This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/xZCT8Y8tX_sI5GP5peO4qr4laTo.roa File: xZCT8Y8tX_sI5GP5peO4qr4laTo.roa (raw, json) Hash identifier: FHkpmcleiPUPaeFlnwW5/gXkPCctJp8I5dkumG6D7C0= Subject key identifier: C5:90:93:F1:8F:2D:5F:FB:08:E4:63:F9:A5:E3:B8:AA:BE:25:69:3A Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d Certificate serial: 019B7C1301B38F057428D69BE629D555D112 Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/xZCT8Y8tX_sI5GP5peO4qr4laTo.roa Signing time: Fri 02 Jan 2026 00:19:39 +0000 ROA not before: Fri 02 Jan 2026 00:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204783 IP address blocks: 212.243.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:01:b3:8f:05:74:28:d6:9b:e6:29:d5:55:d1:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d Validity Not Before: Jan 2 00:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c59093f18f2d5ffb08e463f9a5e3b8aabe25693a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d8:6f:61:eb:a0:96:13:1d:4e:be:00:57:cf: 21:bb:d8:4e:b4:81:a7:3e:60:2a:f2:1c:12:fa:7d: 7b:d5:91:63:c0:43:f4:48:fe:79:e0:6f:8d:61:55: 0d:ee:44:ca:64:d1:eb:16:db:e2:35:be:d8:00:14: 47:97:3d:ff:07:7b:01:31:ce:f9:fe:9b:79:0a:b1: fb:b5:95:a8:90:c0:5b:88:4f:f0:2e:ae:3b:78:55: 71:91:a3:03:4d:15:3f:fd:cb:56:f8:2e:3d:87:9a: 03:6b:46:d3:e2:03:87:90:7d:4a:73:fb:91:f2:fd: 71:16:20:1f:f6:4e:c7:bb:bc:b4:49:8a:88:13:82: 5d:83:18:ec:37:bc:e2:cf:58:73:6d:1d:35:ad:2f: 20:71:b3:30:ed:31:05:bb:b7:65:31:31:d8:f5:aa: 0c:44:be:c4:98:8e:f4:4c:3c:48:12:68:71:c7:95: 01:89:30:40:c1:0e:e7:9e:6c:b3:2a:44:1e:0b:f3: fb:91:98:90:ec:ec:87:d2:c2:f3:bd:cf:0b:6f:69: d8:b2:9f:93:7c:2b:56:ee:76:a9:bd:24:f8:af:03: 1d:90:b0:40:c5:dc:ea:2b:4a:e7:21:10:c0:43:94: 3b:31:c1:7a:8c:ab:94:0c:ea:c2:81:81:cc:97:f5: c8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:90:93:F1:8F:2D:5F:FB:08:E4:63:F9:A5:E3:B8:AA:BE:25:69:3A X509v3 Authority Key Identifier: keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/xZCT8Y8tX_sI5GP5peO4qr4laTo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.243.115.0/24 Signature Algorithm: sha256WithRSAEncryption 72:7d:24:5e:2f:ab:0c:05:ce:24:b5:de:1b:9c:45:a8:8e:95: 99:26:21:e4:a1:61:04:b3:a3:8e:9d:83:09:0d:c4:94:d0:82: 4f:20:76:cb:48:49:4d:83:d0:26:64:fc:e9:8f:22:c4:dc:81: 7b:50:ea:84:2e:13:ad:8b:11:db:3a:1c:04:41:98:48:ab:29: 33:3d:4c:78:4b:9b:c5:f6:02:3b:cb:c3:1f:47:7b:cf:ec:e0: 41:0a:b2:51:3a:fa:e3:d7:1e:d6:1c:eb:97:f3:58:14:2f:8a: c4:03:d3:98:e9:80:9d:b4:96:76:cd:de:b5:91:52:3c:45:2e: b3:60:15:d8:4e:d5:53:ea:6b:99:95:a4:41:67:47:0b:29:da: 36:fc:bf:63:53:63:e3:9c:54:29:bc:77:18:16:1c:f5:81:27: 8d:65:6c:1f:6d:0a:38:94:78:31:65:c6:6f:33:2d:32:37:fd: 1f:ca:5d:fd:b5:ac:d2:02:06:a9:93:f8:eb:65:43:a9:67:00: de:13:4b:0a:f1:47:de:11:6e:56:0b:a3:d7:44:89:f3:e0:01: 73:99:29:61:4a:9d:ee:a5:3d:b1:2d:3e:3e:16:90:94:b7:a0: 8b:80:4c:0c:6c:21:8c:cf:16:a2:b4:48:1e:72:47:9e:9a:41: b1:d3:87:a2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EwGzjwV0KNab5inVVdESMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy MDRjOGQwHhcNMjYwMTAyMDAxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTkwOTNmMThmMmQ1ZmZiMDhlNDYzZjlhNWUzYjhhYWJlMjU2OTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdhvYeuglhMdTr4AV88hu9hOtIGn PmAq8hwS+n171ZFjwEP0SP554G+NYVUN7kTKZNHrFtviNb7YABRHlz3/B3sBMc75 /pt5CrH7tZWokMBbiE/wLq47eFVxkaMDTRU//ctW+C49h5oDa0bT4gOHkH1Kc/uR 8v1xFiAf9k7Hu7y0SYqIE4JdgxjsN7ziz1hzbR01rS8gcbMw7TEFu7dlMTHY9aoM RL7EmI70TDxIEmhxx5UBiTBAwQ7nnmyzKkQeC/P7kZiQ7OyH0sLzvc8Lb2nYsp+T fCtW7napvST4rwMdkLBAxdzqK0rnIRDAQ5Q7McF6jKuUDOrCgYHMl/XIDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMWQk/GPLV/7CORj+aXjuKq+JWk6MB8GA1UdIwQY MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt YmQxOTI2NzZjOWJiLzEveFpDVDhZOHRYX3NJNUdQNXBlTzRxcjRsYVRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1PNzMA0G CSqGSIb3DQEBCwUAA4IBAQByfSReL6sMBc4ktd4bnEWojpWZJiHkoWEEs6OOnYMJ DcSU0IJPIHbLSElNg9AmZPzpjyLE3IF7UOqELhOtixHbOhwEQZhIqykzPUx4S5vF 9gI7y8MfR3vP7OBBCrJROvrj1x7WHOuX81gUL4rEA9OY6YCdtJZ2zd61kVI8RS6z YBXYTtVT6muZlaRBZ0cLKdo2/L9jU2PjnFQpvHcYFhz1gSeNZWwfbQo4lHgxZcZv My0yN/0fyl39tazSAgapk/jrZUOpZwDeE0sK8UfeEW5WC6PXRInz4AFzmSlhSp3u pT2xLT4+FpCUt6CLgEwMbCGMzxaitEgeckeemkGx04ei -----END CERTIFICATE-----Generated at Mon Jan 26 17:44:39 2026 by rpki-client