This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/xhnWQaPByBIFwzRFZ3-3aJyO_O8.roa File: xhnWQaPByBIFwzRFZ3-3aJyO_O8.roa (raw, json) Hash identifier: YywfJemwy6CurR3EsPUmR+6fT2oyJ2ddaKhYX5o9Ets= Subject key identifier: C6:19:D6:41:A3:C1:C8:12:05:C3:34:45:67:7F:B7:68:9C:8E:FC:EF Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5 Certificate serial: 019C0026D89EFCCB466D212E0721CFC855C4 Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/xhnWQaPByBIFwzRFZ3-3aJyO_O8.roa Signing time: Tue 27 Jan 2026 15:51:11 +0000 ROA not before: Tue 27 Jan 2026 15:51:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212666 IP address blocks: 45.133.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:00:26:d8:9e:fc:cb:46:6d:21:2e:07:21:cf:c8:55:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5 Validity Not Before: Jan 27 15:51:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c619d641a3c1c81205c33445677fb7689c8efcef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:24:6c:cd:46:90:f5:3c:33:00:88:ee:2d:48: b0:4c:36:d5:1d:9b:ff:f9:54:e6:bd:57:25:c9:2e: 68:d1:ed:a1:f0:de:15:ba:d9:08:9d:15:0a:18:9b: c2:47:8f:54:0b:b5:96:21:98:af:c7:d7:a6:bc:42: 2f:52:16:d1:40:af:36:0c:eb:f9:3b:0a:1c:a8:31: 1a:95:b0:8a:d5:ad:8b:6f:2f:e4:07:c0:d5:00:46: 2e:2d:0e:bb:62:01:96:6e:45:f7:e8:6c:01:f0:2b: 39:43:0d:4e:fa:a5:f4:3c:d4:c5:82:61:8b:79:74: 15:9c:d7:2b:5f:e9:d3:d4:28:b5:4c:db:3c:60:a2: a8:78:65:06:15:52:2a:1d:21:29:b2:26:aa:90:d8: 33:fc:bc:2c:c5:23:32:a6:fa:24:78:56:29:93:e2: 53:17:40:34:c0:55:cf:93:41:49:a6:10:50:53:f1: 13:1b:8a:8f:ca:5f:a9:3a:56:6f:4e:af:28:1a:ab: d2:6e:99:47:e2:37:39:1b:a0:37:14:4a:39:b9:df: a2:55:ec:8d:eb:48:cd:bd:d9:9d:d1:80:1e:60:5a: 34:3b:e5:6f:7b:fd:ee:ad:88:ea:ba:4c:b6:cd:04: cb:37:4d:b2:0f:85:44:03:6a:6b:6f:4f:cc:18:b7: 02:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:19:D6:41:A3:C1:C8:12:05:C3:34:45:67:7F:B7:68:9C:8E:FC:EF X509v3 Authority Key Identifier: keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/xhnWQaPByBIFwzRFZ3-3aJyO_O8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.133.38.0/24 Signature Algorithm: sha256WithRSAEncryption a3:04:2f:e9:28:3b:94:9e:6e:a0:bf:c3:3f:80:ce:21:48:90: 75:b4:b9:24:48:1d:7b:5f:88:ec:5b:5e:29:d2:b9:da:0b:f6: ef:13:5f:b5:8b:53:ee:b4:ed:32:ea:96:b6:12:e7:92:12:ad: 15:a9:c9:a0:eb:68:3e:5d:b4:39:b3:94:9c:b0:c7:39:54:4e: 97:c0:ef:f8:96:d9:ee:58:4e:02:8d:53:d7:c0:84:7f:30:93: 19:5d:ec:4d:6c:06:62:57:86:b0:3b:8f:4e:60:d5:e7:ad:58: 47:3e:73:7b:99:c3:fa:9e:ba:26:c4:62:d1:92:c7:0c:42:3e: 89:59:49:b3:aa:42:32:3b:c8:94:16:8a:04:16:e3:08:80:20: ab:c0:ae:ba:6a:71:57:52:f7:7a:f3:32:77:d6:d6:61:51:51: 6d:43:de:16:19:ee:4f:a4:e5:dc:a1:97:2b:db:03:8c:8a:e8: ef:2e:c5:97:1d:8c:cb:e5:d9:17:76:50:cc:ca:1e:7e:4a:08: 3d:02:96:74:2f:f9:de:85:e7:40:33:f6:ae:a9:64:a9:ac:48: 3a:27:15:26:d1:4d:f4:16:d4:ee:b6:c1:d8:c1:b4:05:1e:e2: 9f:28:27:c4:6a:67:1b:28:54:d8:fb:e4:64:0c:c1:b7:e3:53: cd:0f:2e:61 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwAJtie/MtGbSEuByHPyFXEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMGRhNDNiNGE1ZDNkYjc4YmEzZjc3NGU1YjMxYjc3MDM3 MjAyZDUwHhcNMjYwMTI3MTU1MTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjE5ZDY0MWEzYzFjODEyMDVjMzM0NDU2NzdmYjc2ODljOGVmY2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyRszUaQ9TwzAIjuLUiwTDbVHZv/ +VTmvVclyS5o0e2h8N4VutkInRUKGJvCR49UC7WWIZivx9emvEIvUhbRQK82DOv5 OwocqDEalbCK1a2Lby/kB8DVAEYuLQ67YgGWbkX36GwB8Cs5Qw1O+qX0PNTFgmGL eXQVnNcrX+nT1Ci1TNs8YKKoeGUGFVIqHSEpsiaqkNgz/LwsxSMypvokeFYpk+JT F0A0wFXPk0FJphBQU/ETG4qPyl+pOlZvTq8oGqvSbplH4jc5G6A3FEo5ud+iVeyN 60jNvdmd0YAeYFo0O+Vve/3urYjquky2zQTLN02yD4VEA2prb0/MGLcCLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMYZ1kGjwcgSBcM0RWd/t2icjvzvMB8GA1UdIwQY MBaAFK0NpDtKXT23i6P3dOWzG3cDcgLVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTct YzUxNWYzNTRjYzVhLzEveGhuV1FhUEJ5QklGd3pSRlozLTNhSnlPX084LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTctYzUxNWYzNTRjYzVh LzEvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYUmMA0G CSqGSIb3DQEBCwUAA4IBAQCjBC/pKDuUnm6gv8M/gM4hSJB1tLkkSB17X4jsW14p 0rnaC/bvE1+1i1PutO0y6pa2EueSEq0Vqcmg62g+XbQ5s5ScsMc5VE6XwO/4ltnu WE4CjVPXwIR/MJMZXexNbAZiV4awO49OYNXnrVhHPnN7mcP6nromxGLRkscMQj6J WUmzqkIyO8iUFooEFuMIgCCrwK66anFXUvd68zJ31tZhUVFtQ94WGe5PpOXcoZcr 2wOMiujvLsWXHYzL5dkXdlDMyh5+Sgg9ApZ0L/nehedAM/auqWSprEg6JxUm0U30 FtTutsHYwbQFHuKfKCfEamcbKFTY++RkDMG341PNDy5h -----END CERTIFICATE-----Generated at Tue Feb 3 16:04:31 2026 by rpki-client