This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/XiniKmHk48PTd4AWdTNpS7pWYPM.roa File: XiniKmHk48PTd4AWdTNpS7pWYPM.roa (raw, json) Hash identifier: LdHpQkrTcb3/m2EigJdifn4oDDnwzMObaFnPm4GQZsE= Subject key identifier: 5E:29:E2:2A:61:E4:E3:C3:D3:77:80:16:75:33:69:4B:BA:56:60:F3 Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748 Certificate serial: 019B7911323A8E3DCAA6A04E4A796FCD7C24 Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/XiniKmHk48PTd4AWdTNpS7pWYPM.roa Signing time: Thu 01 Jan 2026 10:18:48 +0000 ROA not before: Thu 01 Jan 2026 10:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50443 IP address blocks: 109.236.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:32:3a:8e:3d:ca:a6:a0:4e:4a:79:6f:cd:7c:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748 Validity Not Before: Jan 1 10:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e29e22a61e4e3c3d37780167533694bba5660f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:87:a5:b6:e8:06:91:35:c7:e8:b6:76:b5:d6: 1f:e4:bb:5c:8c:52:91:46:75:6f:85:38:93:74:de: f1:63:1e:af:26:53:af:03:b7:d6:9e:41:fd:77:60: ea:46:fd:db:24:9b:cc:aa:97:1a:05:f2:d2:10:2a: 39:9b:b6:e6:b9:ca:d7:e1:be:7e:51:87:a1:36:29: e0:9f:b0:56:c3:5f:bc:a4:76:70:bf:b9:09:c6:c7: 9d:b3:32:a5:b8:fd:58:73:ff:fe:dc:e0:76:4b:ed: 28:3b:cc:7d:b9:ae:80:08:82:c1:33:0c:05:7f:66: b7:64:fd:c4:77:e9:a0:4c:75:e1:a5:bb:ba:42:82: b3:84:af:c6:e2:17:1b:bf:0f:ce:65:92:2e:31:b3: 3f:95:39:b8:7f:e9:3d:6e:fc:be:0c:c4:50:69:29: a9:67:50:9e:bf:02:90:c9:2c:23:30:99:2c:78:16: 6f:b5:b2:aa:d4:19:2c:17:6c:de:4b:1d:de:3a:b0: b6:d3:e3:e1:fc:4e:37:e0:b3:7a:28:42:ad:0d:f3: 7d:4a:eb:bc:c9:bf:75:6f:bf:47:30:85:bb:b8:29: 30:79:04:3a:f2:bd:55:3f:7e:87:27:61:a6:aa:ce: 31:62:cb:d8:5f:49:aa:2c:17:95:1a:bf:1f:c1:2b: d9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:29:E2:2A:61:E4:E3:C3:D3:77:80:16:75:33:69:4B:BA:56:60:F3 X509v3 Authority Key Identifier: keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/XiniKmHk48PTd4AWdTNpS7pWYPM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.236.254.0/23 Signature Algorithm: sha256WithRSAEncryption 25:f9:54:2b:14:71:00:66:c3:2a:b3:c8:87:85:d5:16:d4:3c: fe:4b:de:bf:42:af:98:8e:a5:c0:af:0c:ae:f0:7f:e9:72:2f: 0d:ef:e0:05:e8:02:eb:1a:9e:95:50:4d:7b:66:a8:8b:9a:9c: ea:7b:4d:8f:47:2b:78:94:4c:cb:ff:bb:a0:8e:83:af:f1:f3: 1e:c8:7f:42:d0:9e:9e:8c:33:e6:08:59:78:33:bb:d7:f2:9d: 17:81:c6:70:a8:ce:8d:7b:75:ed:7a:8f:a5:3d:f2:05:5e:12: c8:cc:2a:b7:da:11:46:e3:c3:72:e7:c7:31:c0:55:da:35:77: c1:05:1b:d2:56:af:a5:e2:5b:99:b8:80:a5:5a:01:da:dd:96: 08:ec:c5:40:d5:fb:82:a0:bf:8e:93:14:5f:3b:fe:37:a6:62: ad:d9:d0:b4:37:ad:75:72:6f:91:29:f8:02:dd:ec:f1:75:82: e9:8f:f2:15:4a:43:05:01:37:ad:9a:02:8d:97:bf:fa:ef:52: 6c:54:a8:2b:52:bb:06:05:fa:eb:34:6b:22:17:9b:74:b3:cc: a3:9a:1d:7c:24:77:94:f4:8c:e0:dc:16:45:63:b6:f8:b5:c1: 4a:ce:25:7b:9b:49:f9:bb:7c:c1:1c:8a:21:32:a0:4b:86:2a: 1d:15:67:23 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ETI6jj3KpqBOSnlvzXwkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYzM0MmMwNmFhY2MzNTlkMzk0MzlmZjU4ZGVmYThlYTE4 NzU3NDgwHhcNMjYwMTAxMTAxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTI5ZTIyYTYxZTRlM2MzZDM3NzgwMTY3NTMzNjk0YmJhNTY2MGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYeltugGkTXH6LZ2tdYf5LtcjFKR RnVvhTiTdN7xYx6vJlOvA7fWnkH9d2DqRv3bJJvMqpcaBfLSECo5m7bmucrX4b5+ UYehNingn7BWw1+8pHZwv7kJxsedszKluP1Yc//+3OB2S+0oO8x9ua6ACILBMwwF f2a3ZP3Ed+mgTHXhpbu6QoKzhK/G4hcbvw/OZZIuMbM/lTm4f+k9bvy+DMRQaSmp Z1CevwKQySwjMJkseBZvtbKq1BksF2zeSx3eOrC20+Ph/E434LN6KEKtDfN9Suu8 yb91b79HMIW7uCkweQQ68r1VP36HJ2Gmqs4xYsvYX0mqLBeVGr8fwSvZjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF4p4iph5OPD03eAFnUzaUu6VmDzMB8GA1UdIwQY MBaAFDPDQsBqrMNZ05Q5/1je+o6hh1dIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUt N2YyMzMzNjA0OTk3LzEvWGluaUttSGs0OFBUZDRBV2RUTnBTN3BXWVBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUtN2YyMzMzNjA0OTk3 LzEvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbez+MA0G CSqGSIb3DQEBCwUAA4IBAQAl+VQrFHEAZsMqs8iHhdUW1Dz+S96/Qq+YjqXArwyu 8H/pci8N7+AF6ALrGp6VUE17ZqiLmpzqe02PRyt4lEzL/7ugjoOv8fMeyH9C0J6e jDPmCFl4M7vX8p0XgcZwqM6Ne3Xteo+lPfIFXhLIzCq32hFG48Ny58cxwFXaNXfB BRvSVq+l4luZuIClWgHa3ZYI7MVA1fuCoL+OkxRfO/43pmKt2dC0N611cm+RKfgC 3ezxdYLpj/IVSkMFATetmgKNl7/671JsVKgrUrsGBfrrNGsiF5t0s8yjmh18JHeU 9Izg3BZFY7b4tcFKziV7m0n5u3zBHIohMqBLhiodFWcj -----END CERTIFICATE-----Generated at Mon Jan 26 07:40:24 2026 by rpki-client