This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/xHXYIM9aAisCY-mM5efUJdAUuEs.roa File: xHXYIM9aAisCY-mM5efUJdAUuEs.roa (raw, json) Hash identifier: u+GmdL8eno8aJmCmvMCfKfQZ1GhLAd0ROGdlLYM/mfI= Subject key identifier: C4:75:D8:20:CF:5A:02:2B:02:63:E9:8C:E5:E7:D4:25:D0:14:B8:4B Certificate issuer: /CN=1644e1ca9312ba79be559e11c8ea0910060dd48d Certificate serial: 019B7D5C2327EE7DA720B21C3B49AF278C48 Authority key identifier: 16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/xHXYIM9aAisCY-mM5efUJdAUuEs.roa Signing time: Fri 02 Jan 2026 06:19:08 +0000 ROA not before: Fri 02 Jan 2026 06:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203130 IP address blocks: 193.247.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:23:27:ee:7d:a7:20:b2:1c:3b:49:af:27:8c:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1644e1ca9312ba79be559e11c8ea0910060dd48d Validity Not Before: Jan 2 06:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c475d820cf5a022b0263e98ce5e7d425d014b84b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3b:a2:3b:76:02:28:17:57:b0:07:f5:29:7d: 6e:df:66:ba:2e:5a:54:7a:f9:2f:20:27:e7:13:70: d3:65:2a:54:9c:a0:b3:ec:14:dc:1c:3d:a3:ff:97: 65:2f:30:e0:39:fc:2a:12:75:17:d5:53:ee:25:37: 2b:b9:91:d7:24:e7:92:f3:6c:74:1d:94:e5:56:02: 2a:16:3c:be:13:3d:f1:74:b4:9e:42:d1:25:4f:b4: 33:eb:bb:05:1f:12:14:42:29:9b:19:0d:52:e5:8a: 36:06:fc:a3:a8:88:33:b8:2e:88:88:98:21:67:85: 53:89:6b:e2:fb:ee:ed:ba:02:2e:77:55:f0:3c:c3: 31:cb:a4:46:2b:c2:de:30:48:4f:c0:aa:35:58:63: 4f:58:2a:0c:66:4c:f9:68:37:ef:ee:00:95:b5:9d: f8:ed:57:ce:1b:51:56:cd:e7:e6:10:63:2c:f3:57: 1e:4e:0f:cd:f8:ee:b9:63:99:6a:02:91:bb:28:90: 35:04:a0:5f:3c:c7:ca:d5:f3:80:bf:dd:8b:b3:8e: b1:1a:9f:fb:0e:17:4d:26:c9:fc:13:d1:92:09:e9: 35:92:d2:66:b0:64:26:cd:07:f4:34:48:a2:7e:28: a1:92:18:77:4d:12:06:37:a4:16:cb:16:e5:00:d7: b3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:75:D8:20:CF:5A:02:2B:02:63:E9:8C:E5:E7:D4:25:D0:14:B8:4B X509v3 Authority Key Identifier: keyid:16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/xHXYIM9aAisCY-mM5efUJdAUuEs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.247.203.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:9b:8b:bd:f8:a2:0a:e8:58:90:95:c1:d6:b8:e3:09:49:2b: 70:59:88:68:f6:ec:b4:17:37:ac:68:bb:f1:e8:ab:da:87:61: fd:b7:a3:f2:ff:a5:b7:c7:f9:5a:3c:d0:28:9a:39:a5:c5:3f: 3e:71:b3:26:e9:40:c3:bf:a2:63:be:6d:e3:6f:c1:77:31:6c: f1:7b:37:47:a6:8e:2c:c0:63:76:92:f0:3c:37:6e:ea:2d:08: 8a:10:c4:cd:84:fc:3b:90:aa:28:c8:6a:66:8d:4f:3b:99:a8: f3:f2:bd:ab:b1:17:91:3b:2a:03:6c:5d:55:40:d9:b7:a6:cc: 12:3e:09:bd:22:59:ce:11:18:b0:08:37:e6:37:08:7f:87:7c: c8:55:e7:2f:f1:16:09:6a:ac:b3:88:cf:27:df:13:c6:c7:9d: 22:4f:8e:fb:77:84:f4:8f:7f:50:b8:24:ae:de:c6:46:e2:5e: 48:c4:40:0a:fe:5d:6c:be:55:2f:59:12:d9:cd:08:41:7e:82: 72:c6:5e:59:4b:b5:65:11:0c:2c:79:3b:30:07:e6:55:2b:33: 09:c0:86:e3:b5:d6:58:ce:9a:3b:90:91:cb:68:f7:bc:7e:1f: 51:f1:1e:dc:7a:41:f5:d2:a8:16:5b:c2:1b:4f:e1:08:a4:f3: ae:7c:ab:53 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XCMn7n2nILIcO0mvJ4xIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NDRlMWNhOTMxMmJhNzliZTU1OWUxMWM4ZWEwOTEwMDYw ZGQ0OGQwHhcNMjYwMTAyMDYxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDc1ZDgyMGNmNWEwMjJiMDI2M2U5OGNlNWU3ZDQyNWQwMTRiODRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzuiO3YCKBdXsAf1KX1u32a6LlpU evkvICfnE3DTZSpUnKCz7BTcHD2j/5dlLzDgOfwqEnUX1VPuJTcruZHXJOeS82x0 HZTlVgIqFjy+Ez3xdLSeQtElT7Qz67sFHxIUQimbGQ1S5Yo2BvyjqIgzuC6IiJgh Z4VTiWvi++7tugIud1XwPMMxy6RGK8LeMEhPwKo1WGNPWCoMZkz5aDfv7gCVtZ34 7VfOG1FWzefmEGMs81ceTg/N+O65Y5lqApG7KJA1BKBfPMfK1fOAv92Ls46xGp/7 DhdNJsn8E9GSCek1ktJmsGQmzQf0NEiifiihkhh3TRIGN6QWyxblANez+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMR12CDPWgIrAmPpjOXn1CXQFLhLMB8GA1UdIwQY MBaAFBZE4cqTErp5vlWeEcjqCRAGDdSNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmtUaHlwTVN1bm0tVlo0UnlPb0pFQVlOMUkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZDZkNzktZWViMS00OTJhLWI2MDIt NThlZWZjZDY1MmQ4LzEveEhYWUlNOWFBaXNDWS1tTTVlZlVKZEFVdUVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85ZDZkNzktZWViMS00OTJhLWI2MDItNThlZWZjZDY1MmQ4 LzEvRmtUaHlwTVN1bm0tVlo0UnlPb0pFQVlOMUkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwffLMA0G CSqGSIb3DQEBCwUAA4IBAQCNm4u9+KIK6FiQlcHWuOMJSStwWYho9uy0FzesaLvx 6Kvah2H9t6Py/6W3x/laPNAomjmlxT8+cbMm6UDDv6Jjvm3jb8F3MWzxezdHpo4s wGN2kvA8N27qLQiKEMTNhPw7kKooyGpmjU87majz8r2rsReROyoDbF1VQNm3pswS Pgm9IlnOERiwCDfmNwh/h3zIVecv8RYJaqyziM8n3xPGx50iT477d4T0j39QuCSu 3sZG4l5IxEAK/l1svlUvWRLZzQhBfoJyxl5ZS7VlEQwseTswB+ZVKzMJwIbjtdZY zpo7kJHLaPe8fh9R8R7cekH10qgWW8IbT+EIpPOufKtT -----END CERTIFICATE-----Generated at Mon Jan 26 03:05:59 2026 by rpki-client