This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/X8VxeTKLj2L6cXOG2D9VnmoxKeg.roa File: X8VxeTKLj2L6cXOG2D9VnmoxKeg.roa (raw, json) Hash identifier: JObeK4iyMZkpncJlfekTyENzC9ocTyqJhLfhqmktOrA= Subject key identifier: 5F:C5:71:79:32:8B:8F:62:FA:71:73:86:D8:3F:55:9E:6A:31:29:E8 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A3562940C37B736BADF2A2937A81C8 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/X8VxeTKLj2L6cXOG2D9VnmoxKeg.roa Signing time: Thu 01 Jan 2026 08:18:48 +0000 ROA not before: Thu 01 Jan 2026 08:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216127 IP address blocks: 45.95.0.0/24 maxlen: 24 185.218.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:56:29:40:c3:7b:73:6b:ad:f2:a2:93:7a:81:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5fc57179328b8f62fa717386d83f559e6a3129e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:46:e4:2e:83:88:52:ed:ad:8c:fb:b7:59:48: a9:bc:07:d4:e9:c1:a7:e2:f2:8a:2e:7f:6e:b2:0b: e2:81:2c:7c:71:c7:45:0e:be:9a:83:1c:6e:21:76: cd:8c:48:aa:76:16:2a:45:60:d5:ca:cd:43:b6:ea: 5e:a2:ad:b1:14:33:46:c6:f9:69:02:d7:a8:b8:0d: 7e:b2:9f:59:13:93:14:39:2c:bc:c8:b1:9e:ac:29: fb:f9:b2:f6:b8:f7:26:c1:81:c2:94:f8:d5:00:38: 6c:64:a2:03:ad:48:0c:12:8d:2e:c1:92:ac:8b:29: 5b:b7:92:b6:a1:f4:73:5b:77:03:fd:07:2c:5c:ed: 38:d8:26:ec:20:a0:11:1d:23:28:95:1b:a8:9f:3a: 26:a1:fb:7c:c5:c1:f1:9c:49:b8:80:c1:78:6c:db: 97:95:f1:84:74:06:e2:ef:a5:16:cb:1c:51:81:88: 14:31:d7:05:de:b7:20:ad:db:bb:18:5d:81:61:df: 14:49:a3:23:68:d3:20:7b:34:25:1e:20:78:40:e5: 5e:93:f9:61:cb:70:55:96:49:d1:28:71:47:36:9d: ef:c4:9b:7b:33:22:8d:b8:51:87:52:6e:4c:e7:65: 88:48:f6:7a:27:82:09:e2:b1:9d:c5:0c:1d:47:ab: fc:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:C5:71:79:32:8B:8F:62:FA:71:73:86:D8:3F:55:9E:6A:31:29:E8 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/X8VxeTKLj2L6cXOG2D9VnmoxKeg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.95.0.0/24 185.218.137.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:e8:9f:67:8a:ab:c2:d9:5b:4a:30:9b:f0:43:db:b5:76:14: 5a:7c:55:1f:7a:a7:63:b0:db:3a:d7:b6:51:2e:0b:3b:b0:80: 8b:3c:97:f7:12:99:77:44:24:2b:ef:fc:76:ce:b3:b2:50:23: c7:1a:f0:4c:7f:a8:f5:ea:85:3f:5d:12:f0:72:be:78:4f:34: be:88:08:bf:1d:d5:bc:35:33:b9:7e:c9:87:27:d2:0e:57:d2: e6:77:8a:8a:b5:bb:6c:50:4e:30:2a:0c:86:27:37:bc:c5:3b: 80:3c:55:17:b5:34:f4:1b:54:0f:82:e0:2f:6a:cb:df:89:b5: da:d6:f2:01:60:89:15:e0:37:6e:c1:db:4c:0a:ec:f4:d7:bf: 15:ec:7a:e8:3f:73:44:76:86:cc:6b:8c:7f:0a:46:51:4c:d8: f9:14:22:62:46:74:f8:71:41:10:f2:90:93:ad:b9:ef:0a:51: d6:bc:d3:38:89:c7:f1:26:07:20:0d:43:15:a0:22:6c:89:8d: 6a:87:5a:d1:46:95:34:13:ed:7f:1f:e9:51:0f:e2:26:7c:fd: 94:a6:92:9c:d9:e4:9e:47:e8:b2:36:32:1c:6e:f0:f3:5e:bc: ba:cc:dd:6d:f7:ab:4e:e4:59:ec:06:97:0e:02:12:15:8d:c4: 92:d1:36:99 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4o1YpQMN7c2ut8qKTeoHIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmM1NzE3OTMyOGI4ZjYyZmE3MTczODZkODNmNTU5ZTZhMzEyOWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0bkLoOIUu2tjPu3WUipvAfU6cGn 4vKKLn9usgvigSx8ccdFDr6agxxuIXbNjEiqdhYqRWDVys1Dtupeoq2xFDNGxvlp AteouA1+sp9ZE5MUOSy8yLGerCn7+bL2uPcmwYHClPjVADhsZKIDrUgMEo0uwZKs iylbt5K2ofRzW3cD/QcsXO042CbsIKARHSMolRuonzomoft8xcHxnEm4gMF4bNuX lfGEdAbi76UWyxxRgYgUMdcF3rcgrdu7GF2BYd8USaMjaNMgezQlHiB4QOVek/lh y3BVlknRKHFHNp3vxJt7MyKNuFGHUm5M52WISPZ6J4IJ4rGdxQwdR6v8KQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFF/FcXkyi49i+nFzhtg/VZ5qMSnoMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvWDhWeGVUS0xqMkw2Y1hPRzJEOVZubW94S2VnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALV8AAwQA udqJMA0GCSqGSIb3DQEBCwUAA4IBAQAs6J9niqvC2VtKMJvwQ9u1dhRafFUfeqdj sNs617ZRLgs7sICLPJf3Epl3RCQr7/x2zrOyUCPHGvBMf6j16oU/XRLwcr54TzS+ iAi/HdW8NTO5fsmHJ9IOV9Lmd4qKtbtsUE4wKgyGJze8xTuAPFUXtTT0G1QPguAv asvfibXa1vIBYIkV4DduwdtMCuz0178V7HroP3NEdobMa4x/CkZRTNj5FCJiRnT4 cUEQ8pCTrbnvClHWvNM4icfxJgcgDUMVoCJsiY1qh1rRRpU0E+1/H+lRD+ImfP2U ppKc2eSeR+iyNjIcbvDzXry6zN1t96tO5FnsBpcOAhIVjcSS0TaZ -----END CERTIFICATE-----Generated at Fri Jan 2 12:06:11 2026 by rpki-client