This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/XSBe1pD-dkScsP_whIC7LABhOx0.roa File: XSBe1pD-dkScsP_whIC7LABhOx0.roa (raw, json) Hash identifier: Om8h2v7r+NcPJH7Zv1Bphw5nLCQoLIXwC2h9m627ZL8= Subject key identifier: 5D:20:5E:D6:90:FE:76:44:9C:B0:FF:F0:84:80:BB:2C:00:61:3B:1D Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B7B360C0265FD9A8D9ECEB8417FB325E6 Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/XSBe1pD-dkScsP_whIC7LABhOx0.roa Signing time: Thu 01 Jan 2026 20:18:18 +0000 ROA not before: Thu 01 Jan 2026 20:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58070 IP address blocks: 46.254.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:0c:02:65:fd:9a:8d:9e:ce:b8:41:7f:b3:25:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Jan 1 20:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d205ed690fe76449cb0fff08480bb2c00613b1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:97:27:69:8c:6a:8a:c6:b6:b2:76:c8:65:4b: af:2b:32:3e:cd:38:fe:58:22:98:c8:99:19:49:81: 48:b4:a3:9d:23:6e:72:fc:89:0a:b5:60:4b:8a:14: 4e:5e:da:64:25:1d:92:54:df:06:1a:35:c7:23:4c: a0:d0:3e:07:8f:41:a7:a7:2a:9e:ef:e3:2c:31:d9: ef:1b:dc:3b:ad:d6:18:1a:57:3b:71:f3:6c:d0:b3: 83:d3:12:6b:87:bd:da:c7:99:25:01:2b:cb:a4:e9: 7d:2d:46:d8:41:64:0b:d1:f9:1c:71:d1:0e:ad:ff: b6:c4:a5:7a:0e:8d:83:f8:e6:cd:23:58:90:00:06: 56:d5:bd:c3:a9:6c:00:e2:b9:c3:ab:74:70:d9:b3: bb:81:ef:b6:94:58:fa:54:54:d1:92:25:df:9b:c5: 69:ed:cd:e1:b5:36:2d:3c:5f:84:72:0c:f1:9e:1a: d7:7c:ce:03:d6:75:e8:b6:50:2c:14:06:e0:3e:18: ce:c1:1a:e9:96:cb:b3:77:87:1d:05:4a:b3:e9:7f: 77:cb:d5:18:a0:b5:e0:88:0b:4f:ff:57:47:f1:16: e6:e8:70:44:63:67:d3:a4:ee:96:bf:1d:11:54:ea: 03:31:7f:70:31:7f:4a:c1:1b:64:8e:eb:fd:ae:69: f9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:20:5E:D6:90:FE:76:44:9C:B0:FF:F0:84:80:BB:2C:00:61:3B:1D X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/XSBe1pD-dkScsP_whIC7LABhOx0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.254.109.0/24 Signature Algorithm: sha256WithRSAEncryption 62:d2:c6:4a:6e:56:07:4c:ac:61:9d:3a:8e:45:bd:14:af:a8: 3a:1c:b3:86:01:da:5a:cb:60:7f:c8:bc:43:3b:62:87:5b:92: cf:7d:36:0d:2f:b3:da:f4:3c:ce:be:2d:92:7f:c1:7c:eb:25: f5:9b:1c:32:5c:c7:e6:31:7d:65:ee:48:55:a6:e2:6a:a5:e6: 6b:d4:72:f4:1e:b1:9a:3d:38:ed:0f:23:09:01:4b:56:f2:43: f7:ef:39:95:01:61:af:91:19:04:20:b2:ab:eb:36:92:d5:ae: f6:f9:c1:71:46:7a:00:bb:70:90:76:34:b8:ec:62:0a:19:7a: 9b:bb:fc:a0:ed:21:32:6a:8f:56:76:5c:d2:33:ba:4f:2b:fa: 86:3f:07:91:90:c4:99:fd:97:e2:6b:8f:bd:71:f5:cc:0e:28: 36:d3:4b:08:83:84:10:12:85:5b:f4:28:ea:e7:07:34:93:58: f7:c7:2e:e5:68:c5:aa:5e:84:fc:6f:9d:08:bb:b9:a2:5c:b1: 83:e2:ba:9a:50:8b:a1:9b:d7:49:a2:95:ed:e8:d6:da:2d:b4: 45:29:62:2d:19:fd:b4:80:3d:13:2d:e4:c9:aa:0e:76:cd:0f: 76:5e:ec:48:1f:cd:26:9d:16:54:f4:12:1a:64:1f:0e:d0:90: 11:fe:37:7b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NgwCZf2ajZ7OuEF/syXmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMTAxMjAxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDIwNWVkNjkwZmU3NjQ0OWNiMGZmZjA4NDgwYmIyYzAwNjEzYjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJcnaYxqisa2snbIZUuvKzI+zTj+ WCKYyJkZSYFItKOdI25y/IkKtWBLihROXtpkJR2SVN8GGjXHI0yg0D4Hj0Gnpyqe 7+MsMdnvG9w7rdYYGlc7cfNs0LOD0xJrh73ax5klASvLpOl9LUbYQWQL0fkccdEO rf+2xKV6Do2D+ObNI1iQAAZW1b3DqWwA4rnDq3Rw2bO7ge+2lFj6VFTRkiXfm8Vp 7c3htTYtPF+EcgzxnhrXfM4D1nXotlAsFAbgPhjOwRrplsuzd4cdBUqz6X93y9UY oLXgiAtP/1dH8Rbm6HBEY2fTpO6Wvx0RVOoDMX9wMX9KwRtkjuv9rmn5CwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF0gXtaQ/nZEnLD/8ISAuywAYTsdMB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvWFNCZTFwRC1ka1Njc1Bfd2hJQzdMQUJoT3gwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALv5tMA0G CSqGSIb3DQEBCwUAA4IBAQBi0sZKblYHTKxhnTqORb0Ur6g6HLOGAdpay2B/yLxD O2KHW5LPfTYNL7Pa9DzOvi2Sf8F86yX1mxwyXMfmMX1l7khVpuJqpeZr1HL0HrGa PTjtDyMJAUtW8kP37zmVAWGvkRkEILKr6zaS1a72+cFxRnoAu3CQdjS47GIKGXqb u/yg7SEyao9WdlzSM7pPK/qGPweRkMSZ/Zfia4+9cfXMDig200sIg4QQEoVb9Cjq 5wc0k1j3xy7laMWqXoT8b50Iu7miXLGD4rqaUIuhm9dJopXt6NbaLbRFKWItGf20 gD0TLeTJqg52zQ92XuxIH80mnRZU9BIaZB8O0JAR/jd7 -----END CERTIFICATE-----Generated at Thu Jan 15 13:16:36 2026 by rpki-client