This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/rXLqqCZ5hf5h4ak7-J87ANzm0Nk.roa File: rXLqqCZ5hf5h4ak7-J87ANzm0Nk.roa (raw, json) Hash identifier: mVE+xG0sJPMu7e4f75e+8AtJaA+JDEMEjzG8yFMRLQ4= Subject key identifier: AD:72:EA:A8:26:79:85:FE:61:E1:A9:3B:F8:9F:3B:00:DC:E6:D0:D9 Certificate issuer: /CN=0a220da9b6e295855b627fea610e1cb61646894b Certificate serial: 019B79ED5C78B36F7289ED0FF53BF73C5310 Authority key identifier: 0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/rXLqqCZ5hf5h4ak7-J87ANzm0Nk.roa Signing time: Thu 01 Jan 2026 14:19:17 +0000 ROA not before: Thu 01 Jan 2026 14:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196754 IP address blocks: 195.88.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.crl rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 17:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:5c:78:b3:6f:72:89:ed:0f:f5:3b:f7:3c:53:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a220da9b6e295855b627fea610e1cb61646894b Validity Not Before: Jan 1 14:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad72eaa8267985fe61e1a93bf89f3b00dce6d0d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a0:74:7e:23:61:3e:65:4e:2a:4b:4b:dc:d8: db:a0:9d:bb:2a:22:ce:94:7e:9b:58:1f:d5:d1:82: a8:0d:32:a0:28:d7:5c:86:47:27:a4:84:7f:ea:91: aa:c1:83:ae:d7:76:bc:31:51:f2:c8:c4:5b:75:64: 5b:bc:53:dd:3c:b5:aa:9b:96:39:84:ec:27:4b:7c: cf:72:59:06:ce:9d:cd:83:74:41:41:64:1d:b7:48: a1:a1:52:b5:d1:a5:49:3a:48:fc:e7:d8:6f:35:0e: a1:85:d9:4a:10:ae:91:17:28:36:cf:6a:6b:2d:59: bb:b5:7b:35:85:83:90:c4:08:70:8d:4d:4a:3d:75: 12:74:75:cd:af:31:4b:64:c1:36:11:8a:51:e0:0f: 97:a2:aa:3f:1d:b0:15:f0:da:ee:e5:d6:92:92:aa: 0d:55:40:9e:f6:a5:53:b3:3b:1e:35:83:88:72:01: aa:e8:8d:de:92:ae:c7:a8:d6:5c:8c:79:bf:c2:f7: fb:b1:94:f5:a9:11:33:ef:4b:69:0a:ba:dd:d4:40: e7:9d:e2:7d:4b:57:b8:a2:99:9e:d5:b0:cb:54:a4: af:c4:36:75:48:8f:2f:51:e5:08:46:e4:36:10:04: 0a:72:5f:43:18:7d:fe:b0:6d:e7:31:91:21:db:be: aa:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:72:EA:A8:26:79:85:FE:61:E1:A9:3B:F8:9F:3B:00:DC:E6:D0:D9 X509v3 Authority Key Identifier: keyid:0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/rXLqqCZ5hf5h4ak7-J87ANzm0Nk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.88.248.0/23 Signature Algorithm: sha256WithRSAEncryption 3a:c7:ed:cb:f2:95:8b:24:86:13:43:21:07:44:ea:91:a6:ef: dc:6d:5c:e4:76:d8:e3:fb:bf:69:1d:02:5d:51:27:e4:35:85: 22:50:c8:74:0c:99:64:17:1e:0a:68:c6:89:a5:cd:9e:09:76: be:bf:df:33:89:ef:b2:87:ee:1b:e3:93:ed:cf:82:66:e5:47: 49:3b:96:66:06:9c:c3:3e:12:d0:9d:b9:22:2a:a5:13:71:c4: 5e:00:13:80:51:a8:db:80:d6:b7:ee:61:c1:a7:00:3c:d8:85: 28:d4:44:7a:24:46:2b:b6:4f:67:c0:d2:da:06:55:4a:fb:16: 17:86:0c:d8:cc:6e:69:d9:74:f7:4f:8a:2b:7f:ff:51:97:af: 80:a2:15:01:4f:dd:39:53:31:62:39:e7:cb:08:fa:cf:95:9d: 74:0f:e2:7b:03:ad:53:50:bd:95:bb:f1:e0:d6:da:ab:6e:5e: 9a:28:85:0e:66:b8:88:c1:5a:92:a4:61:5e:25:e1:61:8e:41: b0:df:b5:a7:ab:7f:c8:00:8a:e5:4b:a3:dc:8d:9a:f1:b1:fc: 90:90:d5:5d:54:ea:65:bf:ea:67:7f:a2:df:16:06:35:16:d5: 34:7f:9a:fd:db:f2:fa:8f:79:04:50:85:e2:8c:ba:d9:d1:40: 60:82:39:2f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Vx4s29yie0P9Tv3PFMQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMjIwZGE5YjZlMjk1ODU1YjYyN2ZlYTYxMGUxY2I2MTY0 Njg5NGIwHhcNMjYwMTAxMTQxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDcyZWFhODI2Nzk4NWZlNjFlMWE5M2JmODlmM2IwMGRjZTZkMGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaB0fiNhPmVOKktL3NjboJ27KiLO lH6bWB/V0YKoDTKgKNdchkcnpIR/6pGqwYOu13a8MVHyyMRbdWRbvFPdPLWqm5Y5 hOwnS3zPclkGzp3Ng3RBQWQdt0ihoVK10aVJOkj859hvNQ6hhdlKEK6RFyg2z2pr LVm7tXs1hYOQxAhwjU1KPXUSdHXNrzFLZME2EYpR4A+Xoqo/HbAV8Nru5daSkqoN VUCe9qVTszseNYOIcgGq6I3ekq7HqNZcjHm/wvf7sZT1qREz70tpCrrd1EDnneJ9 S1e4opme1bDLVKSvxDZ1SI8vUeUIRuQ2EAQKcl9DGH3+sG3nMZEh276qnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK1y6qgmeYX+YeGpO/ifOwDc5tDZMB8GA1UdIwQY MBaAFAoiDam24pWFW2J/6mEOHLYWRolLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2lJTnFiYmlsWVZiWW5fcVlRNGN0aFpHaVVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS85ODE4MzktOWRmYS00MmQzLWFjYjEt NjIxODgyOGVkODk2LzEvclhMcXFDWjVoZjVoNGFrNy1KODdBTnptME5rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS85ODE4MzktOWRmYS00MmQzLWFjYjEtNjIxODgyOGVkODk2 LzEvQ2lJTnFiYmlsWVZiWW5fcVlRNGN0aFpHaVVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw1j4MA0G CSqGSIb3DQEBCwUAA4IBAQA6x+3L8pWLJIYTQyEHROqRpu/cbVzkdtjj+79pHQJd USfkNYUiUMh0DJlkFx4KaMaJpc2eCXa+v98zie+yh+4b45Ptz4Jm5UdJO5ZmBpzD PhLQnbkiKqUTccReABOAUajbgNa37mHBpwA82IUo1ER6JEYrtk9nwNLaBlVK+xYX hgzYzG5p2XT3T4orf/9Rl6+AohUBT905UzFiOefLCPrPlZ10D+J7A61TUL2Vu/Hg 1tqrbl6aKIUOZriIwVqSpGFeJeFhjkGw37Wnq3/IAIrlS6PcjZrxsfyQkNVdVOpl v+pnf6LfFgY1FtU0f5r92/L6j3kEUIXijLrZ0UBggjkv -----END CERTIFICATE-----Generated at Mon Jan 12 02:28:12 2026 by rpki-client