This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/XN9ItxoiVygt3a0qQVsmKKlWk9E.roa File: XN9ItxoiVygt3a0qQVsmKKlWk9E.roa (raw, json) Hash identifier: iH4X65Vs6HtOKFxQaLyaQ9nZPsCEbiHQMEBYUWCi4KY= Subject key identifier: 5C:DF:48:B7:1A:22:57:28:2D:DD:AD:2A:41:5B:26:28:A9:56:93:D1 Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143 Certificate serial: 019B7B3672DD5B705C90F2D02893E70562D0 Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/XN9ItxoiVygt3a0qQVsmKKlWk9E.roa Signing time: Thu 01 Jan 2026 20:18:44 +0000 ROA not before: Thu 01 Jan 2026 20:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16013 IP address blocks: 193.92.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:72:dd:5b:70:5c:90:f2:d0:28:93:e7:05:62:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143 Validity Not Before: Jan 1 20:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5cdf48b71a2257282dddad2a415b2628a95693d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:45:49:ec:c1:10:78:01:e0:b1:aa:86:36:82: 5c:07:d8:ed:f6:65:49:1e:bd:65:85:d9:47:97:b2: 29:ad:92:18:60:56:06:3b:54:88:7f:f9:93:82:cc: fc:58:7a:8f:2e:8d:14:21:71:f8:ff:68:54:3f:cd: 76:8a:4b:07:00:70:cf:f3:94:e3:a5:e4:83:43:2d: e8:0e:63:36:5f:56:5d:8d:0c:8f:78:0d:80:ed:5b: da:ca:73:9c:2e:7d:27:fb:c1:63:5a:53:bd:09:26: 97:a2:72:af:ff:6f:58:5e:d2:2c:29:59:70:c4:96: b9:c6:ee:18:5c:e6:ca:5c:99:35:ea:87:37:36:ba: 6f:31:60:b4:9c:22:2d:d8:5d:a1:d1:e3:e7:40:4d: 42:56:46:de:b6:0c:0a:56:d0:09:f3:2c:69:53:89: d6:36:ba:93:35:4e:ec:c7:d7:a3:db:bf:c0:e7:fa: b3:12:61:8c:87:0e:ce:6f:42:75:87:62:18:08:4c: 1a:a2:b7:b5:7c:2a:29:4d:a7:61:91:4d:5d:69:e7: 17:62:32:4f:38:2a:a3:7c:45:e9:59:2a:51:85:c7: 0e:e4:65:74:59:3c:1f:e4:32:44:1f:f5:d3:2b:db: c7:09:ec:2a:7d:a6:3e:64:64:4b:b2:51:26:ec:5c: 0b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:DF:48:B7:1A:22:57:28:2D:DD:AD:2A:41:5B:26:28:A9:56:93:D1 X509v3 Authority Key Identifier: keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/XN9ItxoiVygt3a0qQVsmKKlWk9E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.92.173.0/24 Signature Algorithm: sha256WithRSAEncryption c5:57:13:8b:8a:04:48:8b:bf:8d:21:cf:93:a5:88:0b:9c:bf: d1:21:48:80:32:93:39:65:86:fa:ff:c7:ba:c5:be:93:33:d6: eb:9c:bd:4c:45:7e:4e:10:4e:79:bb:ce:8a:4c:f5:5a:a6:61: 64:e5:64:8b:07:a4:64:8a:5f:a5:8f:6f:b0:1c:be:0e:a6:f5: 1a:a3:6d:d3:2f:41:ab:2c:5d:58:99:ee:cc:9f:ab:66:1c:9c: 6b:8c:17:43:f8:33:5d:73:d0:31:fd:24:3e:4c:5a:84:86:2f: db:39:30:ff:14:80:49:d6:2c:af:5a:d4:ec:26:8d:ec:f2:a8: 0e:2e:07:b6:9d:b4:2f:61:59:8f:94:a2:9e:02:56:86:46:3b: 7d:0c:25:29:9a:a8:2a:b2:5a:4c:2d:54:ca:bf:e0:9c:41:62: c7:b6:83:56:08:d2:70:d2:e5:12:b7:da:af:a9:80:c4:4b:48: a1:9a:b2:d7:87:13:fa:88:23:e6:74:e7:c2:4d:d6:dc:89:c4: 46:ef:0b:15:0f:2a:01:80:60:da:15:c8:68:97:ac:35:60:96: a4:85:6e:8f:af:95:8f:d2:50:2c:34:45:ec:82:ab:eb:22:c0: 8c:4e:ea:0c:70:f1:ec:e1:f3:f0:43:52:11:67:4a:87:b2:0b: 7e:cd:54:c2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NnLdW3BckPLQKJPnBWLQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZmYyYzYyMjlhZjc2M2E5OWY1MzQ5YTMyNTEwZGY0YTQ1 MjYxNDMwHhcNMjYwMTAxMjAxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2RmNDhiNzFhMjI1NzI4MmRkZGFkMmE0MTViMjYyOGE5NTY5M2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEVJ7MEQeAHgsaqGNoJcB9jt9mVJ Hr1lhdlHl7IprZIYYFYGO1SIf/mTgsz8WHqPLo0UIXH4/2hUP812iksHAHDP85Tj peSDQy3oDmM2X1ZdjQyPeA2A7VvaynOcLn0n+8FjWlO9CSaXonKv/29YXtIsKVlw xJa5xu4YXObKXJk16oc3NrpvMWC0nCIt2F2h0ePnQE1CVkbetgwKVtAJ8yxpU4nW NrqTNU7sx9ej27/A5/qzEmGMhw7Ob0J1h2IYCEwaore1fCopTadhkU1daecXYjJP OCqjfEXpWSpRhccO5GV0WTwf5DJEH/XTK9vHCewqfaY+ZGRLslEm7FwLgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFzfSLcaIlcoLd2tKkFbJiipVpPRMB8GA1UdIwQY MBaAFPD/LGIpr3Y6mfU0mjJRDfSkUmFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYt ZTY5ZjdhNWQyZDkwLzEvWE45SXR4b2lWeWd0M2EwcVFWc21LS2xXazlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYtZTY5ZjdhNWQyZDkw LzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwVytMA0G CSqGSIb3DQEBCwUAA4IBAQDFVxOLigRIi7+NIc+TpYgLnL/RIUiAMpM5ZYb6/8e6 xb6TM9brnL1MRX5OEE55u86KTPVapmFk5WSLB6Rkil+lj2+wHL4OpvUao23TL0Gr LF1Yme7Mn6tmHJxrjBdD+DNdc9Ax/SQ+TFqEhi/bOTD/FIBJ1iyvWtTsJo3s8qgO Lge2nbQvYVmPlKKeAlaGRjt9DCUpmqgqslpMLVTKv+CcQWLHtoNWCNJw0uUSt9qv qYDES0ihmrLXhxP6iCPmdOfCTdbcicRG7wsVDyoBgGDaFchol6w1YJakhW6Pr5WP 0lAsNEXsgqvrIsCMTuoMcPHs4fPwQ1IRZ0qHsgt+zVTC -----END CERTIFICATE-----Generated at Mon Jan 26 08:38:32 2026 by rpki-client