This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/XKCSd_q8htYD2dRhnR0ZGHQd6aE.roa File: XKCSd_q8htYD2dRhnR0ZGHQd6aE.roa (raw, json) Hash identifier: nrVIhJk0vcnWtX4bPvYtuPJXkD1qd5lmX9UObVE8TRk= Subject key identifier: 5C:A0:92:77:FA:BC:86:D6:03:D9:D4:61:9D:1D:19:18:74:1D:E9:A1 Certificate issuer: /CN=08af091858bb99651764399c6565df7a0834dbad Certificate serial: 019B7C7FB3EA494C359A1CCF04675FF353C9 Authority key identifier: 08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/XKCSd_q8htYD2dRhnR0ZGHQd6aE.roa Signing time: Fri 02 Jan 2026 02:18:22 +0000 ROA not before: Fri 02 Jan 2026 02:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49559 IP address blocks: 193.57.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:b3:ea:49:4c:35:9a:1c:cf:04:67:5f:f3:53:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08af091858bb99651764399c6565df7a0834dbad Validity Not Before: Jan 2 02:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ca09277fabc86d603d9d4619d1d1918741de9a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:eb:24:c5:19:82:b1:04:dd:f9:21:58:ac:ae: 3b:04:1f:4c:d8:ea:8e:3c:97:d7:2f:6b:4b:3b:7d: 16:57:1a:b6:9a:a3:20:31:23:d9:1a:f7:63:75:74: bb:81:96:d5:85:5d:4f:47:08:b6:72:8f:96:73:ce: 5c:1b:9d:1f:e9:e4:bf:f5:5d:97:7c:ca:b7:15:3a: cb:ab:51:48:a6:a3:48:ae:c1:02:63:ea:f2:49:31: 8a:14:dd:49:57:87:f9:9e:be:93:72:89:89:79:57: ba:9a:24:e8:43:3c:11:06:4a:fd:76:d3:ca:6a:34: a3:17:c2:e6:8b:23:02:c1:b9:65:d1:85:35:13:c0: 37:19:89:25:89:92:8b:92:04:58:32:90:a0:f3:6a: bf:0b:50:a6:c4:25:b1:2f:f7:86:f2:70:f4:06:1b: c3:1b:7e:f5:c3:7c:96:c0:17:17:d9:2e:ca:92:ff: 58:51:95:db:97:f9:74:2e:09:21:77:2e:af:9d:2f: e4:1d:58:56:6a:9b:c4:b0:6c:b8:29:f1:a9:6e:4f: df:d0:60:77:da:21:b9:de:ed:ce:75:06:1a:47:af: a8:3b:83:16:f2:86:7a:f7:02:e6:86:52:95:4e:51: 88:dc:72:21:8c:d5:07:e7:9a:0a:4a:5b:f1:ec:0d: 78:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:A0:92:77:FA:BC:86:D6:03:D9:D4:61:9D:1D:19:18:74:1D:E9:A1 X509v3 Authority Key Identifier: keyid:08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/XKCSd_q8htYD2dRhnR0ZGHQd6aE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.57.46.0/24 Signature Algorithm: sha256WithRSAEncryption 91:f3:45:66:bf:b7:c1:eb:76:70:54:14:3a:cb:7f:eb:4c:06: 29:d5:6f:5a:dc:f9:0a:f5:06:ce:26:f3:84:fa:87:4c:e0:b6: ed:5b:58:b4:f1:ad:0e:61:dc:56:08:b2:eb:d3:20:88:a8:2f: e2:c1:01:24:c1:6c:a5:a9:77:35:0c:52:ab:af:04:c0:49:37: 53:21:6d:aa:9d:7f:0e:e4:22:d1:14:33:30:8d:f1:31:12:d8: c1:b5:7b:4b:a2:ca:95:af:f1:3a:07:55:bc:95:c5:c6:9c:ee: d9:8f:2e:1b:b9:bc:88:84:38:32:37:18:ef:46:ba:a1:09:ae: c9:98:bb:03:2d:d7:b5:db:ab:ba:b4:85:db:98:8b:02:34:b0: ba:d7:4c:0a:42:12:af:98:ea:51:06:60:90:9a:11:87:0c:19: 68:0b:14:38:1a:6b:95:bf:24:1a:da:0c:0b:b0:f1:84:4d:54: d5:f0:7a:e9:2e:f3:5f:93:66:23:65:15:63:fb:32:1e:df:65: 05:98:dd:81:18:bf:f6:34:b2:9c:08:bd:1d:37:39:ed:53:66: d2:e6:ad:14:07:73:c8:5b:a4:3a:74:5e:5d:eb:2d:e1:06:28: 1d:bd:84:93:ac:c7:95:60:72:10:9e:b1:87:5e:8c:00:b6:48: b5:37:1e:8d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f7PqSUw1mhzPBGdf81PJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YWYwOTE4NThiYjk5NjUxNzY0Mzk5YzY1NjVkZjdhMDgz NGRiYWQwHhcNMjYwMTAyMDIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2EwOTI3N2ZhYmM4NmQ2MDNkOWQ0NjE5ZDFkMTkxODc0MWRlOWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeskxRmCsQTd+SFYrK47BB9M2OqO PJfXL2tLO30WVxq2mqMgMSPZGvdjdXS7gZbVhV1PRwi2co+Wc85cG50f6eS/9V2X fMq3FTrLq1FIpqNIrsECY+rySTGKFN1JV4f5nr6TcomJeVe6miToQzwRBkr9dtPK ajSjF8LmiyMCwbll0YU1E8A3GYkliZKLkgRYMpCg82q/C1CmxCWxL/eG8nD0BhvD G371w3yWwBcX2S7Kkv9YUZXbl/l0Lgkhdy6vnS/kHVhWapvEsGy4KfGpbk/f0GB3 2iG53u3OdQYaR6+oO4MW8oZ69wLmhlKVTlGI3HIhjNUH55oKSlvx7A14ewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFygknf6vIbWA9nUYZ0dGRh0HemhMB8GA1UdIwQY MBaAFAivCRhYu5llF2Q5nGVl33oINNutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS83MDBmZDMtYzM2MC00OGFiLThhMDYt NTYxMjliN2RjMDE4LzEvWEtDU2RfcThodFlEMmRSaG5SMFpHSFFkNmFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS83MDBmZDMtYzM2MC00OGFiLThhMDYtNTYxMjliN2RjMDE4 LzEvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwTkuMA0G CSqGSIb3DQEBCwUAA4IBAQCR80Vmv7fB63ZwVBQ6y3/rTAYp1W9a3PkK9QbOJvOE +odM4LbtW1i08a0OYdxWCLLr0yCIqC/iwQEkwWylqXc1DFKrrwTASTdTIW2qnX8O 5CLRFDMwjfExEtjBtXtLosqVr/E6B1W8lcXGnO7Zjy4bubyIhDgyNxjvRrqhCa7J mLsDLde126u6tIXbmIsCNLC610wKQhKvmOpRBmCQmhGHDBloCxQ4GmuVvyQa2gwL sPGETVTV8HrpLvNfk2YjZRVj+zIe32UFmN2BGL/2NLKcCL0dNzntU2bS5q0UB3PI W6Q6dF5d6y3hBigdvYSTrMeVYHIQnrGHXowAtki1Nx6N -----END CERTIFICATE-----Generated at Mon Jan 26 05:30:51 2026 by rpki-client