This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/xNUHHeKL5gyglULSwBpb7Qy-WwI.roa File: xNUHHeKL5gyglULSwBpb7Qy-WwI.roa (raw, json) Hash identifier: +glq0PaufWCQhOFjvFVpKvbSAAw+d7Af8r+hPXAyxiA= Subject key identifier: C4:D5:07:1D:E2:8B:E6:0C:A0:95:42:D2:C0:1A:5B:ED:0C:BE:5B:02 Certificate issuer: /CN=0687a4aca581d8ebcdfe24b65f1e70a12f289a78 Certificate serial: 019B79104C813CA5C77499C821EF301D68B1 Authority key identifier: 06:87:A4:AC:A5:81:D8:EB:CD:FE:24:B6:5F:1E:70:A1:2F:28:9A:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/xNUHHeKL5gyglULSwBpb7Qy-WwI.roa Signing time: Thu 01 Jan 2026 10:17:49 +0000 ROA not before: Thu 01 Jan 2026 10:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16276 IP address blocks: 193.33.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:4c:81:3c:a5:c7:74:99:c8:21:ef:30:1d:68:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0687a4aca581d8ebcdfe24b65f1e70a12f289a78 Validity Not Before: Jan 1 10:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4d5071de28be60ca09542d2c01a5bed0cbe5b02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0a:90:e1:f1:a9:47:14:5a:a7:1d:68:cc:69: 3b:3e:c2:f6:86:4d:d0:9e:1a:4e:34:2c:e5:c9:95: 61:22:12:8a:89:0c:7f:43:ef:03:d6:11:51:14:7f: 0f:52:8b:ef:a2:31:87:c5:a4:59:21:7d:f7:fc:92: e5:4e:e8:46:d2:07:e7:f9:2d:9f:1a:61:75:5b:7e: 79:bf:fc:49:8e:d2:0b:67:8d:15:bd:fe:16:55:90: 88:ea:07:4b:73:93:ac:d7:e7:9b:83:39:b1:68:64: de:47:31:dc:b8:3f:b1:cb:e2:16:3f:dd:51:97:c3: e7:fa:7e:83:5d:eb:e9:23:b2:e2:82:8c:24:5c:60: b3:bc:32:21:68:d3:1c:15:11:93:3c:9c:54:fc:d8: 64:9a:59:7e:99:42:da:af:ba:12:85:84:30:97:98: 07:92:72:20:2b:6c:66:ab:97:ca:39:18:01:11:a6: d6:bb:8d:8d:ac:68:b0:53:c7:62:30:fb:6b:3a:a3: 9c:e1:50:ac:b9:32:cc:1e:78:c2:74:30:c8:63:cb: bf:65:15:95:91:72:e0:ec:5f:75:1b:45:39:fe:d1: 98:07:33:01:62:f5:f0:11:32:47:95:00:92:4a:29: e4:71:01:1f:dd:a9:c1:c1:c3:4d:47:82:4f:ff:5b: c5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D5:07:1D:E2:8B:E6:0C:A0:95:42:D2:C0:1A:5B:ED:0C:BE:5B:02 X509v3 Authority Key Identifier: keyid:06:87:A4:AC:A5:81:D8:EB:CD:FE:24:B6:5F:1E:70:A1:2F:28:9A:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/xNUHHeKL5gyglULSwBpb7Qy-WwI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.33.176.0/23 Signature Algorithm: sha256WithRSAEncryption 06:e9:e7:d4:59:83:62:b4:32:8c:50:fd:d7:57:82:80:8a:6b: c6:ac:e7:8b:63:0c:af:19:a5:b2:03:ea:ec:37:e4:40:c7:bf: 06:14:c4:d1:de:d2:4b:9c:82:6e:80:5a:c2:eb:8b:a2:ec:85: 92:08:43:c9:4b:53:b6:3c:bf:55:57:32:4d:65:5e:9b:80:f9: e3:68:90:f8:7e:a2:15:42:f5:33:e8:d4:3a:26:70:ba:b1:3f: aa:44:d9:3e:ea:ae:68:0b:ee:c2:3b:22:b4:bd:b9:cf:4e:9f: d7:a6:98:e9:cd:ee:50:c2:7f:d6:7c:db:6f:e6:b4:cf:ea:06: 36:1b:bb:91:34:a1:91:f1:0c:ef:d4:c0:21:20:e2:9d:8b:ea: 01:66:76:0a:a0:e8:5e:75:b8:ef:6c:91:e9:0c:3f:c8:4f:9f: 0c:8c:9d:57:ee:ef:fd:2f:11:44:f8:9d:4f:0f:23:cf:ae:6f: 27:da:db:03:c0:3a:e2:f7:1e:27:a8:cd:56:37:fe:1d:35:14: ce:fa:7a:4a:b1:20:bf:75:ce:72:85:68:ad:0a:ad:7e:f7:2f: 9d:72:df:b3:9c:8e:2f:ca:37:29:b6:bd:4f:dc:ef:a3:03:66: 26:ab:b3:1d:b8:a5:09:9b:1d:a7:0e:39:66:4c:81:5c:a1:30: 97:c3:9d:c8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EEyBPKXHdJnIIe8wHWixMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2ODdhNGFjYTU4MWQ4ZWJjZGZlMjRiNjVmMWU3MGExMmYy ODlhNzgwHhcNMjYwMTAxMTAxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNGQ1MDcxZGUyOGJlNjBjYTA5NTQyZDJjMDFhNWJlZDBjYmU1YjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQqQ4fGpRxRapx1ozGk7PsL2hk3Q nhpONCzlyZVhIhKKiQx/Q+8D1hFRFH8PUovvojGHxaRZIX33/JLlTuhG0gfn+S2f GmF1W355v/xJjtILZ40Vvf4WVZCI6gdLc5Os1+ebgzmxaGTeRzHcuD+xy+IWP91R l8Pn+n6DXevpI7LigowkXGCzvDIhaNMcFRGTPJxU/Nhkmll+mULar7oShYQwl5gH knIgK2xmq5fKORgBEabWu42NrGiwU8diMPtrOqOc4VCsuTLMHnjCdDDIY8u/ZRWV kXLg7F91G0U5/tGYBzMBYvXwETJHlQCSSinkcQEf3anBwcNNR4JP/1vF8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMTVBx3ii+YMoJVC0sAaW+0MvlsCMB8GA1UdIwQY MBaAFAaHpKylgdjrzf4ktl8ecKEvKJp4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm9la3JLV0IyT3ZOX2lTMlh4NXdvUzhvbW5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy85ZGYxMWItMDE4Ny00YTkxLWI1ZDEt MmQyOGExOTEzNWZkLzEveE5VSEhlS0w1Z3lnbFVMU3dCcGI3UXktV3dJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy85ZGYxMWItMDE4Ny00YTkxLWI1ZDEtMmQyOGExOTEzNWZk LzEvQm9la3JLV0IyT3ZOX2lTMlh4NXdvUzhvbW5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwSGwMA0G CSqGSIb3DQEBCwUAA4IBAQAG6efUWYNitDKMUP3XV4KAimvGrOeLYwyvGaWyA+rs N+RAx78GFMTR3tJLnIJugFrC64ui7IWSCEPJS1O2PL9VVzJNZV6bgPnjaJD4fqIV QvUz6NQ6JnC6sT+qRNk+6q5oC+7COyK0vbnPTp/Xppjpze5Qwn/WfNtv5rTP6gY2 G7uRNKGR8Qzv1MAhIOKdi+oBZnYKoOhedbjvbJHpDD/IT58MjJ1X7u/9LxFE+J1P DyPPrm8n2tsDwDri9x4nqM1WN/4dNRTO+npKsSC/dc5yhWitCq1+9y+dct+znI4v yjcptr1P3O+jA2Ymq7MduKUJmx2nDjlmTIFcoTCXw53I -----END CERTIFICATE-----Generated at Sun Jan 25 12:03:13 2026 by rpki-client