This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/xJf5dJsWj10NhH2MOv7Q4q5GYJE.roa File: xJf5dJsWj10NhH2MOv7Q4q5GYJE.roa (raw, json) Hash identifier: wyLgXarxJYQSIsevEmzqz9OHuFS+n/yCRt5c+Kckpyk= Subject key identifier: C4:97:F9:74:9B:16:8F:5D:0D:84:7D:8C:3A:FE:D0:E2:AE:46:60:91 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78348815636BE1BCB5AB5170745C89D7 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/xJf5dJsWj10NhH2MOv7Q4q5GYJE.roa Signing time: Thu 01 Jan 2026 06:17:46 +0000 ROA not before: Thu 01 Jan 2026 06:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206941 IP address blocks: 193.235.58.0/24 maxlen: 24 194.14.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:88:15:63:6b:e1:bc:b5:ab:51:70:74:5c:89:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c497f9749b168f5d0d847d8c3afed0e2ae466091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d3:cd:c9:0d:24:8a:34:50:7c:58:ae:e1:5a: b9:69:1c:93:1b:c7:86:ea:19:1b:9c:9d:db:4b:ab: ed:78:4a:53:6c:99:17:d1:7a:05:65:66:73:a5:08: 96:1c:0c:4b:c8:8c:63:92:c7:27:01:9d:ca:e1:31: 01:b6:25:b6:a8:5a:2f:bf:96:dc:8e:27:16:59:cb: d9:ec:40:ac:6e:1b:b0:c2:e5:44:2c:cd:f0:6f:1d: bb:bf:b9:c6:98:c1:a1:30:60:70:e3:90:2d:53:0d: 64:20:f9:28:77:79:17:8d:b5:3f:39:e5:f1:af:94: 42:2f:e5:1c:07:17:26:df:00:bb:c9:42:bb:7d:41: e9:62:86:b1:77:a8:e0:52:0e:52:4d:bb:e7:98:17: ea:c4:1d:08:ae:f3:5b:4e:30:f5:71:79:b5:0e:eb: 24:31:7c:5f:1d:88:95:57:bd:bf:51:75:d6:12:21: 6d:e3:cd:85:ba:01:d4:88:3a:10:77:25:c5:68:87: ee:db:85:81:d1:99:c6:3e:61:d8:d4:45:db:0f:ae: 94:4f:b5:26:48:a3:57:74:46:fd:8b:46:30:99:04: 4f:da:b4:46:db:b5:fc:4f:0c:e4:99:8e:4a:70:79: 4e:78:5f:9c:d0:fc:e8:c5:1a:37:71:10:26:f1:73: 11:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:97:F9:74:9B:16:8F:5D:0D:84:7D:8C:3A:FE:D0:E2:AE:46:60:91 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/xJf5dJsWj10NhH2MOv7Q4q5GYJE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.235.58.0/24 194.14.210.0/24 Signature Algorithm: sha256WithRSAEncryption 97:8d:d9:5e:ac:db:16:0a:a4:cc:a8:e9:19:fd:af:60:d6:e5: 18:3e:4e:27:62:89:01:54:3b:91:26:ee:2e:51:64:9b:21:9f: ee:66:28:3b:e7:b5:00:c9:02:55:5a:f2:c1:a6:5d:4c:d0:e9: 8e:9a:0e:0e:22:d5:0b:85:7f:2a:c8:41:04:af:9a:20:46:e0: 40:7d:49:80:4b:9d:8b:c0:fc:bb:6d:ed:13:28:b8:84:f4:14: e9:47:0d:c7:65:2a:d9:c8:b0:54:c7:89:9f:92:cf:a7:34:1d: 12:6d:90:a1:13:6e:17:cc:b8:1e:e8:a3:a9:2e:7d:b2:c4:c4: 75:d9:69:92:a7:49:6d:e1:87:28:98:61:8b:fa:0e:06:fa:dc: 7f:d5:45:b6:d5:cd:94:09:bd:9a:d2:38:ad:84:a2:57:89:81: 36:9d:80:38:30:bc:bc:7f:65:31:a6:b8:f2:ea:89:c2:9b:d6: 53:f3:f0:8c:1f:7f:c9:1c:e2:da:ea:61:1c:dc:2a:a4:1d:9d: 26:35:c6:fc:ca:80:b4:eb:2f:52:7c:cb:50:94:55:94:ec:e9: b0:29:b7:37:ec:74:82:2c:45:5d:84:b4:a0:de:53:19:18:00: 55:8a:9c:35:bd:0d:2c:4f:bb:71:c5:03:e9:34:a4:fe:ff:80: a9:33:5d:b9 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NIgVY2vhvLWrUXB0XInXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDk3Zjk3NDliMTY4ZjVkMGQ4NDdkOGMzYWZlZDBlMmFlNDY2MDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNPNyQ0kijRQfFiu4Vq5aRyTG8eG 6hkbnJ3bS6vteEpTbJkX0XoFZWZzpQiWHAxLyIxjkscnAZ3K4TEBtiW2qFovv5bc jicWWcvZ7ECsbhuwwuVELM3wbx27v7nGmMGhMGBw45AtUw1kIPkod3kXjbU/OeXx r5RCL+UcBxcm3wC7yUK7fUHpYoaxd6jgUg5STbvnmBfqxB0IrvNbTjD1cXm1Dusk MXxfHYiVV72/UXXWEiFt482FugHUiDoQdyXFaIfu24WB0ZnGPmHY1EXbD66UT7Um SKNXdEb9i0YwmQRP2rRG27X8TwzkmY5KcHlOeF+c0PzoxRo3cRAm8XMRNwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMSX+XSbFo9dDYR9jDr+0OKuRmCRMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEveEpmNWRKc1dqMTBOaEgyTU92N1E0cTVHWUpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwes6AwQA wg7SMA0GCSqGSIb3DQEBCwUAA4IBAQCXjdlerNsWCqTMqOkZ/a9g1uUYPk4nYokB VDuRJu4uUWSbIZ/uZig757UAyQJVWvLBpl1M0OmOmg4OItULhX8qyEEEr5ogRuBA fUmAS52LwPy7be0TKLiE9BTpRw3HZSrZyLBUx4mfks+nNB0SbZChE24XzLge6KOp Ln2yxMR12WmSp0lt4YcomGGL+g4G+tx/1UW21c2UCb2a0jithKJXiYE2nYA4MLy8 f2Uxprjy6onCm9ZT8/CMH3/JHOLa6mEc3CqkHZ0mNcb8yoC06y9SfMtQlFWU7Omw Kbc37HSCLEVdhLSg3lMZGABVipw1vQ0sT7txxQPpNKT+/4CpM125 -----END CERTIFICATE-----Generated at Sun Jan 25 09:03:49 2026 by rpki-client