This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/XJjk4iuq21KJi_eSHwzmqhjc_8c.roa File: XJjk4iuq21KJi_eSHwzmqhjc_8c.roa (raw, json) Hash identifier: jOGURgmK75hsefYMnVhRtGVJY5YkbyE0SgF+Nks8cp8= Subject key identifier: 5C:98:E4:E2:2B:AA:DB:52:89:8B:F7:92:1F:0C:E6:AA:18:DC:FF:C7 Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Certificate serial: 019B7910ED0369878B0A69D21C1BC5F02AF1 Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/XJjk4iuq21KJi_eSHwzmqhjc_8c.roa Signing time: Thu 01 Jan 2026 10:18:31 +0000 ROA not before: Thu 01 Jan 2026 10:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205847 IP address blocks: 193.41.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ed:03:69:87:8b:0a:69:d2:1c:1b:c5:f0:2a:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Validity Not Before: Jan 1 10:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c98e4e22baadb52898bf7921f0ce6aa18dcffc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:eb:5f:46:70:07:4b:fd:d4:a4:e7:06:23:36: fd:d7:cc:12:bc:22:7b:22:4d:8e:49:5c:56:a9:4e: e9:68:96:58:78:77:cb:ac:cc:0a:5e:67:ba:1c:77: 7b:90:a9:1a:7c:ec:84:d8:61:cf:c6:9a:52:18:e0: af:92:a8:60:d4:e7:d6:e1:10:2a:12:64:b2:dd:11: 0b:01:18:de:e5:b5:00:f9:a8:83:82:b1:8d:9b:ed: 9f:18:41:f5:a7:9a:2d:a2:70:8b:8a:af:db:d3:64: 81:d7:8b:96:d5:cf:3f:c5:7f:fd:cc:01:1f:44:fd: 2e:8b:85:72:6e:40:0c:f6:03:ce:29:ce:67:e6:62: f7:5b:51:45:e5:0b:a1:dc:89:8d:f0:a3:30:04:08: 33:5e:3b:72:63:37:41:d1:f6:f0:7d:8a:df:69:21: 99:14:ea:43:ea:15:55:b3:b4:0a:61:ad:0b:8c:8c: 6a:01:40:58:e2:c7:bd:f9:40:e2:ce:dc:b6:c2:5e: 0f:44:66:ad:47:4a:df:4a:7c:cf:1f:fb:48:77:df: f0:30:6f:51:00:21:5b:a8:c6:c5:66:34:ef:65:9c: 43:83:10:85:dc:ba:ea:75:ad:5d:a8:86:25:6e:d7: da:a4:35:41:38:58:b9:c8:b5:36:76:c7:59:be:e6: 33:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:98:E4:E2:2B:AA:DB:52:89:8B:F7:92:1F:0C:E6:AA:18:DC:FF:C7 X509v3 Authority Key Identifier: keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/XJjk4iuq21KJi_eSHwzmqhjc_8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.41.216.0/24 Signature Algorithm: sha256WithRSAEncryption 33:72:b2:14:b7:16:61:fd:ad:2b:55:3e:37:66:5b:d3:1e:98: 5c:c3:e6:19:1f:6f:c7:4b:15:a7:48:54:18:b5:dd:e3:26:59: e5:57:fd:e4:64:8f:a3:1e:1d:84:c8:cf:fd:89:c7:af:20:09: d6:3c:79:26:20:d4:84:9d:39:67:c8:94:27:0f:9b:da:f5:cc: 33:f7:49:ce:bb:2b:5b:ed:33:58:aa:a2:58:98:9a:db:9b:cb: 5c:4f:d9:89:3e:2c:03:54:4d:d0:11:f3:6b:80:d3:78:a7:c6: b0:72:fe:bc:3f:e6:51:a1:49:56:b7:51:6a:32:c1:e0:77:2e: a5:57:7b:f6:4f:c2:a6:34:3a:83:ee:b6:96:2c:b2:5a:9c:c9: 35:bb:1d:78:7c:4d:20:f0:66:89:c8:86:4a:e7:75:88:0f:a2: 4f:1c:f1:b0:d9:fa:e6:84:e3:ed:d7:d5:22:f9:5b:0d:47:6a: e2:6f:46:18:99:25:b3:e7:02:67:a7:1a:82:ce:28:ae:b6:a7: 38:d6:dd:9e:27:33:e0:5d:8f:c9:41:fb:f9:5d:28:b6:26:fa: 42:45:34:e4:6b:cc:3f:0d:d3:f3:f7:85:d1:d4:e9:9c:25:31: 29:3a:20:72:fe:46:d5:b4:44:95:06:a1:0d:1d:2c:4e:b9:db: 34:40:43:11 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EO0DaYeLCmnSHBvF8CrxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy NTFkYWQwHhcNMjYwMTAxMTAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Yzk4ZTRlMjJiYWFkYjUyODk4YmY3OTIxZjBjZTZhYTE4ZGNmZmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2etfRnAHS/3UpOcGIzb918wSvCJ7 Ik2OSVxWqU7paJZYeHfLrMwKXme6HHd7kKkafOyE2GHPxppSGOCvkqhg1OfW4RAq EmSy3RELARje5bUA+aiDgrGNm+2fGEH1p5otonCLiq/b02SB14uW1c8/xX/9zAEf RP0ui4VybkAM9gPOKc5n5mL3W1FF5Quh3ImN8KMwBAgzXjtyYzdB0fbwfYrfaSGZ FOpD6hVVs7QKYa0LjIxqAUBY4se9+UDizty2wl4PRGatR0rfSnzPH/tId9/wMG9R ACFbqMbFZjTvZZxDgxCF3Lrqda1dqIYlbtfapDVBOFi5yLU2dsdZvuYz2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFyY5OIrqttSiYv3kh8M5qoY3P/HMB8GA1UdIwQY MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt YjdjNTc4Yjc0ZTM1LzEvWEpqazRpdXEyMUtKaV9lU0h3em1xaGpjXzhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1 LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSnYMA0G CSqGSIb3DQEBCwUAA4IBAQAzcrIUtxZh/a0rVT43ZlvTHphcw+YZH2/HSxWnSFQY td3jJlnlV/3kZI+jHh2EyM/9icevIAnWPHkmINSEnTlnyJQnD5va9cwz90nOuytb 7TNYqqJYmJrbm8tcT9mJPiwDVE3QEfNrgNN4p8awcv68P+ZRoUlWt1FqMsHgdy6l V3v2T8KmNDqD7raWLLJanMk1ux14fE0g8GaJyIZK53WID6JPHPGw2frmhOPt19Ui +VsNR2rib0YYmSWz5wJnpxqCziiutqc41t2eJzPgXY/JQfv5XSi2JvpCRTTka8w/ DdPz94XR1OmcJTEpOiBy/kbVtESVBqENHSxOuds0QEMR -----END CERTIFICATE-----Generated at Sun Jan 25 10:31:38 2026 by rpki-client