This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/X2QsnfxAM9ScjVh_AzAztNDaXJg.roa File: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (raw, json) Hash identifier: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM= Subject key identifier: 5F:64:2C:9D:FC:40:33:D4:9C:8D:58:7F:03:30:33:B4:D0:DA:5C:98 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 019B7A59B10371C081840EF0F6AD63EE6DAD Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/X2QsnfxAM9ScjVh_AzAztNDaXJg.roa Signing time: Thu 01 Jan 2026 16:17:36 +0000 ROA not before: Thu 01 Jan 2026 16:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42831 IP address blocks: 45.11.236.0/23 maxlen: 23 45.11.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:b1:03:71:c0:81:84:0e:f0:f6:ad:63:ee:6d:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Jan 1 16:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f642c9dfc4033d49c8d587f033033b4d0da5c98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:60:ea:7f:64:77:71:95:1e:66:97:4d:c9:02: 57:25:f2:ab:83:42:0a:08:1b:e2:51:00:eb:76:8a: 86:99:af:3b:c2:a0:13:ed:14:68:08:67:30:ab:b5: 03:b2:a6:cb:9f:2c:fc:41:4b:19:46:ff:aa:26:6e: 89:f0:f3:0d:f0:b1:9e:59:37:ee:da:30:c9:31:6f: a9:67:7c:8f:ea:8c:7e:1a:5f:87:19:97:ba:25:22: b2:6f:fd:54:1c:37:b1:7a:2d:2e:bb:f6:a1:c3:79: fb:fa:80:f4:a6:97:79:25:ba:9e:1d:77:62:98:cc: 3c:af:16:01:59:31:0d:d1:9d:60:fa:d7:ba:ee:a0: 06:c8:b5:bb:cf:a8:74:12:50:29:97:c8:f5:86:08: 94:a8:b8:58:7f:b5:3d:45:7f:5a:63:b4:37:31:c3: b4:ae:0c:62:97:86:61:4e:4e:65:17:23:eb:3a:d9: 0a:6d:44:9f:39:fc:93:05:71:3d:c9:89:52:29:e5: 33:76:b8:b9:a0:f1:1b:c5:33:4c:57:da:e6:c0:66: 59:f3:67:0a:8e:f2:90:55:86:b9:41:aa:80:77:b8: 65:e6:bb:66:1c:30:78:24:2a:0c:83:a2:45:53:9a: 0c:d4:aa:1d:04:29:d5:f5:5f:38:a8:ad:ca:67:9b: 0b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:64:2C:9D:FC:40:33:D4:9C:8D:58:7F:03:30:33:B4:D0:DA:5C:98 X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/X2QsnfxAM9ScjVh_AzAztNDaXJg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.236.0/22 Signature Algorithm: sha256WithRSAEncryption 68:7a:d6:ff:d4:bd:f3:f0:e5:01:2d:ee:9c:a1:94:ce:62:ee: 03:66:82:ec:2a:ed:3a:c3:67:7d:b7:8e:d4:46:d6:a7:35:7e: 4b:4a:18:dd:53:16:90:23:62:76:ac:b0:17:ce:91:10:8b:61: 74:f9:f5:94:ef:2b:3d:64:38:76:59:19:16:1f:a0:c6:bb:b0: f8:d2:f6:bc:e0:e9:8e:27:cc:4b:47:4c:9d:fe:f5:42:08:58: 2a:ac:60:5d:b8:ec:36:4b:88:92:99:5b:a2:3b:4c:5d:11:36: 5e:58:1a:c0:92:87:4b:f4:77:5c:6e:7b:73:f9:c8:65:ff:c2: 48:d0:d6:98:86:97:37:65:50:8b:dd:a8:e1:27:42:d4:18:73: ee:6c:2a:0a:9e:19:30:19:6c:bd:d4:c7:26:44:f8:f4:ed:a0: 5e:ec:da:b9:ee:5c:f8:45:02:9a:46:ec:d7:9f:b5:3b:30:3f: a8:3b:b3:95:0a:c0:e6:88:55:a3:6c:f3:2d:55:2f:75:7e:e1: 8c:bc:ce:8f:fc:6d:18:f1:b1:06:48:f4:92:3a:eb:eb:51:d3: 94:7b:e0:61:5d:a8:3f:5c:1d:1d:1a:10:9d:92:40:75:e0:24: 0d:37:21:43:9e:c3:93:a4:5c:a7:0a:99:76:69:99:49:e9:d7: 80:85:b4:16 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WbEDccCBhA7w9q1j7m2tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwMTAxMTYxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjY0MmM5ZGZjNDAzM2Q0OWM4ZDU4N2YwMzMwMzNiNGQwZGE1Yzk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2Dqf2R3cZUeZpdNyQJXJfKrg0IK CBviUQDrdoqGma87wqAT7RRoCGcwq7UDsqbLnyz8QUsZRv+qJm6J8PMN8LGeWTfu 2jDJMW+pZ3yP6ox+Gl+HGZe6JSKyb/1UHDexei0uu/ahw3n7+oD0ppd5JbqeHXdi mMw8rxYBWTEN0Z1g+te67qAGyLW7z6h0ElApl8j1hgiUqLhYf7U9RX9aY7Q3McO0 rgxil4ZhTk5lFyPrOtkKbUSfOfyTBXE9yYlSKeUzdri5oPEbxTNMV9rmwGZZ82cK jvKQVYa5QaqAd7hl5rtmHDB4JCoMg6JFU5oM1KodBCnV9V84qK3KZ5sLMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF9kLJ38QDPUnI1YfwMwM7TQ2lyYMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvWDJRc25meEFNOVNjalZoX0F6QXp0TkRhWEpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQvsMA0G CSqGSIb3DQEBCwUAA4IBAQBoetb/1L3z8OUBLe6coZTOYu4DZoLsKu06w2d9t47U RtanNX5LShjdUxaQI2J2rLAXzpEQi2F0+fWU7ys9ZDh2WRkWH6DGu7D40va84OmO J8xLR0yd/vVCCFgqrGBduOw2S4iSmVuiO0xdETZeWBrAkodL9Hdcbntz+chl/8JI 0NaYhpc3ZVCL3ajhJ0LUGHPubCoKnhkwGWy91McmRPj07aBe7Nq57lz4RQKaRuzX n7U7MD+oO7OVCsDmiFWjbPMtVS91fuGMvM6P/G0Y8bEGSPSSOuvrUdOUe+BhXag/ XB0dGhCdkkB14CQNNyFDnsOTpFynCpl2aZlJ6deAhbQW -----END CERTIFICATE-----Generated at Mon Jan 5 03:56:21 2026 by rpki-client