This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/xSjE3bBtLI3wIGUSIDiGA4kRZAc.roa File: xSjE3bBtLI3wIGUSIDiGA4kRZAc.roa (raw, json) Hash identifier: 6Zk3im3xm++UnI7UtsvKNEmT06CmLqVZWX5pAS6VO04= Subject key identifier: C5:28:C4:DD:B0:6D:2C:8D:F0:20:65:12:20:38:86:03:89:11:64:07 Certificate issuer: /CN=ef4e1ea65287a24e20c663b5161c1513f00c8a8d Certificate serial: 019B7B36476B5F344C358E91D2715F1ADC08 Authority key identifier: EF:4E:1E:A6:52:87:A2:4E:20:C6:63:B5:16:1C:15:13:F0:0C:8A:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/xSjE3bBtLI3wIGUSIDiGA4kRZAc.roa Signing time: Thu 01 Jan 2026 20:18:33 +0000 ROA not before: Thu 01 Jan 2026 20:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12703 IP address blocks: 193.33.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.crl rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:47:6b:5f:34:4c:35:8e:91:d2:71:5f:1a:dc:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef4e1ea65287a24e20c663b5161c1513f00c8a8d Validity Not Before: Jan 1 20:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c528c4ddb06d2c8df02065122038860389116407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:aa:e5:6d:2d:fe:2b:a3:64:b1:fa:73:6f:c9: 63:98:c5:38:65:70:9b:5a:77:9d:af:06:bf:fb:ad: 81:73:39:d8:1d:9c:f7:52:32:9f:d8:a7:c8:9c:48: 39:e8:ab:36:77:61:91:55:9d:6f:50:4c:ff:bc:c4: b7:70:30:2e:72:cd:be:0a:45:50:64:b4:54:21:b0: d6:da:99:6c:ce:ca:53:6c:76:7a:d3:4e:ff:fd:d4: dd:0e:d6:cf:94:fe:0c:c3:dd:97:24:e5:3c:7e:d5: eb:25:9f:dc:fc:de:f3:16:fb:16:4c:d1:04:6c:19: be:64:64:58:9f:0f:65:c5:0b:f4:1b:93:a4:b6:b2: 0c:73:c1:87:d0:9b:21:3c:16:d5:7d:0a:e3:d1:85: 4b:64:d0:4b:38:03:01:58:7b:4d:5b:9c:c4:af:90: b5:d6:e8:c6:ff:74:d4:97:1d:5d:76:e4:8a:d9:15: 83:2a:ad:9d:28:f9:ae:d2:a2:c9:08:03:aa:63:64: b3:18:0d:35:11:ea:0b:08:2e:f0:c8:bf:92:f9:f8: 2c:2e:d1:ec:2d:00:5b:a3:da:a5:d7:82:48:86:fa: d1:3c:2b:5e:a2:47:76:b5:87:fa:4e:43:f2:a4:b3: 7d:a4:bd:66:8c:7f:c7:b3:b5:c4:71:e5:0e:7b:1c: 62:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:28:C4:DD:B0:6D:2C:8D:F0:20:65:12:20:38:86:03:89:11:64:07 X509v3 Authority Key Identifier: keyid:EF:4E:1E:A6:52:87:A2:4E:20:C6:63:B5:16:1C:15:13:F0:0C:8A:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/xSjE3bBtLI3wIGUSIDiGA4kRZAc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.33.109.0/24 Signature Algorithm: sha256WithRSAEncryption 18:e0:85:4f:21:99:ea:e3:7d:1d:06:73:97:0d:53:d9:71:68: d5:0d:64:52:0f:62:95:ec:56:b7:08:34:a9:ac:88:4d:99:13: 36:e1:0c:e0:5e:6e:a8:65:9d:3b:c6:c5:91:e1:63:2f:5a:03: a5:d5:96:fd:3a:d5:71:f4:b9:7f:76:d2:80:9b:9e:11:1e:31: 5e:1e:4a:9e:94:6a:6f:92:93:00:77:08:1f:22:b3:d5:b5:58: 5e:6b:8a:31:4c:ae:e3:e8:f3:95:c1:3a:a0:f3:5e:82:19:d0: 30:5b:af:f0:05:1a:01:0d:e5:5c:3f:6a:51:ee:0f:77:64:bd: 3d:3d:83:69:90:1d:84:44:16:19:02:d1:30:26:23:ca:3b:cb: 47:ee:a2:5f:a9:54:f7:72:93:ed:3e:d9:6a:f7:52:b8:51:7c: 60:2a:bd:c0:85:a0:9c:04:47:b0:57:1c:3a:ac:f1:4b:d6:9c: 1c:9b:79:84:61:f9:6e:2d:15:f7:d3:2a:1a:62:cc:fc:0a:b7: 05:8d:d8:d7:03:45:85:52:29:f0:53:44:37:b9:6f:2e:4e:87: 56:ee:c4:9b:e4:ae:02:e3:d3:53:f6:1e:0d:8e:95:52:f7:16: c3:84:a6:9b:0d:85:be:7e:e6:6c:9a:45:66:96:94:0c:78:d8: e7:5c:52:f1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NkdrXzRMNY6R0nFfGtwIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNGUxZWE2NTI4N2EyNGUyMGM2NjNiNTE2MWMxNTEzZjAw YzhhOGQwHhcNMjYwMTAxMjAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTI4YzRkZGIwNmQyYzhkZjAyMDY1MTIyMDM4ODYwMzg5MTE2NDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKrlbS3+K6Nksfpzb8ljmMU4ZXCb Wnedrwa/+62BcznYHZz3UjKf2KfInEg56Ks2d2GRVZ1vUEz/vMS3cDAucs2+CkVQ ZLRUIbDW2plszspTbHZ6007//dTdDtbPlP4Mw92XJOU8ftXrJZ/c/N7zFvsWTNEE bBm+ZGRYnw9lxQv0G5OktrIMc8GH0JshPBbVfQrj0YVLZNBLOAMBWHtNW5zEr5C1 1ujG/3TUlx1dduSK2RWDKq2dKPmu0qLJCAOqY2SzGA01EeoLCC7wyL+S+fgsLtHs LQBbo9ql14JIhvrRPCteokd2tYf6TkPypLN9pL1mjH/Hs7XEceUOexxi5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMUoxN2wbSyN8CBlEiA4hgOJEWQHMB8GA1UdIwQY MBaAFO9OHqZSh6JOIMZjtRYcFRPwDIqNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzA0ZXBsS0hvazRneG1PMUZod1ZFX0FNaW8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9hNTJjZWItYzhjOC00MjM2LWEwMzct NjBhNTc0M2U2ZTFmLzEveFNqRTNiQnRMSTN3SUdVU0lEaUdBNGtSWkFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9hNTJjZWItYzhjOC00MjM2LWEwMzctNjBhNTc0M2U2ZTFm LzEvNzA0ZXBsS0hvazRneG1PMUZod1ZFX0FNaW8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSFtMA0G CSqGSIb3DQEBCwUAA4IBAQAY4IVPIZnq430dBnOXDVPZcWjVDWRSD2KV7Fa3CDSp rIhNmRM24QzgXm6oZZ07xsWR4WMvWgOl1Zb9OtVx9Ll/dtKAm54RHjFeHkqelGpv kpMAdwgfIrPVtVhea4oxTK7j6POVwTqg816CGdAwW6/wBRoBDeVcP2pR7g93ZL09 PYNpkB2ERBYZAtEwJiPKO8tH7qJfqVT3cpPtPtlq91K4UXxgKr3AhaCcBEewVxw6 rPFL1pwcm3mEYfluLRX30yoaYsz8CrcFjdjXA0WFUinwU0Q3uW8uTodW7sSb5K4C 49NT9h4NjpVS9xbDhKabDYW+fuZsmkVmlpQMeNjnXFLx -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:56 2026 by rpki-client