This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/XnCwnk0GHRkGx1dxLC_5UDs80Vc.roa File: XnCwnk0GHRkGx1dxLC_5UDs80Vc.roa (raw, json) Hash identifier: Mx3TqRsxdg/ULVXrSCdhkueK7UuWZRRScCkbr7xL+9I= Subject key identifier: 5E:70:B0:9E:4D:06:1D:19:06:C7:57:71:2C:2F:F9:50:3B:3C:D1:57 Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Certificate serial: 019B7BA52C8C71CD45C97D6257E0D2516358 Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/XnCwnk0GHRkGx1dxLC_5UDs80Vc.roa Signing time: Thu 01 Jan 2026 22:19:40 +0000 ROA not before: Thu 01 Jan 2026 22:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24693 IP address blocks: 213.16.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:2c:8c:71:cd:45:c9:7d:62:57:e0:d2:51:63:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Validity Not Before: Jan 1 22:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e70b09e4d061d1906c757712c2ff9503b3cd157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c4:12:5e:03:ba:01:de:38:20:b8:f4:32:18: f5:51:e4:20:c3:0b:da:ba:99:4a:9a:5f:d2:36:67: 83:c1:a6:4b:44:0d:e3:6f:d6:c1:cc:38:16:38:d0: 42:a0:f6:c7:3f:d1:bf:b0:af:4e:13:83:52:86:56: ca:00:0a:ec:de:e5:e9:b2:0d:88:d1:90:b3:0d:7a: 0e:09:ee:d5:0b:5f:fb:1e:af:d8:e0:28:a3:52:fd: 8e:f9:6b:40:63:f7:2e:9f:85:20:3e:66:41:8f:90: 80:06:7c:b3:b5:2b:2a:01:25:10:62:4e:db:67:96: d9:fb:81:dd:81:c4:bd:55:32:30:48:4e:87:92:b6: b6:e5:06:63:ba:ed:28:09:ec:ad:89:0d:d2:41:63: 5f:88:f1:6b:78:5b:28:7f:a8:3d:7a:86:56:b2:36: 32:93:70:cd:3c:2e:f1:87:b0:a9:02:3e:fb:7d:72: 59:2f:02:c3:53:87:b2:83:83:c3:bc:17:99:ac:e6: d5:06:db:e7:0e:41:3d:ed:50:cb:26:50:46:5b:98: 4a:5f:b0:ca:ef:4f:8a:61:36:f6:6a:20:da:ff:59: 74:2f:be:2e:0e:37:95:2b:ce:ff:12:2c:ba:b8:94: 71:6d:21:56:43:bd:86:b0:31:7f:48:91:96:e4:5d: 83:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:70:B0:9E:4D:06:1D:19:06:C7:57:71:2C:2F:F9:50:3B:3C:D1:57 X509v3 Authority Key Identifier: keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/XnCwnk0GHRkGx1dxLC_5UDs80Vc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.16.36.0/24 Signature Algorithm: sha256WithRSAEncryption 00:c0:77:1b:4c:78:a8:c6:b2:cf:ae:55:71:d3:bc:b2:bc:e8: 54:11:20:25:47:1a:d4:1e:1f:ec:4e:22:ca:56:91:a9:5d:cf: 7e:82:3b:43:25:7f:a2:a0:9d:43:19:57:f4:bb:2e:f9:64:10: 2c:0a:58:d3:2e:ce:d7:87:75:e3:4b:e2:64:cf:89:34:95:79: 42:f3:54:24:a3:2d:ad:f0:78:30:32:6f:83:90:35:38:01:89: 79:31:b4:6f:e7:ce:6b:b0:6d:57:de:43:36:f0:2a:f6:98:d8: 2c:6d:cb:a3:2c:a0:e4:65:06:3d:73:b2:28:00:ff:96:fa:80: 6c:32:16:c9:f2:7d:e0:d6:0f:93:35:a6:aa:ae:c9:49:f1:7d: fc:27:c0:ef:23:b5:79:b2:5d:0f:1f:8f:8e:ee:02:46:9c:67: 76:50:f1:fd:a8:a5:74:9d:73:2f:92:ff:8d:d0:b8:42:51:bd: 38:71:a9:73:a4:c9:b1:f7:10:59:4d:97:a8:e7:c1:47:de:3a: bf:d0:d8:c9:9f:41:48:1a:76:c6:ea:bf:a0:2e:c8:ac:0c:10: 2b:6c:8e:21:1f:b6:d9:4b:b0:4c:11:76:60:ea:cb:b8:e0:61: 37:c7:bc:14:df:ae:f1:c8:88:47:70:81:00:65:b7:2d:14:d8: 51:6c:e6:c7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pSyMcc1FyX1iV+DSUWNYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4 ZmI0YzQwHhcNMjYwMTAxMjIxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTcwYjA5ZTRkMDYxZDE5MDZjNzU3NzEyYzJmZjk1MDNiM2NkMTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcQSXgO6Ad44ILj0Mhj1UeQgwwva uplKml/SNmeDwaZLRA3jb9bBzDgWONBCoPbHP9G/sK9OE4NShlbKAArs3uXpsg2I 0ZCzDXoOCe7VC1/7Hq/Y4CijUv2O+WtAY/cun4UgPmZBj5CABnyztSsqASUQYk7b Z5bZ+4HdgcS9VTIwSE6Hkra25QZjuu0oCeytiQ3SQWNfiPFreFsof6g9eoZWsjYy k3DNPC7xh7CpAj77fXJZLwLDU4eyg4PDvBeZrObVBtvnDkE97VDLJlBGW5hKX7DK 70+KYTb2aiDa/1l0L74uDjeVK87/Eiy6uJRxbSFWQ72GsDF/SJGW5F2D5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF5wsJ5NBh0ZBsdXcSwv+VA7PNFXMB8GA1UdIwQY MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct ODcyYmEyZDlmNDRjLzEvWG5Dd25rMEdIUmtHeDFkeExDXzVVRHM4MFZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1RAkMA0G CSqGSIb3DQEBCwUAA4IBAQAAwHcbTHioxrLPrlVx07yyvOhUESAlRxrUHh/sTiLK VpGpXc9+gjtDJX+ioJ1DGVf0uy75ZBAsCljTLs7Xh3XjS+Jkz4k0lXlC81Qkoy2t 8HgwMm+DkDU4AYl5MbRv585rsG1X3kM28Cr2mNgsbcujLKDkZQY9c7IoAP+W+oBs MhbJ8n3g1g+TNaaqrslJ8X38J8DvI7V5sl0PH4+O7gJGnGd2UPH9qKV0nXMvkv+N 0LhCUb04calzpMmx9xBZTZeo58FH3jq/0NjJn0FIGnbG6r+gLsisDBArbI4hH7bZ S7BMEXZg6su44GE3x7wU367xyIhHcIEAZbctFNhRbObH -----END CERTIFICATE-----Generated at Sun Jan 25 19:38:53 2026 by rpki-client