This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/XbFlHyCBOID9fwZAWWJUvKR3I1U.roa File: XbFlHyCBOID9fwZAWWJUvKR3I1U.roa (raw, json) Hash identifier: d1XG1P6bU90g/zeLcvn00HiiT+uT6qBEWhZA1fPBjyc= Subject key identifier: 5D:B1:65:1F:20:81:38:80:FD:7F:06:40:59:62:54:BC:A4:77:23:55 Certificate issuer: /CN=e2e71749f8029253901f71d4641039e90f1a97fa Certificate serial: 019BEB3FE03BF761E82C7462AA6EB517A0C0 Authority key identifier: E2:E7:17:49:F8:02:92:53:90:1F:71:D4:64:10:39:E9:0F:1A:97:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ucXSfgCklOQH3HUZBA56Q8al_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/XbFlHyCBOID9fwZAWWJUvKR3I1U.roa Signing time: Fri 23 Jan 2026 14:26:30 +0000 ROA not before: Fri 23 Jan 2026 14:26:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1299 IP address blocks: 193.5.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft rsync://rpki.ripe.net/repository/DEFAULT/4ucXSfgCklOQH3HUZBA56Q8al_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:eb:3f:e0:3b:f7:61:e8:2c:74:62:aa:6e:b5:17:a0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2e71749f8029253901f71d4641039e90f1a97fa Validity Not Before: Jan 23 14:26:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5db1651f20813880fd7f0640596254bca4772355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:47:e6:b7:f8:d8:84:29:58:c7:8c:12:95:a4: 2e:9a:cf:fe:62:fc:73:a7:f5:a3:a0:fe:96:04:50: 2c:92:de:c3:e7:f4:2a:c8:41:b4:4d:82:2c:3a:f4: b5:9c:de:10:63:df:31:40:54:40:b2:1d:1f:94:53: 39:96:73:49:7c:cd:ca:30:c5:96:eb:b9:11:05:5e: fe:22:f8:ab:96:67:98:0a:eb:b0:02:8f:53:ad:47: 96:ca:50:94:c7:f5:3f:4a:bd:a4:99:44:b0:a8:a6: 05:50:64:bb:7c:8d:c7:b3:60:34:86:fc:b2:b2:22: 15:8c:3e:cd:58:b9:34:32:85:6f:7a:4b:f3:51:e1: 19:64:59:bc:66:92:06:e8:02:e8:e0:1f:77:ef:59: 27:db:66:b5:b1:1a:e7:f3:9c:00:08:82:fb:ac:44: 81:8e:37:50:7d:11:cc:31:5f:46:a6:a7:f5:bf:1e: f1:05:11:7b:be:c6:e0:56:ae:84:93:3e:be:1f:15: 76:82:4f:87:87:68:67:6a:fe:5a:af:c5:a4:33:74: 2c:f1:79:54:89:e9:83:a4:33:ff:d7:ea:f5:6a:ba: 67:db:6f:80:0e:99:1a:cc:ab:2e:8f:2f:b2:cf:07: 45:d6:81:01:1c:99:99:1e:98:81:2e:b7:68:ca:db: 38:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:B1:65:1F:20:81:38:80:FD:7F:06:40:59:62:54:BC:A4:77:23:55 X509v3 Authority Key Identifier: keyid:E2:E7:17:49:F8:02:92:53:90:1F:71:D4:64:10:39:E9:0F:1A:97:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ucXSfgCklOQH3HUZBA56Q8al_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/XbFlHyCBOID9fwZAWWJUvKR3I1U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.5.123.0/24 Signature Algorithm: sha256WithRSAEncryption 85:6d:0a:3c:42:07:18:c2:f3:b5:c2:2a:fa:33:bf:bb:22:93: e1:30:46:99:7b:fb:f0:62:04:7e:63:62:30:76:fa:1d:ce:7a: f8:29:55:46:d6:22:b7:93:16:1f:9b:c8:b5:18:c3:26:0d:9b: 6d:a5:eb:bc:e9:ea:4c:d7:b5:d5:54:45:7f:f3:3f:84:ae:bd: d3:83:c3:eb:cc:d7:8a:4d:a1:ad:41:45:33:fd:b3:21:62:fd: cd:27:7a:af:32:07:a6:7d:50:ba:5b:e5:2c:39:b8:db:99:d7: 7e:f3:b8:8e:e3:e3:a5:16:f9:37:b3:e0:17:8b:05:24:a1:6a: 13:7f:d5:c4:b6:ad:51:0b:d0:b8:b7:a4:35:1f:2f:9b:1b:a1: ff:11:79:39:28:a7:54:49:09:e1:d1:92:97:ed:08:f1:d6:ba: e2:d9:2c:34:08:00:56:96:ee:e4:56:a9:9f:31:1c:db:ae:71: 68:82:bf:d5:95:3c:23:04:9d:8d:ce:d4:0f:2a:9c:f4:13:7e: 8f:60:a1:7a:3e:78:1c:da:8c:d8:a6:e5:e1:82:58:5c:fe:74: 8f:d2:46:99:e8:08:06:99:df:83:fd:98:36:7f:c8:c1:c7:69: f1:91:70:58:37:21:3a:7a:9e:79:e5:3d:c3:f7:60:22:52:2f: c6:af:a1:2d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvrP+A792HoLHRiqm61F6DAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZTcxNzQ5ZjgwMjkyNTM5MDFmNzFkNDY0MTAzOWU5MGYx YTk3ZmEwHhcNMjYwMTIzMTQyNjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZGIxNjUxZjIwODEzODgwZmQ3ZjA2NDA1OTYyNTRiY2E0NzcyMzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEfmt/jYhClYx4wSlaQums/+Yvxz p/WjoP6WBFAskt7D5/QqyEG0TYIsOvS1nN4QY98xQFRAsh0flFM5lnNJfM3KMMWW 67kRBV7+IvirlmeYCuuwAo9TrUeWylCUx/U/Sr2kmUSwqKYFUGS7fI3Hs2A0hvyy siIVjD7NWLk0MoVvekvzUeEZZFm8ZpIG6ALo4B9371kn22a1sRrn85wACIL7rESB jjdQfRHMMV9Gpqf1vx7xBRF7vsbgVq6Ekz6+HxV2gk+Hh2hnav5ar8WkM3Qs8XlU iemDpDP/1+r1arpn22+ADpkazKsujy+yzwdF1oEBHJmZHpiBLrdoyts4mQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF2xZR8ggTiA/X8GQFliVLykdyNVMB8GA1UdIwQY MBaAFOLnF0n4ApJTkB9x1GQQOekPGpf6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHVjWFNmZ0NrbE9RSDNIVVpCQTU2UThhbF9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8zMzEwNGEtYTkwMy00Mjc4LWJjNjAt OGFkMjMwMThhNWFkLzEvWGJGbEh5Q0JPSUQ5ZndaQVdXSlV2S1IzSTFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8zMzEwNGEtYTkwMy00Mjc4LWJjNjAtOGFkMjMwMThhNWFk LzEvNHVjWFNmZ0NrbE9RSDNIVVpCQTU2UThhbF9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQV7MA0G CSqGSIb3DQEBCwUAA4IBAQCFbQo8QgcYwvO1wir6M7+7IpPhMEaZe/vwYgR+Y2Iw dvodznr4KVVG1iK3kxYfm8i1GMMmDZttpeu86epM17XVVEV/8z+Err3Tg8PrzNeK TaGtQUUz/bMhYv3NJ3qvMgemfVC6W+UsObjbmdd+87iO4+OlFvk3s+AXiwUkoWoT f9XEtq1RC9C4t6Q1Hy+bG6H/EXk5KKdUSQnh0ZKX7Qjx1rri2Sw0CABWlu7kVqmf MRzbrnFogr/VlTwjBJ2NztQPKpz0E36PYKF6Pngc2ozYpuXhglhc/nSP0kaZ6AgG md+D/Zg2f8jBx2nxkXBYNyE6ep555T3D92AiUi/Gr6Et -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:32 2026 by rpki-client