This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/xhpLteHeEuI9N2i0WjCkJHYwXtM.roa File: xhpLteHeEuI9N2i0WjCkJHYwXtM.roa (raw, json) Hash identifier: ZhHw/D8clg9QeWX4KlvzTONGmYlvYOv2tFZIA342W2c= Subject key identifier: C6:1A:4B:B5:E1:DE:12:E2:3D:37:68:B4:5A:30:A4:24:76:30:5E:D3 Certificate issuer: /CN=d85022282e34699fe548b7528519a25a50d9133a Certificate serial: 019B7BA34D9BB25B979929355FC49248F481 Authority key identifier: D8:50:22:28:2E:34:69:9F:E5:48:B7:52:85:19:A2:5A:50:D9:13:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2FAiKC40aZ_lSLdShRmiWlDZEzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/xhpLteHeEuI9N2i0WjCkJHYwXtM.roa Signing time: Thu 01 Jan 2026 22:17:38 +0000 ROA not before: Thu 01 Jan 2026 22:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48943 IP address blocks: 193.25.98.0/23 maxlen: 23 193.27.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/2FAiKC40aZ_lSLdShRmiWlDZEzo.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/2FAiKC40aZ_lSLdShRmiWlDZEzo.mft rsync://rpki.ripe.net/repository/DEFAULT/2FAiKC40aZ_lSLdShRmiWlDZEzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:4d:9b:b2:5b:97:99:29:35:5f:c4:92:48:f4:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d85022282e34699fe548b7528519a25a50d9133a Validity Not Before: Jan 1 22:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c61a4bb5e1de12e23d3768b45a30a42476305ed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8e:90:53:b1:81:4b:22:52:88:d9:de:c9:a0: cb:45:18:86:14:4c:e0:7c:1c:68:70:1f:64:9d:1d: 60:60:c8:90:bb:92:9f:2a:03:8c:a3:22:07:0a:ba: 52:eb:51:43:3f:3a:cb:86:b3:34:6e:18:52:e1:ad: de:17:90:24:5c:64:3b:a7:ee:fd:f6:69:e0:3c:c2: e5:b8:35:91:28:ed:1c:25:74:c2:eb:ef:4b:a3:eb: 51:7a:96:d1:f6:b4:7b:6b:ae:80:ae:4c:b2:6e:5f: b7:1c:ab:67:a9:28:bb:2c:4a:d5:10:fc:57:f9:53: 3a:6f:10:30:37:3a:71:bd:52:f0:89:df:97:63:9f: 4e:59:3e:12:bf:1d:db:ed:34:2e:d5:bd:d3:81:9b: 23:1f:77:31:64:88:2e:15:2e:32:d6:a7:55:b5:15: 91:e9:64:50:52:2f:c3:05:68:ed:2d:87:a3:99:b8: da:0f:10:d4:81:b6:4c:15:53:4b:4a:d5:20:5e:61: 0f:0c:1e:69:e4:fe:08:07:7b:9e:d4:d0:6a:aa:98: 83:6f:34:55:f7:06:20:93:42:93:f0:20:e6:95:76: 0a:1e:31:5a:e1:12:ab:c0:a7:96:6e:43:c6:b4:e0: 13:18:52:b1:93:ad:4b:4d:d0:68:01:e8:ff:27:96: 21:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:1A:4B:B5:E1:DE:12:E2:3D:37:68:B4:5A:30:A4:24:76:30:5E:D3 X509v3 Authority Key Identifier: keyid:D8:50:22:28:2E:34:69:9F:E5:48:B7:52:85:19:A2:5A:50:D9:13:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2FAiKC40aZ_lSLdShRmiWlDZEzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/xhpLteHeEuI9N2i0WjCkJHYwXtM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/2FAiKC40aZ_lSLdShRmiWlDZEzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.25.98.0/23 193.27.40.0/24 Signature Algorithm: sha256WithRSAEncryption 88:2a:6a:af:59:ca:d0:13:7e:f5:c7:59:45:a3:fd:85:4d:3b: 40:30:57:2a:17:0a:bf:e7:f8:60:dd:59:1e:ca:6d:ef:6d:f4: 7d:54:cb:16:9a:c8:8e:e0:80:bd:27:58:0a:05:f0:f5:b8:7c: 0d:7c:ca:7c:db:4d:97:a7:9f:5f:ad:56:b7:83:ac:f7:67:d9: d6:96:f3:b2:2f:80:a7:2a:b6:90:82:9d:69:cf:9c:cf:bd:5d: 90:57:29:c3:3a:80:5a:d5:9c:ec:09:0e:fb:2a:3f:2f:a5:3c: 5a:b0:16:6c:32:80:af:f8:65:a8:14:be:64:4e:42:f6:28:c9: 24:47:30:80:41:8b:f0:be:41:5d:74:92:81:ca:14:b3:24:30: 98:65:27:7c:03:e8:5a:da:41:36:58:8e:4f:68:8e:e1:98:6a: 35:36:7b:63:f2:e3:bf:ed:db:15:85:17:dc:7f:d1:bb:2e:de: 6d:68:36:ce:ff:59:07:f9:33:ed:95:8b:3b:56:3f:93:86:3e: 14:fb:52:6d:b2:bb:f0:e8:f6:0a:98:82:e6:5d:2f:fd:b0:de: 5c:f7:4c:9b:7f:72:d9:d0:49:2b:ef:5b:55:07:9e:0b:d1:48: 45:c9:e7:c1:2e:86:7f:5b:6f:c7:a5:60:a4:ba:72:f9:fd:84: f9:8a:f4:6d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7o02bsluXmSk1X8SSSPSBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4NTAyMjI4MmUzNDY5OWZlNTQ4Yjc1Mjg1MTlhMjVhNTBk OTEzM2EwHhcNMjYwMTAxMjIxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjFhNGJiNWUxZGUxMmUyM2QzNzY4YjQ1YTMwYTQyNDc2MzA1ZWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlY6QU7GBSyJSiNneyaDLRRiGFEzg fBxocB9knR1gYMiQu5KfKgOMoyIHCrpS61FDPzrLhrM0bhhS4a3eF5AkXGQ7p+79 9mngPMLluDWRKO0cJXTC6+9Lo+tRepbR9rR7a66Arkyybl+3HKtnqSi7LErVEPxX +VM6bxAwNzpxvVLwid+XY59OWT4Svx3b7TQu1b3TgZsjH3cxZIguFS4y1qdVtRWR 6WRQUi/DBWjtLYejmbjaDxDUgbZMFVNLStUgXmEPDB5p5P4IB3ue1NBqqpiDbzRV 9wYgk0KT8CDmlXYKHjFa4RKrwKeWbkPGtOATGFKxk61LTdBoAej/J5YhbwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMYaS7Xh3hLiPTdotFowpCR2MF7TMB8GA1UdIwQY MBaAFNhQIiguNGmf5Ui3UoUZolpQ2RM6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkZBaUtDNDBhWl9sU0xkU2hSbWlXbERaRXpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy85NzU4ZWItNDEwOC00MDg3LWE4MTgt NTBlYTY3MzI3Y2QxLzEveGhwTHRlSGVFdUk5TjJpMFdqQ2tKSFl3WHRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy85NzU4ZWItNDEwOC00MDg3LWE4MTgtNTBlYTY3MzI3Y2Qx LzEvMkZBaUtDNDBhWl9sU0xkU2hSbWlXbERaRXpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwRliAwQA wRsoMA0GCSqGSIb3DQEBCwUAA4IBAQCIKmqvWcrQE371x1lFo/2FTTtAMFcqFwq/ 5/hg3Vkeym3vbfR9VMsWmsiO4IC9J1gKBfD1uHwNfMp8202Xp59frVa3g6z3Z9nW lvOyL4CnKraQgp1pz5zPvV2QVynDOoBa1ZzsCQ77Kj8vpTxasBZsMoCv+GWoFL5k TkL2KMkkRzCAQYvwvkFddJKByhSzJDCYZSd8A+ha2kE2WI5PaI7hmGo1Nntj8uO/ 7dsVhRfcf9G7Lt5taDbO/1kH+TPtlYs7Vj+Thj4U+1Jtsrvw6PYKmILmXS/9sN5c 90ybf3LZ0Ekr71tVB54L0UhFyefBLoZ/W2/HpWCkunL5/YT5ivRt -----END CERTIFICATE-----Generated at Mon Jan 26 02:07:15 2026 by rpki-client