This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/RXspwIUrgHZfrSVCO63AFZW1IxY.roa File: RXspwIUrgHZfrSVCO63AFZW1IxY.roa (raw, json) Hash identifier: 2OggZdJRXeMt/msbNLPkl5fnqJJuk9plsaJeWQW6pRM= Subject key identifier: 45:7B:29:C0:85:2B:80:76:5F:AD:25:42:3B:AD:C0:15:95:B5:23:16 Certificate issuer: /CN=158962bc5da2712f208fc8b15ebdc246af4cbecf Certificate serial: 019B78A36440882ECA315FABC66E1EAAA5E0 Authority key identifier: 15:89:62:BC:5D:A2:71:2F:20:8F:C8:B1:5E:BD:C2:46:AF:4C:BE:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FYlivF2icS8gj8ixXr3CRq9Mvs8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/RXspwIUrgHZfrSVCO63AFZW1IxY.roa Signing time: Thu 01 Jan 2026 08:18:52 +0000 ROA not before: Thu 01 Jan 2026 08:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203969 IP address blocks: 185.110.152.0/22 maxlen: 22 185.110.154.0/24 maxlen: 24 185.110.155.0/24 maxlen: 24 2a06:5880:dd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.crl rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.mft rsync://rpki.ripe.net/repository/DEFAULT/FYlivF2icS8gj8ixXr3CRq9Mvs8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:64:40:88:2e:ca:31:5f:ab:c6:6e:1e:aa:a5:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=158962bc5da2712f208fc8b15ebdc246af4cbecf Validity Not Before: Jan 1 08:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=457b29c0852b80765fad25423badc01595b52316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a6:84:f2:65:fe:74:08:bc:17:f4:62:59:35: 9f:d6:ca:38:64:52:8b:1c:c7:64:42:b7:f4:22:fa: 7a:f8:8e:20:0b:d9:93:10:3e:5b:32:37:b2:40:0b: c9:75:57:aa:20:0c:a3:4a:21:25:97:5d:73:ea:ac: 54:d8:45:20:b2:16:a2:1a:94:8b:d9:93:99:06:83: 27:87:72:42:d4:1b:a6:13:9b:63:4f:c9:85:b9:da: b2:09:1f:88:80:5f:f9:68:84:d1:d2:10:9a:5f:b6: 53:3b:cf:97:2b:c5:91:5b:4a:c1:2e:eb:dd:69:c0: ab:0e:ce:1d:af:88:96:17:26:80:31:d9:ce:58:d5: b4:0b:05:28:a3:be:c4:43:c4:88:10:8b:9f:75:c8: f6:16:9e:5d:91:01:5a:7a:0c:d6:6b:64:ba:0a:a2: e6:77:87:a8:fa:7a:5f:6a:b8:fe:d6:99:ef:6e:ae: f3:4f:09:1d:78:48:58:86:30:eb:aa:57:ed:57:6b: 19:c6:20:a1:a0:e3:2a:ca:71:ae:7f:c1:2e:3f:94: 96:cd:25:2c:d2:7e:4f:4f:9b:31:0a:4a:3a:23:24: 7e:a8:d9:ce:cd:1e:2b:82:c3:27:21:ff:cf:27:ed: 9a:24:9d:7b:d1:dc:aa:91:40:42:58:6b:af:e5:c5: 62:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:7B:29:C0:85:2B:80:76:5F:AD:25:42:3B:AD:C0:15:95:B5:23:16 X509v3 Authority Key Identifier: keyid:15:89:62:BC:5D:A2:71:2F:20:8F:C8:B1:5E:BD:C2:46:AF:4C:BE:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYlivF2icS8gj8ixXr3CRq9Mvs8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/RXspwIUrgHZfrSVCO63AFZW1IxY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.110.152.0/22 IPv6: 2a06:5880:dd::/48 Signature Algorithm: sha256WithRSAEncryption 22:f2:1a:0b:01:53:2c:ff:0c:e5:6b:c9:e1:b0:ab:f5:46:c0: d4:49:d1:28:e3:bd:95:83:29:ef:c0:ad:fb:51:b2:0f:68:19: af:43:09:70:ee:b3:e2:34:2b:96:16:2b:4b:d2:90:1d:41:98: 47:1b:b5:04:da:61:27:ea:f7:5e:70:5d:99:58:ec:b7:c2:34: 8c:05:a7:81:96:e6:dc:0c:5f:42:3d:77:b3:91:94:35:f5:a6: fc:5b:27:ab:d9:7a:bb:19:7b:44:05:3b:94:cd:0b:0e:50:18: ae:f5:31:9c:60:db:16:3f:85:d3:33:e1:77:b1:fd:57:26:c7: 76:a8:e2:17:3d:8b:ea:53:c5:03:91:9c:b4:c0:0d:f5:ad:2a: 01:7d:07:ea:51:14:c1:08:90:79:4a:65:60:7e:d2:94:76:67: 73:31:da:19:fe:35:a3:31:e5:42:9a:8c:55:a2:2d:f7:cd:96: 67:09:74:f7:a6:6b:67:25:66:e9:d5:d1:86:cb:8f:81:44:09: 42:c5:05:e2:40:75:e0:35:9e:14:c7:5a:98:d0:bf:c3:94:ac: c6:53:e0:14:db:72:e5:53:96:28:9b:06:5d:2b:85:3b:4f:41: 31:6a:7e:0e:9c:4e:db:f1:df:e4:0c:7e:94:4d:a9:39:5e:ac: 4c:94:a6:83 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4o2RAiC7KMV+rxm4eqqXgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ODk2MmJjNWRhMjcxMmYyMDhmYzhiMTVlYmRjMjQ2YWY0 Y2JlY2YwHhcNMjYwMTAxMDgxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTdiMjljMDg1MmI4MDc2NWZhZDI1NDIzYmFkYzAxNTk1YjUyMzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qaE8mX+dAi8F/RiWTWf1so4ZFKL HMdkQrf0Ivp6+I4gC9mTED5bMjeyQAvJdVeqIAyjSiEll11z6qxU2EUgshaiGpSL 2ZOZBoMnh3JC1BumE5tjT8mFudqyCR+IgF/5aITR0hCaX7ZTO8+XK8WRW0rBLuvd acCrDs4dr4iWFyaAMdnOWNW0CwUoo77EQ8SIEIufdcj2Fp5dkQFaegzWa2S6CqLm d4eo+npfarj+1pnvbq7zTwkdeEhYhjDrqlftV2sZxiChoOMqynGuf8EuP5SWzSUs 0n5PT5sxCko6IyR+qNnOzR4rgsMnIf/PJ+2aJJ170dyqkUBCWGuv5cViCQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFEV7KcCFK4B2X60lQjutwBWVtSMWMB8GA1UdIwQY MBaAFBWJYrxdonEvII/IsV69wkavTL7PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRllsaXZGMmljUzhnajhpeFhyM0NScTlNdnM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC81MWQ5OTktZGY2Yy00N2U4LThjMzUt NWE2MDEzMTAwNGU4LzEvUlhzcHdJVXJnSFpmclNWQ082M0FGWlcxSXhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC81MWQ5OTktZGY2Yy00N2U4LThjMzUtNWE2MDEzMTAwNGU4 LzEvRllsaXZGMmljUzhnajhpeFhyM0NScTlNdnM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCuW6YMA8E AgACMAkDBwAqBliAAN0wDQYJKoZIhvcNAQELBQADggEBACLyGgsBUyz/DOVryeGw q/VGwNRJ0SjjvZWDKe/ArftRsg9oGa9DCXDus+I0K5YWK0vSkB1BmEcbtQTaYSfq 915wXZlY7LfCNIwFp4GW5twMX0I9d7ORlDX1pvxbJ6vZersZe0QFO5TNCw5QGK71 MZxg2xY/hdMz4Xex/Vcmx3ao4hc9i+pTxQORnLTADfWtKgF9B+pRFMEIkHlKZWB+ 0pR2Z3Mx2hn+NaMx5UKajFWiLffNlmcJdPema2clZunV0YbLj4FECULFBeJAdeA1 nhTHWpjQv8OUrMZT4BTbcuVTliibBl0rhTtPQTFqfg6cTtvx3+QMfpRNqTlerEyU poM= -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:31 2026 by rpki-client