This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/rAg-Xvvi5wV3Gqsl1HoIhw1oC1w.roa File: rAg-Xvvi5wV3Gqsl1HoIhw1oC1w.roa (raw, json) Hash identifier: 5EUNypVfD+6Rj3HsX5Xbf/i9r6Q617RtkE29csexlbc= Subject key identifier: AC:08:3E:5E:FB:E2:E7:05:77:1A:AB:25:D4:7A:08:87:0D:68:0B:5C Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA7567F91EEBFB92CC91A9934E924EC Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/rAg-Xvvi5wV3Gqsl1HoIhw1oC1w.roa Signing time: Fri 02 Jan 2026 12:20:54 +0000 ROA not before: Fri 02 Jan 2026 12:20:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8557 IP address blocks: 195.18.32.0/19 maxlen: 19 195.18.32.0/21 maxlen: 21 195.18.40.0/21 maxlen: 21 195.18.48.0/21 maxlen: 21 195.18.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:56:7f:91:ee:bf:b9:2c:c9:1a:99:34:e9:24:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:20:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac083e5efbe2e705771aab25d47a08870d680b5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c3:66:0a:aa:42:7b:e9:ca:bf:30:bb:27:1d: 18:5f:70:bd:4b:7f:b9:0a:7a:93:c0:2f:eb:b8:ff: 27:6d:82:ff:9c:2a:f4:90:8f:19:42:49:4f:5b:4c: 0a:fb:59:5b:d9:10:e6:15:b1:13:29:10:81:e1:1e: 44:eb:3a:e1:e2:77:4a:6f:32:74:0e:6e:c1:62:59: 6b:5a:5e:f0:00:c8:44:6b:31:4f:67:ac:c7:08:36: 69:f3:4e:61:55:33:4e:49:03:1d:ff:b6:c5:dd:78: f0:93:eb:52:ba:67:3b:b0:fc:be:18:00:84:64:f1: ab:cc:a0:29:a3:0a:64:01:9f:00:77:71:4e:43:f7: 9c:ba:93:54:1f:d6:b1:fe:54:08:69:9a:4f:df:af: 19:e8:fa:30:4e:ce:b1:d8:80:55:64:93:b4:ae:38: ae:da:29:f2:49:2a:1c:43:6c:6d:21:66:9e:85:61: 27:39:12:64:94:aa:31:71:91:db:5a:9f:cb:00:7c: 1a:77:d1:eb:e3:84:0e:29:21:95:1f:7e:0c:d5:7d: af:3f:22:4e:e1:66:81:0a:5b:93:a0:bf:7e:3b:30: 62:e4:65:f2:b9:6e:63:d6:29:8e:e2:c8:0b:7c:6c: 0d:26:32:ec:76:b2:c7:41:58:aa:94:f1:76:77:fe: c8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:08:3E:5E:FB:E2:E7:05:77:1A:AB:25:D4:7A:08:87:0D:68:0B:5C X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/rAg-Xvvi5wV3Gqsl1HoIhw1oC1w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.18.32.0/19 Signature Algorithm: sha256WithRSAEncryption 33:ac:64:fd:e4:b4:d1:02:54:a8:d9:26:38:9f:81:93:d2:6c: 0c:b8:dd:3a:15:a3:28:7a:0d:3e:d5:be:23:8a:24:80:f9:1a: ad:f4:d6:05:ab:90:b0:5c:63:fd:81:e4:d4:d6:86:3d:79:e7: 34:2e:ea:62:34:7e:2f:3f:4d:01:0a:86:46:0b:08:dc:15:e4: f4:90:69:1d:cf:5f:63:25:46:4a:f5:7b:8a:b4:e1:b8:10:10: ae:c4:d0:6a:65:cc:f0:c8:28:de:c6:2a:58:de:77:98:aa:48: fa:b6:77:f5:b0:f4:f5:bc:a4:55:96:f3:d3:af:97:e6:df:bb: 65:77:97:dd:22:17:ae:79:fd:22:68:27:05:65:d4:42:2f:1c: 0a:a4:3f:31:bd:7b:ac:c1:9b:c7:f5:94:a7:5f:49:26:74:a4: 29:0e:28:4f:25:e1:1e:79:a9:6e:10:9f:7d:5e:be:74:de:07: 64:59:8a:30:e3:1f:7a:3f:67:11:57:b9:c4:24:7b:95:86:63: 8f:2b:51:cf:bc:e0:30:48:9e:3e:36:8c:2a:62:f4:64:05:39: 77:b7:9d:19:4a:e5:78:0d:5b:02:dc:8b:8b:92:58:ce:f4:5c: f4:47:11:6a:36:22:79:a4:e2:16:12:d8:f7:22:4e:48:93:4b: d6:c2:8e:43 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p1Z/ke6/uSzJGpk06STsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzA4M2U1ZWZiZTJlNzA1NzcxYWFiMjVkNDdhMDg4NzBkNjgwYjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMNmCqpCe+nKvzC7Jx0YX3C9S3+5 CnqTwC/ruP8nbYL/nCr0kI8ZQklPW0wK+1lb2RDmFbETKRCB4R5E6zrh4ndKbzJ0 Dm7BYllrWl7wAMhEazFPZ6zHCDZp805hVTNOSQMd/7bF3Xjwk+tSumc7sPy+GACE ZPGrzKApowpkAZ8Ad3FOQ/ecupNUH9ax/lQIaZpP368Z6PowTs6x2IBVZJO0rjiu 2inySSocQ2xtIWaehWEnORJklKoxcZHbWp/LAHwad9Hr44QOKSGVH34M1X2vPyJO 4WaBCluToL9+OzBi5GXyuW5j1imO4sgLfGwNJjLsdrLHQViqlPF2d/7IwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKwIPl774ucFdxqrJdR6CIcNaAtcMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvckFnLVh2dmk1d1YzR3FzbDFIb0lodzFvQzF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFwxIgMA0G CSqGSIb3DQEBCwUAA4IBAQAzrGT95LTRAlSo2SY4n4GT0mwMuN06FaMoeg0+1b4j iiSA+Rqt9NYFq5CwXGP9geTU1oY9eec0LupiNH4vP00BCoZGCwjcFeT0kGkdz19j JUZK9XuKtOG4EBCuxNBqZczwyCjexipY3neYqkj6tnf1sPT1vKRVlvPTr5fm37tl d5fdIheuef0iaCcFZdRCLxwKpD8xvXuswZvH9ZSnX0kmdKQpDihPJeEeealuEJ99 Xr503gdkWYow4x96P2cRV7nEJHuVhmOPK1HPvOAwSJ4+NowqYvRkBTl3t50ZSuV4 DVsC3IuLkljO9Fz0RxFqNiJ5pOIWEtj3Ik5Ik0vWwo5D -----END CERTIFICATE-----Generated at Mon Jan 26 04:41:50 2026 by rpki-client