This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/XnoeLIkYNpYQWVse-yX5iRjTc1s.roa File: XnoeLIkYNpYQWVse-yX5iRjTc1s.roa (raw, json) Hash identifier: ptKlPyES08hICN66dmlPtZNxNra0j4is1IcwHdPzbr4= Subject key identifier: 5E:7A:1E:2C:89:18:36:96:10:59:5B:1E:FB:25:F9:89:18:D3:73:5B Certificate issuer: /CN=dbbf37909ce17ba53ad90a8632377a5d938743e5 Certificate serial: 019B7EA6B777C00BD275AC5E0DAA60186C54 Authority key identifier: DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/XnoeLIkYNpYQWVse-yX5iRjTc1s.roa Signing time: Fri 02 Jan 2026 12:20:13 +0000 ROA not before: Fri 02 Jan 2026 12:20:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39738 IP address blocks: 82.86.0.0/16 maxlen: 16 82.86.0.0/19 maxlen: 19 82.86.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:b7:77:c0:0b:d2:75:ac:5e:0d:aa:60:18:6c:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbbf37909ce17ba53ad90a8632377a5d938743e5 Validity Not Before: Jan 2 12:20:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e7a1e2c8918369610595b1efb25f98918d3735b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1b:58:21:f9:ec:4f:83:26:07:24:b7:30:35: 33:3a:0b:03:37:c9:e6:df:2f:f9:70:0d:20:74:e3: b3:d4:ef:9b:81:f6:89:87:e0:e9:74:74:9b:3c:1c: 25:c4:d3:91:f9:3e:5d:39:3b:7f:59:47:b3:c4:98: 1e:1f:23:35:f6:90:e4:02:64:91:c2:16:d9:b8:5d: 13:e5:3b:09:a7:1d:14:82:fc:40:1c:29:34:d3:63: 5f:94:45:c4:f4:63:09:ed:14:53:c1:61:79:47:03: 50:cc:c0:04:d8:27:69:0c:0c:bb:e7:f4:a0:33:61: cc:d0:9a:8a:82:02:30:db:ec:8d:e6:92:57:80:9d: 5b:35:b0:71:28:e8:22:15:06:14:b4:22:7f:b6:ad: 39:b4:35:e6:e6:56:46:11:4f:05:58:3f:4c:cd:1d: f4:8a:eb:4f:53:8c:1b:23:9a:84:7b:a9:18:f6:46: b9:6b:2d:2c:c7:37:63:74:14:66:0c:b5:ac:4c:f1: 86:ce:4e:d6:1a:1f:76:e2:a8:91:55:4a:88:0b:c0: 43:12:76:bc:3a:66:30:cf:a8:48:42:21:23:3f:7e: 23:dd:1d:f3:33:c7:b2:48:24:56:95:68:be:ec:36: 74:30:41:b9:a2:aa:4b:b8:55:45:99:10:5c:98:9f: e1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:7A:1E:2C:89:18:36:96:10:59:5B:1E:FB:25:F9:89:18:D3:73:5B X509v3 Authority Key Identifier: keyid:DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/XnoeLIkYNpYQWVse-yX5iRjTc1s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.86.0.0/16 Signature Algorithm: sha256WithRSAEncryption 21:a4:e9:0f:7f:09:08:f6:92:31:dd:38:3d:4a:b0:e1:6a:b7: 34:ee:1d:0b:dd:f2:2c:da:9e:00:4f:72:92:25:97:d3:ff:30: 22:9c:8e:84:5c:94:57:e2:89:0b:f7:97:85:04:68:bf:c8:09: ba:9d:15:27:d6:cf:58:65:16:a2:6b:82:e3:3f:f5:2e:64:29: 5a:b7:e0:71:9a:ad:4a:f8:60:15:37:f1:14:6b:5f:1d:af:51: d5:7a:8c:b1:76:b9:37:b7:a3:e6:ca:a1:d1:3c:42:2a:02:06: f3:35:d2:44:f9:fb:2c:c5:54:9e:9f:a1:2b:5d:3a:d7:22:da: df:3f:65:36:16:84:f7:e6:9b:a4:57:60:dc:20:c3:52:83:8b: 61:4e:e0:af:28:1a:70:a5:2c:74:ec:ca:81:9e:5c:16:1b:d9: da:4a:18:26:8a:de:4e:a5:41:ab:37:1e:41:5e:93:cb:17:37: 2f:e8:7a:c6:35:ff:5e:fa:f4:47:99:c9:e3:c9:f6:54:af:0c: de:c8:6a:38:95:5e:f8:81:7c:43:f9:92:11:00:96:bf:e4:62: 96:e8:89:30:56:b8:c0:47:6c:d8:d6:81:c6:76:5f:52:7f:49: 5d:e0:47:1c:81:f0:04:7a:69:d5:c7:c9:6a:28:8a:36:c7:16: 25:6d:2d:df -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt+prd3wAvSdaxeDapgGGxUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiYmYzNzkwOWNlMTdiYTUzYWQ5MGE4NjMyMzc3YTVkOTM4 NzQzZTUwHhcNMjYwMTAyMTIyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTdhMWUyYzg5MTgzNjk2MTA1OTViMWVmYjI1Zjk4OTE4ZDM3MzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRtYIfnsT4MmByS3MDUzOgsDN8nm 3y/5cA0gdOOz1O+bgfaJh+DpdHSbPBwlxNOR+T5dOTt/WUezxJgeHyM19pDkAmSR whbZuF0T5TsJpx0UgvxAHCk002NflEXE9GMJ7RRTwWF5RwNQzMAE2CdpDAy75/Sg M2HM0JqKggIw2+yN5pJXgJ1bNbBxKOgiFQYUtCJ/tq05tDXm5lZGEU8FWD9MzR30 iutPU4wbI5qEe6kY9ka5ay0sxzdjdBRmDLWsTPGGzk7WGh924qiRVUqIC8BDEna8 OmYwz6hIQiEjP34j3R3zM8eySCRWlWi+7DZ0MEG5oqpLuFVFmRBcmJ/hbQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFF56HiyJGDaWEFlbHvsl+YkY03NbMB8GA1UdIwQY MBaAFNu/N5Cc4XulOtkKhjI3el2Th0PlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjc4M2tKemhlNlU2MlFxR01qZDZYWk9IUS1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8xMzczYTAtOGMzZC00MjgzLWE1Y2Ut ODIyZWE0M2RjMThkLzEvWG5vZUxJa1lOcFlRV1ZzZS15WDVpUmpUYzFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8xMzczYTAtOGMzZC00MjgzLWE1Y2UtODIyZWE0M2RjMThk LzEvMjc4M2tKemhlNlU2MlFxR01qZDZYWk9IUS1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAUlYwDQYJ KoZIhvcNAQELBQADggEBACGk6Q9/CQj2kjHdOD1KsOFqtzTuHQvd8izangBPcpIl l9P/MCKcjoRclFfiiQv3l4UEaL/ICbqdFSfWz1hlFqJrguM/9S5kKVq34HGarUr4 YBU38RRrXx2vUdV6jLF2uTe3o+bKodE8QioCBvM10kT5+yzFVJ6foStdOtci2t8/ ZTYWhPfmm6RXYNwgw1KDi2FO4K8oGnClLHTsyoGeXBYb2dpKGCaK3k6lQas3HkFe k8sXNy/oesY1/1769EeZyePJ9lSvDN7IajiVXviBfEP5khEAlr/kYpboiTBWuMBH bNjWgcZ2X1J/SV3gRxyB8AR6adXHyWooijbHFiVtLd8= -----END CERTIFICATE-----Generated at Sun Jan 25 23:54:28 2026 by rpki-client