This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/XyRv5CPINmEHH2WrYH5aqpNMLC8.roa File: XyRv5CPINmEHH2WrYH5aqpNMLC8.roa (raw, json) Hash identifier: 8o1QoPlOqyGiaT4abB+4Wt7xIo5ScK7UAgU8WdJB4Ag= Subject key identifier: 5F:24:6F:E4:23:C8:36:61:07:1F:65:AB:60:7E:5A:AA:93:4C:2C:2F Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019B7AC7CA35DDF0DD054D9D67FA58FA9661 Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/XyRv5CPINmEHH2WrYH5aqpNMLC8.roa Signing time: Thu 01 Jan 2026 18:17:52 +0000 ROA not before: Thu 01 Jan 2026 18:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34702 IP address blocks: 46.19.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 05:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:ca:35:dd:f0:dd:05:4d:9d:67:fa:58:fa:96:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Jan 1 18:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f246fe423c83661071f65ab607e5aaa934c2c2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:74:4d:53:d6:88:b8:a7:c3:8d:55:be:2d:b5: eb:ce:31:d2:db:89:a1:1c:6e:c6:c6:ae:10:35:3c: a0:27:f4:b0:05:38:54:d7:6d:54:c1:f4:28:2f:27: 3a:89:3d:89:e4:10:b8:55:3f:cd:d7:ac:ea:ab:b3: 75:07:e2:5c:d9:0d:cf:e8:48:68:df:06:8d:45:20: a2:91:be:c7:27:06:ea:1b:31:4c:40:db:a8:64:2b: ec:ba:0a:9c:d7:8f:51:5c:b3:ba:12:78:31:b2:9f: bc:d0:86:1c:99:43:4c:79:23:b5:f4:c2:d9:bc:78: 11:6f:9f:3c:58:73:b3:52:a7:19:fb:03:d7:7a:ce: 48:a8:83:b1:76:9b:a1:cc:11:89:ea:81:b8:a1:58: ed:df:83:35:68:f9:07:4f:79:13:33:9a:2e:27:49: bc:97:55:8c:2d:7b:ad:c3:53:49:1e:03:e4:9b:ad: a4:05:53:e1:4e:67:2d:cb:70:13:5c:d0:a5:a6:e9: cb:b0:9e:09:a9:e7:50:0f:b3:42:ed:1b:69:d7:1c: 22:d1:c5:07:50:ed:99:36:62:87:40:e8:09:4a:8b: 2e:bf:49:0a:b3:f0:dc:c5:a1:aa:3c:d4:c2:f5:34: 9c:df:04:18:9f:1e:4f:8c:79:5b:3b:38:ca:17:60: da:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:24:6F:E4:23:C8:36:61:07:1F:65:AB:60:7E:5A:AA:93:4C:2C:2F X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/XyRv5CPINmEHH2WrYH5aqpNMLC8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.19.207.0/24 Signature Algorithm: sha256WithRSAEncryption 86:90:d0:88:57:87:32:4c:e6:95:70:3a:95:da:9f:e3:b0:d3: 7b:56:b2:89:5e:39:f1:81:b3:a2:03:59:99:50:53:92:c9:f8: d7:a1:10:7e:ea:82:2e:9c:e4:e8:3b:98:e9:43:e6:51:53:63: 6c:1c:e5:c5:14:93:eb:89:a1:67:8f:42:0d:40:c8:83:41:6c: 81:09:d0:4b:ac:4a:fb:14:23:73:a6:4a:e0:b1:5b:ac:e1:13: 96:72:13:8a:c9:31:5e:35:92:0a:c7:ea:20:f0:0c:09:8c:75: 4a:cd:40:c6:01:53:08:80:b3:3a:de:f8:51:7e:48:b3:93:14: 02:ba:b7:8b:24:92:14:e9:5d:74:e0:b1:19:11:9b:8e:dd:07: 33:ce:ef:71:39:f1:4b:6b:f7:13:aa:d7:a7:18:a4:e1:06:c0: ec:56:72:a1:6f:8a:14:83:4d:dd:bd:b9:4c:fa:a1:32:9d:15: 24:55:8a:26:0e:65:45:4e:3c:5d:56:fa:be:bd:aa:6d:12:4e: 3b:e3:13:f3:5e:8d:a1:fe:b0:83:37:86:72:8f:00:50:39:41: 2c:75:02:d6:98:ef:c6:13:a4:18:4b:a8:a8:ec:e3:78:59:44: 4f:34:ff:ef:c6:5a:97:8f:f3:23:4a:d9:6f:db:d7:06:65:b1: a5:a4:d8:ba -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x8o13fDdBU2dZ/pY+pZhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjYwMTAxMTgxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjI0NmZlNDIzYzgzNjYxMDcxZjY1YWI2MDdlNWFhYTkzNGMyYzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXRNU9aIuKfDjVW+LbXrzjHS24mh HG7Gxq4QNTygJ/SwBThU121UwfQoLyc6iT2J5BC4VT/N16zqq7N1B+Jc2Q3P6Eho 3waNRSCikb7HJwbqGzFMQNuoZCvsugqc149RXLO6Engxsp+80IYcmUNMeSO19MLZ vHgRb588WHOzUqcZ+wPXes5IqIOxdpuhzBGJ6oG4oVjt34M1aPkHT3kTM5ouJ0m8 l1WMLXutw1NJHgPkm62kBVPhTmcty3ATXNClpunLsJ4JqedQD7NC7Rtp1xwi0cUH UO2ZNmKHQOgJSosuv0kKs/DcxaGqPNTC9TSc3wQYnx5PjHlbOzjKF2DaMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF8kb+QjyDZhBx9lq2B+WqqTTCwvMB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEvWHlSdjVDUElObUVISDJXcllINWFxcE5NTEM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALhPPMA0G CSqGSIb3DQEBCwUAA4IBAQCGkNCIV4cyTOaVcDqV2p/jsNN7VrKJXjnxgbOiA1mZ UFOSyfjXoRB+6oIunOToO5jpQ+ZRU2NsHOXFFJPriaFnj0INQMiDQWyBCdBLrEr7 FCNzpkrgsVus4ROWchOKyTFeNZIKx+og8AwJjHVKzUDGAVMIgLM63vhRfkizkxQC ureLJJIU6V104LEZEZuO3Qczzu9xOfFLa/cTqtenGKThBsDsVnKhb4oUg03dvblM +qEynRUkVYomDmVFTjxdVvq+vaptEk474xPzXo2h/rCDN4ZyjwBQOUEsdQLWmO/G E6QYS6io7ON4WURPNP/vxlqXj/MjStlv29cGZbGlpNi6 -----END CERTIFICATE-----Generated at Sun Jan 18 13:13:34 2026 by rpki-client