This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/XiSpk1i5DugMLOQC8LxlXZ3OXzg.roa File: XiSpk1i5DugMLOQC8LxlXZ3OXzg.roa (raw, json) Hash identifier: wXcCGl7A0eNH0SjdToQ3CeO3hMfYdUgUl2ywslHJLk8= Subject key identifier: 5E:24:A9:93:58:B9:0E:E8:0C:2C:E4:02:F0:BC:65:5D:9D:CE:5F:38 Certificate issuer: /CN=2d1172c1c73f971a9fb2e89b7917200c500ee407 Certificate serial: 019B7DC9AF634221BCFCB1751A6EC6370389 Authority key identifier: 2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/XiSpk1i5DugMLOQC8LxlXZ3OXzg.roa Signing time: Fri 02 Jan 2026 08:18:48 +0000 ROA not before: Fri 02 Jan 2026 08:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34984 IP address blocks: 93.93.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:af:63:42:21:bc:fc:b1:75:1a:6e:c6:37:03:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1172c1c73f971a9fb2e89b7917200c500ee407 Validity Not Before: Jan 2 08:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e24a99358b90ee80c2ce402f0bc655d9dce5f38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ef:4a:97:6b:07:4e:a4:89:43:59:6f:ab:61: b7:17:8b:69:a1:fb:b5:51:d6:b3:c5:61:50:38:7f: bd:23:f5:19:2a:18:15:a4:27:2b:32:a3:c1:c8:b3: bc:ec:b8:0e:fb:6b:df:cb:8d:4e:42:4f:64:03:c4: 8a:e6:61:2b:b2:77:96:1c:57:35:3e:1e:de:20:8b: c0:b8:fe:7a:93:90:8e:be:5d:35:e9:84:fc:0a:26: f3:73:39:de:4d:47:e9:24:95:85:76:77:4d:2b:17: 95:6d:b8:5b:fd:aa:74:63:92:66:16:ca:70:8a:24: e3:2b:a8:9d:61:96:2c:52:00:9f:b4:7f:b0:32:d5: f8:24:df:55:28:dd:44:0d:87:f6:d2:0b:28:a4:8d: 62:e2:03:f2:fe:be:c7:4c:aa:df:0a:0c:2f:dc:6c: 07:a0:f2:fb:8c:00:98:cc:d4:c1:02:92:8a:98:95: 9b:12:91:34:9e:e7:2e:b7:43:0c:16:e6:e1:44:17: 2d:1d:8a:64:48:a9:7a:2b:63:85:63:e9:62:10:ee: 23:fa:44:81:f2:cf:73:03:64:c9:1c:1e:82:c6:ef: c2:17:c2:32:b5:22:70:68:8b:96:df:fe:83:64:6f: d8:46:9b:a8:fb:01:5f:d3:62:b1:54:7f:84:00:57: e5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:24:A9:93:58:B9:0E:E8:0C:2C:E4:02:F0:BC:65:5D:9D:CE:5F:38 X509v3 Authority Key Identifier: keyid:2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/XiSpk1i5DugMLOQC8LxlXZ3OXzg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.93.104.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:cd:05:ba:e7:f4:61:88:99:9e:ea:1d:4a:31:99:8a:d3:04: 54:34:37:de:62:3a:7c:e9:82:87:c1:de:1e:c9:c7:45:94:ac: 06:98:52:09:cc:ed:40:2e:e1:a3:cf:65:19:8c:d4:08:12:30: 13:47:cb:50:52:d1:fa:41:c3:49:5c:39:aa:97:4a:cc:24:1e: d0:2e:be:47:92:81:35:77:ec:b9:5f:d6:85:32:c5:b9:67:e0: 82:15:4e:6f:af:7b:28:7f:2f:5d:f9:e8:f6:80:91:7f:37:f6: 43:bb:8e:f6:b7:9c:70:03:5d:ef:be:0d:7d:9f:8c:26:c3:c8: 82:8b:cb:e7:42:6f:d6:fc:fc:ae:8a:8f:f6:58:36:44:a4:03: 71:52:31:c7:ac:d0:05:1c:65:7c:c4:38:2e:d2:dc:4c:09:a6: a8:c2:4e:a8:01:61:54:a2:ad:9e:08:c4:03:f3:f3:1d:c9:a5: 54:e7:50:ce:f0:73:0c:b2:40:4c:b0:a8:fd:a0:75:07:31:8b: 7d:85:5b:04:95:ac:1a:dd:32:ef:b4:c8:ea:dc:26:dd:78:1e: 5f:40:96:c0:19:54:ed:85:0c:de:cb:d4:a1:c7:f2:02:92:d7: 30:2f:2a:f9:1a:dd:bc:de:1d:61:6d:b6:11:e4:d5:4b:3b:57: 93:85:a2:79 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ya9jQiG8/LF1Gm7GNwOJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMTE3MmMxYzczZjk3MWE5ZmIyZTg5Yjc5MTcyMDBjNTAw ZWU0MDcwHhcNMjYwMTAyMDgxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTI0YTk5MzU4YjkwZWU4MGMyY2U0MDJmMGJjNjU1ZDlkY2U1ZjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxu9Kl2sHTqSJQ1lvq2G3F4tpofu1 UdazxWFQOH+9I/UZKhgVpCcrMqPByLO87LgO+2vfy41OQk9kA8SK5mErsneWHFc1 Ph7eIIvAuP56k5COvl016YT8CibzczneTUfpJJWFdndNKxeVbbhb/ap0Y5JmFspw iiTjK6idYZYsUgCftH+wMtX4JN9VKN1EDYf20gsopI1i4gPy/r7HTKrfCgwv3GwH oPL7jACYzNTBApKKmJWbEpE0nucut0MMFubhRBctHYpkSKl6K2OFY+liEO4j+kSB 8s9zA2TJHB6Cxu/CF8IytSJwaIuW3/6DZG/YRpuo+wFf02KxVH+EAFfl/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF4kqZNYuQ7oDCzkAvC8ZV2dzl84MB8GA1UdIwQY MBaAFC0RcsHHP5can7Lom3kXIAxQDuQHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFJGeXdjY19seHFmc3VpYmVSY2dERkFPNUFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS83OWFjYTktNTFkZC00ZjIyLWI0MDQt ZDUzODY2ZTkxODZhLzEvWGlTcGsxaTVEdWdNTE9RQzhMeGxYWjNPWHpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS83OWFjYTktNTFkZC00ZjIyLWI0MDQtZDUzODY2ZTkxODZh LzEvTFJGeXdjY19seHFmc3VpYmVSY2dERkFPNUFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXV1oMA0G CSqGSIb3DQEBCwUAA4IBAQBazQW65/RhiJme6h1KMZmK0wRUNDfeYjp86YKHwd4e ycdFlKwGmFIJzO1ALuGjz2UZjNQIEjATR8tQUtH6QcNJXDmql0rMJB7QLr5HkoE1 d+y5X9aFMsW5Z+CCFU5vr3sofy9d+ej2gJF/N/ZDu472t5xwA13vvg19n4wmw8iC i8vnQm/W/Pyuio/2WDZEpANxUjHHrNAFHGV8xDgu0txMCaaowk6oAWFUoq2eCMQD 8/MdyaVU51DO8HMMskBMsKj9oHUHMYt9hVsElawa3TLvtMjq3CbdeB5fQJbAGVTt hQzey9Shx/ICktcwLyr5Gt283h1hbbYR5NVLO1eThaJ5 -----END CERTIFICATE-----Generated at Mon Jan 26 02:21:59 2026 by rpki-client