This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/XVIaKNteZSID-e1PzDPbYatUIBw.roa File: XVIaKNteZSID-e1PzDPbYatUIBw.roa (raw, json) Hash identifier: hjDKHF3OYxsYJS8bfNV4SaO3e4HM/h4k2Yqo6Mi0dlc= Subject key identifier: 5D:52:1A:28:DB:5E:65:22:03:F9:ED:4F:CC:33:DB:61:AB:54:20:1C Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c Certificate serial: 019B7B3550288AF6CC32DC749E346EE3E14A Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/XVIaKNteZSID-e1PzDPbYatUIBw.roa Signing time: Thu 01 Jan 2026 20:17:30 +0000 ROA not before: Thu 01 Jan 2026 20:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6893 IP address blocks: 185.49.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:50:28:8a:f6:cc:32:dc:74:9e:34:6e:e3:e1:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c Validity Not Before: Jan 1 20:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d521a28db5e652203f9ed4fcc33db61ab54201c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:4c:49:67:9e:91:26:df:a2:42:7d:27:60:b3: d7:71:8f:8a:f6:75:92:f6:24:cc:09:4c:7a:55:f7: b1:f6:92:d4:dd:54:41:f3:80:14:29:93:a8:9c:64: cf:8f:ff:7b:ab:4d:dd:26:b4:2d:87:0b:f4:55:91: 37:b0:dc:87:b6:d8:2f:38:48:75:f0:c3:9b:98:57: f8:f4:7e:95:69:8f:bd:43:b2:38:0f:19:e1:1d:07: d8:6e:de:2f:6d:98:24:cc:3f:f1:a2:9d:5e:f9:85: 65:55:c5:34:3b:82:f4:dd:fa:56:9c:5d:d9:bc:26: 10:69:7a:c4:52:44:ae:2f:c8:a1:ed:62:68:0d:11: 13:a3:66:66:dd:06:54:cd:0c:0b:04:95:c5:b8:af: 04:e9:e7:2d:4d:29:65:6c:3d:c0:2d:1e:77:e3:96: fa:9f:9d:44:6b:76:24:8c:bc:98:27:dd:09:a6:c7: b3:2f:8d:9d:64:9d:24:73:05:bb:3a:fc:9e:df:11: e3:99:12:36:5f:fc:04:a0:5a:f9:4e:6c:66:eb:42: 46:16:a7:29:08:ba:64:b6:5a:cd:9e:f2:08:fe:cb: c8:be:c7:4d:10:8d:51:14:d7:52:ae:82:ac:00:f7: 56:77:29:c1:2d:34:62:7a:12:84:1d:4b:d5:76:4b: 17:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:52:1A:28:DB:5E:65:22:03:F9:ED:4F:CC:33:DB:61:AB:54:20:1C X509v3 Authority Key Identifier: keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/XVIaKNteZSID-e1PzDPbYatUIBw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.49.123.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:c3:c7:ec:04:68:cd:13:d0:b3:ab:24:76:12:4a:a1:37:16: a5:a8:93:f8:4a:d6:47:dc:36:1d:7f:be:24:1f:db:06:d4:ad: f8:2a:62:5b:ae:8e:e1:dc:6d:0a:be:bb:f3:29:e6:76:26:21: 74:86:ba:1d:d1:76:ee:c7:a0:24:8b:b6:43:99:f0:f5:be:40: 7e:45:f2:10:91:4f:ae:4c:f0:81:94:22:dc:62:ae:e5:e8:21: 36:cf:2a:5c:46:0f:f9:68:9d:87:2d:05:5c:3c:c7:35:27:bc: 75:a2:47:e4:59:78:7e:9f:c1:85:6d:20:17:24:c7:72:9c:b1: 3c:32:22:4b:f0:e2:65:36:e4:b4:41:f4:50:25:0f:40:10:36: 11:1e:d1:96:1d:56:b8:8f:8c:a2:c8:ed:a0:5a:f8:34:07:5a: 2a:ea:d0:99:9e:01:08:67:37:e7:27:3e:dc:77:40:ff:5a:d8: ad:0d:10:a3:b0:7e:a1:fc:57:6d:02:5e:25:2c:de:f1:e9:6b: b7:59:95:81:91:1e:22:8a:38:72:89:7e:3b:98:b0:ae:00:32: b5:b8:ae:6d:e5:cf:c1:a8:73:9e:5b:94:16:cc:ec:c9:45:67: f0:9c:07:a8:0b:eb:ef:54:95:22:43:3c:82:39:f3:91:8d:10: b3:f9:93:e8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NVAoivbMMtx0njRu4+FKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MmY4OTE5ZTZiYzFlZjU2NjM0ODkwMThmYzg3NWJlMzRj MGYyNGMwHhcNMjYwMTAxMjAxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDUyMWEyOGRiNWU2NTIyMDNmOWVkNGZjYzMzZGI2MWFiNTQyMDFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30xJZ56RJt+iQn0nYLPXcY+K9nWS 9iTMCUx6Vfex9pLU3VRB84AUKZOonGTPj/97q03dJrQthwv0VZE3sNyHttgvOEh1 8MObmFf49H6VaY+9Q7I4DxnhHQfYbt4vbZgkzD/xop1e+YVlVcU0O4L03fpWnF3Z vCYQaXrEUkSuL8ih7WJoDRETo2Zm3QZUzQwLBJXFuK8E6ectTSllbD3ALR5345b6 n51Ea3YkjLyYJ90JpsezL42dZJ0kcwW7Ovye3xHjmRI2X/wEoFr5Tmxm60JGFqcp CLpktlrNnvII/svIvsdNEI1RFNdSroKsAPdWdynBLTRiehKEHUvVdksXqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF1SGijbXmUiA/ntT8wz22GrVCAcMB8GA1UdIwQY MBaAFDUviRnmvB71ZjSJAY/Idb40wPJMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9jZjk0M2QtYzkyMS00ZWY3LTlhYTAt ZTNmY2IyM2UzNDM4LzEvWFZJYUtOdGVaU0lELWUxUHpEUGJZYXRVSUJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9jZjk0M2QtYzkyMS00ZWY3LTlhYTAtZTNmY2IyM2UzNDM4 LzEvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTF7MA0G CSqGSIb3DQEBCwUAA4IBAQB/w8fsBGjNE9CzqyR2EkqhNxalqJP4StZH3DYdf74k H9sG1K34KmJbro7h3G0KvrvzKeZ2JiF0hrod0Xbux6Aki7ZDmfD1vkB+RfIQkU+u TPCBlCLcYq7l6CE2zypcRg/5aJ2HLQVcPMc1J7x1okfkWXh+n8GFbSAXJMdynLE8 MiJL8OJlNuS0QfRQJQ9AEDYRHtGWHVa4j4yiyO2gWvg0B1oq6tCZngEIZzfnJz7c d0D/WtitDRCjsH6h/FdtAl4lLN7x6Wu3WZWBkR4iijhyiX47mLCuADK1uK5t5c/B qHOeW5QWzOzJRWfwnAeoC+vvVJUiQzyCOfORjRCz+ZPo -----END CERTIFICATE-----Generated at Sun Jan 25 16:10:07 2026 by rpki-client