This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/XCHXkdcF_WH-nnw2GbZr-ZjypR0.roa File: XCHXkdcF_WH-nnw2GbZr-ZjypR0.roa (raw, json) Hash identifier: JAit03jYK+4u5m3YyCgb9RFRYQTmXY2U0ObmxVumpbw= Subject key identifier: 5C:21:D7:91:D7:05:FD:61:FE:9E:7C:36:19:B6:6B:F9:98:F2:A5:1D Certificate issuer: /CN=00cb6701ff829394db69ce67c30ad8735f126018 Certificate serial: 019B7AC8C83125C6F3852C190FA9A0055AE0 Authority key identifier: 00:CB:67:01:FF:82:93:94:DB:69:CE:67:C3:0A:D8:73:5F:12:60:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/XCHXkdcF_WH-nnw2GbZr-ZjypR0.roa Signing time: Thu 01 Jan 2026 18:18:57 +0000 ROA not before: Thu 01 Jan 2026 18:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2116 IP address blocks: 193.22.94.0/24 maxlen: 24 194.0.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:c8:31:25:c6:f3:85:2c:19:0f:a9:a0:05:5a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00cb6701ff829394db69ce67c30ad8735f126018 Validity Not Before: Jan 1 18:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c21d791d705fd61fe9e7c3619b66bf998f2a51d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c5:2f:a6:c5:88:85:38:d9:55:e1:e5:59:98: 1d:0d:48:b7:11:6c:43:94:77:a1:55:27:0e:54:aa: 5c:a3:6c:5c:67:f3:24:db:b0:95:1f:9d:86:5a:da: 1a:37:9d:41:d5:4c:dd:83:37:74:08:73:c2:e3:ae: d2:dc:1c:76:37:76:eb:7f:31:93:88:12:ee:dc:bd: fd:c0:b3:e5:05:5f:f2:7d:e3:e2:39:2d:d6:9f:96: dd:42:d9:09:37:47:22:52:95:5c:c4:fe:03:1f:b4: 8e:0d:c3:b4:5b:8f:3c:85:83:1d:c2:69:c4:b0:15: 96:ac:0b:7e:c9:46:54:e8:fb:c5:7c:08:f7:b7:17: 71:6b:85:4a:73:3c:dd:92:cd:8e:f9:eb:3d:af:36: f8:2a:91:23:da:66:59:1f:19:42:b4:a6:0d:73:74: 61:fb:dc:2a:87:da:06:52:72:bd:0c:69:00:0d:b4: 5f:16:ae:29:11:e5:2e:2e:99:d6:33:6a:65:8f:04: 09:19:e5:f4:3e:8d:e6:a6:42:aa:da:14:50:f5:c5: 91:ef:eb:b5:02:5c:6e:84:c4:53:a1:47:4d:b3:42: 7b:01:d4:b5:5b:e0:c4:e8:58:79:a3:24:81:df:6c: 9f:9b:07:dc:78:59:ae:20:c7:1f:bd:78:5a:91:8d: 8e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:21:D7:91:D7:05:FD:61:FE:9E:7C:36:19:B6:6B:F9:98:F2:A5:1D X509v3 Authority Key Identifier: keyid:00:CB:67:01:FF:82:93:94:DB:69:CE:67:C3:0A:D8:73:5F:12:60:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/XCHXkdcF_WH-nnw2GbZr-ZjypR0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.22.94.0/24 194.0.192.0/24 Signature Algorithm: sha256WithRSAEncryption 49:61:b4:6a:7e:81:03:3e:2c:43:91:eb:5f:46:23:fd:ad:0b: d2:f0:7a:06:64:ad:2e:12:da:cc:f3:22:f4:8a:4d:84:0c:b6: 98:a4:b3:48:81:60:b0:d6:f7:bb:fe:ec:82:84:61:34:88:3f: 46:9a:04:4a:d1:c6:b0:7d:c1:91:0e:0e:ed:8e:fa:be:12:fe: 62:a1:2b:37:83:f5:4c:e2:45:41:ea:69:00:f7:a0:19:b7:6f: 04:70:fb:c3:04:9d:e9:a5:cc:85:31:0f:39:89:0b:9f:05:0f: 9e:48:37:d2:a1:75:41:73:8a:35:5f:4c:f2:32:85:45:43:c4: f4:5b:8c:06:fd:63:23:a4:96:94:68:bc:50:6a:c1:bf:ae:89: d1:70:3d:ed:71:26:2e:0f:c8:95:7d:4f:41:94:48:17:c7:7f: c1:97:45:74:f0:a2:a6:1d:8b:fb:1f:3b:d1:d4:01:e7:48:66: ee:1a:a2:b6:64:1e:cc:0e:c1:38:1c:eb:9e:91:c1:12:d3:27: 85:97:be:1b:76:51:39:5e:ac:45:14:63:3d:df:6b:db:1a:5a: e0:d7:29:a9:f7:cc:03:e5:0d:e5:45:0d:dc:9e:ce:02:3c:a4: 78:17:f0:cd:3a:bb:75:bc:fc:b3:21:8b:0c:1f:dd:e3:46:5f: b6:90:ab:50 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6yMgxJcbzhSwZD6mgBVrgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwY2I2NzAxZmY4MjkzOTRkYjY5Y2U2N2MzMGFkODczNWYx MjYwMTgwHhcNMjYwMTAxMTgxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzIxZDc5MWQ3MDVmZDYxZmU5ZTdjMzYxOWI2NmJmOTk4ZjJhNTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncUvpsWIhTjZVeHlWZgdDUi3EWxD lHehVScOVKpco2xcZ/Mk27CVH52GWtoaN51B1Uzdgzd0CHPC467S3Bx2N3brfzGT iBLu3L39wLPlBV/yfePiOS3Wn5bdQtkJN0ciUpVcxP4DH7SODcO0W488hYMdwmnE sBWWrAt+yUZU6PvFfAj3txdxa4VKczzdks2O+es9rzb4KpEj2mZZHxlCtKYNc3Rh +9wqh9oGUnK9DGkADbRfFq4pEeUuLpnWM2pljwQJGeX0Po3mpkKq2hRQ9cWR7+u1 AlxuhMRToUdNs0J7AdS1W+DE6Fh5oySB32yfmwfceFmuIMcfvXhakY2OpwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFwh15HXBf1h/p58Nhm2a/mY8qUdMB8GA1UdIwQY MBaAFADLZwH/gpOU22nOZ8MK2HNfEmAYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQU10bkFmLUNrNVRiYWM1bnd3clljMThTWUJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yZTg3M2YtZjlkMy00ZDc5LTlhNjct MjliM2UxMTFkY2VjLzEvWENIWGtkY0ZfV0gtbm53MkdiWnItWmp5cFIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8yZTg3M2YtZjlkMy00ZDc5LTlhNjctMjliM2UxMTFkY2Vj LzEvQU10bkFmLUNrNVRiYWM1bnd3clljMThTWUJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwRZeAwQA wgDAMA0GCSqGSIb3DQEBCwUAA4IBAQBJYbRqfoEDPixDketfRiP9rQvS8HoGZK0u EtrM8yL0ik2EDLaYpLNIgWCw1ve7/uyChGE0iD9GmgRK0cawfcGRDg7tjvq+Ev5i oSs3g/VM4kVB6mkA96AZt28EcPvDBJ3ppcyFMQ85iQufBQ+eSDfSoXVBc4o1X0zy MoVFQ8T0W4wG/WMjpJaUaLxQasG/ronRcD3tcSYuD8iVfU9BlEgXx3/Bl0V08KKm HYv7HzvR1AHnSGbuGqK2ZB7MDsE4HOuekcES0yeFl74bdlE5XqxFFGM932vbGlrg 1ymp98wD5Q3lRQ3cns4CPKR4F/DNOrt1vPyzIYsMH93jRl+2kKtQ -----END CERTIFICATE-----Generated at Mon Jan 26 05:49:42 2026 by rpki-client