This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/xoBSepf056vB7VihaJfLbbA7rl8.roa File: xoBSepf056vB7VihaJfLbbA7rl8.roa (raw, json) Hash identifier: FqEFR7+yy5fGMc3KqbC1V37aXIXlQqiTJ1sLZ3ECBNg= Subject key identifier: C6:80:52:7A:97:F4:E7:AB:C1:ED:58:A1:68:97:CB:6D:B0:3B:AE:5F Certificate issuer: /CN=4c3e9da3bf593802cc833fe5d947a52696f58c8d Certificate serial: 019B7C7FEA86D100D9A27439B01FB0178F6E Authority key identifier: 4C:3E:9D:A3:BF:59:38:02:CC:83:3F:E5:D9:47:A5:26:96:F5:8C:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/xoBSepf056vB7VihaJfLbbA7rl8.roa Signing time: Fri 02 Jan 2026 02:18:36 +0000 ROA not before: Fri 02 Jan 2026 02:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39122 IP address blocks: 193.203.126.0/24 maxlen: 24 2a0d:1f00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:ea:86:d1:00:d9:a2:74:39:b0:1f:b0:17:8f:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c3e9da3bf593802cc833fe5d947a52696f58c8d Validity Not Before: Jan 2 02:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c680527a97f4e7abc1ed58a16897cb6db03bae5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b9:b0:eb:be:84:b0:71:46:08:4b:90:65:b2: 1f:b5:85:05:5b:70:40:bc:dd:7e:78:54:ea:6e:69: 50:5c:98:3b:bf:02:04:3c:2d:46:b0:85:4f:e1:00: 85:fd:cf:45:57:83:1a:70:6f:d6:94:b0:89:b5:4b: d6:c3:dd:d8:78:2b:c8:0c:f6:9a:f9:cb:b9:8f:b0: cb:2c:3a:3d:0d:a7:86:c8:66:96:e2:05:63:af:b5: c3:ea:03:af:d1:7c:72:7a:b3:1d:6c:42:f0:45:48: da:98:8a:2c:0b:58:64:fa:fd:d9:36:3f:53:dc:2b: 33:cf:8e:0d:5e:a9:84:05:76:16:92:a5:97:fd:1b: 4e:10:4a:0e:22:03:2b:8d:68:cc:7b:dd:b3:93:7d: e5:bb:b0:20:7a:4f:1b:fd:08:85:4d:50:52:5e:6b: 80:95:1e:29:7d:e7:17:56:b4:60:58:ee:aa:52:50: 18:bf:51:8d:1c:d9:8c:3d:54:ed:e6:ca:b3:b4:ab: a1:27:73:66:b8:a9:06:58:f5:71:96:b1:45:66:7a: 1a:ac:d0:b3:4e:af:e5:43:e8:f4:62:19:96:7d:59: 5c:db:10:67:de:67:5e:60:a8:e9:e7:c7:86:e4:eb: 2f:fe:f4:6b:9c:10:90:ac:12:a7:6e:23:d3:34:b6: e8:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:80:52:7A:97:F4:E7:AB:C1:ED:58:A1:68:97:CB:6D:B0:3B:AE:5F X509v3 Authority Key Identifier: keyid:4C:3E:9D:A3:BF:59:38:02:CC:83:3F:E5:D9:47:A5:26:96:F5:8C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/xoBSepf056vB7VihaJfLbbA7rl8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.203.126.0/24 IPv6: 2a0d:1f00::/29 Signature Algorithm: sha256WithRSAEncryption 2e:68:77:02:b1:e1:9f:c9:54:7c:82:b4:ca:c8:ba:5d:50:e3: 3a:d2:71:b3:f4:6b:da:d8:0c:9a:dd:72:1e:98:e9:6c:28:01: ad:0c:19:45:76:17:7c:00:13:a6:7a:88:53:36:d7:dd:34:b1: 34:57:0c:80:fc:e2:55:cf:26:47:6a:85:00:e8:c6:ae:2f:d8: 13:26:05:9f:14:4f:af:f5:58:e9:9c:c0:dc:e5:f8:e3:1c:b0: 20:6b:18:fe:59:a1:bc:ba:b0:63:c6:53:bc:aa:4e:1b:ac:20: 98:3d:77:af:e1:99:01:65:98:1b:45:66:87:a0:08:1a:3a:8a: 9e:87:1b:c2:d4:c0:40:d7:e4:67:e9:1a:63:d8:1f:7a:01:5c: f9:6b:59:5c:00:a2:b6:d7:37:c6:0f:a5:0d:ff:b3:2c:cb:3f: a1:ca:17:91:c4:5a:63:29:cf:04:97:aa:e6:3f:c3:25:da:38: e7:16:51:e2:29:5b:8c:a2:50:b2:91:67:24:9e:05:32:62:97: b7:7c:f4:f1:ef:d3:ba:5c:70:e5:7b:3a:63:5b:64:4a:d9:d3: 4f:43:db:a2:c3:a4:ae:dd:68:d4:0a:98:bc:c2:f2:56:89:8c: 85:82:e6:1a:06:5f:8e:8d:82:c7:0f:37:2f:c6:f0:cb:4b:51: 25:2e:5e:94 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8f+qG0QDZonQ5sB+wF49uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjM2U5ZGEzYmY1OTM4MDJjYzgzM2ZlNWQ5NDdhNTI2OTZm NThjOGQwHhcNMjYwMTAyMDIxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjgwNTI3YTk3ZjRlN2FiYzFlZDU4YTE2ODk3Y2I2ZGIwM2JhZTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrmw676EsHFGCEuQZbIftYUFW3BA vN1+eFTqbmlQXJg7vwIEPC1GsIVP4QCF/c9FV4MacG/WlLCJtUvWw93YeCvIDPaa +cu5j7DLLDo9DaeGyGaW4gVjr7XD6gOv0XxyerMdbELwRUjamIosC1hk+v3ZNj9T 3Cszz44NXqmEBXYWkqWX/RtOEEoOIgMrjWjMe92zk33lu7Agek8b/QiFTVBSXmuA lR4pfecXVrRgWO6qUlAYv1GNHNmMPVTt5sqztKuhJ3NmuKkGWPVxlrFFZnoarNCz Tq/lQ+j0YhmWfVlc2xBn3mdeYKjp58eG5Osv/vRrnBCQrBKnbiPTNLboKQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMaAUnqX9Oerwe1YoWiXy22wO65fMB8GA1UdIwQY MBaAFEw+naO/WTgCzIM/5dlHpSaW9YyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEQ2ZG83OVpPQUxNZ3pfbDJVZWxKcGIxakkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9iOWE4MzAtNjk5Mi00OWM2LTg5NzMt ZWFjYjQ5NjVmZTM4LzEveG9CU2VwZjA1NnZCN1ZpaGFKZkxiYkE3cmw4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9iOWE4MzAtNjk5Mi00OWM2LTg5NzMtZWFjYjQ5NjVmZTM4 LzEvVEQ2ZG83OVpPQUxNZ3pfbDJVZWxKcGIxakkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwct+MA0E AgACMAcDBQMqDR8AMA0GCSqGSIb3DQEBCwUAA4IBAQAuaHcCseGfyVR8grTKyLpd UOM60nGz9Gva2Aya3XIemOlsKAGtDBlFdhd8ABOmeohTNtfdNLE0VwyA/OJVzyZH aoUA6MauL9gTJgWfFE+v9VjpnMDc5fjjHLAgaxj+WaG8urBjxlO8qk4brCCYPXev 4ZkBZZgbRWaHoAgaOoqehxvC1MBA1+Rn6Rpj2B96AVz5a1lcAKK21zfGD6UN/7Ms yz+hyheRxFpjKc8El6rmP8Ml2jjnFlHiKVuMolCykWckngUyYpe3fPTx79O6XHDl ezpjW2RK2dNPQ9uiw6Su3WjUCpi8wvJWiYyFguYaBl+OjYLHDzcvxvDLS1ElLl6U -----END CERTIFICATE-----Generated at Mon Jan 26 01:00:31 2026 by rpki-client