This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/XyTLQ8u9atkV1VQ-_W44F-xALJ0.roa File: XyTLQ8u9atkV1VQ-_W44F-xALJ0.roa (raw, json) Hash identifier: S4pVGTdLe4T3Tcplc1aVWQvVSLj681OnPyzqsf2kuDU= Subject key identifier: 5F:24:CB:43:CB:BD:6A:D9:15:D5:54:3E:FD:6E:38:17:EC:40:2C:9D Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B7B35F67D2FD0058FD1DE75678BAEB6DD Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/XyTLQ8u9atkV1VQ-_W44F-xALJ0.roa Signing time: Thu 01 Jan 2026 20:18:12 +0000 ROA not before: Thu 01 Jan 2026 20:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34047 IP address blocks: 31.222.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:f6:7d:2f:d0:05:8f:d1:de:75:67:8b:ae:b6:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Jan 1 20:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f24cb43cbbd6ad915d5543efd6e3817ec402c9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1f:f2:cf:68:4a:59:6c:37:86:1f:11:18:93: 6a:b4:52:56:a5:6f:83:8d:d0:8d:de:f8:66:24:cc: 30:48:a5:57:eb:24:03:39:17:19:85:b7:f2:97:02: bc:9a:04:0e:36:31:22:ec:9d:6a:93:89:f1:f3:d4: 42:99:ca:f0:2e:4c:69:ba:07:a2:d4:d6:de:ed:e7: ef:da:bf:05:9e:a5:f1:34:c4:6b:d6:ee:73:2e:7b: c9:90:53:98:33:9c:f2:f0:86:87:a7:ff:86:e0:82: 01:f7:17:f9:d1:62:bd:76:57:87:bb:cd:cc:36:0e: fd:a3:4e:1a:56:8c:72:fd:84:ff:73:bb:c5:dc:12: a1:3b:5c:e0:1f:44:d1:82:ab:b7:94:5c:7d:c7:8f: ca:f6:c1:5d:6f:b6:ea:8f:01:cc:10:96:b9:85:5f: 91:a4:30:32:d6:9f:91:b2:43:b7:e1:fa:04:85:b0: a8:36:80:8b:26:9f:1d:aa:73:7d:a4:bc:7f:2c:40: fe:fc:9a:6f:ae:c0:9d:54:78:21:6b:9e:2b:56:f9: e3:f7:27:69:70:30:84:3f:2c:ce:a4:f4:30:51:27: c7:2a:ff:e5:ee:bc:1d:3a:c7:42:7e:85:b2:d5:ce: 50:b2:c6:79:39:5b:a6:d7:fe:9d:5f:fb:86:dd:55: a8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:24:CB:43:CB:BD:6A:D9:15:D5:54:3E:FD:6E:38:17:EC:40:2C:9D X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/XyTLQ8u9atkV1VQ-_W44F-xALJ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.222.253.0/24 Signature Algorithm: sha256WithRSAEncryption 01:7d:23:51:39:30:5f:dc:b2:a6:a1:3a:46:ec:01:f0:8c:36: 94:1e:c4:60:fd:1c:ec:57:73:77:f3:a3:50:19:3d:d8:1d:96: ca:36:76:18:e6:27:b6:f7:84:49:3e:97:b5:e5:72:c5:a5:3b: 4e:d0:08:99:e9:6c:ea:63:cc:5f:0b:de:00:3b:8e:61:bf:dc: 96:f6:13:d9:ff:5a:a6:20:d1:2c:cb:35:f1:56:db:15:6b:e0: 5f:5d:f1:16:1c:17:34:6c:db:a7:85:78:16:7a:0d:39:c0:ae: 76:ce:8d:a5:14:cb:e3:2c:6d:39:db:28:a2:cf:a0:9a:11:28: f1:ae:73:7d:22:13:70:bb:67:e7:ca:f7:e4:c6:26:7f:6f:fe: 89:c8:d7:12:8e:47:dd:11:33:9e:0a:c3:3a:74:61:d9:02:d5: b0:08:20:96:74:b8:db:59:fa:a6:ce:96:d5:87:d3:68:0b:25: df:30:fe:cf:6c:45:6f:42:b4:62:1d:5f:42:a9:8c:12:d7:99: 27:73:d4:73:68:b2:bc:6d:4d:01:35:3c:b0:4e:69:e9:8f:19: b6:5d:f0:08:d2:47:02:7e:ca:b7:ba:7f:97:75:4f:ee:93:fd: 74:5d:3e:10:50:0c:4f:b8:a0:1a:8a:db:0a:ba:39:83:ef:fd: f3:c2:4a:5a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NfZ9L9AFj9HedWeLrrbdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMTAxMjAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjI0Y2I0M2NiYmQ2YWQ5MTVkNTU0M2VmZDZlMzgxN2VjNDAyYzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqB/yz2hKWWw3hh8RGJNqtFJWpW+D jdCN3vhmJMwwSKVX6yQDORcZhbfylwK8mgQONjEi7J1qk4nx89RCmcrwLkxpugei 1Nbe7efv2r8FnqXxNMRr1u5zLnvJkFOYM5zy8IaHp/+G4IIB9xf50WK9dleHu83M Ng79o04aVoxy/YT/c7vF3BKhO1zgH0TRgqu3lFx9x4/K9sFdb7bqjwHMEJa5hV+R pDAy1p+RskO34foEhbCoNoCLJp8dqnN9pLx/LED+/JpvrsCdVHgha54rVvnj9ydp cDCEPyzOpPQwUSfHKv/l7rwdOsdCfoWy1c5QssZ5OVum1/6dX/uG3VWoUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF8ky0PLvWrZFdVUPv1uOBfsQCydMB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvWHlUTFE4dTlhdGtWMVZRLV9XNDRGLXhBTEowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH979MA0G CSqGSIb3DQEBCwUAA4IBAQABfSNROTBf3LKmoTpG7AHwjDaUHsRg/RzsV3N386NQ GT3YHZbKNnYY5ie294RJPpe15XLFpTtO0AiZ6WzqY8xfC94AO45hv9yW9hPZ/1qm INEsyzXxVtsVa+BfXfEWHBc0bNunhXgWeg05wK52zo2lFMvjLG052yiiz6CaESjx rnN9IhNwu2fnyvfkxiZ/b/6JyNcSjkfdETOeCsM6dGHZAtWwCCCWdLjbWfqmzpbV h9NoCyXfMP7PbEVvQrRiHV9CqYwS15knc9RzaLK8bU0BNTywTmnpjxm2XfAI0kcC fsq3un+XdU/uk/10XT4QUAxPuKAaitsKujmD7/3zwkpa -----END CERTIFICATE-----Generated at Thu Jan 15 13:18:36 2026 by rpki-client