This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/xBY6HBc9oDp-2ARgSLwUqc0osOc.roa File: xBY6HBc9oDp-2ARgSLwUqc0osOc.roa (raw, json) Hash identifier: 9k3vOFG8djjpnxwJW5riaJy0x6MBQNPmdNQtHDjVl/Y= Subject key identifier: C4:16:3A:1C:17:3D:A0:3A:7E:D8:04:60:48:BC:14:A9:CD:28:B0:E7 Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B7B35F3FD675F266FB94E41A876A8CDED Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/xBY6HBc9oDp-2ARgSLwUqc0osOc.roa Signing time: Thu 01 Jan 2026 20:18:12 +0000 ROA not before: Thu 01 Jan 2026 20:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24739 IP address blocks: 45.139.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:f3:fd:67:5f:26:6f:b9:4e:41:a8:76:a8:cd:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Jan 1 20:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4163a1c173da03a7ed8046048bc14a9cd28b0e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9d:7f:af:61:be:88:b8:2f:59:67:28:47:ef: 0d:e0:c5:b9:6f:f4:7c:0d:dd:82:d8:29:c1:34:1b: 51:36:21:e4:64:9b:fb:7b:24:44:53:62:23:56:87: 03:7c:e2:62:f6:e2:76:d6:d4:67:21:da:b1:61:f5: c9:03:f2:ca:30:91:6a:ce:f6:4a:62:d6:69:1f:d6: f0:09:cb:1c:d0:08:02:6b:b2:0e:71:ef:1f:0d:f3: 7c:b9:97:cd:d1:5a:07:0f:e7:6c:bb:65:79:ec:23: 7c:90:75:a8:74:a9:e5:a4:ae:df:12:59:26:46:36: 32:0f:7f:33:ac:69:d8:cc:c9:85:75:eb:66:9e:2f: fd:be:79:bf:10:a1:01:62:9b:94:fc:1d:23:cf:14: 02:fc:16:39:2c:30:95:d3:f0:7a:b7:39:b2:1e:c0: a0:9b:9a:04:61:7b:d7:71:48:e7:61:40:f8:63:c4: 21:07:4d:26:d3:9b:d2:9c:ec:49:b6:97:9c:63:49: f5:d9:f1:ac:c0:b8:73:ca:b3:fe:9b:6e:ee:3e:6a: 5a:ae:23:0a:70:01:e4:d4:19:48:7d:33:23:e1:4b: ef:21:22:5d:e3:ca:b5:ce:ed:ae:ea:ae:2f:6a:86: 27:ce:32:3c:da:c4:9d:58:e6:f4:7f:e1:bf:62:e1: 1b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:16:3A:1C:17:3D:A0:3A:7E:D8:04:60:48:BC:14:A9:CD:28:B0:E7 X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/xBY6HBc9oDp-2ARgSLwUqc0osOc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.139.124.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:fe:84:be:c2:84:35:5f:26:a4:6c:5f:dc:70:56:ef:e2:6f: c7:b8:8d:c9:e3:41:73:93:4e:b3:6b:b8:d4:c7:04:20:72:c4: b6:b9:98:0b:a8:b4:10:51:84:4a:0b:f8:7c:4b:f6:33:56:88: 4e:10:33:96:ed:c3:1a:e7:ac:f6:85:b2:ee:e5:f6:4c:98:7d: 24:80:d4:d5:ab:e6:81:a9:8a:c9:0c:f2:9d:a7:96:a2:09:4a: 08:96:0d:c0:be:e5:3e:8f:ac:84:58:e3:c6:76:28:91:54:e2: df:62:f3:db:71:41:74:b1:69:a7:24:1e:76:57:0f:69:b5:01: e8:88:45:3e:56:fb:db:b6:9c:c6:46:e4:48:fd:d3:23:d0:cc: 63:2d:01:ba:d5:e2:89:15:3e:39:b9:fd:b3:90:e1:26:3c:74: fe:d5:df:46:95:e1:bc:24:aa:b5:79:29:fd:1f:f3:8b:5a:e2: 7c:55:90:9f:aa:91:06:64:c4:dd:6d:bc:aa:a8:90:2d:fe:28: da:90:cb:43:c8:4d:84:98:32:ef:36:d5:f1:72:b9:97:d3:5c: 2d:78:da:c0:5a:67:ed:06:c9:10:2f:22:2b:8b:1a:d8:df:fe: 12:4e:60:19:99:62:6b:34:d4:45:bc:26:79:6d:de:c5:d8:48: 0c:01:20:69 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NfP9Z18mb7lOQah2qM3tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMTAxMjAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDE2M2ExYzE3M2RhMDNhN2VkODA0NjA0OGJjMTRhOWNkMjhiMGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyp1/r2G+iLgvWWcoR+8N4MW5b/R8 Dd2C2CnBNBtRNiHkZJv7eyREU2IjVocDfOJi9uJ21tRnIdqxYfXJA/LKMJFqzvZK YtZpH9bwCcsc0AgCa7IOce8fDfN8uZfN0VoHD+dsu2V57CN8kHWodKnlpK7fElkm RjYyD38zrGnYzMmFdetmni/9vnm/EKEBYpuU/B0jzxQC/BY5LDCV0/B6tzmyHsCg m5oEYXvXcUjnYUD4Y8QhB00m05vSnOxJtpecY0n12fGswLhzyrP+m27uPmpariMK cAHk1BlIfTMj4UvvISJd48q1zu2u6q4vaoYnzjI82sSdWOb0f+G/YuEboQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMQWOhwXPaA6ftgEYEi8FKnNKLDnMB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEveEJZNkhCYzlvRHAtMkFSZ1NMd1VxYzBvc09jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYt8MA0G CSqGSIb3DQEBCwUAA4IBAQBt/oS+woQ1XyakbF/ccFbv4m/HuI3J40Fzk06za7jU xwQgcsS2uZgLqLQQUYRKC/h8S/YzVohOEDOW7cMa56z2hbLu5fZMmH0kgNTVq+aB qYrJDPKdp5aiCUoIlg3AvuU+j6yEWOPGdiiRVOLfYvPbcUF0sWmnJB52Vw9ptQHo iEU+VvvbtpzGRuRI/dMj0MxjLQG61eKJFT45uf2zkOEmPHT+1d9GleG8JKq1eSn9 H/OLWuJ8VZCfqpEGZMTdbbyqqJAt/ijakMtDyE2EmDLvNtXxcrmX01wteNrAWmft BskQLyIrixrY3/4STmAZmWJrNNRFvCZ5bd7F2EgMASBp -----END CERTIFICATE-----Generated at Thu Jan 15 13:17:55 2026 by rpki-client