This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/x0Q_UA5bt6672Dm9-Yp-CrnW3nQ.roa File: x0Q_UA5bt6672Dm9-Yp-CrnW3nQ.roa (raw, json) Hash identifier: ITlCsYh8cqhggq4VF3aslLQZ6vv7ci4qGlAuU+En704= Subject key identifier: C7:44:3F:50:0E:5B:B7:AE:BB:D8:39:BD:F9:8A:7E:0A:B9:D6:DE:74 Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Certificate serial: 019B7DC9E7521EE144764659BA1E0B4EB2A7 Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/x0Q_UA5bt6672Dm9-Yp-CrnW3nQ.roa Signing time: Fri 02 Jan 2026 08:19:02 +0000 ROA not before: Fri 02 Jan 2026 08:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 133865 IP address blocks: 193.118.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:e7:52:1e:e1:44:76:46:59:ba:1e:0b:4e:b2:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Validity Not Before: Jan 2 08:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7443f500e5bb7aebbd839bdf98a7e0ab9d6de74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:53:5d:df:01:8c:c1:15:ff:09:38:f9:4a:b1: 64:a9:ad:50:79:39:0f:38:fc:fc:e9:16:a6:14:a0: d7:55:a9:ff:93:69:95:00:bd:0f:d1:c4:3a:99:b1: 99:ac:a7:4c:fe:c9:d5:1a:7a:77:92:9c:4a:85:28: de:f7:dc:67:97:92:64:0e:2c:36:27:b3:79:09:a0: fb:87:68:f6:8b:28:74:72:c2:08:00:46:33:cd:69: a5:a0:76:92:a5:fd:4d:5b:c5:81:94:33:02:c7:a0: dd:bf:1d:57:12:ec:d6:95:2b:79:a5:93:9d:0d:af: 3e:07:1e:63:af:16:1b:6e:a6:58:c7:3c:a9:70:6d: 6f:85:b7:b6:5f:b3:d9:54:bc:9f:f2:9b:94:ca:f8: b5:5c:5a:e7:e5:16:76:17:c5:14:3f:ab:fa:2a:b7: 9c:cb:b9:1c:c4:3a:6a:33:c0:94:58:bf:14:d3:33: 99:31:ec:cd:bf:f9:b1:70:9d:e9:d4:97:3d:e4:58: 7d:42:a9:66:c5:aa:b0:90:7e:9e:9a:2f:87:f4:37: 26:9b:6d:da:00:ae:3e:58:52:f6:0d:ed:8e:6f:3d: 21:9c:f2:a3:96:8c:de:57:f8:09:e1:fb:3e:d1:78: bd:0e:8b:1e:7e:ac:06:41:94:02:7c:a1:a1:7d:33: 44:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:44:3F:50:0E:5B:B7:AE:BB:D8:39:BD:F9:8A:7E:0A:B9:D6:DE:74 X509v3 Authority Key Identifier: keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/x0Q_UA5bt6672Dm9-Yp-CrnW3nQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.118.33.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:41:18:34:cc:7c:4c:2b:d1:15:0c:a5:b7:67:1a:6b:a2:23: 4f:67:a6:8f:7c:4b:ec:3f:67:fd:30:3d:5e:0c:cb:29:46:04: cb:4c:c1:af:40:e8:c5:9e:3b:fb:f8:62:84:24:59:aa:62:1d: 56:eb:63:49:0b:47:ed:0b:ea:f6:2f:69:9a:0e:e2:75:92:4b: ee:78:0d:4a:4b:19:88:1b:aa:02:69:76:95:ea:1f:ae:11:ff: 94:56:d8:0c:40:2d:f8:7b:f6:8c:99:f8:70:68:5f:73:76:18: 4a:74:fe:87:1d:b6:26:03:f7:e9:3e:d2:e2:3c:60:b1:93:38: f6:3f:63:dc:69:ec:d5:82:f2:52:30:cf:b5:04:36:ed:ae:c6: 7a:89:91:89:8c:97:ae:3b:a9:b2:e3:19:08:72:e5:db:a9:a0: 32:7b:e0:57:f6:3e:0c:dc:86:20:5d:b3:11:fb:99:12:aa:93: 68:49:47:49:28:dd:51:c5:43:bc:39:82:8b:21:ad:52:4b:77: 1a:db:1f:b3:35:73:5d:07:87:5a:b9:be:f9:9c:4e:53:fd:92: ad:ea:92:bc:89:8b:74:78:5f:53:e3:e7:57:20:00:fa:77:dc: 84:40:16:5d:3b:e9:73:c7:96:54:40:76:9a:a8:6c:6e:5b:1b: 70:a7:52:b8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yedSHuFEdkZZuh4LTrKnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1Nzc2Yzc3ZjhlYmU3MDk0Y2EwMDdhY2UxYTljMGJmZGMy YjNhZWMwHhcNMjYwMTAyMDgxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzQ0M2Y1MDBlNWJiN2FlYmJkODM5YmRmOThhN2UwYWI5ZDZkZTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFNd3wGMwRX/CTj5SrFkqa1QeTkP OPz86RamFKDXVan/k2mVAL0P0cQ6mbGZrKdM/snVGnp3kpxKhSje99xnl5JkDiw2 J7N5CaD7h2j2iyh0csIIAEYzzWmloHaSpf1NW8WBlDMCx6Ddvx1XEuzWlSt5pZOd Da8+Bx5jrxYbbqZYxzypcG1vhbe2X7PZVLyf8puUyvi1XFrn5RZ2F8UUP6v6Krec y7kcxDpqM8CUWL8U0zOZMezNv/mxcJ3p1Jc95Fh9QqlmxaqwkH6emi+H9Dcmm23a AK4+WFL2De2Obz0hnPKjlozeV/gJ4fs+0Xi9DosefqwGQZQCfKGhfTNEswIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMdEP1AOW7euu9g5vfmKfgq51t50MB8GA1UdIwQY MBaAFCV3bHf46+cJTKAHrOGpwL/cKzrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQt ZTdkYWVjMTk0YTY5LzEveDBRX1VBNWJ0NjY3MkRtOS1ZcC1Dcm5XM25RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQtZTdkYWVjMTk0YTY5 LzEvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwXYhMA0G CSqGSIb3DQEBCwUAA4IBAQBaQRg0zHxMK9EVDKW3ZxproiNPZ6aPfEvsP2f9MD1e DMspRgTLTMGvQOjFnjv7+GKEJFmqYh1W62NJC0ftC+r2L2maDuJ1kkvueA1KSxmI G6oCaXaV6h+uEf+UVtgMQC34e/aMmfhwaF9zdhhKdP6HHbYmA/fpPtLiPGCxkzj2 P2PcaezVgvJSMM+1BDbtrsZ6iZGJjJeuO6my4xkIcuXbqaAye+BX9j4M3IYgXbMR +5kSqpNoSUdJKN1RxUO8OYKLIa1SS3ca2x+zNXNdB4daub75nE5T/ZKt6pK8iYt0 eF9T4+dXIAD6d9yEQBZdO+lzx5ZUQHaaqGxuWxtwp1K4 -----END CERTIFICATE-----Generated at Sun Jan 25 13:54:33 2026 by rpki-client