This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/xfg6ND62VE_NEsRerQpNDEtguWY.roa File: xfg6ND62VE_NEsRerQpNDEtguWY.roa (raw, json) Hash identifier: jV8up19wMmKrYo3rkVmGEitD0urDFX1Xvcb39PAZzRE= Subject key identifier: C5:F8:3A:34:3E:B6:54:4F:CD:12:C4:5E:AD:0A:4D:0C:4B:60:B9:66 Certificate issuer: /CN=822b30d89b1bcff699f641f88026942d16a72bcc Certificate serial: 019B7C7FFC703B0E3A4EA97BD06F4E561F74 Authority key identifier: 82:2B:30:D8:9B:1B:CF:F6:99:F6:41:F8:80:26:94:2D:16:A7:2B:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/xfg6ND62VE_NEsRerQpNDEtguWY.roa Signing time: Fri 02 Jan 2026 02:18:41 +0000 ROA not before: Fri 02 Jan 2026 02:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15525 IP address blocks: 213.13.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 11:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:fc:70:3b:0e:3a:4e:a9:7b:d0:6f:4e:56:1f:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=822b30d89b1bcff699f641f88026942d16a72bcc Validity Not Before: Jan 2 02:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5f83a343eb6544fcd12c45ead0a4d0c4b60b966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:33:b6:dd:4a:25:32:bd:7e:28:dd:09:b5:b7: 53:3c:1c:b3:6b:9c:2c:47:cb:3e:78:23:fc:00:00: 80:cb:41:11:5e:9f:0a:fb:c4:2e:c0:20:ab:c9:76: 4f:35:c4:df:d4:64:81:1c:42:91:c9:ef:21:0b:7d: aa:3a:5b:eb:91:88:e6:b4:cd:93:45:16:a8:4c:fc: 55:20:6b:22:cd:b3:17:53:12:6d:b8:df:1d:32:1f: 1d:dc:57:04:74:c9:e8:16:4d:d6:64:ab:46:39:70: b1:19:f0:a7:c9:16:fd:4d:0a:e9:07:e7:87:d2:56: b9:6f:69:05:5d:67:38:8b:4b:a2:ed:79:53:8f:c2: ff:fe:2e:04:59:11:aa:e7:32:25:6e:fd:82:8a:12: 4b:76:dd:91:51:62:2c:d8:62:6c:50:e4:10:24:5d: 08:25:0e:dc:06:a0:f3:cd:9d:f1:ad:07:9a:4d:47: 7d:75:5e:6f:0a:c8:d0:7a:47:4d:e2:79:71:e2:4b: a5:81:47:ef:0c:ee:c7:05:00:8c:00:a0:ab:1b:d9: 99:27:6c:a4:2c:db:4c:ba:63:f4:d6:f7:29:0f:77: 63:51:38:2f:7b:67:52:10:ad:ce:8f:24:94:d5:c5: 36:e9:8a:d5:9d:46:c7:5f:09:13:a0:e1:44:e1:ba: 07:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:F8:3A:34:3E:B6:54:4F:CD:12:C4:5E:AD:0A:4D:0C:4B:60:B9:66 X509v3 Authority Key Identifier: keyid:82:2B:30:D8:9B:1B:CF:F6:99:F6:41:F8:80:26:94:2D:16:A7:2B:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/xfg6ND62VE_NEsRerQpNDEtguWY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.13.32.0/19 Signature Algorithm: sha256WithRSAEncryption 43:d5:fa:33:05:d0:47:68:91:54:01:58:dc:8d:10:e9:ba:ed: c1:6c:55:3d:63:df:3f:7c:fb:e8:f8:ee:7e:95:6d:52:4e:93: 8e:15:78:2a:d8:19:7f:1a:04:40:d8:31:5f:66:bb:90:65:4a: 79:37:10:ca:86:c6:25:f1:ac:6f:54:49:77:0e:44:ac:ef:2e: 52:fa:5b:68:66:eb:66:b8:99:b3:37:17:24:30:f2:95:b4:0c: 8a:18:1e:36:1e:cb:7e:52:74:76:8b:ca:cf:9d:40:ef:a9:bf: 9a:1b:b2:ef:f9:37:2b:0b:8a:1e:b9:71:48:ed:58:a2:8e:e0: a7:27:90:36:38:06:6c:2f:ae:e3:ed:37:a1:e7:44:b6:a0:20: 0d:cc:b7:b0:04:c4:e1:04:59:d4:42:14:b9:81:6f:39:13:72: 3a:cb:37:9c:ec:21:4b:53:4f:e4:f6:b0:3e:e8:91:0d:f8:6e: bd:11:94:4d:91:4e:1d:13:24:fd:93:a4:cd:bd:fc:23:6e:49: c3:10:2c:bb:51:49:17:a7:fd:fd:a3:af:e8:94:1c:e1:01:4c: c6:af:5c:73:89:3b:d4:14:a5:7e:ea:3f:fb:40:47:37:2f:a5: 2d:dc:b1:97:da:5f:ec:5b:e8:4d:46:99:ef:80:b6:4e:7a:96: f1:c0:12:d3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f/xwOw46Tql70G9OVh90MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMmIzMGQ4OWIxYmNmZjY5OWY2NDFmODgwMjY5NDJkMTZh NzJiY2MwHhcNMjYwMTAyMDIxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNWY4M2EzNDNlYjY1NDRmY2QxMmM0NWVhZDBhNGQwYzRiNjBiOTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDO23UolMr1+KN0JtbdTPByza5ws R8s+eCP8AACAy0ERXp8K+8QuwCCryXZPNcTf1GSBHEKRye8hC32qOlvrkYjmtM2T RRaoTPxVIGsizbMXUxJtuN8dMh8d3FcEdMnoFk3WZKtGOXCxGfCnyRb9TQrpB+eH 0la5b2kFXWc4i0ui7XlTj8L//i4EWRGq5zIlbv2CihJLdt2RUWIs2GJsUOQQJF0I JQ7cBqDzzZ3xrQeaTUd9dV5vCsjQekdN4nlx4kulgUfvDO7HBQCMAKCrG9mZJ2yk LNtMumP01vcpD3djUTgve2dSEK3OjySU1cU26YrVnUbHXwkToOFE4boHpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMX4OjQ+tlRPzRLEXq0KTQxLYLlmMB8GA1UdIwQY MBaAFIIrMNibG8/2mfZB+IAmlC0WpyvMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2lzdzJKc2J6X2FaOWtINGdDYVVMUmFuSzh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9lNjg3NzAtZWRmMi00MzU4LWI4MjEt OTE0ZDVkYzUxOTdmLzEveGZnNk5ENjJWRV9ORXNSZXJRcE5ERXRndVdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9lNjg3NzAtZWRmMi00MzU4LWI4MjEtOTE0ZDVkYzUxOTdm LzEvZ2lzdzJKc2J6X2FaOWtINGdDYVVMUmFuSzh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF1Q0gMA0G CSqGSIb3DQEBCwUAA4IBAQBD1fozBdBHaJFUAVjcjRDpuu3BbFU9Y98/fPvo+O5+ lW1STpOOFXgq2Bl/GgRA2DFfZruQZUp5NxDKhsYl8axvVEl3DkSs7y5S+ltoZutm uJmzNxckMPKVtAyKGB42Hst+UnR2i8rPnUDvqb+aG7Lv+TcrC4oeuXFI7ViijuCn J5A2OAZsL67j7Teh50S2oCANzLewBMThBFnUQhS5gW85E3I6yzec7CFLU0/k9rA+ 6JEN+G69EZRNkU4dEyT9k6TNvfwjbknDECy7UUkXp/39o6/olBzhAUzGr1xziTvU FKV+6j/7QEc3L6Ut3LGX2l/sW+hNRpnvgLZOepbxwBLT -----END CERTIFICATE-----Generated at Mon Jan 26 19:36:04 2026 by rpki-client