This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/XGX11GBKBi_m0SFtEzVuce9VikQ.roa File: XGX11GBKBi_m0SFtEzVuce9VikQ.roa (raw, json) Hash identifier: dfXo6SWCXea6oab3jAKBwqQ7VOo+OYRyRnym6zPcD7g= Subject key identifier: 5C:65:F5:D4:60:4A:06:2F:E6:D1:21:6D:13:35:6E:71:EF:55:8A:44 Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B284F570F934C731CE902E0AE6A6B Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/XGX11GBKBi_m0SFtEzVuce9VikQ.roa Signing time: Fri 02 Jan 2026 06:18:04 +0000 ROA not before: Fri 02 Jan 2026 06:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213438 IP address blocks: 78.142.18.0/24 maxlen: 24 79.124.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:28:4f:57:0f:93:4c:73:1c:e9:02:e0:ae:6a:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c65f5d4604a062fe6d1216d13356e71ef558a44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d4:7f:12:bf:59:35:fb:61:cb:51:99:3d:47: 97:69:f7:b8:48:a0:fb:c4:d6:d2:11:46:9f:52:7e: 89:1c:62:df:b8:d8:0c:82:01:31:8b:68:7b:0c:fa: a8:c3:48:d4:87:e9:75:c0:a1:51:3c:7f:04:49:82: 30:2e:d3:36:3f:b7:36:20:47:36:50:4d:58:6b:2c: 67:7d:31:49:35:fe:c6:b2:53:6e:93:04:f6:28:53: 61:0f:02:a2:d1:a1:97:96:d4:7c:37:09:67:4b:d9: 27:51:6d:ad:48:02:c5:bd:2a:d6:75:01:d4:34:97: 03:54:19:07:7d:18:58:0d:ad:db:fc:e8:0d:52:34: 1c:4f:00:3c:17:c8:46:48:3d:b4:0f:26:19:4a:56: 3e:b2:36:26:c6:c7:42:5d:8d:9d:3f:8e:e3:82:ae: 38:5e:36:61:12:62:9f:a6:49:ba:2f:99:8f:78:f4: 78:fa:50:8d:a0:76:50:ca:2f:7e:31:8e:20:df:46: 0d:d9:f3:51:6a:eb:34:65:96:65:86:db:cd:5a:7e: b1:6b:e1:92:05:f5:f6:d5:a6:8f:4d:e6:55:d7:8c: 05:cc:eb:5c:7e:d7:e1:a1:45:70:63:53:4f:aa:11: b8:ef:77:24:42:3b:59:d3:6f:00:33:41:d0:7b:d5: 8c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:65:F5:D4:60:4A:06:2F:E6:D1:21:6D:13:35:6E:71:EF:55:8A:44 X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/XGX11GBKBi_m0SFtEzVuce9VikQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.142.18.0/24 79.124.8.0/24 Signature Algorithm: sha256WithRSAEncryption 60:72:0a:ec:8e:8e:9a:ee:c6:30:f3:40:79:02:37:a2:46:0c: 18:23:6c:56:21:72:ff:73:aa:3b:c3:fe:b2:b3:43:72:e6:43: 6a:18:ab:6b:a1:a4:43:31:de:8e:f6:87:83:4b:d2:d7:84:25: 70:11:59:97:a1:09:ea:31:86:67:34:78:83:3e:a6:3b:c2:68: 13:1c:95:53:d5:b1:cd:14:0e:1f:39:50:67:36:44:3b:81:f4: 93:2c:12:85:60:62:64:a2:27:a7:cf:5b:27:b2:a8:a0:a1:48: f1:c1:37:2c:45:60:28:fd:d7:e2:bf:c3:35:ae:70:b5:7e:b3: 6c:61:07:5a:21:8d:70:41:e3:8b:f2:63:7d:d6:f8:d7:a4:68: b4:6a:01:f5:09:a9:41:66:74:79:20:01:8d:d0:55:07:19:96: 23:f4:ec:cf:9c:92:3a:42:9f:7e:5e:2c:ff:52:46:68:ef:a2: 3d:ea:81:26:5c:13:d7:cf:e2:4d:11:e7:1c:fd:9a:76:3f:94: 45:e0:7a:19:36:30:cd:75:66:cd:77:7f:7d:d7:9e:d7:0f:d6: bf:2e:35:b6:55:61:04:11:68:1e:2e:a3:19:45:e4:77:ea:fc: b1:7b:d9:8a:49:4a:82:6c:84:c9:ab:63:40:09:06:68:8a:98: 39:b5:5a:fb -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9WyhPVw+TTHMc6QLgrmprMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzY1ZjVkNDYwNGEwNjJmZTZkMTIxNmQxMzM1NmU3MWVmNTU4YTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdR/Er9ZNfthy1GZPUeXafe4SKD7 xNbSEUafUn6JHGLfuNgMggExi2h7DPqow0jUh+l1wKFRPH8ESYIwLtM2P7c2IEc2 UE1YayxnfTFJNf7GslNukwT2KFNhDwKi0aGXltR8NwlnS9knUW2tSALFvSrWdQHU NJcDVBkHfRhYDa3b/OgNUjQcTwA8F8hGSD20DyYZSlY+sjYmxsdCXY2dP47jgq44 XjZhEmKfpkm6L5mPePR4+lCNoHZQyi9+MY4g30YN2fNRaus0ZZZlhtvNWn6xa+GS BfX21aaPTeZV14wFzOtcftfhoUVwY1NPqhG473ckQjtZ028AM0HQe9WMMQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFxl9dRgSgYv5tEhbRM1bnHvVYpEMB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvWEdYMTFHQktCaV9tMFNGdEV6VnVjZTlWaWtRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATo4SAwQA T3wIMA0GCSqGSIb3DQEBCwUAA4IBAQBgcgrsjo6a7sYw80B5AjeiRgwYI2xWIXL/ c6o7w/6ys0Ny5kNqGKtroaRDMd6O9oeDS9LXhCVwEVmXoQnqMYZnNHiDPqY7wmgT HJVT1bHNFA4fOVBnNkQ7gfSTLBKFYGJkoienz1snsqigoUjxwTcsRWAo/dfiv8M1 rnC1frNsYQdaIY1wQeOL8mN91vjXpGi0agH1CalBZnR5IAGN0FUHGZYj9OzPnJI6 Qp9+Xiz/UkZo76I96oEmXBPXz+JNEecc/Zp2P5RF4HoZNjDNdWbNd399157XD9a/ LjW2VWEEEWgeLqMZReR36vyxe9mKSUqCbITJq2NACQZoipg5tVr7 -----END CERTIFICATE-----Generated at Fri Jan 23 18:49:13 2026 by rpki-client