This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/XzhQllg1Ngl309aRqikGgBtFojI.roa File: XzhQllg1Ngl309aRqikGgBtFojI.roa (raw, json) Hash identifier: aZqPKeTFPYPjagSFs0ZOP4Bb2ybWfYzLdU16fXavbpc= Subject key identifier: 5F:38:50:96:58:35:36:09:77:D3:D6:91:AA:29:06:80:1B:45:A2:32 Certificate issuer: /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184 Certificate serial: 019B7FF11CFD1F9900D4F6880D465369B192 Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/XzhQllg1Ngl309aRqikGgBtFojI.roa Signing time: Fri 02 Jan 2026 18:21:06 +0000 ROA not before: Fri 02 Jan 2026 18:21:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8311 IP address blocks: 193.178.31.0/24 maxlen: 24 193.178.33.0/24 maxlen: 24 193.178.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:1c:fd:1f:99:00:d4:f6:88:0d:46:53:69:b1:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184 Validity Not Before: Jan 2 18:21:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f3850965835360977d3d691aa2906801b45a232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:2a:80:e7:81:9c:01:a9:f2:48:9a:36:21:5e: 21:cb:77:ed:ee:5d:ea:ec:8a:93:a8:dd:9c:b0:dc: 5e:44:54:91:97:12:b7:c4:47:8d:2a:58:59:93:55: c8:e1:69:41:32:39:8c:ec:a6:d1:73:73:fa:c6:c8: c3:fc:cb:b2:ce:ec:3d:43:b3:dd:0f:39:80:86:d7: 7f:ea:f5:e3:85:63:08:73:fc:c9:8f:8a:67:c3:3e: ad:ee:9c:a8:d1:13:15:d4:a4:1b:73:f9:f1:b1:6b: 31:e4:d6:7a:19:d4:3e:fb:50:fb:f9:3a:4d:59:9b: c9:41:f9:57:f8:33:98:7f:cd:30:1c:02:bd:2e:1e: 7d:20:53:8e:cd:44:93:06:73:29:b4:51:38:8d:d5: 26:62:32:58:26:44:c1:1e:e4:a6:e6:3f:a8:0e:14: ce:bc:3e:36:b4:f5:e3:4b:f9:68:33:30:0f:94:22: 71:fb:b1:46:78:72:a6:e3:bc:00:dd:bb:3e:1e:3f: 4b:36:e6:a3:a6:08:ab:cf:31:d3:ba:b1:46:07:f5: b1:a1:be:66:85:0b:99:fb:00:fb:9c:4b:1e:6e:ac: a7:b5:b6:33:13:d8:1e:70:87:8c:da:31:00:bc:1b: 9f:a9:5e:35:11:a7:8f:a4:cd:8e:e0:41:e4:44:3e: 84:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:38:50:96:58:35:36:09:77:D3:D6:91:AA:29:06:80:1B:45:A2:32 X509v3 Authority Key Identifier: keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/XzhQllg1Ngl309aRqikGgBtFojI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.178.31.0/24 193.178.33.0/24 193.178.115.0/24 Signature Algorithm: sha256WithRSAEncryption 11:49:bf:72:f8:e8:2d:f1:75:f8:e1:ee:bd:db:73:48:f1:ef: 39:c1:01:68:04:5e:48:b8:0e:ed:4e:1e:fe:70:92:94:e6:ce: 49:e3:0a:40:ae:e1:cc:c9:f9:0c:64:bd:e4:04:a8:dd:8e:22: eb:be:1e:87:22:05:42:ee:86:2e:79:51:dd:b9:6d:92:3f:4d: 0a:8b:a2:63:a8:44:8a:84:30:c1:69:2f:95:cb:be:4f:9f:67: 35:92:42:ec:f2:66:b3:e9:a1:d4:4d:a4:e1:5b:ff:70:14:c4: b9:c7:c7:bd:79:e0:0e:1b:a5:98:0f:49:74:de:f0:cb:cf:d3: 0e:e1:8e:f1:de:ea:0c:2f:a8:d3:bb:19:7e:2d:a8:c2:a8:e7: 0b:5b:67:dc:79:cf:a5:b9:79:61:cf:cb:3c:72:f1:66:cf:4a: 58:0d:9d:42:83:08:a6:b1:a1:a6:8b:08:59:53:83:c7:45:20: ba:4c:b6:4a:c7:d1:3c:6f:68:4c:32:ba:9f:f0:be:24:5b:2c: bb:69:49:0a:fb:4b:2d:44:8a:fe:5e:c7:de:56:05:fb:57:e6: c8:8f:c5:29:be:de:76:52:27:b7:2b:f5:34:b6:75:f0:fe:a0: a3:0b:a4:30:4d:35:33:ba:aa:5c:1b:2e:33:26:10:13:4d:e0: 7f:76:83:11 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/8Rz9H5kA1PaIDUZTabGSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZjA2NWM4YmRiNzhmZjI5NGY3YzU0NTQ5NzFkYmZhYmZi NmMxODQwHhcNMjYwMTAyMTgyMTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjM4NTA5NjU4MzUzNjA5NzdkM2Q2OTFhYTI5MDY4MDFiNDVhMjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CqA54GcAanySJo2IV4hy3ft7l3q 7IqTqN2csNxeRFSRlxK3xEeNKlhZk1XI4WlBMjmM7KbRc3P6xsjD/Muyzuw9Q7Pd DzmAhtd/6vXjhWMIc/zJj4pnwz6t7pyo0RMV1KQbc/nxsWsx5NZ6GdQ++1D7+TpN WZvJQflX+DOYf80wHAK9Lh59IFOOzUSTBnMptFE4jdUmYjJYJkTBHuSm5j+oDhTO vD42tPXjS/loMzAPlCJx+7FGeHKm47wA3bs+Hj9LNuajpgirzzHTurFGB/Wxob5m hQuZ+wD7nEsebqyntbYzE9gecIeM2jEAvBufqV41EaePpM2O4EHkRD6EwwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFF84UJZYNTYJd9PWkaopBoAbRaIyMB8GA1UdIwQY MBaAFNXwZci9t4/ylPfFRUlx2/q/tsGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWZCbHlMMjNqX0tVOThWRlNYSGItci0yd1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9mMjc3ZWEtNzI2YS00MDUyLThlNWIt MzVhNWRjMmM3OTJjLzEvWHpoUWxsZzFOZ2wzMDlhUnFpa0dnQnRGb2pJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9mMjc3ZWEtNzI2YS00MDUyLThlNWItMzVhNWRjMmM3OTJj LzEvMWZCbHlMMjNqX0tVOThWRlNYSGItci0yd1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwbIfAwQA wbIhAwQAwbJzMA0GCSqGSIb3DQEBCwUAA4IBAQARSb9y+Ogt8XX44e6923NI8e85 wQFoBF5IuA7tTh7+cJKU5s5J4wpAruHMyfkMZL3kBKjdjiLrvh6HIgVC7oYueVHd uW2SP00Ki6JjqESKhDDBaS+Vy75Pn2c1kkLs8maz6aHUTaThW/9wFMS5x8e9eeAO G6WYD0l03vDLz9MO4Y7x3uoML6jTuxl+LajCqOcLW2fcec+luXlhz8s8cvFmz0pY DZ1CgwimsaGmiwhZU4PHRSC6TLZKx9E8b2hMMrqf8L4kWyy7aUkK+0stRIr+Xsfe VgX7V+bIj8Upvt52Uie3K/U0tnXw/qCjC6QwTTUzuqpcGy4zJhATTeB/doMR -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:40 2026 by rpki-client