This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/Xgkh2jqWshIrm_XP38KT2hJAFLI.roa File: Xgkh2jqWshIrm_XP38KT2hJAFLI.roa (raw, json) Hash identifier: HtXZbHm1lMY4MWtIUl2UqL3oGRY9eBOP4/14fbeHHSQ= Subject key identifier: 5E:09:21:DA:3A:96:B2:12:2B:9B:F5:CF:DF:C2:93:DA:12:40:14:B2 Certificate issuer: /CN=99ff97f515b083e30bc52d81e193d8c8bb7fdf8c Certificate serial: 019B7A59B6B6F882F2BACB443A1973318E45 Authority key identifier: 99:FF:97:F5:15:B0:83:E3:0B:C5:2D:81:E1:93:D8:C8:BB:7F:DF:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf-X9RWwg-MLxS2B4ZPYyLt_34w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/Xgkh2jqWshIrm_XP38KT2hJAFLI.roa Signing time: Thu 01 Jan 2026 16:17:38 +0000 ROA not before: Thu 01 Jan 2026 16:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25504 IP address blocks: 46.151.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft rsync://rpki.ripe.net/repository/DEFAULT/mf-X9RWwg-MLxS2B4ZPYyLt_34w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:b6:b6:f8:82:f2:ba:cb:44:3a:19:73:31:8e:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99ff97f515b083e30bc52d81e193d8c8bb7fdf8c Validity Not Before: Jan 1 16:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e0921da3a96b2122b9bf5cfdfc293da124014b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:4b:d4:f8:2f:20:16:49:ac:2c:1a:e9:1f:97: e0:3c:74:68:91:fa:67:5f:19:03:8e:5d:b0:0f:8e: 7a:d8:a1:21:cf:29:11:6e:5e:d1:88:48:72:76:00: 8a:bf:42:2a:9f:66:a1:ad:cf:1e:1e:58:2c:66:8b: 30:8c:05:5c:35:0c:54:e8:c4:26:0a:ce:c1:07:d5: 7e:61:0e:5e:25:ba:1d:dd:f9:f0:4f:0c:ef:2a:de: bd:f4:e9:30:a9:4a:cd:cb:13:38:74:ba:f2:49:fd: 63:25:5b:c0:1d:bf:79:f2:70:08:c5:c2:4a:c5:1b: 08:3f:c9:06:ff:ea:03:5a:53:ef:aa:ee:b7:08:ca: 0b:fb:2c:95:8e:0a:90:4a:56:ff:81:94:ff:d5:c7: 7d:81:17:d2:db:11:3e:12:ad:2e:77:6c:2e:46:d9: 57:06:e7:34:73:69:45:0f:19:bf:9f:8d:c4:e3:ce: fc:e6:ad:61:70:28:c6:56:60:73:b2:7a:dd:da:cc: 49:9e:d3:cb:87:67:44:92:72:dc:62:73:d0:c0:dd: cf:d1:93:3b:74:18:56:fb:7c:99:b4:76:14:cc:c3: 11:55:fa:02:dd:78:40:bc:f3:e0:35:b3:6c:8c:28: 3c:bb:a8:58:3d:49:da:08:26:d4:5e:40:f7:07:03: 43:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:09:21:DA:3A:96:B2:12:2B:9B:F5:CF:DF:C2:93:DA:12:40:14:B2 X509v3 Authority Key Identifier: keyid:99:FF:97:F5:15:B0:83:E3:0B:C5:2D:81:E1:93:D8:C8:BB:7F:DF:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf-X9RWwg-MLxS2B4ZPYyLt_34w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/Xgkh2jqWshIrm_XP38KT2hJAFLI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.151.160.0/21 Signature Algorithm: sha256WithRSAEncryption 9b:72:31:51:8a:4f:09:20:7f:c9:58:9e:5a:53:6f:f6:da:08: 75:cc:46:df:e5:f1:7d:17:7a:e3:89:2a:27:f8:8c:28:d8:66: 92:33:fa:4e:7d:34:94:7c:e1:70:49:98:9b:21:84:45:78:67: 5b:fc:32:d4:41:72:c1:6d:23:60:25:ea:20:44:60:b6:31:5d: f3:9b:76:89:df:69:e6:39:0a:1d:2a:32:3b:bc:0a:1a:3a:76: 2f:cd:30:b7:ad:b2:94:8c:ed:9d:9d:52:0e:90:e4:df:f7:c9: 8b:fb:cc:53:4a:9a:fa:10:f9:32:d2:7d:aa:ff:22:92:0c:fc: cb:0c:1c:a5:42:e2:46:15:5f:8e:f6:86:72:29:55:dc:c4:b9: 66:19:b6:c2:37:16:50:80:49:d7:b7:14:9d:31:93:2a:ef:30: ce:64:f0:4d:48:f2:ff:b4:b7:64:61:f9:4b:92:3f:40:c6:bc: 64:b5:fd:b7:d8:10:09:d2:27:e5:c1:02:90:5f:e9:75:10:20: 56:c1:96:2f:e6:75:e4:89:06:2b:05:ad:9a:7e:a0:a3:03:81: fb:2a:e4:64:39:f2:73:e3:a0:0c:37:47:77:46:87:ac:d9:3d: 97:b7:d6:83:e3:6f:64:bb:8e:4c:31:97:3d:53:20:b2:13:ab: 23:e0:96:2b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wba2+ILyustEOhlzMY5FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZmY5N2Y1MTViMDgzZTMwYmM1MmQ4MWUxOTNkOGM4YmI3 ZmRmOGMwHhcNMjYwMTAxMTYxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTA5MjFkYTNhOTZiMjEyMmI5YmY1Y2ZkZmMyOTNkYTEyNDAxNGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5UvU+C8gFkmsLBrpH5fgPHRokfpn XxkDjl2wD4562KEhzykRbl7RiEhydgCKv0Iqn2ahrc8eHlgsZoswjAVcNQxU6MQm Cs7BB9V+YQ5eJbod3fnwTwzvKt699OkwqUrNyxM4dLrySf1jJVvAHb958nAIxcJK xRsIP8kG/+oDWlPvqu63CMoL+yyVjgqQSlb/gZT/1cd9gRfS2xE+Eq0ud2wuRtlX Buc0c2lFDxm/n43E48785q1hcCjGVmBzsnrd2sxJntPLh2dEknLcYnPQwN3P0ZM7 dBhW+3yZtHYUzMMRVfoC3XhAvPPgNbNsjCg8u6hYPUnaCCbUXkD3BwND3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF4JIdo6lrISK5v1z9/Ck9oSQBSyMB8GA1UdIwQY MBaAFJn/l/UVsIPjC8UtgeGT2Mi7f9+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWYtWDlSV3dnLU1MeFMyQjRaUFl5THRfMzR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8yNjMwNDQtYzc0Zi00YjY3LWIyNGIt ZTEzNTJkNWFmYTBhLzEvWGdraDJqcVdzaElybV9YUDM4S1QyaEpBRkxJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8yNjMwNDQtYzc0Zi00YjY3LWIyNGItZTEzNTJkNWFmYTBh LzEvbWYtWDlSV3dnLU1MeFMyQjRaUFl5THRfMzR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLpegMA0G CSqGSIb3DQEBCwUAA4IBAQCbcjFRik8JIH/JWJ5aU2/22gh1zEbf5fF9F3rjiSon +Iwo2GaSM/pOfTSUfOFwSZibIYRFeGdb/DLUQXLBbSNgJeogRGC2MV3zm3aJ32nm OQodKjI7vAoaOnYvzTC3rbKUjO2dnVIOkOTf98mL+8xTSpr6EPky0n2q/yKSDPzL DBylQuJGFV+O9oZyKVXcxLlmGbbCNxZQgEnXtxSdMZMq7zDOZPBNSPL/tLdkYflL kj9Axrxktf232BAJ0iflwQKQX+l1ECBWwZYv5nXkiQYrBa2afqCjA4H7KuRkOfJz 46AMN0d3Roes2T2Xt9aD429ku45MMZc9UyCyE6sj4JYr -----END CERTIFICATE-----Generated at Mon Feb 9 21:23:23 2026 by rpki-client