This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/Xi0wFjEOre9RA4tTNOrCW7j84CQ.roa File: Xi0wFjEOre9RA4tTNOrCW7j84CQ.roa (raw, json) Hash identifier: dMXXq8835CGDvSKCRiaPZT7fPXiuzTWQIYfaBs9t0aE= Subject key identifier: 5E:2D:30:16:31:0E:AD:EF:51:03:8B:53:34:EA:C2:5B:B8:FC:E0:24 Certificate issuer: /CN=844f7e66995c994a30d08687110bfd6a9a056134 Certificate serial: 019B7C11C082AF938AE79BD124294FBC0057 Authority key identifier: 84:4F:7E:66:99:5C:99:4A:30:D0:86:87:11:0B:FD:6A:9A:05:61:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/Xi0wFjEOre9RA4tTNOrCW7j84CQ.roa Signing time: Fri 02 Jan 2026 00:18:16 +0000 ROA not before: Fri 02 Jan 2026 00:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203777 IP address blocks: 109.205.198.0/24 maxlen: 24 194.104.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.crl rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 06:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:c0:82:af:93:8a:e7:9b:d1:24:29:4f:bc:00:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=844f7e66995c994a30d08687110bfd6a9a056134 Validity Not Before: Jan 2 00:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e2d3016310eadef51038b5334eac25bb8fce024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e5:6c:0d:e7:bf:be:f1:7d:78:50:47:1c:ae: f9:11:48:6d:f9:5e:06:b9:d5:60:f1:6e:02:68:64: 04:fd:8d:65:da:56:c8:36:50:5d:06:d3:99:4a:5e: 19:e0:b5:21:74:84:71:1f:3d:67:25:e4:20:75:f9: 4a:de:cd:3d:28:0f:c8:6b:6f:0f:94:b3:b1:ea:c9: f2:5b:3c:cf:f5:47:57:0e:31:19:b9:e6:3d:29:60: 90:94:bd:7d:62:7d:94:0f:01:7d:f1:c3:f5:71:94: da:c6:f5:47:3d:72:3c:20:2c:25:a7:bc:2e:7b:eb: ae:b3:41:50:39:96:38:44:87:be:8f:a0:d9:cd:6b: a2:a2:eb:3e:56:f5:7d:e3:08:e4:a3:53:da:81:7e: d2:4c:b8:fb:cf:13:9c:49:bc:01:f0:61:3f:ba:d6: c2:d6:97:d9:ec:7d:a4:9d:53:52:6d:3e:f7:c7:f6: 97:ec:83:58:f5:5e:e5:d6:05:48:6d:37:f9:20:fb: 1b:3d:a6:79:1a:59:cd:9c:f4:3e:33:8e:d1:42:49: 5c:d5:de:0a:ba:ae:3a:6f:88:9c:db:b7:6a:4b:e6: 53:e6:7f:a9:3b:3e:d3:48:f6:ba:66:11:4f:85:36: 57:4b:18:7f:2d:d0:41:e4:33:92:22:ea:b3:35:1a: 8a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:2D:30:16:31:0E:AD:EF:51:03:8B:53:34:EA:C2:5B:B8:FC:E0:24 X509v3 Authority Key Identifier: keyid:84:4F:7E:66:99:5C:99:4A:30:D0:86:87:11:0B:FD:6A:9A:05:61:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/Xi0wFjEOre9RA4tTNOrCW7j84CQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.205.198.0/24 194.104.121.0/24 Signature Algorithm: sha256WithRSAEncryption 44:97:b8:b6:7f:99:9a:35:85:d3:b1:63:b9:53:69:66:6c:21: aa:bd:dc:14:92:19:2d:c1:09:8c:71:54:00:5a:6d:4e:3d:ca: c3:a2:ea:15:8b:a0:d9:3d:03:b7:e4:6d:21:56:b5:26:74:3f: 9e:c6:63:a7:77:ec:d0:0a:a0:69:c7:b4:5d:91:46:4f:6b:fa: 55:c4:b0:53:b7:d0:d2:78:51:3d:11:8e:73:53:dc:9c:20:9a: 65:32:9a:d8:70:33:73:d2:2c:bb:75:66:b0:f0:9a:57:70:49: 14:50:93:91:fa:25:47:8c:6f:4f:c6:0c:d5:27:1f:97:dc:4c: 61:74:d2:34:fa:7f:07:81:a3:1d:b6:a6:9f:46:5e:66:45:1a: ec:53:f1:78:66:d3:85:be:22:e1:e1:f7:22:14:0a:e2:f7:54: 7f:03:c7:26:d4:25:5a:1f:53:0e:49:9d:74:ba:5a:e1:51:82: a8:11:3d:71:6a:66:cf:10:25:eb:e6:0e:af:a4:19:bf:3f:58: 6d:a8:84:2e:2c:b0:74:69:e3:69:46:90:ae:b4:34:60:8c:b4: 70:bd:9f:80:53:c3:13:e7:f3:f3:ef:88:1e:12:42:68:e5:36: 54:f8:1b:b8:ec:da:55:17:64:7f:62:4a:ef:99:ff:84:74:6d: cc:1a:98:4b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EcCCr5OK55vRJClPvABXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NGY3ZTY2OTk1Yzk5NGEzMGQwODY4NzExMGJmZDZhOWEw NTYxMzQwHhcNMjYwMTAyMDAxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTJkMzAxNjMxMGVhZGVmNTEwMzhiNTMzNGVhYzI1YmI4ZmNlMDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOVsDee/vvF9eFBHHK75EUht+V4G udVg8W4CaGQE/Y1l2lbINlBdBtOZSl4Z4LUhdIRxHz1nJeQgdflK3s09KA/Ia28P lLOx6snyWzzP9UdXDjEZueY9KWCQlL19Yn2UDwF98cP1cZTaxvVHPXI8ICwlp7wu e+uus0FQOZY4RIe+j6DZzWuious+VvV94wjko1PagX7STLj7zxOcSbwB8GE/utbC 1pfZ7H2knVNSbT73x/aX7INY9V7l1gVIbTf5IPsbPaZ5GlnNnPQ+M47RQklc1d4K uq46b4ic27dqS+ZT5n+pOz7TSPa6ZhFPhTZXSxh/LdBB5DOSIuqzNRqKVwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFF4tMBYxDq3vUQOLUzTqwlu4/OAkMB8GA1UdIwQY MBaAFIRPfmaZXJlKMNCGhxEL/WqaBWE0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEU5LVpwbGNtVW93MElhSEVRdjlhcG9GWVRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My84NDM4MjAtZGVhYy00YTBhLWJmMzIt OTMxOTBkM2UxZDk4LzEvWGkwd0ZqRU9yZTlSQTR0VE5PckNXN2o4NENRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My84NDM4MjAtZGVhYy00YTBhLWJmMzItOTMxOTBkM2UxZDk4 LzEvaEU5LVpwbGNtVW93MElhSEVRdjlhcG9GWVRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbc3GAwQA wmh5MA0GCSqGSIb3DQEBCwUAA4IBAQBEl7i2f5maNYXTsWO5U2lmbCGqvdwUkhkt wQmMcVQAWm1OPcrDouoVi6DZPQO35G0hVrUmdD+exmOnd+zQCqBpx7RdkUZPa/pV xLBTt9DSeFE9EY5zU9ycIJplMprYcDNz0iy7dWaw8JpXcEkUUJOR+iVHjG9PxgzV Jx+X3ExhdNI0+n8HgaMdtqafRl5mRRrsU/F4ZtOFviLh4fciFAri91R/A8cm1CVa H1MOSZ10ulrhUYKoET1xambPECXr5g6vpBm/P1htqIQuLLB0aeNpRpCutDRgjLRw vZ+AU8MT5/Pz74geEkJo5TZU+Bu47NpVF2R/Ykrvmf+EdG3MGphL -----END CERTIFICATE-----Generated at Wed Jan 7 10:38:25 2026 by rpki-client