This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/XfPxNqw04f4ysUNycil0EQofl1M.roa File: XfPxNqw04f4ysUNycil0EQofl1M.roa (raw, json) Hash identifier: JClRzQorRQbXDP0L/PC7A7JxisEaLLPV1aRUiLTnBv8= Subject key identifier: 5D:F3:F1:36:AC:34:E1:FE:32:B1:43:72:72:29:74:11:0A:1F:97:53 Certificate issuer: /CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2 Certificate serial: 019B7FF20E1F4382383F84928FAF4F4C5429 Authority key identifier: FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/XfPxNqw04f4ysUNycil0EQofl1M.roa Signing time: Fri 02 Jan 2026 18:22:08 +0000 ROA not before: Fri 02 Jan 2026 18:22:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60458 IP address blocks: 193.3.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:0e:1f:43:82:38:3f:84:92:8f:af:4f:4c:54:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2 Validity Not Before: Jan 2 18:22:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5df3f136ac34e1fe32b14372722974110a1f9753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:12:9d:30:6d:32:bc:fe:79:27:31:4c:ef:57: 81:9e:38:1e:6c:f1:91:ec:81:eb:5b:7a:30:7d:11: d7:56:d0:3b:de:53:c8:24:a8:7b:f4:a5:0b:cb:21: f2:15:82:72:48:81:86:ad:59:2f:51:59:ec:47:c2: d9:5c:4d:71:01:1f:f0:f9:ee:ee:3c:49:09:15:72: fe:4d:f5:d2:bb:9b:47:f7:82:00:17:cc:72:45:78: e3:9e:5b:a3:df:38:b7:fa:98:43:6f:ec:22:e1:3c: 3c:11:a9:7f:6e:c7:d5:96:8f:89:28:42:e2:54:85: 73:30:87:d5:3b:d0:3e:11:39:af:1e:29:82:5f:db: 59:15:1e:b9:55:01:19:b3:fe:2f:0a:f6:44:ed:72: 5a:d6:f3:4d:75:21:7c:31:05:f8:2c:de:d1:3d:46: d7:02:19:e1:c8:de:5d:02:4a:15:aa:eb:f9:6c:5e: 71:d8:21:88:4b:c6:f3:1a:30:74:28:bc:d3:11:d8: 2a:66:15:25:ee:71:c3:74:00:af:09:8b:70:43:3a: 08:37:e1:8b:91:e4:4e:d9:3b:1c:fd:0c:e8:30:fc: be:01:3e:73:c5:6b:e1:19:32:5f:d5:45:e4:c1:13: 03:c6:dd:e4:a0:70:26:00:ff:ce:84:17:85:74:53: c2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:F3:F1:36:AC:34:E1:FE:32:B1:43:72:72:29:74:11:0A:1F:97:53 X509v3 Authority Key Identifier: keyid:FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/XfPxNqw04f4ysUNycil0EQofl1M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.3.232.0/24 Signature Algorithm: sha256WithRSAEncryption a3:37:27:41:77:a6:a5:d0:12:e6:1c:d4:42:94:65:b1:9a:16: bd:e9:8a:2e:6e:d8:e6:d2:b5:c3:66:3d:05:64:6e:a7:03:3d: be:cc:cf:40:d7:dc:27:c5:65:aa:f7:d9:40:9a:9e:2b:08:81: 95:31:02:24:a6:cc:a4:68:c0:aa:4b:c9:ea:95:5d:5d:4c:88: 44:b4:72:eb:db:3c:65:29:34:be:ee:bf:f2:6b:d7:d8:72:42: 17:2e:0a:5b:77:e5:58:5d:00:ae:f7:ba:dd:35:c5:56:ce:b7: 4e:6c:d9:fe:a1:f3:74:5d:d3:f1:00:78:60:82:6a:ba:3d:40: a8:e5:bc:8f:91:56:56:10:69:27:71:6c:2c:cf:7b:09:12:e2: 11:86:33:ff:56:e0:99:10:7c:cc:35:14:84:be:fc:f6:48:92: 22:e8:d4:d9:9f:57:2d:92:db:e7:f0:d2:03:4e:70:9c:5f:eb: 8c:c0:b6:89:82:db:7f:ec:5a:9f:a2:55:68:35:43:86:8d:5d: 30:dd:5e:2d:8e:db:6b:49:e8:8e:f4:1e:44:81:7a:2f:fb:c4: c0:1c:6a:b2:16:ad:f0:7e:8d:44:34:33:02:31:d2:4f:24:ea: 56:4b:8b:af:b8:42:69:eb:c7:18:66:ae:6b:85:fa:82:b0:3f: 92:93:6f:00 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8g4fQ4I4P4SSj69PTFQpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMTNhMjFiNGU4Y2UxNGNlN2Q2NjgwYzk5MGVjNmJhMjlh MDI3YzIwHhcNMjYwMTAyMTgyMjA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZGYzZjEzNmFjMzRlMWZlMzJiMTQzNzI3MjI5NzQxMTBhMWY5NzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBKdMG0yvP55JzFM71eBnjgebPGR 7IHrW3owfRHXVtA73lPIJKh79KULyyHyFYJySIGGrVkvUVnsR8LZXE1xAR/w+e7u PEkJFXL+TfXSu5tH94IAF8xyRXjjnluj3zi3+phDb+wi4Tw8Eal/bsfVlo+JKELi VIVzMIfVO9A+ETmvHimCX9tZFR65VQEZs/4vCvZE7XJa1vNNdSF8MQX4LN7RPUbX AhnhyN5dAkoVquv5bF5x2CGIS8bzGjB0KLzTEdgqZhUl7nHDdACvCYtwQzoIN+GL keRO2Tsc/QzoMPy+AT5zxWvhGTJf1UXkwRMDxt3koHAmAP/OhBeFdFPCqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF3z8TasNOH+MrFDcnIpdBEKH5dTMB8GA1UdIwQY MBaAFP8TohtOjOFM59ZoDJkOxropoCfCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3hPaUcwNk00VXpuMW1nTW1RN0d1aW1nSjhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9kNmNmZTktYzMwMS00MDc5LTg2Yjkt N2ZiYzRlNTc5N2ExLzEvWGZQeE5xdzA0ZjR5c1VOeWNpbDBFUW9mbDFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9kNmNmZTktYzMwMS00MDc5LTg2YjktN2ZiYzRlNTc5N2Ex LzEvX3hPaUcwNk00VXpuMW1nTW1RN0d1aW1nSjhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQPoMA0G CSqGSIb3DQEBCwUAA4IBAQCjNydBd6al0BLmHNRClGWxmha96Youbtjm0rXDZj0F ZG6nAz2+zM9A19wnxWWq99lAmp4rCIGVMQIkpsykaMCqS8nqlV1dTIhEtHLr2zxl KTS+7r/ya9fYckIXLgpbd+VYXQCu97rdNcVWzrdObNn+ofN0XdPxAHhggmq6PUCo 5byPkVZWEGkncWwsz3sJEuIRhjP/VuCZEHzMNRSEvvz2SJIi6NTZn1ctktvn8NID TnCcX+uMwLaJgtt/7FqfolVoNUOGjV0w3V4tjttrSeiO9B5EgXov+8TAHGqyFq3w fo1ENDMCMdJPJOpWS4uvuEJp68cYZq5rhfqCsD+Sk28A -----END CERTIFICATE-----Generated at Sat Jan 3 06:50:20 2026 by rpki-client