This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/xugqVD3W3cgNi6bJQTRCf8c4jaM.roa File: xugqVD3W3cgNi6bJQTRCf8c4jaM.roa (raw, json) Hash identifier: wxCmp110VhVyU9qsEI36Cl86J10WinNiwTIgQ72NoJY= Subject key identifier: C6:E8:2A:54:3D:D6:DD:C8:0D:8B:A6:C9:41:34:42:7F:C7:38:8D:A3 Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Certificate serial: 019B7E39066CE6250798312F3C32DC026D3D Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/xugqVD3W3cgNi6bJQTRCf8c4jaM.roa Signing time: Fri 02 Jan 2026 10:20:24 +0000 ROA not before: Fri 02 Jan 2026 10:20:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29581 IP address blocks: 82.179.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:06:6c:e6:25:07:98:31:2f:3c:32:dc:02:6d:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Validity Not Before: Jan 2 10:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6e82a543dd6ddc80d8ba6c94134427fc7388da3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:dc:ed:7a:3f:55:f3:36:85:fe:5e:79:20:de: b2:d6:fc:cb:9b:2c:c7:ad:d1:aa:9f:ed:ae:19:7c: d8:22:3f:90:2b:2a:c7:ab:3d:89:ab:59:d6:5b:ce: 34:28:2e:ac:b0:0b:82:80:99:73:2b:28:3c:8e:8f: a9:8a:4d:01:d2:8e:14:bf:31:20:01:e6:78:9c:44: 11:f7:8f:e0:85:b5:01:e4:03:2e:22:f8:db:1d:0b: ea:6b:23:6e:0e:92:4c:9e:0a:48:78:b4:b4:4c:20: d0:f1:c0:06:51:84:73:4e:90:d3:43:72:f6:39:32: b8:0a:7f:ed:33:0f:ea:e1:1b:ce:60:cc:8e:20:5f: d3:d1:12:ca:20:ee:f1:66:d0:2c:59:5b:bf:cf:74: d2:28:70:55:a5:0b:22:6e:15:45:8c:78:9f:71:70: 90:6c:4e:a2:5a:24:a0:00:be:c2:54:30:c2:1c:2d: 85:26:18:50:7b:d3:59:39:ed:df:54:c5:98:71:01: ae:67:95:58:49:1b:c5:f5:94:4a:e6:36:5e:35:a3: f8:dd:d8:1c:d4:e2:24:a7:e2:25:4f:6e:ac:27:4e: 58:1f:0b:6c:9f:f9:c5:83:77:02:0b:e1:5a:fd:9c: ae:a4:c5:eb:bc:51:b9:6d:9b:0b:34:6f:22:e6:c3: c0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E8:2A:54:3D:D6:DD:C8:0D:8B:A6:C9:41:34:42:7F:C7:38:8D:A3 X509v3 Authority Key Identifier: keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/xugqVD3W3cgNi6bJQTRCf8c4jaM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.179.16.0/20 Signature Algorithm: sha256WithRSAEncryption 59:c0:d0:81:5f:e5:d7:c7:e3:a6:c6:13:c6:c2:4f:d6:ba:78: fa:d8:d4:67:3b:9f:83:5f:81:69:c4:4b:62:ff:36:12:ab:b4: dd:52:b2:93:d1:29:39:99:64:d5:94:ba:24:fb:c7:16:17:f9: db:3f:89:a5:0c:77:0a:73:40:7d:2d:73:67:c0:ec:9b:a5:d4: 35:a9:e8:57:08:f6:c9:5d:cc:d0:ba:b0:2d:cc:eb:e1:28:88: 97:56:5b:c1:78:b9:cf:e5:88:78:46:b9:9b:81:8c:65:51:7e: 1a:0a:8b:3e:54:df:01:f4:ad:26:88:81:8b:aa:59:2a:f9:28: ec:f7:7c:55:ea:81:73:58:04:77:cf:99:40:fc:ed:d6:6a:79: 25:35:35:03:f6:91:65:72:f5:25:20:ee:8f:32:8e:2f:bb:de: 17:b7:aa:bc:33:cf:ca:ff:b7:ad:f1:17:e9:b6:9d:da:9f:42: f0:01:08:f3:44:25:07:e4:3d:f6:09:e1:5e:de:e1:0d:70:c0: 2c:b5:92:dd:cb:5a:86:1a:05:68:9a:d7:92:8c:05:81:7e:74: 50:b2:e1:a0:07:16:ed:00:13:98:72:68:d5:0e:c3:38:54:95: e0:82:b5:19:bc:11:32:40:9c:e0:b0:fe:73:59:8e:f3:2e:ad: e8:8b:38:30 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OQZs5iUHmDEvPDLcAm09MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl MmM2ODUwHhcNMjYwMTAyMTAyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmU4MmE1NDNkZDZkZGM4MGQ4YmE2Yzk0MTM0NDI3ZmM3Mzg4ZGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9ztej9V8zaF/l55IN6y1vzLmyzH rdGqn+2uGXzYIj+QKyrHqz2Jq1nWW840KC6ssAuCgJlzKyg8jo+pik0B0o4UvzEg AeZ4nEQR94/ghbUB5AMuIvjbHQvqayNuDpJMngpIeLS0TCDQ8cAGUYRzTpDTQ3L2 OTK4Cn/tMw/q4RvOYMyOIF/T0RLKIO7xZtAsWVu/z3TSKHBVpQsibhVFjHifcXCQ bE6iWiSgAL7CVDDCHC2FJhhQe9NZOe3fVMWYcQGuZ5VYSRvF9ZRK5jZeNaP43dgc 1OIkp+IlT26sJ05YHwtsn/nFg3cCC+Fa/ZyupMXrvFG5bZsLNG8i5sPA+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMboKlQ91t3IDYumyUE0Qn/HOI2jMB8GA1UdIwQY MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt NDBkOTViZDMzZmNiLzEveHVncVZEM1czY2dOaTZiSlFUUkNmOGM0amFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEUrMQMA0G CSqGSIb3DQEBCwUAA4IBAQBZwNCBX+XXx+OmxhPGwk/Wunj62NRnO5+DX4FpxEti /zYSq7TdUrKT0Sk5mWTVlLok+8cWF/nbP4mlDHcKc0B9LXNnwOybpdQ1qehXCPbJ XczQurAtzOvhKIiXVlvBeLnP5Yh4RrmbgYxlUX4aCos+VN8B9K0miIGLqlkq+Sjs 93xV6oFzWAR3z5lA/O3WanklNTUD9pFlcvUlIO6PMo4vu94Xt6q8M8/K/7et8Rfp tp3an0LwAQjzRCUH5D32CeFe3uENcMAstZLdy1qGGgVomteSjAWBfnRQsuGgBxbt ABOYcmjVDsM4VJXggrUZvBEyQJzgsP5zWY7zLq3oizgw -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:34 2026 by rpki-client