This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/XSiU7-0SbDMQ_IdA4IB6KriuE3I.roa File: XSiU7-0SbDMQ_IdA4IB6KriuE3I.roa (raw, json) Hash identifier: yT0rAcntGSaWEZ0ss06gXt5M4fgq/qjh8GeO0S2AMtY= Subject key identifier: 5D:28:94:EF:ED:12:6C:33:10:FC:87:40:E0:80:7A:2A:B8:AE:13:72 Certificate issuer: /CN=e46a3f838688843758d28057007dc6cd2898ecca Certificate serial: 019B791126CE53D3AAFDDB8A5A9DE881EFBD Authority key identifier: E4:6A:3F:83:86:88:84:37:58:D2:80:57:00:7D:C6:CD:28:98:EC:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/XSiU7-0SbDMQ_IdA4IB6KriuE3I.roa Signing time: Thu 01 Jan 2026 10:18:45 +0000 ROA not before: Thu 01 Jan 2026 10:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 193.243.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.crl rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:26:ce:53:d3:aa:fd:db:8a:5a:9d:e8:81:ef:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e46a3f838688843758d28057007dc6cd2898ecca Validity Not Before: Jan 1 10:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d2894efed126c3310fc8740e0807a2ab8ae1372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cf:0e:7e:91:57:02:27:fc:a5:67:cd:9c:28: d6:d2:ed:b0:4f:0a:a2:52:de:24:8d:0f:7a:0e:c2: 76:80:a7:8b:51:5a:a3:48:16:7c:0d:bc:99:ae:4f: a0:d2:fe:ed:89:a2:48:ff:73:70:25:28:f2:a1:35: 2f:a1:53:4c:fa:2b:a1:b3:6c:9a:ec:55:5f:f5:3c: 06:aa:88:35:39:bf:7b:dd:98:97:53:fa:05:7c:de: 4c:4c:44:88:90:cf:49:84:19:d0:cc:05:62:b0:9c: 9b:cd:1a:5e:68:00:d3:e1:29:b1:36:82:f8:f6:44: 79:75:a7:8d:0d:fe:20:ed:47:2f:87:b9:a2:92:a0: ca:80:7a:10:02:5a:bc:41:79:fe:23:dc:fa:f5:7f: e6:49:a0:c3:96:0f:ec:b1:12:87:7f:3b:60:e8:f9: b8:d7:e6:a7:7e:41:b7:0a:a8:9c:a7:ed:77:00:ba: 27:ce:63:d2:59:df:7c:8d:84:c9:b3:85:e6:ab:63: c3:b7:f0:6b:0f:0f:fa:ca:fb:6b:1c:ab:78:db:cb: 97:7e:0b:ee:22:39:92:98:d9:3e:33:9b:26:e0:74: 09:e2:d8:c5:18:a0:6b:7a:f5:98:95:8a:60:f5:00: f3:37:22:9a:0f:c2:7b:6b:a0:bd:ad:a8:64:b1:ae: 99:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:28:94:EF:ED:12:6C:33:10:FC:87:40:E0:80:7A:2A:B8:AE:13:72 X509v3 Authority Key Identifier: keyid:E4:6A:3F:83:86:88:84:37:58:D2:80:57:00:7D:C6:CD:28:98:EC:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/XSiU7-0SbDMQ_IdA4IB6KriuE3I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.243.129.0/24 Signature Algorithm: sha256WithRSAEncryption 91:20:71:85:08:cb:6e:6a:d1:98:ae:37:29:ed:6e:cf:2a:b5: cd:a6:cf:d7:36:06:41:da:1f:f6:25:36:8c:60:18:75:0f:4c: 3a:4d:49:3b:de:25:51:8f:de:79:78:01:78:e2:4c:9d:80:fd: 56:42:64:8c:c9:22:f0:cc:d8:a7:01:36:97:60:7e:e1:3c:78: 94:a6:a9:41:a3:73:ac:33:fe:16:8e:ef:00:ee:25:70:e7:c5: 11:60:76:3e:1c:cb:93:52:63:e0:cd:83:9f:ce:70:74:28:b2: c1:6c:d7:fd:ec:71:84:34:3f:83:b7:94:5e:41:3a:22:5d:dd: 4f:9b:6a:ac:34:10:b6:71:ed:52:db:57:cd:48:d4:4f:5e:40: 0e:f6:03:73:a9:cd:9c:5e:6c:54:1e:86:6c:a5:65:b8:03:f1: 29:a6:58:8a:9b:0a:12:43:f8:99:a0:5a:7d:8a:26:95:c6:36: ed:68:d4:a7:f8:4e:cc:8a:03:c6:0b:39:0c:ed:23:ed:3c:65: e6:62:f1:31:e9:7d:ad:ff:27:4f:a8:20:f3:7f:d1:e1:b5:f0: d3:fd:23:b2:27:7f:2c:50:b0:91:10:b3:4f:e4:6f:15:42:71: ea:a8:b1:a6:ca:65:b3:06:dc:8c:fb:73:25:f3:b1:9f:18:da: 38:c8:9b:38 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ESbOU9Oq/duKWp3oge+9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0NmEzZjgzODY4ODg0Mzc1OGQyODA1NzAwN2RjNmNkMjg5 OGVjY2EwHhcNMjYwMTAxMTAxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDI4OTRlZmVkMTI2YzMzMTBmYzg3NDBlMDgwN2EyYWI4YWUxMzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuM8OfpFXAif8pWfNnCjW0u2wTwqi Ut4kjQ96DsJ2gKeLUVqjSBZ8DbyZrk+g0v7tiaJI/3NwJSjyoTUvoVNM+iuhs2ya 7FVf9TwGqog1Ob973ZiXU/oFfN5MTESIkM9JhBnQzAVisJybzRpeaADT4SmxNoL4 9kR5daeNDf4g7Ucvh7mikqDKgHoQAlq8QXn+I9z69X/mSaDDlg/ssRKHfztg6Pm4 1+anfkG3Cqicp+13ALonzmPSWd98jYTJs4Xmq2PDt/BrDw/6yvtrHKt428uXfgvu IjmSmNk+M5sm4HQJ4tjFGKBrevWYlYpg9QDzNyKaD8J7a6C9rahksa6Z8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF0olO/tEmwzEPyHQOCAeiq4rhNyMB8GA1UdIwQY MBaAFORqP4OGiIQ3WNKAVwB9xs0omOzKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUdvX2c0YUloRGRZMG9CWEFIM0d6U2lZN01vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC81MmNmOTktZTc5OC00Y2FiLWEzMDMt YTNiMDZkNGU0Nzc1LzEvWFNpVTctMFNiRE1RX0lkQTRJQjZLcml1RTNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC81MmNmOTktZTc5OC00Y2FiLWEzMDMtYTNiMDZkNGU0Nzc1 LzEvNUdvX2c0YUloRGRZMG9CWEFIM0d6U2lZN01vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwfOBMA0G CSqGSIb3DQEBCwUAA4IBAQCRIHGFCMtuatGYrjcp7W7PKrXNps/XNgZB2h/2JTaM YBh1D0w6TUk73iVRj955eAF44kydgP1WQmSMySLwzNinATaXYH7hPHiUpqlBo3Os M/4Wju8A7iVw58URYHY+HMuTUmPgzYOfznB0KLLBbNf97HGEND+Dt5ReQToiXd1P m2qsNBC2ce1S21fNSNRPXkAO9gNzqc2cXmxUHoZspWW4A/EppliKmwoSQ/iZoFp9 iiaVxjbtaNSn+E7MigPGCzkM7SPtPGXmYvEx6X2t/ydPqCDzf9HhtfDT/SOyJ38s ULCRELNP5G8VQnHqqLGmymWzBtyM+3Ml87GfGNo4yJs4 -----END CERTIFICATE-----Generated at Thu Jan 1 17:28:27 2026 by rpki-client