This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/XHT_nValr2j6SKOfGPicLhiXyO4.roa File: XHT_nValr2j6SKOfGPicLhiXyO4.roa (raw, json) Hash identifier: H5XqJ+imumLxCFtabqMwr2EYqfcFyzubhax0NWhApw4= Subject key identifier: 5C:74:FF:9D:56:A5:AF:68:FA:48:A3:9F:18:F8:9C:2E:18:97:C8:EE Certificate issuer: /CN=473ddbc4bb381dbef24d2ff8b4e1f23f2ddf40cc Certificate serial: 019B7835104EBED491CC97A3FEB92A9E84B3 Authority key identifier: 47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/XHT_nValr2j6SKOfGPicLhiXyO4.roa Signing time: Thu 01 Jan 2026 06:18:22 +0000 ROA not before: Thu 01 Jan 2026 06:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 54253 IP address blocks: 185.69.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:10:4e:be:d4:91:cc:97:a3:fe:b9:2a:9e:84:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473ddbc4bb381dbef24d2ff8b4e1f23f2ddf40cc Validity Not Before: Jan 1 06:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c74ff9d56a5af68fa48a39f18f89c2e1897c8ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d8:b5:20:58:ea:a5:df:f8:45:36:4d:11:d5: a8:4e:82:66:f9:18:20:07:0f:f5:e3:2a:f1:71:ec: c2:0d:74:d2:ed:47:d1:59:35:e6:67:6f:87:0a:88: c2:fb:bc:4f:2d:00:5f:71:f6:1d:5b:44:3f:27:ac: fb:9f:36:55:af:36:19:71:c8:d8:97:51:43:19:17: d9:56:82:72:71:4d:f4:40:50:2a:dd:a1:43:ec:9a: 79:44:3b:c9:cd:2d:4c:d7:f2:64:49:08:46:a5:63: c9:ed:87:0a:fb:0b:6f:e9:7b:3d:0c:37:09:ca:c8: 89:20:7a:4c:4f:41:b8:0c:1c:9e:56:a9:89:7b:05: 5f:d5:a7:0b:3d:0e:17:3e:57:98:eb:54:d4:15:ca: a2:ad:ca:92:5b:52:39:78:d1:ab:ea:46:e3:26:db: 0d:f4:c6:38:a3:e9:70:9f:d9:03:41:18:ef:ca:31: 6e:20:5e:57:41:81:84:2b:c1:c1:e3:c5:10:54:9f: 2a:c2:80:f0:20:bd:ab:10:59:ea:40:a6:b3:4f:5f: 20:d5:30:e3:4f:0b:ed:21:2c:61:d7:c7:4b:26:27: d1:29:a3:6b:9f:c4:ee:0c:34:89:da:31:8e:e0:a1: 0a:e7:3b:9d:a7:4a:64:36:b7:8b:68:01:84:ad:cf: 60:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:74:FF:9D:56:A5:AF:68:FA:48:A3:9F:18:F8:9C:2E:18:97:C8:EE X509v3 Authority Key Identifier: keyid:47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/XHT_nValr2j6SKOfGPicLhiXyO4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.69.0.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:f6:e0:64:b3:cb:da:e4:ef:f5:fb:54:59:bb:1d:8e:7f:01: 8e:81:1e:4f:a9:64:64:58:d6:69:c1:9c:e7:63:35:86:83:35: 95:97:66:6d:26:93:5e:3f:76:a2:b1:a1:a8:8a:bb:d1:2f:fa: f9:57:5a:e1:b8:48:61:5d:0f:82:57:b2:e1:9a:d6:19:d0:43: 61:46:a5:22:af:1f:b3:09:45:60:f1:72:d6:63:fd:88:82:ec: 4c:46:5c:a0:11:ea:80:27:cc:62:19:e5:d9:94:32:fe:e8:a9: 30:4a:d2:cc:3f:90:ee:fd:62:0a:41:d0:b7:69:c9:6a:46:bb: b7:ed:a6:69:1f:01:a2:a1:81:d6:71:f4:64:5c:dd:a5:7a:d9: c5:ef:be:0b:db:e5:49:13:3d:04:69:75:bc:0d:83:a1:ea:cc: 6b:66:d3:56:f2:c8:83:55:dc:5f:86:a2:81:77:c9:71:2a:b9: 1f:e0:7a:0c:04:22:1b:65:73:6f:04:1c:c3:82:9d:83:52:e1: 27:d9:21:36:34:67:4f:7a:f4:82:95:3b:5a:7f:92:be:dd:f3: d3:ab:ab:1a:b8:f7:d7:88:99:0d:02:35:45:58:6d:da:f5:6c: c4:5c:29:e6:ee:1a:a5:74:4c:28:3a:c7:a2:4c:68:a7:75:1d: bb:2a:ec:b6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NRBOvtSRzJej/rkqnoSzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3M2RkYmM0YmIzODFkYmVmMjRkMmZmOGI0ZTFmMjNmMmRk ZjQwY2MwHhcNMjYwMTAxMDYxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Yzc0ZmY5ZDU2YTVhZjY4ZmE0OGEzOWYxOGY4OWMyZTE4OTdjOGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydi1IFjqpd/4RTZNEdWoToJm+Rgg Bw/14yrxcezCDXTS7UfRWTXmZ2+HCojC+7xPLQBfcfYdW0Q/J6z7nzZVrzYZccjY l1FDGRfZVoJycU30QFAq3aFD7Jp5RDvJzS1M1/JkSQhGpWPJ7YcK+wtv6Xs9DDcJ ysiJIHpMT0G4DByeVqmJewVf1acLPQ4XPleY61TUFcqircqSW1I5eNGr6kbjJtsN 9MY4o+lwn9kDQRjvyjFuIF5XQYGEK8HB48UQVJ8qwoDwIL2rEFnqQKazT18g1TDj TwvtISxh18dLJifRKaNrn8TuDDSJ2jGO4KEK5zudp0pkNreLaAGErc9geQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFx0/51Wpa9o+kijnxj4nC4Yl8juMB8GA1UdIwQY MBaAFEc928S7OB2+8k0v+LTh8j8t30DMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnozYnhMczRIYjd5VFNfNHRPSHlQeTNmUU13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81NWJmOWYtMjQwZi00OWJiLWIzMGUt NjA0YjIwMWU2NWY4LzEvWEhUX25WYWxyMmo2U0tPZkdQaWNMaGlYeU80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS81NWJmOWYtMjQwZi00OWJiLWIzMGUtNjA0YjIwMWU2NWY4 LzEvUnozYnhMczRIYjd5VFNfNHRPSHlQeTNmUU13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUUAMA0G CSqGSIb3DQEBCwUAA4IBAQAe9uBks8va5O/1+1RZux2OfwGOgR5PqWRkWNZpwZzn YzWGgzWVl2ZtJpNeP3aisaGoirvRL/r5V1rhuEhhXQ+CV7LhmtYZ0ENhRqUirx+z CUVg8XLWY/2IguxMRlygEeqAJ8xiGeXZlDL+6KkwStLMP5Du/WIKQdC3aclqRru3 7aZpHwGioYHWcfRkXN2letnF774L2+VJEz0EaXW8DYOh6sxrZtNW8siDVdxfhqKB d8lxKrkf4HoMBCIbZXNvBBzDgp2DUuEn2SE2NGdPevSClTtaf5K+3fPTq6sauPfX iJkNAjVFWG3a9WzEXCnm7hqldEwoOseiTGindR27Kuy2 -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:26 2026 by rpki-client