This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/XqQkaEZs9wM4EYlg-h0POW96ne4.roa File: XqQkaEZs9wM4EYlg-h0POW96ne4.roa (raw, json) Hash identifier: WWh8WYyHGX/YN3owu221e0lrjf+Z8CJQ1CcgTPD3bn8= Subject key identifier: 5E:A4:24:68:46:6C:F7:03:38:11:89:60:FA:1D:0F:39:6F:7A:9D:EE Certificate issuer: /CN=09633ef6550a82af315146a942cf3559557c1fe2 Certificate serial: 019B7CED392C860786D1136076318D34C898 Authority key identifier: 09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/XqQkaEZs9wM4EYlg-h0POW96ne4.roa Signing time: Fri 02 Jan 2026 04:18:00 +0000 ROA not before: Fri 02 Jan 2026 04:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20559 IP address blocks: 193.105.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:39:2c:86:07:86:d1:13:60:76:31:8d:34:c8:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09633ef6550a82af315146a942cf3559557c1fe2 Validity Not Before: Jan 2 04:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ea42468466cf70338118960fa1d0f396f7a9dee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:85:47:92:7c:4f:f6:74:0f:1d:59:d8:6a:e7: 25:69:28:74:34:57:25:5d:56:e5:3b:cc:2c:0a:d0: 24:6e:20:15:38:15:b7:f7:a6:64:ef:aa:fa:0f:9d: eb:8c:50:93:33:93:17:38:7f:82:59:b4:97:31:9d: 92:d0:f7:c0:a0:3d:fb:15:7b:28:e0:eb:03:5e:02: 4f:e8:df:cf:d9:69:75:4b:6b:55:3d:57:ce:3c:6e: d8:18:58:15:07:66:97:ec:c9:2e:7b:01:6b:5c:31: 68:4d:13:82:d2:d4:71:ae:e0:cb:ef:b4:fe:36:0e: 65:d6:67:60:cb:9e:6e:12:d1:c7:88:09:ad:d9:54: 1f:c9:2c:08:48:74:13:a1:3c:3e:37:0d:f1:fd:74: 4a:06:1a:39:cf:44:3b:5a:90:a9:39:da:18:3a:cb: ea:ab:5c:af:92:31:66:cf:9d:44:87:9d:23:c2:42: 5f:85:22:72:b7:83:73:ce:ff:9b:93:22:b2:e5:8d: 6b:c6:f7:5d:eb:58:20:73:24:97:78:09:d1:04:28: 40:f0:bf:cc:09:90:c6:14:bc:5a:1e:71:65:6f:a4: 21:30:4b:33:23:83:3a:c1:1c:fc:98:e2:76:32:9a: bb:02:0e:53:91:f4:6d:6a:3e:05:68:2b:6c:dd:e1: c4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:A4:24:68:46:6C:F7:03:38:11:89:60:FA:1D:0F:39:6F:7A:9D:EE X509v3 Authority Key Identifier: keyid:09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/XqQkaEZs9wM4EYlg-h0POW96ne4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.105.12.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:54:4b:d9:6f:a4:a9:6d:aa:e4:1d:74:ea:ad:4e:6a:8d:95: ff:a7:a2:d1:13:b3:43:20:cc:2a:6d:7b:9f:4a:54:c8:8a:2f: a0:77:74:cb:b3:ba:38:6e:20:02:f6:fb:fc:65:7e:00:67:52: 45:80:cd:09:84:56:5d:0a:88:ac:4c:8b:d6:a3:13:ec:7d:28: 16:ac:b5:1e:5b:9a:76:38:de:87:2a:2e:14:46:01:c7:22:13: 80:ba:1c:33:f3:b7:79:06:66:fe:88:34:31:f3:f3:52:14:11: 33:8f:dd:cd:c6:39:8b:10:80:5d:ad:18:87:de:d1:b1:35:82: 86:64:d2:ff:b4:40:b7:e4:32:45:c4:5e:4d:85:ae:69:70:2b: fc:44:38:43:4a:ec:e2:80:13:da:d5:1b:1d:d2:7b:18:85:23: 80:d7:2c:e3:28:00:a0:15:17:3e:d9:29:70:ef:e3:d1:19:ac: 2e:1f:98:86:1c:a7:3b:c4:5f:d9:fd:b5:80:c9:b0:f3:d0:e4: 15:0f:41:b0:2f:a0:1d:79:85:6f:71:0b:af:18:99:83:5e:de: 59:56:2b:7e:53:c8:f4:49:07:70:d8:a6:5e:7d:c2:ec:fa:98: 33:23:c9:40:16:7f:23:ca:2a:c8:67:1d:75:80:b9:93:cd:5e: c7:47:f3:66 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87TkshgeG0RNgdjGNNMiYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NjMzZWY2NTUwYTgyYWYzMTUxNDZhOTQyY2YzNTU5NTU3 YzFmZTIwHhcNMjYwMTAyMDQxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZWE0MjQ2ODQ2NmNmNzAzMzgxMTg5NjBmYTFkMGYzOTZmN2E5ZGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4VHknxP9nQPHVnYauclaSh0NFcl XVblO8wsCtAkbiAVOBW396Zk76r6D53rjFCTM5MXOH+CWbSXMZ2S0PfAoD37FXso 4OsDXgJP6N/P2Wl1S2tVPVfOPG7YGFgVB2aX7MkuewFrXDFoTROC0tRxruDL77T+ Ng5l1mdgy55uEtHHiAmt2VQfySwISHQToTw+Nw3x/XRKBho5z0Q7WpCpOdoYOsvq q1yvkjFmz51Eh50jwkJfhSJyt4Nzzv+bkyKy5Y1rxvdd61ggcySXeAnRBChA8L/M CZDGFLxaHnFlb6QhMEszI4M6wRz8mOJ2Mpq7Ag5TkfRtaj4FaCts3eHEhQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF6kJGhGbPcDOBGJYPodDzlvep3uMB8GA1UdIwQY MBaAFAljPvZVCoKvMVFGqULPNVlVfB/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1dNLTlsVUtncTh4VVVhcFFzODFXVlY4SC1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8zNGQ1NDgtZTAyZi00ZjgyLWJhZWIt YmIxZGYxYjNkMzJkLzEvWHFRa2FFWnM5d000RVlsZy1oMFBPVzk2bmU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8zNGQ1NDgtZTAyZi00ZjgyLWJhZWItYmIxZGYxYjNkMzJk LzEvQ1dNLTlsVUtncTh4VVVhcFFzODFXVlY4SC1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWkMMA0G CSqGSIb3DQEBCwUAA4IBAQBuVEvZb6SpbarkHXTqrU5qjZX/p6LRE7NDIMwqbXuf SlTIii+gd3TLs7o4biAC9vv8ZX4AZ1JFgM0JhFZdCoisTIvWoxPsfSgWrLUeW5p2 ON6HKi4URgHHIhOAuhwz87d5Bmb+iDQx8/NSFBEzj93NxjmLEIBdrRiH3tGxNYKG ZNL/tEC35DJFxF5Nha5pcCv8RDhDSuzigBPa1Rsd0nsYhSOA1yzjKACgFRc+2Slw 7+PRGawuH5iGHKc7xF/Z/bWAybDz0OQVD0GwL6AdeYVvcQuvGJmDXt5ZVit+U8j0 SQdw2KZefcLs+pgzI8lAFn8jyirIZx11gLmTzV7HR/Nm -----END CERTIFICATE-----Generated at Mon Jan 26 14:21:36 2026 by rpki-client