This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/X4rKfB3PDI3kjmwak5Qpg6vv3Qo.roa File: X4rKfB3PDI3kjmwak5Qpg6vv3Qo.roa (raw, json) Hash identifier: rE1Gy+5Y3N/6nRhiVvsTgzmZ/j4C83X5X1jx7h+hjs0= Subject key identifier: 5F:8A:CA:7C:1D:CF:0C:8D:E4:8E:6C:1A:93:94:29:83:AB:EF:DD:0A Certificate issuer: /CN=653f55629121b60fb19c97f99c75dd6f015dd6e8 Certificate serial: 019B797E0A58E0AABA72EF927A255F29B2BB Authority key identifier: 65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/X4rKfB3PDI3kjmwak5Qpg6vv3Qo.roa Signing time: Thu 01 Jan 2026 12:17:41 +0000 ROA not before: Thu 01 Jan 2026 12:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34282 IP address blocks: 193.117.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:0a:58:e0:aa:ba:72:ef:92:7a:25:5f:29:b2:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=653f55629121b60fb19c97f99c75dd6f015dd6e8 Validity Not Before: Jan 1 12:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f8aca7c1dcf0c8de48e6c1a93942983abefdd0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:72:ce:34:db:06:81:2e:0b:ba:c8:04:1d:62: 1e:5c:60:b7:41:73:fe:cb:c5:43:4e:40:cc:6b:e2: dc:4b:3c:2f:a0:58:e7:10:58:29:13:5d:97:03:b1: d7:f7:23:d0:7c:3d:fd:b7:45:46:f3:d3:86:aa:7f: f5:8d:8b:ce:19:1d:d1:3d:6d:c1:90:de:cc:ac:29: b8:0d:fd:39:ec:b9:54:a4:32:ce:38:e4:5d:e1:d7: c5:c3:11:10:46:3e:71:3d:ca:06:01:5d:83:46:9d: a7:7f:6f:c8:f0:c1:a9:00:3f:98:94:d2:02:40:0d: a5:27:cb:d7:5e:f6:26:a2:ac:db:4b:71:73:56:3d: 7d:f7:72:08:23:6d:4f:bb:3a:05:0d:f8:40:db:a5: 79:1b:7d:35:37:13:0a:06:ef:56:aa:36:14:b7:98: a0:f1:5f:f2:26:ed:52:b5:db:1d:e6:34:94:e4:35: 35:80:89:77:66:22:e5:7b:a5:b6:9e:27:9b:41:ba: f1:e6:fb:00:ca:cc:08:13:7d:35:63:af:06:37:68: a2:cb:71:4e:2e:5f:2b:3c:f1:b8:3c:6f:b3:6b:e1: 4a:fa:2b:09:e6:cc:86:25:bb:72:bb:ce:d0:5b:6a: 97:be:49:dd:81:31:1b:69:22:4d:a6:86:cc:13:d6: 8e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:8A:CA:7C:1D:CF:0C:8D:E4:8E:6C:1A:93:94:29:83:AB:EF:DD:0A X509v3 Authority Key Identifier: keyid:65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/X4rKfB3PDI3kjmwak5Qpg6vv3Qo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.117.57.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:ef:75:7a:1e:2f:0e:77:38:4c:eb:37:99:36:3e:73:99:aa: db:ab:48:d6:ed:c1:35:33:56:be:56:eb:b8:5f:2b:f5:35:d1: 05:2a:07:b3:1b:ea:2f:e5:80:33:1d:34:21:6c:68:3b:83:ae: 8f:a7:4a:8d:c4:59:d9:7b:c7:0b:f9:e5:9b:b3:16:89:f5:17: 4c:07:e3:64:e8:09:49:25:8d:69:a2:db:6c:b6:83:b4:b1:25: 4e:75:c1:f7:6d:6e:6c:93:67:d5:73:bd:0b:fd:82:6d:bd:8f: 27:0e:21:08:0c:5f:b7:54:85:f5:2d:79:84:07:83:67:a5:bd: b0:bf:72:fd:81:0d:60:04:17:54:fc:a0:35:32:7f:51:7d:26: a8:3f:ee:e9:f5:f6:48:42:ec:68:fe:76:ef:45:32:b2:a6:1f: c8:59:2a:fa:88:25:24:cc:b9:df:ac:eb:09:cd:d0:18:69:30: a3:b4:f7:8a:22:98:27:8e:6e:b9:fb:76:0d:4b:e8:ef:ab:6f: 9a:aa:f4:b3:98:06:45:58:65:0e:08:dd:24:49:ff:4b:a9:71: 11:73:13:0a:00:d9:57:6f:fb:9e:27:b7:1a:b3:3b:43:7a:47: 6e:9a:3f:47:28:9a:a5:f7:c4:75:66:01:98:17:81:14:43:0f: 5c:2f:46:86 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fgpY4Kq6cu+SeiVfKbK7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1M2Y1NTYyOTEyMWI2MGZiMTljOTdmOTljNzVkZDZmMDE1 ZGQ2ZTgwHhcNMjYwMTAxMTIxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjhhY2E3YzFkY2YwYzhkZTQ4ZTZjMWE5Mzk0Mjk4M2FiZWZkZDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXLONNsGgS4LusgEHWIeXGC3QXP+ y8VDTkDMa+LcSzwvoFjnEFgpE12XA7HX9yPQfD39t0VG89OGqn/1jYvOGR3RPW3B kN7MrCm4Df057LlUpDLOOORd4dfFwxEQRj5xPcoGAV2DRp2nf2/I8MGpAD+YlNIC QA2lJ8vXXvYmoqzbS3FzVj1993III21PuzoFDfhA26V5G301NxMKBu9WqjYUt5ig 8V/yJu1Stdsd5jSU5DU1gIl3ZiLle6W2niebQbrx5vsAyswIE301Y68GN2iiy3FO Ll8rPPG4PG+za+FK+isJ5syGJbtyu87QW2qXvkndgTEbaSJNpobME9aOCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF+KynwdzwyN5I5sGpOUKYOr790KMB8GA1UdIwQY MBaAFGU/VWKRIbYPsZyX+Zx13W8BXdboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlQ5VllwRWh0Zy14bkpmNW5IWGRid0ZkMXVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NGNmM2ItOWY1Yy00ZjVlLTk2YzQt MjkyNmQyODFiNTE0LzEvWDRyS2ZCM1BESTNram13YWs1UXBnNnZ2M1FvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NGNmM2ItOWY1Yy00ZjVlLTk2YzQtMjkyNmQyODFiNTE0 LzEvWlQ5VllwRWh0Zy14bkpmNW5IWGRid0ZkMXVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwXU5MA0G CSqGSIb3DQEBCwUAA4IBAQAO73V6Hi8OdzhM6zeZNj5zmarbq0jW7cE1M1a+Vuu4 Xyv1NdEFKgezG+ov5YAzHTQhbGg7g66Pp0qNxFnZe8cL+eWbsxaJ9RdMB+Nk6AlJ JY1pottstoO0sSVOdcH3bW5sk2fVc70L/YJtvY8nDiEIDF+3VIX1LXmEB4Nnpb2w v3L9gQ1gBBdU/KA1Mn9RfSaoP+7p9fZIQuxo/nbvRTKyph/IWSr6iCUkzLnfrOsJ zdAYaTCjtPeKIpgnjm65+3YNS+jvq2+aqvSzmAZFWGUOCN0kSf9LqXERcxMKANlX b/ueJ7casztDekdumj9HKJql98R1ZgGYF4EUQw9cL0aG -----END CERTIFICATE-----Generated at Sun Jan 25 22:29:45 2026 by rpki-client