This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/XlvSvB4LT0VHk3l10-bHAjD_29M.roa File: XlvSvB4LT0VHk3l10-bHAjD_29M.roa (raw, json) Hash identifier: jEgX7cDhblomcQe1MpST1wFV6BhYaNSyFkWxgQ5ZORg= Subject key identifier: 5E:5B:D2:BC:1E:0B:4F:45:47:93:79:75:D3:E6:C7:02:30:FF:DB:D3 Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B7B3607A1D2D7D06BE33CA0EFB7D3A85A Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/XlvSvB4LT0VHk3l10-bHAjD_29M.roa Signing time: Thu 01 Jan 2026 20:18:16 +0000 ROA not before: Thu 01 Jan 2026 20:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51659 IP address blocks: 45.129.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:07:a1:d2:d7:d0:6b:e3:3c:a0:ef:b7:d3:a8:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Jan 1 20:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e5bd2bc1e0b4f4547937975d3e6c70230ffdbd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d3:dc:bd:72:ec:00:fa:84:fd:03:f2:27:2f: 2d:24:93:30:f8:e8:74:1f:44:fe:7d:76:77:a0:6d: 96:5e:6b:df:9e:d5:7b:fb:ab:00:3b:30:73:b4:bc: 44:b6:74:f6:9f:6c:37:d5:09:77:f0:69:19:3d:65: 9e:fd:9c:ac:ef:5d:2a:d9:8a:65:cd:bf:db:30:22: 51:08:4a:74:e0:72:8f:ee:36:38:58:8c:f7:75:9b: e9:2e:09:79:83:81:7f:e3:1d:37:30:a8:08:4c:0d: 47:28:71:a1:97:9d:8d:71:35:bb:85:cb:f5:a3:a7: 4a:ff:f9:c7:1a:5c:7f:d9:16:4d:a9:7c:69:a4:9e: e1:cf:ba:ac:b1:4c:9b:2e:9d:fc:ca:83:15:27:88: a3:4e:34:bb:93:9c:dd:8c:db:16:55:e3:14:40:53: 8d:84:8e:0b:ef:85:0c:bc:6b:69:45:b7:cf:af:eb: 7b:83:29:b3:2d:4c:db:cb:bd:57:a1:7c:46:54:dc: b8:a9:fe:80:15:a1:e1:0d:76:27:93:1e:70:f0:96: 10:7c:86:3d:ec:4a:08:5a:7a:f9:89:75:01:27:fe: 54:79:fe:6e:ee:93:82:e1:8b:ba:5e:4f:52:72:ae: 80:2f:bd:ed:9c:2c:25:e2:43:d1:55:b9:c4:c9:70: 48:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:5B:D2:BC:1E:0B:4F:45:47:93:79:75:D3:E6:C7:02:30:FF:DB:D3 X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/XlvSvB4LT0VHk3l10-bHAjD_29M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.2.0/23 Signature Algorithm: sha256WithRSAEncryption 28:27:e4:27:3d:67:a9:6f:cd:24:75:65:e2:16:e7:29:06:90: 1e:ca:68:36:cd:d7:65:1b:c1:49:95:fb:f5:d4:34:37:2a:d2: bc:69:8f:0b:13:bd:41:16:09:62:5a:42:96:0c:a5:a8:ad:36: d6:c0:f1:0c:25:6a:74:a1:29:f6:13:01:22:24:ca:e2:8c:44: 69:e3:09:4f:a7:60:76:ec:5a:11:c8:82:0d:a8:fb:9f:03:8d: 3e:90:03:9a:35:49:52:5f:c6:c0:f5:7d:00:67:c1:94:27:47: ad:1c:c2:42:46:a5:cc:67:3f:65:2b:96:c6:69:0d:1a:3e:e9: 50:02:36:fc:56:f4:71:1c:6d:36:0a:72:70:98:2f:d8:4b:93: 44:4e:16:b1:5f:14:d4:cb:0e:6f:49:cd:e4:d6:3d:be:77:44: f3:a4:63:38:75:b9:bc:2d:2d:5f:c1:4a:37:f0:04:b4:7b:f9: 57:68:1c:b3:18:df:da:dc:00:99:9c:fb:51:48:e4:ef:11:4c: a0:bd:51:a7:a6:85:78:bc:af:0b:c2:f1:e5:35:88:12:d3:87: a1:e6:3f:26:48:a0:0b:b5:d5:35:6f:42:5a:de:2a:e5:78:dd: c0:cd:2f:0e:89:28:05:62:d2:ac:33:38:e2:89:26:8f:2e:53: 7e:10:92:ff -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Ngeh0tfQa+M8oO+306haMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMTAxMjAxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTViZDJiYzFlMGI0ZjQ1NDc5Mzc5NzVkM2U2YzcwMjMwZmZkYmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltPcvXLsAPqE/QPyJy8tJJMw+Oh0 H0T+fXZ3oG2WXmvfntV7+6sAOzBztLxEtnT2n2w31Ql38GkZPWWe/Zys710q2Ypl zb/bMCJRCEp04HKP7jY4WIz3dZvpLgl5g4F/4x03MKgITA1HKHGhl52NcTW7hcv1 o6dK//nHGlx/2RZNqXxppJ7hz7qssUybLp38yoMVJ4ijTjS7k5zdjNsWVeMUQFON hI4L74UMvGtpRbfPr+t7gymzLUzby71XoXxGVNy4qf6AFaHhDXYnkx5w8JYQfIY9 7EoIWnr5iXUBJ/5Uef5u7pOC4Yu6Xk9Scq6AL73tnCwl4kPRVbnEyXBIiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF5b0rweC09FR5N5ddPmxwIw/9vTMB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvWGx2U3ZCNExUMFZIazNsMTAtYkhBakRfMjlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLYECMA0G CSqGSIb3DQEBCwUAA4IBAQAoJ+QnPWepb80kdWXiFucpBpAeymg2zddlG8FJlfv1 1DQ3KtK8aY8LE71BFgliWkKWDKWorTbWwPEMJWp0oSn2EwEiJMrijERp4wlPp2B2 7FoRyIINqPufA40+kAOaNUlSX8bA9X0AZ8GUJ0etHMJCRqXMZz9lK5bGaQ0aPulQ Ajb8VvRxHG02CnJwmC/YS5NEThaxXxTUyw5vSc3k1j2+d0TzpGM4dbm8LS1fwUo3 8AS0e/lXaByzGN/a3ACZnPtRSOTvEUygvVGnpoV4vK8LwvHlNYgS04eh5j8mSKAL tdU1b0Ja3irleN3AzS8OiSgFYtKsMzjiiSaPLlN+EJL/ -----END CERTIFICATE-----Generated at Thu Jan 15 13:17:55 2026 by rpki-client