODHDO2OVn giO5DczAOXCMZGXVttR6/7iaovgcch0hBDmV0RvNAkJHbfwwv8TjtDklv2AISJR1 nIUTIf/LX30LXNe5rBW5Z1Guh1wkWr54MplABlVIIWx8Lf24hGG1XA+K6GM07FoX OtLLBAoHRqNBQb9yZx+P0hJo31OZe3KMlU/UQUI725TvroUNTWyzswuE+fXmVx2B iafUCG5gvdM6SkTJv4i6shzh1Bs/hM6PqxXBdvWwOTrbfvFHEaK630Gc87RyBa6o Cx4F96E0fCijVRSPSqzVqwnmtOksNWgIsAnC8rXE9UT5Nhvt/qhKNtflMwIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFMU8EWejM9A2c4i8VFYZYcqB/xq+MB8GA1UdIwQY MBaAFFLcSf6To/Yq3UzpiR2QM+rYPZiMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXR4Sl9wT2o5aXJkVE9tSkhaQXo2dGc5bUl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8zMmFlM2UtZDg0OC00NWYxLTljYzEt NmRlYzQ2OTk0YmE0LzEveFR3Ulo2TXowRFp6aUx4VVZobGh5b0hfR3I0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8zMmFlM2UtZDg0OC00NWYxLTljYzEtNmRlYzQ2OTk0YmE0 LzEvVXR4Sl9wT2o5aXJkVE9tSkhaQXo2dGc5bUl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAk1gwDQYJ KoZIhvcNAQELBQADggEBACae6gYAuFewoFqrDlniCDUnRt3qU8kLNtN5AI3QOtSW BphVUOz7qZh1q3uIjgFToiCs4BaB4MpFCmkdHGoKcEQg5ksSA72uHfBCjCRoQl4i N/FN3Mav1Ctga56ExI9MLnClJ9bUNmefXp3jRRcFN7Ta9GJ7fQ2g70nimwsgDySN 1zMjwbJGq8Ks/Tzi1uQP/8TFQR0Jj0JgIwK/MjwGRUr8IGmAQfSF1Z8CoTWGRnhO PEqBxCNmjtSaHKF5tWGSDFwIVPuV/3P6OQOyhbkndb9lFswIn7YjSCi/fqg68hKx 9TRwhCNekYfmGVy4DRit1/5gzwqfAj6k0z+BcQiMJ1U= -----END CERTIFICATE-----Generated at Mon Jan 26 03:07:19 2026 by rpki-client