This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/XKYC5JPqDD9VW1izwwkwjmqn664.roa File: XKYC5JPqDD9VW1izwwkwjmqn664.roa (raw, json) Hash identifier: oypjXIUfvrywdzwFm0p2UsqV7Cq4FbJ8dJQgCUvigkE= Subject key identifier: 5C:A6:02:E4:93:EA:0C:3F:55:5B:58:B3:C3:09:30:8E:6A:A7:EB:AE Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019B7AC85494A57B1E37E12C114043DE379C Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/XKYC5JPqDD9VW1izwwkwjmqn664.roa Signing time: Thu 01 Jan 2026 18:18:27 +0000 ROA not before: Thu 01 Jan 2026 18:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30644 IP address blocks: 14.102.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:54:94:a5:7b:1e:37:e1:2c:11:40:43:de:37:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Jan 1 18:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ca602e493ea0c3f555b58b3c309308e6aa7ebae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9e:fb:f2:82:a1:8a:bc:e5:f8:5b:1f:26:63: c1:ce:e0:ab:f4:af:c3:43:e3:a1:6d:7c:9c:1e:09: 3b:41:dd:8a:4f:8d:09:34:45:b8:53:bc:26:80:36: a3:b7:0b:e4:b9:2d:9e:65:73:b8:c1:d5:d7:53:5f: 5c:53:04:d1:35:f9:4e:30:65:91:56:15:ac:75:9f: 83:53:f8:b3:d8:bf:15:93:cb:ac:ab:07:63:87:95: ba:e9:14:5d:38:f8:67:9a:3b:08:72:10:60:da:23: a9:9f:05:d6:45:f5:b3:b3:b0:ba:9c:61:eb:53:e2: 7a:b7:01:2f:80:cf:51:cf:ed:4a:21:d1:43:dc:1f: 7f:e6:7b:4a:f1:d1:e3:20:2d:3d:34:8d:0f:26:72: 3c:54:31:1b:15:7f:0c:81:cc:de:02:4d:f7:e8:69: 95:79:c2:3e:4c:4c:ef:e5:77:ab:47:42:98:39:d3: f9:56:eb:61:85:88:3a:94:3e:85:79:68:28:ac:5b: 49:67:37:21:de:42:b1:3d:90:04:bb:be:af:a6:1e: 28:49:49:ab:c8:66:35:97:d0:9f:44:ee:b7:e6:97: 2d:0d:ce:ca:95:3c:84:31:04:6e:ae:e4:b3:7c:3a: 26:c6:25:22:28:80:3d:65:2e:b0:1f:3a:e8:8a:f1: 27:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:A6:02:E4:93:EA:0C:3F:55:5B:58:B3:C3:09:30:8E:6A:A7:EB:AE X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/XKYC5JPqDD9VW1izwwkwjmqn664.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 14.102.233.0/24 Signature Algorithm: sha256WithRSAEncryption 61:9b:b0:fa:5d:5f:59:a5:b1:98:00:68:3d:23:dd:f8:cc:62: 65:36:4f:21:00:ca:7c:e5:d0:9d:25:6e:72:05:88:ff:3f:01: 42:44:b8:38:50:fb:dd:57:e2:fe:ad:30:6e:15:10:f1:0f:47: 23:4e:a9:46:02:4f:94:f5:e5:2f:c0:61:2a:26:a4:fa:a5:b4: 10:bf:11:93:e1:ca:64:76:d0:df:1f:14:82:87:4a:fc:12:10: dd:bb:e4:07:8e:aa:07:04:5d:d2:08:7e:ae:83:3b:c3:22:ba: 45:30:26:b8:64:e8:be:b0:bd:78:ff:8f:fe:97:4b:3f:7b:5a: 51:cd:3b:e1:a0:fc:ef:49:76:8c:6b:fe:6c:29:ee:ff:0b:f2: 07:a7:5b:84:82:7c:c4:7a:3a:a2:94:db:47:82:13:7b:5f:8b: 24:05:7d:79:16:51:17:fc:ae:8a:27:cf:65:88:dd:60:24:87: 27:de:7f:e9:ba:39:da:cd:ea:8b:3f:1a:e4:f3:8d:7b:63:1b: cf:24:23:b9:8d:00:9d:fb:0a:4f:05:5a:e2:dd:98:d3:f4:53: 03:a9:54:47:73:0c:cd:21:b0:15:9e:0c:7f:92:32:04:25:ec: 96:b2:94:8d:f6:b7:df:e8:17:db:47:ec:05:ee:b9:c7:ee:7e: 31:58:ca:8b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yFSUpXseN+EsEUBD3jecMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjYwMTAxMTgxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2E2MDJlNDkzZWEwYzNmNTU1YjU4YjNjMzA5MzA4ZTZhYTdlYmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZ778oKhirzl+FsfJmPBzuCr9K/D Q+OhbXycHgk7Qd2KT40JNEW4U7wmgDajtwvkuS2eZXO4wdXXU19cUwTRNflOMGWR VhWsdZ+DU/iz2L8Vk8usqwdjh5W66RRdOPhnmjsIchBg2iOpnwXWRfWzs7C6nGHr U+J6twEvgM9Rz+1KIdFD3B9/5ntK8dHjIC09NI0PJnI8VDEbFX8MgczeAk336GmV ecI+TEzv5XerR0KYOdP5VuthhYg6lD6FeWgorFtJZzch3kKxPZAEu76vph4oSUmr yGY1l9CfRO635pctDc7KlTyEMQRuruSzfDomxiUiKIA9ZS6wHzroivEnHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFymAuST6gw/VVtYs8MJMI5qp+uuMB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEvWEtZQzVKUHFERDlWVzFpend3a3dqbXFuNjY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQADmbpMA0G CSqGSIb3DQEBCwUAA4IBAQBhm7D6XV9ZpbGYAGg9I934zGJlNk8hAMp85dCdJW5y BYj/PwFCRLg4UPvdV+L+rTBuFRDxD0cjTqlGAk+U9eUvwGEqJqT6pbQQvxGT4cpk dtDfHxSCh0r8EhDdu+QHjqoHBF3SCH6ugzvDIrpFMCa4ZOi+sL14/4/+l0s/e1pR zTvhoPzvSXaMa/5sKe7/C/IHp1uEgnzEejqilNtHghN7X4skBX15FlEX/K6KJ89l iN1gJIcn3n/pujnazeqLPxrk8417YxvPJCO5jQCd+wpPBVri3ZjT9FMDqVRHcwzN IbAVngx/kjIEJeyWspSN9rff6BfbR+wF7rnH7n4xWMqL -----END CERTIFICATE-----Generated at Sun Jan 25 11:44:22 2026 by rpki-client