This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/xeKu-YZxEc8ydQI0uzpgttKRF9s.roa File: xeKu-YZxEc8ydQI0uzpgttKRF9s.roa (raw, json) Hash identifier: OIvXQcQeayjejLI4847MVkofRUX3vV1PuAUvz7Z84Jc= Subject key identifier: C5:E2:AE:F9:86:71:11:CF:32:75:02:34:BB:3A:60:B6:D2:91:17:DB Certificate issuer: /CN=b27261d715348bfd73ce9dbb72488656993ba2f1 Certificate serial: 019B7B3554B59BE9538FA4AAB14FBDC1226B Authority key identifier: B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/xeKu-YZxEc8ydQI0uzpgttKRF9s.roa Signing time: Thu 01 Jan 2026 20:17:31 +0000 ROA not before: Thu 01 Jan 2026 20:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214794 IP address blocks: 193.26.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:54:b5:9b:e9:53:8f:a4:aa:b1:4f:bd:c1:22:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b27261d715348bfd73ce9dbb72488656993ba2f1 Validity Not Before: Jan 1 20:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5e2aef9867111cf32750234bb3a60b6d29117db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:f0:47:c7:0a:2f:ba:d5:81:80:95:02:c8:c0: 91:f6:8d:7f:93:81:e3:cf:54:64:cc:a6:87:83:ce: a6:82:af:fb:76:c8:c6:14:bc:02:c7:51:33:44:f8: a4:37:a1:86:7c:81:89:1e:ed:65:ed:db:11:fb:d7: ab:6e:a4:12:a9:97:b7:ab:e8:8b:5f:a4:b0:bc:d4: 02:7c:73:82:0a:fb:58:15:96:0d:f4:c1:0e:c5:a1: ef:56:a4:d5:b1:6b:8f:e9:bc:b5:70:d8:fc:59:2e: 3e:ff:83:86:9e:18:1b:16:56:58:18:34:94:b1:84: ce:51:98:ed:e9:f6:ea:7b:ba:64:05:9a:81:82:ba: a7:47:70:9e:97:51:0b:cf:61:fe:49:55:63:97:9c: 66:62:06:d2:15:27:a8:3e:17:11:19:cd:00:b3:32: c6:43:91:59:77:45:f2:e1:9d:be:37:15:d7:5c:41: 3d:6b:b6:b6:66:d1:fd:99:58:dc:06:b8:fb:64:a7: 67:ba:b0:f5:45:c1:2f:88:6f:eb:9e:da:f4:5a:4b: 08:8b:17:14:02:65:51:d4:97:62:8c:58:44:29:e7: a7:5a:f9:09:72:9b:57:9e:96:d9:a3:19:2c:21:18: 6d:0a:4c:03:0a:45:34:2a:ff:28:74:9a:0b:09:b2: dd:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E2:AE:F9:86:71:11:CF:32:75:02:34:BB:3A:60:B6:D2:91:17:DB X509v3 Authority Key Identifier: keyid:B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/xeKu-YZxEc8ydQI0uzpgttKRF9s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.26.127.0/24 Signature Algorithm: sha256WithRSAEncryption 64:90:1f:3c:75:98:ff:34:4c:20:52:6a:3d:cd:28:f3:3f:9d: 3f:09:e0:24:39:8f:24:5d:ea:27:12:ac:dc:c5:22:86:da:ef: e4:71:3e:ba:b2:91:0f:b4:e5:17:20:44:ae:ca:a2:c3:1f:b7: 5f:66:45:0a:27:80:5d:3c:fd:7b:be:27:68:cb:42:61:a5:34: 2a:e0:ee:ce:e8:c5:4a:56:fc:57:9c:6c:ae:b3:af:62:8a:22: 9f:b4:9d:2e:5d:da:8e:a4:70:d7:a3:57:a9:96:6e:54:8b:45: 54:2c:29:48:57:55:9d:a4:45:6b:fa:7a:00:a5:b0:47:89:91: 22:e5:32:3a:f4:08:85:1f:4e:65:ac:17:58:f4:04:81:f8:fb: 28:55:76:07:74:ca:51:67:e2:bf:6a:1b:f0:49:79:28:97:31: 03:41:fb:28:f5:22:ae:7b:56:13:0c:52:ce:5a:23:2f:70:8f: e2:7b:ca:82:73:94:fe:5a:9d:24:d9:f7:6e:86:a0:64:23:eb: ab:13:4a:70:86:40:f6:86:f6:4a:9c:e6:de:c5:15:8d:73:ca: 19:09:ab:08:a0:00:ef:58:5b:5f:c0:f0:10:b4:9b:af:c9:da: 63:bc:03:d3:d8:7e:48:2a:f6:79:da:f7:e1:3e:05:55:c0:42: 63:08:ac:77 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NVS1m+lTj6SqsU+9wSJrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNzI2MWQ3MTUzNDhiZmQ3M2NlOWRiYjcyNDg4NjU2OTkz YmEyZjEwHhcNMjYwMTAxMjAxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNWUyYWVmOTg2NzExMWNmMzI3NTAyMzRiYjNhNjBiNmQyOTExN2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6vBHxwovutWBgJUCyMCR9o1/k4Hj z1RkzKaHg86mgq/7dsjGFLwCx1EzRPikN6GGfIGJHu1l7dsR+9erbqQSqZe3q+iL X6SwvNQCfHOCCvtYFZYN9MEOxaHvVqTVsWuP6by1cNj8WS4+/4OGnhgbFlZYGDSU sYTOUZjt6fbqe7pkBZqBgrqnR3Cel1ELz2H+SVVjl5xmYgbSFSeoPhcRGc0AszLG Q5FZd0Xy4Z2+NxXXXEE9a7a2ZtH9mVjcBrj7ZKdnurD1RcEviG/rntr0WksIixcU AmVR1JdijFhEKeenWvkJcptXnpbZoxksIRhtCkwDCkU0Kv8odJoLCbLdyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMXirvmGcRHPMnUCNLs6YLbSkRfbMB8GA1UdIwQY MBaAFLJyYdcVNIv9c86du3JIhlaZO6LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2Yt NTA0ZjI3NjY3NjBmLzEveGVLdS1ZWnhFYzh5ZFFJMHV6cGd0dEtSRjlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2YtNTA0ZjI3NjY3NjBm LzEvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRp/MA0G CSqGSIb3DQEBCwUAA4IBAQBkkB88dZj/NEwgUmo9zSjzP50/CeAkOY8kXeonEqzc xSKG2u/kcT66spEPtOUXIESuyqLDH7dfZkUKJ4BdPP17vidoy0JhpTQq4O7O6MVK VvxXnGyus69iiiKftJ0uXdqOpHDXo1eplm5Ui0VULClIV1WdpEVr+noApbBHiZEi 5TI69AiFH05lrBdY9ASB+PsoVXYHdMpRZ+K/ahvwSXkolzEDQfso9SKue1YTDFLO WiMvcI/ie8qCc5T+Wp0k2fduhqBkI+urE0pwhkD2hvZKnObexRWNc8oZCasIoADv WFtfwPAQtJuvydpjvAPT2H5IKvZ52vfhPgVVwEJjCKx3 -----END CERTIFICATE-----Generated at Sun Jan 25 10:21:10 2026 by rpki-client