This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/c_XVhcUysLwXAHApwazs-UkQkmQ.roa File: c_XVhcUysLwXAHApwazs-UkQkmQ.roa (raw, json) Hash identifier: yDd1bLRr1tOEIQ6ft+0WAm2AEOFTsdq7bRYUYaVYKNA= Subject key identifier: 73:F5:D5:85:C5:32:B0:BC:17:00:70:29:C1:AC:EC:F9:49:10:92:64 Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a Certificate serial: 019B7FF27000E6A48ECD3C76697C1C5269BF Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/c_XVhcUysLwXAHApwazs-UkQkmQ.roa Signing time: Fri 02 Jan 2026 18:22:33 +0000 ROA not before: Fri 02 Jan 2026 18:22:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35503 IP address blocks: 89.252.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:70:00:e6:a4:8e:cd:3c:76:69:7c:1c:52:69:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a Validity Not Before: Jan 2 18:22:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=73f5d585c532b0bc17007029c1acecf949109264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:96:5d:f5:d0:77:c3:16:a4:ac:40:bc:dc:8b: 40:ec:12:dc:4f:d2:bd:48:76:9e:58:c2:d8:89:ac: 62:64:25:3f:89:5a:28:78:99:20:b1:8b:f0:9f:36: a5:45:85:cf:6c:b9:c1:cd:13:e8:c1:88:0e:26:59: b4:aa:63:38:4c:6a:d2:90:be:a6:65:39:82:93:f4: 34:c2:42:b2:ce:bf:13:52:f6:b5:ba:bc:83:85:fb: cb:41:4d:d7:85:bb:78:35:99:94:c3:ad:cf:c7:09: 89:38:f5:e7:f9:62:8a:59:17:c2:e9:b5:49:db:47: c8:66:60:fa:d8:04:40:41:19:f8:c1:47:c9:75:36: 5d:74:ca:95:be:82:80:04:a9:ed:ac:b3:13:27:a7: 00:bc:ba:ed:6f:db:06:31:05:f6:ab:dc:1a:46:c9: f0:77:44:8a:33:40:57:a7:08:0e:13:fe:1c:6e:a6: dd:44:7b:0f:49:c2:83:eb:1f:8f:3e:74:d5:df:48: d5:ce:9d:49:aa:df:22:65:3f:21:9d:72:72:ac:16: 85:32:0a:cf:10:be:d5:72:27:a3:36:48:f8:ea:7d: 70:2b:96:1e:02:4a:0d:07:99:c9:d0:c1:4a:5b:56: 97:33:c3:34:7b:56:43:6d:73:a7:af:02:ce:77:67: 3f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F5:D5:85:C5:32:B0:BC:17:00:70:29:C1:AC:EC:F9:49:10:92:64 X509v3 Authority Key Identifier: keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/c_XVhcUysLwXAHApwazs-UkQkmQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.252.196.0/24 Signature Algorithm: sha256WithRSAEncryption 64:32:8f:73:51:ea:40:3c:46:5e:bc:c9:2f:69:cd:db:76:0a: 79:d8:69:09:d6:6a:34:ce:b1:e5:8f:08:39:2d:86:a0:88:d6: 36:94:48:28:45:4c:eb:90:88:fe:7b:5c:c1:35:d5:98:88:f1: d3:a2:e1:e6:73:b8:27:d3:6d:0f:b6:1e:88:cb:d5:23:53:a4: 91:84:b9:3e:16:d6:e9:0a:89:1a:1c:ae:fd:25:82:3d:92:d3: 72:94:85:15:56:c7:25:0e:ef:3f:25:49:bc:41:77:b8:dd:8b: 3d:1a:a3:43:9a:12:f1:47:c0:7e:40:86:79:a6:b9:1a:b8:81: d0:55:9e:14:e2:f7:b3:fa:d4:52:fd:24:fb:c8:06:2a:20:16: f2:5e:dd:77:5f:33:1e:e1:b7:b2:e6:9a:3a:a0:dd:40:20:c0: 36:bc:8f:4d:a0:48:c9:28:4c:67:cc:81:bf:61:ce:57:47:e8: c2:76:b0:03:93:69:a7:b2:92:fe:4c:f8:63:0e:0e:71:c2:04: 5f:59:97:0b:7c:eb:a6:f7:b2:d1:4c:ad:b9:46:01:0b:35:e1: af:02:45:ab:db:7d:28:9e:b7:0c:a6:69:63:69:e0:36:01:48: ba:ff:0f:f4:c9:7f:99:e9:79:e6:14:45:51:f8:79:b8:fa:ce: 5f:69:c2:99 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8nAA5qSOzTx2aXwcUmm/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMDRhNDA4MjFjNDE3NmNjNDJlMjU1ZWY2YzE3Mjc0NzNj M2YwMGEwHhcNMjYwMTAyMTgyMjMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3M2Y1ZDU4NWM1MzJiMGJjMTcwMDcwMjljMWFjZWNmOTQ5MTA5MjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5Zd9dB3wxakrEC83ItA7BLcT9K9 SHaeWMLYiaxiZCU/iVooeJkgsYvwnzalRYXPbLnBzRPowYgOJlm0qmM4TGrSkL6m ZTmCk/Q0wkKyzr8TUva1uryDhfvLQU3Xhbt4NZmUw63PxwmJOPXn+WKKWRfC6bVJ 20fIZmD62ARAQRn4wUfJdTZddMqVvoKABKntrLMTJ6cAvLrtb9sGMQX2q9waRsnw d0SKM0BXpwgOE/4cbqbdRHsPScKD6x+PPnTV30jVzp1Jqt8iZT8hnXJyrBaFMgrP EL7VciejNkj46n1wK5YeAkoNB5nJ0MFKW1aXM8M0e1ZDbXOnrwLOd2c/SQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHP11YXFMrC8FwBwKcGs7PlJEJJkMB8GA1UdIwQY MBaAFEEEpAghxBdsxC4lXvbBcnRzw/AKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMt YjI3ZDZlMjc4ZTE4LzEvY19YVmhjVXlzTHdYQUhBcHdhenMtVWtRa21RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMtYjI3ZDZlMjc4ZTE4 LzEvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWfzEMA0G CSqGSIb3DQEBCwUAA4IBAQBkMo9zUepAPEZevMkvac3bdgp52GkJ1mo0zrHljwg5 LYagiNY2lEgoRUzrkIj+e1zBNdWYiPHTouHmc7gn020Pth6Iy9UjU6SRhLk+Ftbp CokaHK79JYI9ktNylIUVVsclDu8/JUm8QXe43Ys9GqNDmhLxR8B+QIZ5prkauIHQ VZ4U4vez+tRS/ST7yAYqIBbyXt13XzMe4bey5po6oN1AIMA2vI9NoEjJKExnzIG/ Yc5XR+jCdrADk2mnspL+TPhjDg5xwgRfWZcLfOum97LRTK25RgELNeGvAkWr230o nrcMpmljaeA2AUi6/w/0yX+Z6XnmFEVR+Hm4+s5facKZ -----END CERTIFICATE-----Generated at Sun Jan 25 23:16:29 2026 by rpki-client