This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/XdIic6TtMnHLSFKPt0NIgYA3BZE.roa File: XdIic6TtMnHLSFKPt0NIgYA3BZE.roa (raw, json) Hash identifier: Hz8Dp4xvPL6d1SZb+xVGL2Fnk7Ii6zPdDdS2xRff/c8= Subject key identifier: 5D:D2:22:73:A4:ED:32:71:CB:48:52:8F:B7:43:48:81:80:37:05:91 Certificate issuer: /CN=8533ef46116fd9d21bfb533e44bde517890c24dc Certificate serial: 019B7BA3C6A4735546948ECF962A632B293D Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/XdIic6TtMnHLSFKPt0NIgYA3BZE.roa Signing time: Thu 01 Jan 2026 22:18:09 +0000 ROA not before: Thu 01 Jan 2026 22:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197328 IP address blocks: 45.14.82.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:c6:a4:73:55:46:94:8e:cf:96:2a:63:2b:29:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc Validity Not Before: Jan 1 22:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5dd22273a4ed3271cb48528fb743488180370591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:30:7b:6e:c9:31:69:87:e5:e1:30:60:16:12: 23:d4:b3:f9:55:e9:ca:05:03:48:55:52:88:83:fe: be:56:36:fe:4b:8d:6d:ba:ca:ed:69:88:5f:ce:d1: 26:c8:dc:fe:80:ca:71:70:69:c8:d0:2d:bd:e0:b3: 66:d7:f8:0e:b5:bc:4e:97:f2:b1:91:e9:51:aa:1b: 03:55:98:5e:56:cc:f0:c1:b4:12:12:b9:20:1a:6e: 17:18:ec:f8:be:65:f9:e8:5f:8c:0a:ec:5e:53:aa: f0:8e:07:f9:61:1b:7c:98:bc:55:ec:e9:9d:39:a0: 43:8a:ba:e4:c5:f9:61:5d:6e:2a:d4:0b:18:d6:50: c9:ae:cc:d9:23:dd:d6:a9:c3:5f:25:11:35:39:fa: 79:bf:91:00:53:94:fd:52:79:e3:c1:89:2a:32:de: 03:76:f2:aa:9d:3b:c8:cb:2f:c7:1f:0c:62:e4:3c: 8b:6e:11:d0:20:33:30:61:13:30:f1:dc:53:60:e9: 42:df:99:71:1e:eb:b6:5a:11:1b:05:0c:4c:16:07: 88:9c:20:63:57:d0:59:db:52:72:09:66:af:6c:a2: d3:ff:5d:4c:26:2d:2e:2b:c2:66:32:17:3e:1a:0f: 23:58:a6:55:46:4b:5f:60:b9:d2:af:06:1e:1e:42: 1f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D2:22:73:A4:ED:32:71:CB:48:52:8F:B7:43:48:81:80:37:05:91 X509v3 Authority Key Identifier: keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/XdIic6TtMnHLSFKPt0NIgYA3BZE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.14.82.0/23 Signature Algorithm: sha256WithRSAEncryption 9f:b6:2f:bd:27:17:ae:ae:40:e0:fb:01:cc:ef:6e:ae:2f:28: c4:56:ff:0e:9e:3c:d2:79:6a:80:4b:01:a8:49:15:0f:70:bc: 44:c4:31:27:8b:69:16:99:28:c7:7c:ff:4e:0a:97:b3:7d:6b: a6:85:d0:d5:5c:e7:bd:e7:2b:b8:94:44:7f:57:e5:70:95:90: 93:9e:6f:84:70:00:d9:e6:88:18:75:54:0f:6c:54:85:15:52: 86:50:33:fd:f5:26:5b:83:5c:32:3d:52:26:6d:8f:7e:29:cb: e1:94:d4:64:92:2b:8c:d6:6e:6c:0d:a5:16:c2:be:18:f0:8d: a1:46:5e:e6:f8:b9:8a:2d:18:96:72:b6:7a:03:11:71:7e:af: 29:88:88:c4:72:cd:f0:87:29:64:50:4d:0e:c9:0f:53:bc:1a: 94:17:62:b6:82:37:b5:19:a3:64:6c:67:c1:f2:a7:37:62:c1: 81:09:3f:66:3c:ee:4e:7f:4d:4f:ce:2a:70:0e:78:19:88:b1: af:65:d9:72:e3:b4:f7:3f:1b:23:58:95:ad:b8:aa:9b:b1:12: f8:1d:18:e8:7c:f5:c8:43:8f:48:37:a5:7b:5b:4a:3b:26:55: ae:91:2a:68:5c:d4:92:34:62:47:36:4f:07:09:4a:48:4b:55: 1d:06:6d:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o8akc1VGlI7PlipjKyk9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MzNlZjQ2MTE2ZmQ5ZDIxYmZiNTMzZTQ0YmRlNTE3ODkw YzI0ZGMwHhcNMjYwMTAxMjIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZGQyMjI3M2E0ZWQzMjcxY2I0ODUyOGZiNzQzNDg4MTgwMzcwNTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzB7bskxaYfl4TBgFhIj1LP5VenK BQNIVVKIg/6+Vjb+S41tusrtaYhfztEmyNz+gMpxcGnI0C294LNm1/gOtbxOl/Kx kelRqhsDVZheVszwwbQSErkgGm4XGOz4vmX56F+MCuxeU6rwjgf5YRt8mLxV7Omd OaBDirrkxflhXW4q1AsY1lDJrszZI93WqcNfJRE1Ofp5v5EAU5T9UnnjwYkqMt4D dvKqnTvIyy/HHwxi5DyLbhHQIDMwYRMw8dxTYOlC35lxHuu2WhEbBQxMFgeInCBj V9BZ21JyCWavbKLT/11MJi0uK8JmMhc+Gg8jWKZVRktfYLnSrwYeHkIfVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF3SInOk7TJxy0hSj7dDSIGANwWRMB8GA1UdIwQY MBaAFIUz70YRb9nSG/tTPkS95ReJDCTcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAt NzM5MjNkYWVmMTE0LzEvWGRJaWM2VHRNbkhMU0ZLUHQwTklnWUEzQlpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAtNzM5MjNkYWVmMTE0 LzEvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLQ5SMA0G CSqGSIb3DQEBCwUAA4IBAQCfti+9JxeurkDg+wHM726uLyjEVv8OnjzSeWqASwGo SRUPcLxExDEni2kWmSjHfP9OCpezfWumhdDVXOe95yu4lER/V+VwlZCTnm+EcADZ 5ogYdVQPbFSFFVKGUDP99SZbg1wyPVImbY9+KcvhlNRkkiuM1m5sDaUWwr4Y8I2h Rl7m+LmKLRiWcrZ6AxFxfq8piIjEcs3whylkUE0OyQ9TvBqUF2K2gje1GaNkbGfB 8qc3YsGBCT9mPO5Of01PzipwDngZiLGvZdly47T3PxsjWJWtuKqbsRL4HRjofPXI Q49IN6V7W0o7JlWukSpoXNSSNGJHNk8HCUpIS1UdBm1W -----END CERTIFICATE-----Generated at Wed Jan 21 04:04:11 2026 by rpki-client